$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47f76ec9-1410-4f5f-930d-b1663472dcc6.roa File: 47f76ec9-1410-4f5f-930d-b1663472dcc6.roa (raw, json) Hash identifier: F4gO61QT9TGeeDDvXuuRAuTJvxBUlTcQ7NuY9kxJ53w= Subject key identifier: DF:29:E1:26:15:D6:89:8A:B9:04:14:DD:A4:D8:D3:7F:73:12:9E:E4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F9CAE932A63327BFCBD8E1BEA42B5B39E73448B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47f76ec9-1410-4f5f-930d-b1663472dcc6.roa Signing time: Mon 31 Mar 2025 15:31:51 +0000 ROA not before: Mon 31 Mar 2025 15:31:51 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.214.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:9c:ae:93:2a:63:32:7b:fc:bd:8e:1b:ea:42:b5:b3:9e:73:44:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 31 15:31:51 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:59:d1:b1:93:77:e1:b6:46:47:d6:1e:58:67: b5:dd:bc:ec:af:70:48:e0:b2:94:59:8f:93:36:3e: e5:a5:be:b5:40:e8:7e:af:88:b4:2a:cc:67:c3:2d: 36:b5:9c:d0:0f:8e:1e:b2:01:cf:b5:06:cb:a6:a5: b4:77:5c:09:f2:72:7d:63:2d:31:8e:91:51:71:79: 37:98:e1:60:ba:d8:7c:3c:65:9c:c3:54:4b:bc:ee: 0a:c9:99:6e:cc:29:9b:66:51:55:fb:cd:c2:f8:de: d0:1d:63:3b:29:e8:21:95:73:bb:40:36:00:d6:15: 11:80:fe:5c:2d:be:e5:84:1e:c7:d4:ac:f2:f3:e0: 3b:bc:82:b6:a2:6f:a0:da:67:dd:bc:9c:b1:69:69: 86:90:83:68:ac:a6:3c:66:39:41:6a:04:d1:6f:9e: 03:33:56:7f:98:2b:89:42:42:bb:35:ef:f1:8e:d0: 89:43:c1:4c:c0:66:a0:af:65:f3:19:1d:99:9f:cf: c6:df:c0:a1:e5:29:7b:be:37:c4:08:4d:76:6f:b4: 49:e3:48:57:97:aa:08:87:f3:35:e2:75:f8:70:dc: 70:cc:51:a6:68:52:59:9d:6f:39:d2:85:61:44:a4: 39:61:03:0d:76:d4:8c:c7:42:2a:6a:0f:26:97:e7: ff:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:29:E1:26:15:D6:89:8A:B9:04:14:DD:A4:D8:D3:7F:73:12:9E:E4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47f76ec9-1410-4f5f-930d-b1663472dcc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.214.0.0/16 Signature Algorithm: sha256WithRSAEncryption b2:89:7b:11:af:43:63:b9:3f:fb:e4:59:b7:25:65:48:2a:3b: 85:f8:16:a7:ec:35:37:43:c5:f0:fc:8e:2f:96:c8:34:8c:9c: 91:da:7f:4b:08:de:99:16:e2:62:bd:b4:39:d5:84:f5:2c:45: 0e:50:19:d7:ad:b0:2f:0b:b7:3f:32:e6:b4:37:3e:33:bf:82: 1f:80:82:3c:7f:7f:55:c8:00:d2:f5:c5:3d:10:72:7f:fd:17: 36:db:74:9a:6b:62:1a:5a:72:f4:a7:53:25:4d:2e:96:5b:69: 6f:a8:4d:d4:e2:57:04:84:d7:24:e1:89:90:78:eb:a4:72:d7: 02:b8:6c:3d:6e:94:03:dc:cc:86:4b:5b:9b:c1:ad:82:d1:dd: e5:0e:ea:94:71:39:bd:a6:87:9c:91:15:be:1b:cf:3d:db:da: d5:c0:d6:78:f3:ba:f9:df:fa:dd:57:a7:ba:16:c0:ba:f5:c6: c2:fe:49:d6:49:4d:af:b7:86:e2:de:bc:07:0c:39:f1:1a:63: a1:40:da:d9:aa:20:24:3e:d5:40:75:92:00:62:ea:32:c2:42: 1a:e7:b9:7a:e2:d2:34:07:b1:c9:23:25:cf:e3:c7:18:1d:af: ed:cd:72:ae:45:a0:75:63:34:03:e4:4f:ea:f5:72:e3:2c:eb: cf:a1:8d:4d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUD5yukypjMnv8vY4b6kK1s55zRIswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTUzMTUxWhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkY2M4MWNhZGU3OWU5N2M5MzBlZGYxNGFmMjYyNTE2ZjA4 ZGZiMTVlOTljYzhkODFiODYzN2Q2NjQwMThmZmUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTWdGxk3fhtkZH1h5YZ7XdvOyvcEjgspRZj5M2PuWlvrVA 6H6viLQqzGfDLTa1nNAPjh6yAc+1BsumpbR3XAnycn1jLTGOkVFxeTeY4WC62Hw8 ZZzDVEu87grJmW7MKZtmUVX7zcL43tAdYzsp6CGVc7tANgDWFRGA/lwtvuWEHsfU rPLz4Du8graib6DaZ928nLFpaYaQg2ispjxmOUFqBNFvngMzVn+YK4lCQrs17/GO 0IlDwUzAZqCvZfMZHZmfz8bfwKHlKXu+N8QITXZvtEnjSFeXqgiH8zXidfhw3HDM UaZoUlmdbznShWFEpDlhAw121IzHQipqDyaX5/8XAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU3ynhJhXWiYq5BBTdpNjTf3MSnuQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ3Zjc2ZWM5LTE0MTAtNGY1Zi05MzBkLWIxNjYzNDcyZGNjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAo1jANBgkqhkiG9w0BAQsFAAOCAQEAsol7Ea9DY7k/++RZtyVlSCo7hfgW p+w1N0PF8PyOL5bINIyckdp/SwjemRbiYr20OdWE9SxFDlAZ162wLwu3PzLmtDc+ M7+CH4CCPH9/VcgA0vXFPRByf/0XNtt0mmtiGlpy9KdTJU0ulltpb6hN1OJXBITX JOGJkHjrpHLXArhsPW6UA9zMhktbm8GtgtHd5Q7qlHE5vaaHnJEVvhvPPdva1cDW ePO6+d/63VenuhbAuvXGwv5J1klNr7eG4t68Bww58RpjoUDa2aogJD7VQHWSAGLq MsJCGue5euLSNAexySMlz+PHGB2v7c1yrkWgdWM0A+RP6vVy4yzrz6GNTQ== -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:42 2025 by rpki-client