$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46ffd29f-2469-4e53-b48f-865865efa7e1.roa File: 46ffd29f-2469-4e53-b48f-865865efa7e1.roa (raw, json) Hash identifier: 6IKgu7jm0E8uEYVgjcPacjrLeKry0GifQSl0Eljy0wA= Subject key identifier: 8F:F8:81:9A:2D:21:12:1D:83:AC:FC:39:57:70:EB:22:6F:DA:E0:85 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4FD89E093BA9443A8436D266D824EF8A6D24AC13 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46ffd29f-2469-4e53-b48f-865865efa7e1.roa Signing time: Wed 12 Mar 2025 00:11:38 +0000 ROA not before: Wed 12 Mar 2025 00:11:38 +0000 ROA not after: Wed 16 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.124.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d8:9e:09:3b:a9:44:3a:84:36:d2:66:d8:24:ef:8a:6d:24:ac:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 00:11:38 2025 GMT Not After : Apr 16 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f5:c3:43:e5:76:63:74:8a:44:32:eb:34:34: 16:4f:1c:c7:dc:b4:d2:19:be:db:e2:54:32:f4:c6: 7e:a5:35:ad:06:80:20:c4:fc:da:c3:f4:96:57:0e: ee:29:98:d5:e8:32:90:4d:ba:f4:3b:a6:cc:b1:b7: 33:ea:14:5a:e6:bb:54:dc:2a:66:20:79:ff:78:73: cc:54:93:eb:81:fb:ae:13:96:fd:1a:63:a7:d2:9d: 01:8b:69:56:75:f8:d9:72:1e:a9:06:1e:be:dc:46: 3f:0e:31:14:2b:a7:59:8c:03:46:ef:a4:a2:36:74: b3:fd:c3:dd:4f:18:a3:94:04:6e:9f:f0:27:3d:60: 01:33:6e:50:9f:ef:66:25:96:42:80:7f:30:55:e3: fa:f3:46:95:1d:bf:68:8e:1b:ec:96:5a:e7:61:f9: 5a:36:3e:29:81:ea:68:ff:62:f2:6e:6d:08:c0:f2: 5a:67:37:e5:cd:eb:ce:02:6f:15:a4:5f:c8:2a:86: b8:03:a8:76:37:9a:68:1a:c6:95:41:32:1a:8a:90: f9:b3:78:f4:ab:db:51:73:46:fe:8b:24:c8:e1:89: cc:6e:c6:78:80:07:53:dd:55:f3:0a:c2:c0:10:1d: 26:6e:d4:7b:d0:61:c0:b4:8a:28:7f:56:4b:56:cc: 10:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F8:81:9A:2D:21:12:1D:83:AC:FC:39:57:70:EB:22:6F:DA:E0:85 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46ffd29f-2469-4e53-b48f-865865efa7e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.124.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8f:8a:16:13:9c:bc:a0:4c:1b:d8:60:9b:bc:d8:69:1d:b5:65: e5:d3:43:5f:50:03:1d:94:4d:fe:94:21:1c:17:5a:80:f0:35: 71:f3:7c:ea:07:12:74:a9:ac:7a:80:02:09:c3:1b:f6:2e:dd: 07:9f:da:4f:c5:21:03:14:06:72:dc:fa:df:8b:fa:14:7c:5d: bd:43:cd:9c:80:a7:7f:d2:7f:7d:00:81:38:e4:38:77:c1:2e: 2c:9b:2b:99:02:ef:01:e7:b7:6a:d3:03:f5:78:8b:6b:48:3e: 4a:08:e0:79:a8:0c:89:aa:5a:ef:82:bf:b5:9c:eb:a6:9b:cf: b4:f5:3c:a3:80:ef:65:ac:00:63:19:fc:59:97:33:8d:a2:80: d6:10:75:51:64:e8:85:63:e7:68:50:67:57:b8:d3:83:9b:06: dd:a7:1e:e1:2a:87:51:c8:b0:52:c9:52:41:79:46:01:44:1b: 04:47:6b:43:10:98:52:9b:4c:0a:64:db:ff:26:e4:76:0a:2d: 5b:31:ff:68:ca:e6:1b:77:dc:4e:b0:e0:f9:9d:57:4e:f7:e5: 80:7f:59:a9:75:f9:cc:68:56:d5:8e:9e:3f:2b:6b:ed:5c:57: dc:f6:88:1a:7f:2c:69:04:69:d7:c7:d5:79:1f:e6:19:f1:1b: 96:ba:11:e9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUT9ieCTupRDqENtJm2CTvim0krBMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzEyMDAxMTM4WhcNMjUwNDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzExMzM5ODlkODY0MTY2NDZjMWVkZTUwYjgzMTc3ODk2 MTYyODM2NTE4YjIyZjc1YjljNDU3MTNmOTgwMDk3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCp9cND5XZjdIpEMus0NBZPHMfctNIZvtviVDL0xn6lNa0G gCDE/NrD9JZXDu4pmNXoMpBNuvQ7psyxtzPqFFrmu1TcKmYgef94c8xUk+uB+64T lv0aY6fSnQGLaVZ1+NlyHqkGHr7cRj8OMRQrp1mMA0bvpKI2dLP9w91PGKOUBG6f 8Cc9YAEzblCf72YllkKAfzBV4/rzRpUdv2iOG+yWWudh+Vo2PimB6mj/YvJubQjA 8lpnN+XN684CbxWkX8gqhrgDqHY3mmgaxpVBMhqKkPmzePSr21FzRv6LJMjhicxu xniAB1PdVfMKwsAQHSZu1HvQYcC0iih/VktWzBARAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUj/iBmi0hEh2DrPw5V3DrIm/a4IUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2ZmZkMjlmLTI0NjktNGU1My1iNDhmLTg2NTg2NWVmYTdlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQfDANBgkqhkiG9w0BAQsFAAOCAQEAj4oWE5y8oEwb2GCbvNhpHbVl5dND X1ADHZRN/pQhHBdagPA1cfN86gcSdKmseoACCcMb9i7dB5/aT8UhAxQGctz634v6 FHxdvUPNnICnf9J/fQCBOOQ4d8EuLJsrmQLvAee3atMD9XiLa0g+SgjgeagMiapa 74K/tZzrppvPtPU8o4DvZawAYxn8WZczjaKA1hB1UWTohWPnaFBnV7jTg5sG3ace 4SqHUciwUslSQXlGAUQbBEdrQxCYUptMCmTb/ybkdgotWzH/aMrmG3fcTrDg+Z1X TvflgH9ZqXX5zGhW1Y6ePytr7VxX3PaIGn8saQRp18fVeR/mGfEblroR6Q== -----END CERTIFICATE-----Generated at Sat Apr 5 11:13:57 2025 by rpki-client