$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d14a4d7f-8307-426c-b2d3-2db8820f25d1.roa File: d14a4d7f-8307-426c-b2d3-2db8820f25d1.roa (raw, json) Hash identifier: 6BQ6vCDNuwadF8tjoosRilLbJacKk0nR2y9jBknbunI= Subject key identifier: B7:33:BA:B4:29:1F:70:91:71:F4:70:DC:E9:0B:B7:D9:26:47:B5:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 412A61AE757FB3113937E080F12571561694E6F3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d14a4d7f-8307-426c-b2d3-2db8820f25d1.roa Signing time: Tue 10 Jun 2025 16:00:39 +0000 ROA not before: Tue 10 Jun 2025 16:00:39 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 162.120.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:2a:61:ae:75:7f:b3:11:39:37:e0:80:f1:25:71:56:16:94:e6:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 10 16:00:39 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=9ce2454b9f341b9cf1ce57abfcd8b22bdf63b7f4efd1dc661c5e48361944c239, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:9a:1a:12:88:f6:14:95:d8:a3:30:e1:2d: 0c:3c:3a:25:09:9d:81:ea:e6:5a:39:37:ff:9a:b7: 40:3c:ba:ee:bf:e0:74:69:03:e1:96:fb:89:3b:a8: 52:c7:3e:7a:ce:09:b2:c1:2b:ef:e5:a3:db:13:98: 13:e1:db:f4:02:0a:7e:6d:12:f1:f8:87:fa:c5:5e: 08:c6:01:ba:55:aa:63:09:67:0f:76:f6:42:cc:76: c1:b6:13:b7:a7:30:32:9d:3f:6d:a2:79:53:53:00: 2e:77:50:67:e5:c3:c3:47:1c:69:25:bb:15:65:c2: 8d:5c:7b:1a:78:25:8f:aa:3c:99:23:44:b2:26:c4: 7a:9b:b2:c7:fd:15:c7:95:3d:0f:7a:96:8e:4f:94: 36:1d:09:9d:1d:d8:4d:99:8e:ea:33:00:75:d7:00: 1a:b6:21:ea:cf:6d:64:e0:37:cc:fd:95:b5:36:bb: bf:6f:0f:f0:bd:e7:73:36:58:4b:90:b9:a0:ca:2e: dc:a0:fb:71:d8:a5:74:8d:b1:9e:9c:21:65:85:58: de:9b:fc:e7:28:21:dc:71:5b:be:50:8e:c7:ac:e4: 3c:00:95:af:4e:9a:83:29:4b:ef:d3:bb:3d:ff:9f: 30:74:d2:07:bb:9f:22:25:e4:cf:85:c9:17:c3:3d: eb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:33:BA:B4:29:1F:70:91:71:F4:70:DC:E9:0B:B7:D9:26:47:B5:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d14a4d7f-8307-426c-b2d3-2db8820f25d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.120.56.0/21 Signature Algorithm: sha256WithRSAEncryption b0:4c:e8:38:e3:0b:d8:33:91:ad:c8:ec:24:83:f8:5c:9f:44: 3b:9a:32:2a:99:b8:b3:18:11:b6:00:b3:28:a1:19:32:4c:c1: 3a:fa:ae:23:11:ab:e6:10:69:45:d0:ec:b2:c3:4a:8b:f2:32: 40:4c:ac:3c:29:58:bf:21:52:8f:6c:a9:03:87:d7:d9:8e:62: d1:79:c4:ba:3d:fa:6b:36:6c:cb:21:67:4e:cb:52:32:8e:53: 9c:fb:f7:56:86:cc:81:bc:76:ce:39:2a:3e:5a:e9:bb:17:40: ff:10:62:b2:90:86:a6:82:6c:be:f1:47:c4:dd:e5:6e:21:83: 1e:ea:12:29:1e:1b:d7:6e:e5:61:8d:78:06:a7:9a:fd:b6:6f: 73:f5:f3:91:e1:29:43:90:c8:6d:48:2b:89:3f:fd:12:ee:1f: 1d:4b:d8:1e:05:fd:7f:0b:a8:84:4a:3c:c8:ea:47:99:1d:7b: 81:41:0f:31:97:b3:ff:b8:27:a1:fe:17:c9:1d:1c:05:70:d9: 69:f5:71:5d:d1:0d:1a:99:f3:f7:44:e9:ac:45:54:4d:d3:51: 75:c1:6a:eb:ac:f5:fc:e8:28:4b:41:b4:1f:97:16:3f:e9:09: 6a:09:36:e9:f2:94:65:76:a4:97:bf:4f:ac:73:16:a2:1f:10: 53:61:71:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQSphrnV/sxE5N+CA8SVxVhaU5vMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTYwMDM5WhcNMjUwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5Y2UyNDU0YjlmMzQxYjljZjFjZTU3YWJmY2Q4YjIyYmRm NjNiN2Y0ZWZkMWRjNjYxYzVlNDgzNjE5NDRjMjM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoSJoaEoj2FJXYozDhLQw8OiUJnYHq5lo5N/+at0A8uu6/ 4HRpA+GW+4k7qFLHPnrOCbLBK+/lo9sTmBPh2/QCCn5tEvH4h/rFXgjGAbpVqmMJ Zw929kLMdsG2E7enMDKdP22ieVNTAC53UGflw8NHHGkluxVlwo1cexp4JY+qPJkj RLImxHqbssf9FceVPQ96lo5PlDYdCZ0d2E2ZjuozAHXXABq2IerPbWTgN8z9lbU2 u79vD/C953M2WEuQuaDKLtyg+3HYpXSNsZ6cIWWFWN6b/OcoIdxxW75Qjses5DwA la9OmoMpS+/Tuz3/nzB00ge7nyIl5M+FyRfDPev/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtzO6tCkfcJFx9HDc6Qu32SZHtZ0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QxNGE0ZDdmLTgzMDctNDI2Yy1iMmQzLTJkYjg4MjBmMjVkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOieDgwDQYJKoZIhvcNAQELBQADggEBALBM6DjjC9gzka3I7CSD+FyfRDua MiqZuLMYEbYAsyihGTJMwTr6riMRq+YQaUXQ7LLDSovyMkBMrDwpWL8hUo9sqQOH 19mOYtF5xLo9+ms2bMshZ07LUjKOU5z791aGzIG8ds45Kj5a6bsXQP8QYrKQhqaC bL7xR8Td5W4hgx7qEikeG9du5WGNeAanmv22b3P185HhKUOQyG1IK4k//RLuHx1L 2B4F/X8LqIRKPMjqR5kde4FBDzGXs/+4J6H+F8kdHAVw2Wn1cV3RDRqZ8/dE6axF VE3TUXXBauus9fzoKEtBtB+XFj/pCWoJNunylGV2pJe/T6xzFqIfEFNhcb8= -----END CERTIFICATE-----Generated at Sat Jun 14 06:51:45 2025 by rpki-client