$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d72a0b95-3178-4b91-9f5b-1a55e8020a41.roa File: d72a0b95-3178-4b91-9f5b-1a55e8020a41.roa (raw, json) Hash identifier: 9/zKzwU0L9zFyilD6TCEX9a3cuJvlYm+rB4PrOhdLyg= Subject key identifier: 78:FC:4C:B3:E4:CA:5E:E6:C9:FF:12:C5:84:1E:B1:0A:F9:64:01:DF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4CB35F1DC80126754B4DB90E5DF3299CB7D07C77 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d72a0b95-3178-4b91-9f5b-1a55e8020a41.roa Signing time: Mon 02 Jun 2025 15:31:21 +0000 ROA not before: Mon 02 Jun 2025 15:31:21 +0000 ROA not after: Mon 07 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 44.210.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b3:5f:1d:c8:01:26:75:4b:4d:b9:0e:5d:f3:29:9c:b7:d0:7c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 2 15:31:21 2025 GMT Not After : Jul 7 23:59:59 2025 GMT Subject: serialNumber=21a3f4dd2feb7871b31ca52a81a73d5f58e7b8ce0ba96d8240510fd4973b2862, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:c3:b4:1e:4d:4b:b3:71:9a:82:40:8a:c9: e6:a8:b0:37:85:51:a5:f2:81:96:de:72:43:f1:4f: 85:1b:2c:b1:38:2a:fb:9c:42:df:41:7d:3f:43:67: ae:9f:74:11:61:1c:ad:f5:27:48:db:e0:5f:49:32: d0:43:e9:dc:ca:95:e4:95:59:13:7e:23:7d:40:a5: 9d:40:71:df:3c:95:27:7a:d5:2b:42:1f:31:e6:e0: cf:92:48:3c:8b:2e:a5:13:0a:26:7c:5d:43:cc:f4: 9f:80:a0:36:71:1a:0b:15:58:04:42:94:37:5d:ee: 4d:1b:bd:38:23:1e:a2:d5:30:e6:bd:1a:c5:e1:9e: 59:c4:37:24:d8:ef:d2:3e:0f:37:c9:11:0c:27:28: 70:49:f9:2e:64:4f:84:05:de:e8:c3:de:55:5b:49: 51:53:b3:a1:28:b8:d1:bc:52:2c:76:4c:77:de:3c: 5b:21:ce:ec:db:03:86:e8:12:cc:24:c3:60:b3:b4: d9:d3:e1:51:2c:22:0a:47:61:d9:db:df:54:93:7d: 48:53:ad:be:8b:9d:14:20:4d:f0:3d:93:57:b6:a3: 28:4b:c6:70:c9:d5:73:a8:2d:16:0c:7c:db:65:1f: 63:19:bc:c0:54:c6:4c:08:a3:9b:42:72:3f:c4:7b: f6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FC:4C:B3:E4:CA:5E:E6:C9:FF:12:C5:84:1E:B1:0A:F9:64:01:DF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d72a0b95-3178-4b91-9f5b-1a55e8020a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.210.202.0/24 Signature Algorithm: sha256WithRSAEncryption 23:9e:f9:bf:5f:25:b2:cd:90:a6:07:f9:d2:3c:1a:63:93:0f: 5d:20:e3:51:71:19:de:a5:8d:3d:6a:e1:6b:16:4d:22:3f:38: b3:67:35:ab:f7:ca:7d:48:a5:70:87:78:2e:a2:24:e4:ce:2d: f5:c6:2a:c6:3d:90:6a:5f:4f:74:06:ab:4e:1a:af:23:b4:a0: 76:ec:4d:14:c6:0c:8e:de:86:33:b3:82:98:5d:22:dd:5a:91: 85:8e:8a:4d:81:65:56:7e:39:33:0b:e3:b8:9f:d9:44:ad:ae: 26:85:f9:d4:67:a4:cd:61:a2:a5:0b:7f:22:93:00:56:fb:2b: 55:ab:32:14:96:f2:bc:71:53:27:64:17:9c:0c:ca:21:66:ab: 6a:78:3c:8b:39:60:ef:f9:8b:91:52:cb:03:cc:37:83:59:74: e6:e6:9b:b4:27:34:43:39:19:24:3e:05:72:69:c8:b8:d2:3b: f5:91:2f:1f:04:05:bf:31:06:5a:b8:42:10:c2:fd:ad:9c:13: c8:a8:f4:89:61:b8:26:7e:f9:e8:63:c0:1c:1d:60:1b:7f:bc: f0:2c:14:bf:b6:f4:d6:aa:5c:97:2f:89:44:85:56:c9:fb:49: eb:2a:94:61:a4:53:fc:15:31:f7:d2:74:55:71:a5:32:9c:7e: 0e:ba:59:5f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTLNfHcgBJnVLTbkOXfMpnLfQfHcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAyMTUzMTIxWhcNMjUwNzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMWEzZjRkZDJmZWI3ODcxYjMxY2E1MmE4MWE3M2Q1ZjU4 ZTdiOGNlMGJhOTZkODI0MDUxMGZkNDk3M2IyODYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm1MO0Hk1Ls3GagkCKyeaosDeFUaXygZbeckPxT4UbLLE4 KvucQt9BfT9DZ66fdBFhHK31J0jb4F9JMtBD6dzKleSVWRN+I31ApZ1Acd88lSd6 1StCHzHm4M+SSDyLLqUTCiZ8XUPM9J+AoDZxGgsVWARClDdd7k0bvTgjHqLVMOa9 GsXhnlnENyTY79I+DzfJEQwnKHBJ+S5kT4QF3ujD3lVbSVFTs6EouNG8Uix2THfe PFshzuzbA4boEswkw2CztNnT4VEsIgpHYdnb31STfUhTrb6LnRQgTfA9k1e2oyhL xnDJ1XOoLRYMfNtlH2MZvMBUxkwIo5tCcj/Ee/bRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUePxMs+TKXubJ/xLFhB6xCvlkAd8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q3MmEwYjk1LTMxNzgtNGI5MS05ZjViLTFhNTVlODAyMGE0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAs0sowDQYJKoZIhvcNAQELBQADggEBACOe+b9fJbLNkKYH+dI8GmOTD10g 41FxGd6ljT1q4WsWTSI/OLNnNav3yn1IpXCHeC6iJOTOLfXGKsY9kGpfT3QGq04a ryO0oHbsTRTGDI7ehjOzgphdIt1akYWOik2BZVZ+OTML47if2UStriaF+dRnpM1h oqULfyKTAFb7K1WrMhSW8rxxUydkF5wMyiFmq2p4PIs5YO/5i5FSywPMN4NZdObm m7QnNEM5GSQ+BXJpyLjSO/WRLx8EBb8xBlq4QhDC/a2cE8io9IlhuCZ++ehjwBwd YBt/vPAsFL+29NaqXJcviUSFVsn7SesqlGGkU/wVMffSdFVxpTKcfg66WV8= -----END CERTIFICATE-----Generated at Sat Jun 14 06:51:51 2025 by rpki-client