$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa File: 0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa (raw, json) Hash identifier: JO8RpyArogr+w9PhQCXzEDO81g/7rbBdfYl3RELduo4= Subject key identifier: D9:AE:22:0A:75:55:34:BF:D3:87:9C:D7:15:47:DE:17:C0:B8:0D:4F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1A3A0F7C8276DEECD71CB1DA8233A5F04A2D6E0D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa Signing time: Tue 25 Mar 2025 16:50:26 +0000 ROA not before: Tue 25 Mar 2025 16:50:26 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 107.160.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:3a:0f:7c:82:76:de:ec:d7:1c:b1:da:82:33:a5:f0:4a:2d:6e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 25 16:50:26 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e4:7e:c6:a0:51:1d:f1:ca:4d:8d:86:98:00: ad:26:90:bf:3a:bd:d3:df:34:b5:08:9b:7f:6a:56: 88:9c:60:3d:f0:07:cf:6e:c3:34:58:01:d6:93:c1: 8d:96:5d:82:43:30:80:b5:85:79:b9:95:47:96:83: 61:c0:a7:c6:ce:cd:75:6e:01:0c:4a:30:04:c9:1e: 37:69:52:bf:fa:c4:4f:ab:aa:ea:34:41:ee:54:65: 3d:00:de:4d:08:5e:75:1c:6f:f1:6e:4b:e6:72:05: 4c:32:bf:6d:af:4a:47:8d:18:38:d3:05:4b:26:a9: 8d:69:35:05:d5:30:eb:f2:7c:eb:2b:59:87:bc:83: f4:9f:16:4a:c2:8a:a0:82:1f:1e:85:1b:aa:db:4b: 1e:87:da:57:1f:b8:39:39:f1:a7:0a:75:17:03:4d: 41:3e:ed:8c:81:1a:af:6a:cb:73:24:29:50:c1:f0: 41:46:97:5a:da:62:40:9e:a4:56:e3:8a:e1:06:2c: ac:52:10:46:56:84:ef:50:ac:fd:da:d1:a1:59:b8: ad:ba:c5:3f:3f:83:12:ff:0e:a0:c7:f3:8d:d3:7a: 95:77:e2:15:e1:2c:ed:73:cd:c0:1a:b3:3f:ea:a0: 58:d4:bd:7e:59:f7:48:a4:eb:b5:cc:89:84:b8:fb: 03:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AE:22:0A:75:55:34:BF:D3:87:9C:D7:15:47:DE:17:C0:B8:0D:4F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbcb60b-a5ea-46f5-9918-7ad443253fcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.160.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7a:84:2f:5c:a8:97:ef:30:14:0c:44:75:1e:c6:93:cd:e7:88: a2:2b:69:2f:cc:b1:b9:ce:bd:b2:c6:07:19:4d:d5:35:1b:83: f4:83:b4:8c:42:6e:20:41:15:80:be:41:48:92:49:89:5d:0f: ab:f8:35:dd:ad:93:b3:9c:bb:c3:1a:e4:b7:cc:29:2f:7e:58: 8f:47:ab:6d:a8:30:d9:63:da:1a:f0:61:4a:6e:63:19:74:37: 2f:0b:1a:65:56:1c:df:02:64:1a:28:41:5c:59:dc:60:65:21: 0e:71:f2:6d:4b:95:8a:93:ea:39:74:35:54:99:32:cd:76:ed: 2b:d1:f3:b5:b6:f6:cd:e1:5d:2e:90:51:d4:5b:8c:5e:34:6a: c1:bb:58:e2:85:51:74:02:38:49:1d:5a:cd:af:65:e4:ff:24: 00:41:3e:ba:7e:90:83:92:79:f3:a5:2f:74:94:4b:bf:1e:13: c0:88:35:8e:68:b7:0b:54:5f:a3:36:05:3c:b2:fb:bb:01:12: ca:cb:bf:26:75:ae:36:a3:33:0b:23:b1:7e:44:ea:fd:72:69: d9:ab:5e:6d:cb:9f:a3:f0:22:37:81:d9:95:1f:f7:4d:be:4e: fe:13:93:21:02:fd:bc:65:a9:5e:4a:cd:bd:3a:93:ba:13:a3: 3e:74:99:c9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGjoPfIJ23uzXHLHagjOl8Eotbg0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI1MTY1MDI2WhcNMjUwNDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTAwYmI2M2I4MTA5NGQwNWU1YjJiOTNhMDI0ZTMxMmFm NWUyOGZjOWFhOTZmOTBiNzNiNTVjMjYwY2MyMjQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDk5H7GoFEd8cpNjYaYAK0mkL86vdPfNLUIm39qVoicYD3w B89uwzRYAdaTwY2WXYJDMIC1hXm5lUeWg2HAp8bOzXVuAQxKMATJHjdpUr/6xE+r quo0Qe5UZT0A3k0IXnUcb/FuS+ZyBUwyv22vSkeNGDjTBUsmqY1pNQXVMOvyfOsr WYe8g/SfFkrCiqCCHx6FG6rbSx6H2lcfuDk58acKdRcDTUE+7YyBGq9qy3MkKVDB 8EFGl1raYkCepFbjiuEGLKxSEEZWhO9QrP3a0aFZuK26xT8/gxL/DqDH843TepV3 4hXhLO1zzcAasz/qoFjUvX5Z90ik67XMiYS4+wMLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU2a4iCnVVNL/Th5zXFUfeF8C4DU8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBmYmNiNjBiLWE1ZWEtNDZmNS05OTE4LTdhZDQ0MzI1M2ZjZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBroDANBgkqhkiG9w0BAQsFAAOCAQEAeoQvXKiX7zAUDER1HsaTzeeIoitp L8yxuc69ssYHGU3VNRuD9IO0jEJuIEEVgL5BSJJJiV0Pq/g13a2Ts5y7wxrkt8wp L35Yj0erbagw2WPaGvBhSm5jGXQ3LwsaZVYc3wJkGihBXFncYGUhDnHybUuVipPq OXQ1VJkyzXbtK9Hztbb2zeFdLpBR1FuMXjRqwbtY4oVRdAI4SR1aza9l5P8kAEE+ un6Qg5J586UvdJRLvx4TwIg1jmi3C1RfozYFPLL7uwESysu/JnWuNqMzCyOxfkTq /XJp2atebcufo/AiN4HZlR/3Tb5O/hOTIQL9vGWpXkrNvTqTuhOjPnSZyQ== -----END CERTIFICATE-----Generated at Sat Apr 5 11:21:48 2025 by rpki-client