$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/088fd3e6-5013-4c2c-bf46-1eb907f3520c.roa File: 088fd3e6-5013-4c2c-bf46-1eb907f3520c.roa (raw, json) Hash identifier: +SYzVZfCcHatyxUuaIbTgxeC1SoXgrUVCsktFzZ6ag0= Subject key identifier: 88:A7:A1:58:FA:B2:2C:23:A6:95:A7:A6:A0:92:E7:84:7C:23:07:0D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4548D03E3B96A176ADE0E8B59E3D2B29388E3277 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/088fd3e6-5013-4c2c-bf46-1eb907f3520c.roa Signing time: Fri 14 Mar 2025 00:42:05 +0000 ROA not before: Fri 14 Mar 2025 00:42:05 +0000 ROA not after: Fri 18 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:48:d0:3e:3b:96:a1:76:ad:e0:e8:b5:9e:3d:2b:29:38:8e:32:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 14 00:42:05 2025 GMT Not After : Apr 18 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:54:08:a1:09:23:96:15:50:e0:72:f9:dc:32: 3c:ca:d2:6f:3e:0c:66:93:22:9f:f1:f9:79:87:91: 20:e4:46:33:0b:6a:df:6b:61:24:a3:7c:09:77:b7: f9:10:81:06:b6:18:c1:76:d9:ec:aa:c5:7d:53:4d: 1f:2e:c1:1a:03:ab:1e:66:e6:7a:6f:f1:bd:cc:b0: 20:4f:61:ec:69:0f:6d:38:9d:37:68:36:f7:e0:af: 1e:e3:86:85:a9:f2:d8:05:9d:c6:ae:29:66:48:0d: d4:52:26:74:9f:40:cc:7a:9c:9a:29:91:30:e4:2c: 34:f0:68:b7:53:6e:3d:09:f5:60:1d:e0:e4:95:b3: 26:76:0e:b5:db:bf:1f:33:b9:63:5f:5b:02:ab:bb: 63:d8:9b:c0:43:f4:e2:3b:fe:47:61:d4:dc:10:34: b4:77:e2:29:3a:be:13:bc:1a:97:91:0a:a5:e2:c2: f9:0e:2c:88:b7:b1:40:78:e1:ea:48:40:df:08:29: 97:c1:e6:1c:5a:8f:45:df:07:9d:84:1d:d8:1c:1c: 63:ce:52:d1:7f:76:57:d6:e0:f4:ed:35:31:30:69: d4:04:69:8a:1c:af:31:3f:2f:2e:6e:c7:cd:cd:bd: fe:94:40:22:61:19:05:0c:f7:5e:1d:33:7b:f3:55: a2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A7:A1:58:FA:B2:2C:23:A6:95:A7:A6:A0:92:E7:84:7C:23:07:0D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/088fd3e6-5013-4c2c-bf46-1eb907f3520c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.81.0/24 Signature Algorithm: sha256WithRSAEncryption c3:b9:c2:79:36:bb:64:f4:62:d2:5f:23:73:3f:3e:ac:7c:b0: 5a:98:7e:89:7e:29:d4:56:6a:84:37:ef:12:8d:a1:e0:75:40: b1:58:55:ac:44:df:77:06:9e:e2:34:2f:45:0b:e9:b2:83:af: 67:0e:8f:d6:ce:ad:78:19:e1:8f:08:fd:63:a8:e4:a7:db:db: ba:91:53:45:88:87:a4:9f:9f:ab:20:67:4f:76:15:11:cc:78: 8d:c3:2f:bc:48:32:c8:e7:b7:5c:48:56:9b:16:95:1f:3f:65: 0d:01:30:b4:fb:6a:3a:31:7e:01:ca:c5:f8:12:8f:b1:9d:76: 7d:e5:91:c0:38:24:8d:f5:ea:de:82:fe:c3:af:d2:4c:46:8d: bd:05:50:bd:96:b9:6e:49:cf:76:95:23:ca:ee:89:ee:33:2f: 29:14:e3:bf:11:a1:db:c3:41:23:2a:a0:fb:d7:ab:45:27:1c: 92:ab:31:13:1b:ea:50:9d:ce:35:62:53:40:67:d3:63:bc:6d: d6:95:b1:5f:84:d4:35:69:88:3a:df:17:4a:c2:50:b7:d5:4a: 46:c3:2a:c2:3a:5f:e6:3e:3a:9e:7a:3e:aa:9e:b2:f5:85:ba: a6:39:b3:17:d2:72:f2:9a:d0:18:5f:95:f1:e6:72:0c:d0:41: a8:8d:bc:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURUjQPjuWoXat4Oi1nj0rKTiOMncwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE0MDA0MjA1WhcNMjUwNDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OThlZWY4YzQ0YzRjZjAyZWRjZTRlYzQxZjYwMjI2Zjg1 OGIxYjU3OWQxNjk4ZGJlMzE1N2UyYTk5ODFiMGQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfVAihCSOWFVDgcvncMjzK0m8+DGaTIp/x+XmHkSDkRjML at9rYSSjfAl3t/kQgQa2GMF22eyqxX1TTR8uwRoDqx5m5npv8b3MsCBPYexpD204 nTdoNvfgrx7jhoWp8tgFncauKWZIDdRSJnSfQMx6nJopkTDkLDTwaLdTbj0J9WAd 4OSVsyZ2DrXbvx8zuWNfWwKru2PYm8BD9OI7/kdh1NwQNLR34ik6vhO8GpeRCqXi wvkOLIi3sUB44epIQN8IKZfB5hxaj0XfB52EHdgcHGPOUtF/dlfW4PTtNTEwadQE aYocrzE/Ly5ux83Nvf6UQCJhGQUM914dM3vzVaKVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiKehWPqyLCOmlaemoJLnhHwjBw0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA4OGZkM2U2LTUwMTMtNGMyYy1iZjQ2LTFlYjkwN2YzNTIwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/FEwDQYJKoZIhvcNAQELBQADggEBAMO5wnk2u2T0YtJfI3M/Pqx8sFqY fol+KdRWaoQ37xKNoeB1QLFYVaxE33cGnuI0L0UL6bKDr2cOj9bOrXgZ4Y8I/WOo 5Kfb27qRU0WIh6Sfn6sgZ092FRHMeI3DL7xIMsjnt1xIVpsWlR8/ZQ0BMLT7ajox fgHKxfgSj7Gddn3lkcA4JI316t6C/sOv0kxGjb0FUL2WuW5Jz3aVI8ruie4zLykU 478RodvDQSMqoPvXq0UnHJKrMRMb6lCdzjViU0Bn02O8bdaVsV+E1DVpiDrfF0rC ULfVSkbDKsI6X+Y+Op56PqqesvWFuqY5sxfScvKa0BhflfHmcgzQQaiNvFM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:49 2025 by rpki-client