$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41241b60-7ab8-4677-9f4f-dc4402b95d0d.roa File: 41241b60-7ab8-4677-9f4f-dc4402b95d0d.roa (raw, json) Hash identifier: T29joEuRhQHJhtR/8ZBIue45fIWyFWhd5muFUf7XeZw= Subject key identifier: 17:08:06:A4:23:32:9C:26:F5:F9:37:FD:53:FF:65:BA:E6:AB:0B:4A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 05D9AD1BA9CE13796CED51C748C9C35ADF0928C4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41241b60-7ab8-4677-9f4f-dc4402b95d0d.roa Signing time: Mon 31 Mar 2025 15:42:14 +0000 ROA not before: Mon 31 Mar 2025 15:42:14 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.221.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d9:ad:1b:a9:ce:13:79:6c:ed:51:c7:48:c9:c3:5a:df:09:28:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 31 15:42:14 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:00:ca:42:4e:1b:7b:6c:3e:dd:55:39:20: 40:40:52:f3:ba:aa:dd:83:78:24:be:e0:31:14:72: 12:c7:fa:73:d0:6c:ab:a4:e9:0e:dd:4c:95:42:4f: aa:8e:46:31:cf:2d:ee:86:0c:c1:6d:8f:57:88:f8: a9:49:5f:84:44:3d:42:4c:26:39:f1:02:6f:02:b0: 11:15:36:05:f1:ff:db:1e:7d:57:29:68:f0:e0:81: 31:c0:5a:dc:54:c1:d2:43:23:a2:93:ff:12:20:2e: de:aa:38:23:ae:e4:c9:08:ee:ff:3d:63:5e:ce:3c: e8:90:14:04:a2:c6:4d:d9:06:ae:4f:cd:66:c0:99: 9f:54:5a:8e:78:34:73:6f:82:8d:9f:b5:c5:f2:d7: eb:15:64:9a:fb:ff:48:ea:86:91:58:e6:1b:bd:ed: 5d:ef:cc:8e:26:fd:92:54:5c:40:ff:d7:3c:c6:b2: 4c:14:84:99:0e:da:36:0e:bd:86:46:b3:1c:40:79: a5:fa:bd:ea:75:f7:15:7c:f7:4f:72:ad:e3:13:b0: 43:33:9c:27:8d:ac:df:c8:3b:b0:e6:ed:0e:ba:94: f2:4f:a5:64:41:1c:23:15:b6:3d:c0:72:16:b0:f9: ca:fd:13:ad:5f:54:08:8f:e2:0d:d7:ca:7f:01:46: 88:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:08:06:A4:23:32:9C:26:F5:F9:37:FD:53:FF:65:BA:E6:AB:0B:4A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41241b60-7ab8-4677-9f4f-dc4402b95d0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.221.0.0/16 Signature Algorithm: sha256WithRSAEncryption 76:82:af:1d:1e:0a:fa:6f:f5:1f:25:af:36:17:51:50:26:80: 7f:57:20:49:01:45:7d:61:22:cf:23:58:2b:31:2e:24:c1:81: b2:73:d1:58:68:1a:ca:ef:71:ba:0b:9e:14:dd:a3:10:c3:4b: 0d:b4:dd:7d:bf:27:14:a7:6e:73:64:15:d1:4a:2d:fa:9a:0e: d1:53:74:d1:4b:d8:95:e5:b5:01:05:30:3c:2a:0c:48:74:cb: 86:1b:d9:bb:8f:6d:1e:23:51:f3:90:fe:22:b6:e6:ee:88:34: 8b:c5:42:b4:15:00:ff:d5:c2:db:f6:28:d2:90:83:60:dc:f7: 3d:5d:1c:f8:0f:ad:3a:55:34:e9:b8:06:d1:23:38:39:6c:7e: 7e:cb:31:93:af:0a:f6:b5:7a:66:6a:72:be:0c:ab:e7:73:36: b1:70:70:b5:70:b4:e9:7f:60:29:93:e1:45:17:3a:99:36:02: c5:b6:dd:72:78:50:f4:31:7f:5e:ef:e2:e3:b3:79:ed:ce:46: da:4d:8b:24:27:1f:32:b5:46:41:fc:35:94:78:0b:79:e2:1c: 64:d0:ec:7e:18:5b:33:fc:06:28:c2:39:ec:33:14:e0:ae:7f: 9a:c6:e7:3f:73:0a:89:20:cf:b6:ee:12:2c:3a:a4:97:6a:92: 52:fd:16:20 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUBdmtG6nOE3ls7VHHSMnDWt8JKMQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTU0MjE0WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzFjZGY5OGY3MzAwNTU1M2Q4NDUyMGIwMThhZTEwOTRh YTQ1OWZjYzI3ZDhhNzg5NzlkNDYxZThhMTJkMTk0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOnADKQk4be2w+3VU5IEBAUvO6qt2DeCS+4DEUchLH+nPQ bKuk6Q7dTJVCT6qORjHPLe6GDMFtj1eI+KlJX4REPUJMJjnxAm8CsBEVNgXx/9se fVcpaPDggTHAWtxUwdJDI6KT/xIgLt6qOCOu5MkI7v89Y17OPOiQFASixk3ZBq5P zWbAmZ9UWo54NHNvgo2ftcXy1+sVZJr7/0jqhpFY5hu97V3vzI4m/ZJUXED/1zzG skwUhJkO2jYOvYZGsxxAeaX6vep19xV8909yreMTsEMznCeNrN/IO7Dm7Q66lPJP pWRBHCMVtj3Achaw+cr9E61fVAiP4g3Xyn8BRoihAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUFwgGpCMynCb1+Tf9U/9luuarC0owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQxMjQxYjYwLTdhYjgtNDY3Ny05ZjRmLWRjNDQwMmI5NWQwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA43TANBgkqhkiG9w0BAQsFAAOCAQEAdoKvHR4K+m/1HyWvNhdRUCaAf1cg SQFFfWEizyNYKzEuJMGBsnPRWGgayu9xugueFN2jEMNLDbTdfb8nFKduc2QV0Uot +poO0VN00UvYleW1AQUwPCoMSHTLhhvZu49tHiNR85D+Irbm7og0i8VCtBUA/9XC 2/Yo0pCDYNz3PV0c+A+tOlU06bgG0SM4OWx+fssxk68K9rV6Zmpyvgyr53M2sXBw tXC06X9gKZPhRRc6mTYCxbbdcnhQ9DF/Xu/i47N57c5G2k2LJCcfMrVGQfw1lHgL eeIcZNDsfhhbM/wGKMI57DMU4K5/msbnP3MKiSDPtu4SLDqkl2qSUv0WIA== -----END CERTIFICATE-----Generated at Sat Apr 5 13:22:38 2025 by rpki-client