$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0e8d25e-8735-4880-bcc8-79e6b0fc8a6e.roa File: e0e8d25e-8735-4880-bcc8-79e6b0fc8a6e.roa (raw, json) Hash identifier: DCdVbeT0oxN7fIJe6VoWygCiTY+4UrcIxXH/ArUVWJE= Subject key identifier: 56:18:86:93:97:C7:50:09:9E:12:3E:D2:DC:0A:78:C1:3E:50:65:F3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 66B87DEAFF13C1FB87F6EE37929B3E2608ECDF28 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0e8d25e-8735-4880-bcc8-79e6b0fc8a6e.roa Signing time: Fri 25 Apr 2025 20:37:03 +0000 ROA not before: Fri 25 Apr 2025 20:37:03 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.154.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b8:7d:ea:ff:13:c1:fb:87:f6:ee:37:92:9b:3e:26:08:ec:df:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 20:37:03 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=32887a937c52a2ba1cef71a8aa511447b67e1504eb96c2d056e680f52861f38b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8f:8e:c4:62:f7:e0:5a:cc:4e:f5:38:52:0e: 90:e8:59:c2:b3:95:7a:d3:c2:a7:7e:46:25:ba:57: 27:91:ba:b3:6d:92:62:e4:47:b9:26:75:e0:45:11: 47:e5:51:a7:98:6b:d5:15:e9:11:cc:83:e9:4f:ef: 46:78:f4:72:9b:f5:56:9f:50:de:d1:bc:c1:a2:fd: 75:f4:2e:82:7b:57:a3:e2:c6:0e:7f:23:0e:a0:b9: c8:f3:f0:4c:11:e6:33:30:8e:06:d4:bc:47:6e:3e: 9e:32:57:0c:74:53:0f:6f:de:b2:84:de:0c:ae:e5: 97:3e:1a:9f:e0:00:ca:88:6b:e0:c3:3d:7c:40:af: 79:32:08:74:05:da:56:10:3c:3e:c3:ce:a1:2d:c6: 05:2d:ff:bd:a1:38:96:d3:5e:96:33:a8:5a:2a:d5: eb:08:00:a2:03:92:b4:0b:07:10:97:d6:05:e7:8a: bc:ab:d9:73:3f:75:9d:49:54:0b:df:2b:57:7b:d9: a0:5a:e4:ad:89:af:e5:40:60:36:b6:bb:a1:a7:a3: 54:a3:47:b8:d5:1e:b7:71:99:57:0e:b5:50:20:ae: 70:01:1b:c3:ff:47:73:0a:7b:12:fc:c2:aa:52:cb: 27:b8:f7:b1:99:3e:0d:18:9b:c2:57:e0:60:7e:62: 58:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:18:86:93:97:C7:50:09:9E:12:3E:D2:DC:0A:78:C1:3E:50:65:F3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0e8d25e-8735-4880-bcc8-79e6b0fc8a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.154.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7a:7d:10:f2:9e:33:cd:83:11:33:63:60:a9:e6:5b:1b:fe:a6: af:72:aa:1c:41:af:71:23:f8:79:3f:5b:55:6f:f5:13:d6:88: fd:7e:26:7d:a1:02:2d:4e:ec:28:89:19:d7:20:f5:66:a7:5b: 3c:0c:bc:89:b2:30:2e:8f:a3:6e:c7:2e:e0:4d:79:b0:8c:46: 49:2a:45:e8:52:bb:bb:76:b0:8b:f5:9d:4e:26:56:bd:36:31: c0:9c:7e:b8:92:99:37:bd:59:72:5c:53:82:26:93:f9:94:19: 04:34:5a:e3:e0:a9:56:35:49:9f:7e:92:d9:40:80:da:88:8e: d0:61:dc:90:95:09:7d:79:2d:0c:56:c2:3f:cd:e6:97:61:3a: 05:a0:00:80:7b:ea:de:b7:c9:d9:95:56:f6:e2:78:f5:4e:72: ac:9b:a2:46:43:ca:0d:4c:55:23:1b:c3:b4:40:65:90:97:12: b3:31:52:c0:76:b2:74:cc:84:ed:fc:24:26:1e:56:86:7b:60: e5:1d:7d:c4:40:dd:1f:8a:a8:27:54:6c:60:66:d5:df:25:3c: 2e:39:9c:f6:ee:13:a1:61:06:b7:db:8f:6d:cc:f7:b8:2b:19: 29:2d:c9:38:5f:6c:d5:8d:37:f7:f2:44:aa:4c:15:00:7a:91: 97:c3:ae:df -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZrh96v8TwfuH9u43kps+Jgjs3ygwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MjAzNzAzWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjg4N2E5MzdjNTJhMmJhMWNlZjcxYThhYTUxMTQ0N2I2 N2UxNTA0ZWI5NmMyZDA1NmU2ODBmNTI4NjFmMzhiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCj47EYvfgWsxO9ThSDpDoWcKzlXrTwqd+RiW6VyeRurNt kmLkR7kmdeBFEUflUaeYa9UV6RHMg+lP70Z49HKb9VafUN7RvMGi/XX0LoJ7V6Pi xg5/Iw6gucjz8EwR5jMwjgbUvEduPp4yVwx0Uw9v3rKE3gyu5Zc+Gp/gAMqIa+DD PXxAr3kyCHQF2lYQPD7DzqEtxgUt/72hOJbTXpYzqFoq1esIAKIDkrQLBxCX1gXn iryr2XM/dZ1JVAvfK1d72aBa5K2Jr+VAYDa2u6Gno1SjR7jVHrdxmVcOtVAgrnAB G8P/R3MKexL8wqpSyye497GZPg0Ym8JX4GB+YlizAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVhiGk5fHUAmeEj7S3Ap4wT5QZfMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UwZThkMjVlLTg3MzUtNDg4MC1iY2M4LTc5ZTZiMGZjOGE2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4mjANBgkqhkiG9w0BAQsFAAOCAQEAen0Q8p4zzYMRM2NgqeZbG/6mr3Kq HEGvcSP4eT9bVW/1E9aI/X4mfaECLU7sKIkZ1yD1ZqdbPAy8ibIwLo+jbscu4E15 sIxGSSpF6FK7u3awi/WdTiZWvTYxwJx+uJKZN71ZclxTgiaT+ZQZBDRa4+CpVjVJ n36S2UCA2oiO0GHckJUJfXktDFbCP83ml2E6BaAAgHvq3rfJ2ZVW9uJ49U5yrJui RkPKDUxVIxvDtEBlkJcSszFSwHaydMyE7fwkJh5Whntg5R19xEDdH4qoJ1RsYGbV 3yU8Ljmc9u4ToWEGt9uPbcz3uCsZKS3JOF9s1Y039/JEqkwVAHqRl8Ou3w== -----END CERTIFICATE-----Generated at Sat Apr 26 14:52:21 2025 by rpki-client