$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4b6e861-de0c-468e-95aa-1bf03a8e3400.roa File: f4b6e861-de0c-468e-95aa-1bf03a8e3400.roa (raw, json) Hash identifier: wsu6uC7lfp6/JqTnRctWGvi5qiFKrEt1wQkaxptO5SE= Subject key identifier: D8:97:BC:B4:FE:4B:87:12:D7:55:80:49:B7:CC:AD:D2:2A:C7:E4:A3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6220CA40E9B9C9A4ECCDD533744D1BB1B24D1959 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4b6e861-de0c-468e-95aa-1bf03a8e3400.roa Signing time: Tue 03 Jun 2025 00:11:45 +0000 ROA not before: Tue 03 Jun 2025 00:11:45 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 184.72.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:20:ca:40:e9:b9:c9:a4:ec:cd:d5:33:74:4d:1b:b1:b2:4d:19:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 3 00:11:45 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=8b2396105677b7905075c487ccdb05366c1081ad339a6993a2d49455b53ea0ea, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:42:a2:48:8d:85:e9:df:ec:1e:70:04:f0: 76:99:57:1d:c2:23:28:41:9a:c7:a0:dd:99:3f:50: b0:f0:f4:f2:6c:2b:63:91:ae:2e:d7:2e:70:02:5d: 37:70:a6:fd:12:fd:33:a6:47:93:d6:8b:e4:be:ae: e9:c5:79:18:56:74:99:c6:a5:be:a5:53:09:a9:13: 96:22:d8:d5:c1:3d:34:bc:07:85:89:a2:47:91:12: 0a:4a:d8:3f:2f:af:2b:af:67:6b:71:22:4d:d4:86: 03:df:f3:21:ec:17:bc:67:ed:51:88:37:11:d9:b1: 6e:a2:a3:6a:23:01:a4:40:c6:41:4c:d3:48:39:3b: 51:f7:32:90:43:bf:5b:d9:88:00:df:13:ff:5d:9b: f8:86:8a:a7:bd:61:ea:00:07:e5:1e:d3:3d:17:73: 73:42:95:96:33:65:ce:db:25:6b:c5:55:84:86:ea: 9b:af:84:e7:a8:2a:98:eb:ed:0a:7c:77:20:a6:1f: 50:c8:37:4d:51:05:9b:2c:5c:72:c7:72:d3:50:ea: eb:eb:4a:d4:ce:de:ce:7d:fa:89:b1:c1:43:05:85: 5d:ef:07:c0:12:5f:ec:fe:83:9c:66:08:22:7c:d7: b8:bd:9f:cd:a2:32:71:49:2c:b2:7c:aa:da:c8:67: 6a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:97:BC:B4:FE:4B:87:12:D7:55:80:49:B7:CC:AD:D2:2A:C7:E4:A3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4b6e861-de0c-468e-95aa-1bf03a8e3400.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.216.0/21 Signature Algorithm: sha256WithRSAEncryption 9f:16:9e:2e:33:fe:90:5d:dc:b2:c9:be:6e:86:44:40:97:fd: 8f:0f:6e:8e:ac:6b:7a:c7:a8:6c:d7:f8:c2:e8:a7:d2:4f:2b: 39:ed:8b:c5:95:98:75:cd:b3:c1:94:df:d0:96:8f:eb:20:0f: f9:51:5d:c3:16:75:e1:70:62:9d:51:6c:aa:9f:f9:b0:d6:14: f5:cb:56:c4:d6:db:e8:e7:00:11:f8:8e:77:0a:ce:e3:6a:3f: 54:6d:d4:16:cf:56:78:53:ed:77:f2:94:0b:3a:2f:d0:a3:76: 56:eb:44:ad:8f:94:5b:90:ad:cf:99:0d:02:2f:fc:de:dd:5e: aa:91:7a:42:fb:7b:25:c4:6c:de:0a:f8:99:88:6b:a3:56:6d: e7:cb:c7:19:dc:32:bc:7c:2b:ec:8b:25:56:97:c7:1d:ea:38: e3:10:d6:70:8b:1d:76:b9:a7:6a:ab:f9:90:93:29:b4:d7:65: 6f:8f:ca:ce:6b:d1:7d:09:e9:68:ba:d7:9f:f8:55:2b:4e:f3: 90:82:4e:17:00:34:3c:a7:74:38:50:db:f0:7d:45:4f:02:7d: 70:bb:35:47:af:6d:3a:8c:ef:e8:3a:c0:0c:44:72:12:34:c6: 5c:e3:0a:44:07:7a:a0:8b:8d:88:b7:b3:25:30:37:f6:f0:78: 1f:6a:a1:56 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYiDKQOm5yaTszdUzdE0bsbJNGVkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAzMDAxMTQ1WhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjIzOTYxMDU2NzdiNzkwNTA3NWM0ODdjY2RiMDUzNjZj MTA4MWFkMzM5YTY5OTNhMmQ0OTQ1NWI1M2VhMGVhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1q0KiSI2F6d/sHnAE8HaZVx3CIyhBmseg3Zk/ULDw9PJs K2ORri7XLnACXTdwpv0S/TOmR5PWi+S+runFeRhWdJnGpb6lUwmpE5Yi2NXBPTS8 B4WJokeREgpK2D8vryuvZ2txIk3UhgPf8yHsF7xn7VGINxHZsW6io2ojAaRAxkFM 00g5O1H3MpBDv1vZiADfE/9dm/iGiqe9YeoAB+Ue0z0Xc3NClZYzZc7bJWvFVYSG 6puvhOeoKpjr7Qp8dyCmH1DIN01RBZssXHLHctNQ6uvrStTO3s59+omxwUMFhV3v B8ASX+z+g5xmCCJ817i9n82iMnFJLLJ8qtrIZ2pBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2Je8tP5LhxLXVYBJt8yt0irH5KMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y0YjZlODYxLWRlMGMtNDY4ZS05NWFhLTFiZjAzYThlMzQwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO4SNgwDQYJKoZIhvcNAQELBQADggEBAJ8Wni4z/pBd3LLJvm6GRECX/Y8P bo6sa3rHqGzX+MLop9JPKznti8WVmHXNs8GU39CWj+sgD/lRXcMWdeFwYp1RbKqf +bDWFPXLVsTW2+jnABH4jncKzuNqP1Rt1BbPVnhT7XfylAs6L9CjdlbrRK2PlFuQ rc+ZDQIv/N7dXqqRekL7eyXEbN4K+JmIa6NWbefLxxncMrx8K+yLJVaXxx3qOOMQ 1nCLHXa5p2qr+ZCTKbTXZW+Pys5r0X0J6Wi615/4VStO85CCThcANDyndDhQ2/B9 RU8CfXC7NUevbTqM7+g6wAxEchI0xlzjCkQHeqCLjYi3syUwN/bweB9qoVY= -----END CERTIFICATE-----Generated at Sat Jun 14 06:40:28 2025 by rpki-client