$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e609d71-075f-40c9-b88a-5a62a3b788a9.roa File: 3e609d71-075f-40c9-b88a-5a62a3b788a9.roa (raw, json) Hash identifier: bc+anjyQs3XJQKZLd6eVfhGIF494Nm0hN95BovbHBfI= Subject key identifier: 69:7D:61:CD:B9:F1:2F:D6:1D:5A:03:25:E2:90:9B:F8:85:59:D6:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 49F2DBE3447B8DEB1EEB5C99EEAF5ABF77ACE6F9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e609d71-075f-40c9-b88a-5a62a3b788a9.roa Signing time: Sat 05 Apr 2025 00:00:34 +0000 ROA not before: Sat 05 Apr 2025 00:00:34 +0000 ROA not after: Sat 10 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 68.159.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:f2:db:e3:44:7b:8d:eb:1e:eb:5c:99:ee:af:5a:bf:77:ac:e6:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 5 00:00:34 2025 GMT Not After : May 10 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c3:93:94:0a:17:50:2b:33:60:87:b9:0f:27: 4e:e6:01:18:84:f6:5e:ab:2e:71:8b:08:2a:3a:70: 45:40:61:ed:f0:d0:47:02:15:64:07:af:82:94:97: 57:2e:84:c8:6f:1c:1b:d7:47:df:20:b8:c1:5b:c5: 36:ba:a8:e8:a7:77:b3:8b:7c:2b:e9:6a:87:5e:1e: b6:08:ac:74:85:b5:7c:ab:9d:1b:6e:20:e9:46:d2: 38:c7:19:af:ae:65:cb:ad:df:4c:df:03:13:c3:30: 42:fa:c4:1d:47:99:72:e9:28:4f:0a:4e:52:3c:8a: ec:5c:72:fc:03:4b:fc:3f:8e:2e:39:ef:00:9b:06: 88:30:16:a9:3d:9b:73:21:00:20:9c:50:22:82:62: 0f:9a:2f:51:5e:c7:9f:75:7d:f8:f6:f2:f5:95:e9: f5:cf:95:7b:99:24:eb:36:30:7c:fe:0e:ac:60:2a: 7d:66:11:c8:60:d5:fa:f2:a6:26:fa:f0:5a:ac:e4: d6:cc:48:85:04:93:49:f0:e9:cc:1a:3e:54:13:f0: 5d:38:62:a8:f6:24:cd:6b:6f:4e:8b:fe:4d:ff:7c: 0a:ee:b7:66:60:40:2f:41:44:f2:08:cc:96:08:ea: 57:a1:88:3f:a4:82:d4:33:2f:2b:bc:45:16:9b:4d: 75:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7D:61:CD:B9:F1:2F:D6:1D:5A:03:25:E2:90:9B:F8:85:59:D6:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e609d71-075f-40c9-b88a-5a62a3b788a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 68.159.0.0/16 Signature Algorithm: sha256WithRSAEncryption c2:7a:b9:26:91:89:a6:ef:76:8a:88:4b:ed:d2:61:3d:ea:0e: 5c:36:97:f5:93:4e:c3:10:89:86:d2:77:5c:eb:a6:7e:87:17: 89:94:56:46:d0:ce:2d:50:3d:b7:ab:3a:70:97:b4:98:ad:2e: 7a:4d:dd:54:ca:5b:b1:b7:f8:5a:19:cf:67:1a:12:76:66:a6: 4e:a6:6b:8a:9c:59:6f:94:31:6c:f6:7f:f5:a7:57:cb:b2:26: 07:36:d3:69:71:e8:fe:93:e9:3f:10:39:d5:c8:8b:95:09:01: d8:a4:41:d6:84:b1:75:a7:6c:58:4e:86:34:6b:2f:e7:62:1d: 39:bd:8f:d1:78:e5:68:4e:92:b9:33:60:2a:80:8f:cc:a6:ca: 45:60:1a:9b:a8:39:1c:c2:bc:ee:81:e9:21:31:14:aa:ef:87: 72:5c:37:e6:21:b8:50:0c:cf:a4:e2:ed:a0:9c:10:91:86:df: bd:17:b2:31:6c:4c:75:2b:32:03:32:e7:f1:6a:6c:1d:e6:5a: 7b:32:8a:d2:91:50:af:a1:e5:05:03:19:a5:6f:77:16:f0:ca: c9:02:5d:f8:6d:44:68:8c:58:95:c0:07:80:d6:6f:fd:82:27: d9:98:6f:4f:e0:90:f7:74:59:b5:ed:51:fa:37:91:2e:a4:16: fc:ec:ae:6b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSfLb40R7jese61yZ7q9av3es5vkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA1MDAwMDM0WhcNMjUwNTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODhkZmU5OGU1MjhlMjAyOWIxYzNiM2VmZmQxMDg4NWY0 NGY3ZjM0MTI1NGU0MDA5NTlmZGFiZTQ4MWUwOGRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkw5OUChdQKzNgh7kPJ07mARiE9l6rLnGLCCo6cEVAYe3w 0EcCFWQHr4KUl1cuhMhvHBvXR98guMFbxTa6qOind7OLfCvpaodeHrYIrHSFtXyr nRtuIOlG0jjHGa+uZcut30zfAxPDMEL6xB1HmXLpKE8KTlI8iuxccvwDS/w/ji45 7wCbBogwFqk9m3MhACCcUCKCYg+aL1Fex591ffj28vWV6fXPlXuZJOs2MHz+Dqxg Kn1mEchg1frypib68Fqs5NbMSIUEk0nw6cwaPlQT8F04Yqj2JM1rb06L/k3/fAru t2ZgQC9BRPIIzJYI6lehiD+kgtQzLyu8RRabTXUrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUaX1hzbnxL9YdWgMl4pCb+IVZ1vUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNlNjA5ZDcxLTA3NWYtNDBjOS1iODhhLTVhNjJhM2I3ODhhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBEnzANBgkqhkiG9w0BAQsFAAOCAQEAwnq5JpGJpu92iohL7dJhPeoOXDaX 9ZNOwxCJhtJ3XOumfocXiZRWRtDOLVA9t6s6cJe0mK0uek3dVMpbsbf4WhnPZxoS dmamTqZripxZb5QxbPZ/9adXy7ImBzbTaXHo/pPpPxA51ciLlQkB2KRB1oSxdads WE6GNGsv52IdOb2P0XjlaE6SuTNgKoCPzKbKRWAam6g5HMK87oHpITEUqu+Hclw3 5iG4UAzPpOLtoJwQkYbfvReyMWxMdSsyAzLn8WpsHeZaezKK0pFQr6HlBQMZpW93 FvDKyQJd+G1EaIxYlcAHgNZv/YIn2ZhvT+CQ93RZte1R+jeRLqQW/Oyuaw== -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:05 2025 by rpki-client