$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46758e19-83f6-44fe-b34a-46b023902f4e.roa File: 46758e19-83f6-44fe-b34a-46b023902f4e.roa (raw, json) Hash identifier: R5ErDMgi5Id4A6RQYhonVY+Qhz9gQXsydttr9JBjbbo= Subject key identifier: C1:DC:3C:CA:E1:8E:5A:04:93:B3:FE:0A:46:1A:07:D9:A9:B9:A7:9C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6BD9B2903088872AEBC77989F9AEED25A1243724 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46758e19-83f6-44fe-b34a-46b023902f4e.roa Signing time: Wed 19 Mar 2025 00:22:06 +0000 ROA not before: Wed 19 Mar 2025 00:22:06 +0000 ROA not after: Wed 23 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 207.8.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d9:b2:90:30:88:87:2a:eb:c7:79:89:f9:ae:ed:25:a1:24:37:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 19 00:22:06 2025 GMT Not After : Apr 23 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:56:38:17:42:fb:3f:50:9a:37:9e:33:7c: e3:d1:67:06:01:1f:f1:75:6a:d9:aa:d9:25:57:82: f3:db:41:54:0b:a8:ac:36:73:8c:94:f5:a6:47:5d: 52:db:61:b0:17:97:f7:e4:4f:73:42:43:d5:9e:b8: a6:24:33:6a:26:0d:c0:5f:3f:39:2c:6f:d6:4b:4b: 4f:7d:3c:03:be:df:6d:8e:be:93:43:54:13:82:f0: e3:cb:13:45:19:d6:de:02:38:35:25:13:b7:8d:fe: 69:dc:be:e6:80:84:80:82:87:30:69:87:4a:a5:ba: e3:c1:12:51:0c:c9:10:c7:b1:90:65:d7:b5:95:71: 46:5e:20:d8:0a:4a:da:0d:ca:10:7c:a9:e2:da:49: 47:2d:61:14:f5:77:61:49:6c:2d:50:63:51:b3:9e: db:84:04:ab:07:df:27:dd:f9:3c:80:2c:b9:68:29: 8c:4d:5a:34:f3:04:2f:86:e3:bd:7f:50:06:84:ad: 20:67:92:fd:a8:d7:d0:56:f8:1b:22:28:77:ad:e8: 36:cd:7c:15:57:7a:88:62:33:68:36:e9:f5:ed:1a: 01:a9:70:ff:9a:48:df:5a:0d:e3:d9:66:a8:ec:bf: 87:76:63:f9:d1:fb:12:af:fa:8f:31:3f:ea:cb:88: c1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DC:3C:CA:E1:8E:5A:04:93:B3:FE:0A:46:1A:07:D9:A9:B9:A7:9C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46758e19-83f6-44fe-b34a-46b023902f4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.8.224.0/20 Signature Algorithm: sha256WithRSAEncryption a6:92:5a:3e:9a:f2:b4:d4:85:92:2a:07:e5:37:b0:29:4a:28: ec:66:ff:b5:2a:6c:9d:8d:ac:51:94:cb:cd:81:aa:2e:d2:d3: 31:b2:1c:a9:07:3e:a7:ef:33:cc:a4:5d:ce:d4:39:e5:69:5c: 0c:ee:ce:86:ee:69:29:ac:b6:48:92:f6:48:0f:1d:98:d5:ee: 1c:40:44:1e:dc:86:97:6e:d2:a9:97:09:e2:62:d7:44:7e:cf: 3c:c2:22:0d:4c:6c:f3:5c:b0:c7:24:78:c1:ab:bf:c5:d5:f0: f0:c2:2f:2f:ab:da:05:5d:f9:69:60:0a:31:9d:fc:ee:84:74: 20:91:29:f3:5e:0c:da:f3:52:95:1f:30:18:09:46:33:5c:4f: 2a:df:7e:3a:64:14:9d:10:b4:a8:51:bc:cd:6f:56:e2:61:f8: 3e:40:60:4d:38:c5:bf:36:3f:88:fb:5e:88:73:73:22:9c:53: 42:30:82:92:df:41:77:6c:81:49:5c:0d:71:b7:2e:df:5f:9b: 10:6b:3a:13:f4:6e:0e:44:85:06:3d:c8:04:75:f0:d1:2e:3d: 2d:6a:b6:87:1f:e0:d7:97:2e:60:b5:f0:a0:6d:52:be:aa:57: c7:aa:42:e3:56:6e:bd:b5:36:ab:81:db:6b:ba:8f:8f:7e:c2: 51:8b:75:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa9mykDCIhyrrx3mJ+a7tJaEkNyQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE5MDAyMjA2WhcNMjUwNDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NWJkYTU4YmRjNTY3ZmNhOGRmMTllYjlkMTM3Y2M2NmY3 Yzc0NTU0OTU5ZGFmYzQ2MjRkODJiYzY0YWZlNzZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClZlY4F0L7P1CaN54zfOPRZwYBH/F1atmq2SVXgvPbQVQL qKw2c4yU9aZHXVLbYbAXl/fkT3NCQ9WeuKYkM2omDcBfPzksb9ZLS099PAO+322O vpNDVBOC8OPLE0UZ1t4CODUlE7eN/mncvuaAhICChzBph0qluuPBElEMyRDHsZBl 17WVcUZeINgKStoNyhB8qeLaSUctYRT1d2FJbC1QY1GzntuEBKsH3yfd+TyALLlo KYxNWjTzBC+G471/UAaErSBnkv2o19BW+BsiKHet6DbNfBVXeohiM2g26fXtGgGp cP+aSN9aDePZZqjsv4d2Y/nR+xKv+o8xP+rLiMG3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwdw8yuGOWgSTs/4KRhoH2am5p5wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2NzU4ZTE5LTgzZjYtNDRmZS1iMzRhLTQ2YjAyMzkwMmY0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATPCOAwDQYJKoZIhvcNAQELBQADggEBAKaSWj6a8rTUhZIqB+U3sClKKOxm /7UqbJ2NrFGUy82Bqi7S0zGyHKkHPqfvM8ykXc7UOeVpXAzuzobuaSmstkiS9kgP HZjV7hxARB7chpdu0qmXCeJi10R+zzzCIg1MbPNcsMckeMGrv8XV8PDCLy+r2gVd +WlgCjGd/O6EdCCRKfNeDNrzUpUfMBgJRjNcTyrffjpkFJ0QtKhRvM1vVuJh+D5A YE04xb82P4j7XohzcyKcU0IwgpLfQXdsgUlcDXG3Lt9fmxBrOhP0bg5EhQY9yAR1 8NEuPS1qtocf4NeXLmC18KBtUr6qV8eqQuNWbr21NquB22u6j49+wlGLdfA= -----END CERTIFICATE-----Generated at Sat Apr 5 11:18:06 2025 by rpki-client