$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47451a7d-9c77-4016-a3e5-88cd310f0fdf.roa File: 47451a7d-9c77-4016-a3e5-88cd310f0fdf.roa (raw, json) Hash identifier: KJIM6xKyQksO/yi2fLt8g3awMN7dj0/A+wbddEQDXfY= Subject key identifier: 1F:D6:D0:C1:30:8D:1D:FD:22:08:C4:41:EA:A7:E0:D1:83:2B:1E:00 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6BA2A1FC3B81D20E87989BC9C4DF14A5E09C055B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47451a7d-9c77-4016-a3e5-88cd310f0fdf.roa Signing time: Wed 19 Mar 2025 00:21:56 +0000 ROA not before: Wed 19 Mar 2025 00:21:56 +0000 ROA not after: Wed 23 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 192.210.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a2:a1:fc:3b:81:d2:0e:87:98:9b:c9:c4:df:14:a5:e0:9c:05:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 19 00:21:56 2025 GMT Not After : Apr 23 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a1:66:02:89:77:54:0e:9d:36:9a:af:00:f1: fd:1e:7e:b6:1e:df:38:b2:75:86:fe:19:65:49:f8: 96:a6:e3:9c:44:10:c9:e1:77:45:69:8e:e0:85:4a: 48:d4:29:8a:73:66:91:b0:1d:52:9c:cc:6f:40:38: e0:c2:0c:2b:c7:4b:3f:e5:69:64:ef:f6:89:71:d6: f2:a9:e7:23:f1:93:59:5c:b6:36:8d:ac:31:75:53: 18:0b:95:5a:50:bf:c3:da:d3:f9:e4:02:37:d3:76: dc:e5:76:c1:a4:79:0a:cc:39:68:af:55:81:c4:d8: b4:26:bb:ed:01:36:bb:2a:df:f7:c7:93:03:0a:f1: 82:42:0c:32:fd:91:42:7d:6a:3c:39:20:86:e8:b5: 60:ca:16:be:c9:07:7f:9d:a7:55:08:88:bd:7e:25: 34:ab:fa:ea:74:4d:99:b9:2e:db:24:19:d7:ba:d5: cc:8a:eb:8a:36:8c:3d:2a:88:e3:f7:d5:41:2f:86: 12:a6:0a:69:78:9d:2d:1c:fa:05:b7:8b:56:fc:41: 95:ba:3e:8b:bf:6e:f7:74:a6:5e:05:1e:51:6b:63: 67:76:0c:c7:23:37:b2:9d:bb:7f:a5:93:0e:86:ff: af:3a:a6:7a:6a:e6:1a:7e:25:d4:38:bc:7b:f0:74: ab:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D6:D0:C1:30:8D:1D:FD:22:08:C4:41:EA:A7:E0:D1:83:2B:1E:00 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47451a7d-9c77-4016-a3e5-88cd310f0fdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.210.48.0/20 Signature Algorithm: sha256WithRSAEncryption 2e:6b:02:39:4f:41:50:3d:08:b5:5d:02:0f:5a:a2:8e:38:f9: 6f:ff:94:df:86:4a:0a:b8:1d:99:68:df:8b:7e:48:bb:0b:75: 43:d6:dd:44:6e:cd:27:6f:17:66:ec:40:2f:06:9e:f2:bc:57: 7a:08:37:75:eb:63:a1:a2:83:3b:84:e9:65:19:7c:95:4c:b6: 8f:2b:9c:b2:89:e3:3a:14:58:d5:79:7a:b5:69:2d:09:03:3a: ac:e6:93:8c:8f:34:45:ec:3a:1a:d9:60:c7:1f:c9:ea:dd:69: b7:2d:74:0e:67:1b:25:a4:be:19:0e:47:d9:49:97:0f:54:2f: 7f:a5:18:be:27:0c:1f:0a:0d:c1:5a:12:8f:a7:69:5b:28:ec: 1e:9b:6c:c1:60:9b:86:e0:0b:ed:a9:95:b2:21:4c:35:20:65: d4:15:96:01:65:d2:6a:4d:65:97:de:df:80:5a:ee:b3:92:bc: c3:1b:b8:13:c8:01:6b:64:f8:86:2e:08:79:00:9b:69:70:50: ac:23:69:5e:fe:58:c8:77:75:0e:96:d5:de:a6:8c:64:19:e6: 7f:29:9b:dd:48:c3:f1:02:c0:dc:9a:c0:a0:22:34:d4:84:f3: 85:98:a0:2b:ad:bf:4b:4d:be:09:a6:f6:aa:b7:33:1e:21:ad: 7c:83:a7:62 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa6Kh/DuB0g6HmJvJxN8UpeCcBVswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE5MDAyMTU2WhcNMjUwNDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YWYzOWU1NjM0NjM5NjdkZTliNTcwM2EwN2QxY2UyMjY4 M2NhYjRkZjQ5MDQ2NDY0MDliZmFhZTgwYjRjZjRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+oWYCiXdUDp02mq8A8f0efrYe3ziydYb+GWVJ+Jam45xE EMnhd0VpjuCFSkjUKYpzZpGwHVKczG9AOODCDCvHSz/laWTv9olx1vKp5yPxk1lc tjaNrDF1UxgLlVpQv8Pa0/nkAjfTdtzldsGkeQrMOWivVYHE2LQmu+0BNrsq3/fH kwMK8YJCDDL9kUJ9ajw5IIbotWDKFr7JB3+dp1UIiL1+JTSr+up0TZm5LtskGde6 1cyK64o2jD0qiOP31UEvhhKmCml4nS0c+gW3i1b8QZW6Pou/bvd0pl4FHlFrY2d2 DMcjN7Kdu3+lkw6G/686pnpq5hp+JdQ4vHvwdKvxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUH9bQwTCNHf0iCMRB6qfg0YMrHgAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ3NDUxYTdkLTljNzctNDAxNi1hM2U1LTg4Y2QzMTBmMGZkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATA0jAwDQYJKoZIhvcNAQELBQADggEBAC5rAjlPQVA9CLVdAg9aoo44+W// lN+GSgq4HZlo34t+SLsLdUPW3URuzSdvF2bsQC8GnvK8V3oIN3XrY6GigzuE6WUZ fJVMto8rnLKJ4zoUWNV5erVpLQkDOqzmk4yPNEXsOhrZYMcfyerdabctdA5nGyWk vhkOR9lJlw9UL3+lGL4nDB8KDcFaEo+naVso7B6bbMFgm4bgC+2plbIhTDUgZdQV lgFl0mpNZZfe34Ba7rOSvMMbuBPIAWtk+IYuCHkAm2lwUKwjaV7+WMh3dQ6W1d6m jGQZ5n8pm91Iw/ECwNyawKAiNNSE84WYoCutv0tNvgmm9qq3Mx4hrXyDp2I= -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:47 2025 by rpki-client