$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/549062ae-c5b1-4db8-8029-29dac35e3892.roa File: 549062ae-c5b1-4db8-8029-29dac35e3892.roa (raw, json) Hash identifier: G75pUtL0/Z4oiOEH+X0K9zJxiVBtoTRSeYFmmBtMQ3A= Subject key identifier: 8D:98:61:77:66:A2:9D:E5:21:D5:6F:9C:B0:32:9D:92:4D:73:31:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 79143C581EAC654E4058AFAFEFA6DC81597D5464 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/549062ae-c5b1-4db8-8029-29dac35e3892.roa Signing time: Thu 03 Apr 2025 20:38:40 +0000 ROA not before: Thu 03 Apr 2025 20:38:40 +0000 ROA not after: Thu 08 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 89.254.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:14:3c:58:1e:ac:65:4e:40:58:af:af:ef:a6:dc:81:59:7d:54:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 3 20:38:40 2025 GMT Not After : May 8 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3c:32:ea:df:91:04:d4:e5:7f:55:15:c1:3e: 8e:cb:c9:c8:b1:a6:9f:ac:e2:b2:38:41:23:4e:38: 2b:64:1d:a7:a9:01:b2:d0:82:c9:fd:51:e7:00:0f: fb:25:b8:7e:9d:3b:a3:09:25:cc:93:01:09:72:68: e7:fb:f2:28:1f:86:b0:10:05:6a:d8:48:c5:7e:ea: 21:63:cd:17:c3:ee:f6:98:ec:b0:83:ad:9b:88:a9: f3:38:9d:1e:1d:41:f7:3b:bc:73:74:f3:f7:1b:e3: bc:0d:ca:f5:af:4b:4b:76:8a:1d:82:6d:e0:19:4a: 22:87:3d:6f:8b:9e:ad:08:0f:f9:7d:2c:93:f5:ef: f9:f5:70:d2:54:e0:d5:af:be:cd:e2:81:ac:fc:58: 8a:be:5f:15:51:ad:87:22:5f:cd:4d:2a:9b:fa:a5: 9a:98:77:cd:e7:ef:73:4b:00:07:c4:ee:e6:fd:e0: bd:32:c5:9c:e4:f7:ea:74:5f:f7:83:2b:62:6d:56: 28:49:99:33:eb:a8:d5:6e:b2:4f:a4:40:91:ef:fd: 89:8b:ec:d1:d4:0a:a6:74:fd:29:ae:29:71:c6:13: 2e:9a:c8:40:3e:33:a9:25:91:11:f0:10:43:9a:37: 26:71:97:74:37:48:45:3b:b6:83:1f:84:73:de:7d: 0b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:98:61:77:66:A2:9D:E5:21:D5:6F:9C:B0:32:9D:92:4D:73:31:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/549062ae-c5b1-4db8-8029-29dac35e3892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.254.32.0/19 Signature Algorithm: sha256WithRSAEncryption 73:8f:a3:4a:ad:ed:86:48:58:ae:eb:75:d5:84:cb:fc:39:fa: a8:84:fb:89:90:7a:c2:a8:e9:e8:0e:94:64:da:a5:ae:c4:33: 37:09:b5:aa:5e:4e:dd:20:e2:54:cb:6f:46:cb:de:b5:29:54: d9:c9:12:3d:a1:ce:e0:9e:72:dd:f8:96:77:ac:61:40:e0:93: 13:78:12:19:b6:87:c6:e5:8d:8a:f1:74:77:3e:fd:0e:3b:ef: 85:55:1d:aa:b6:65:1f:26:56:01:2a:28:28:8a:67:35:1e:cc: 8c:07:c6:bb:d9:d2:91:10:1f:8d:0a:de:13:d5:d9:40:0b:b6: 73:8a:9b:46:10:bb:eb:73:b7:34:8a:11:eb:83:3b:99:e7:c1: 23:a6:2d:00:e5:cf:4e:14:01:35:79:1f:76:2d:a6:b9:3a:e8: ea:53:9e:ae:24:27:e0:d7:65:06:9d:95:33:08:66:cb:a3:4e: 49:85:39:0a:81:ce:4c:37:fd:9d:bd:de:12:2f:df:45:f0:7f: 39:30:cf:15:8d:17:7d:5f:fc:69:b4:f7:69:ad:25:5e:3e:36: 0e:4d:00:08:1a:9a:be:f8:19:62:a3:c9:5f:2a:c3:0f:fc:4d: 59:06:b2:d7:4a:db:bb:97:87:6d:a3:5a:48:f1:f2:3d:e7:10: 1a:36:0c:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeRQ8WB6sZU5AWK+v76bcgVl9VGQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDAzMjAzODQwWhcNMjUwNTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZWY0ZjBkZTA5MjkzNzVlNjAyYTdlYmY3Njc5YzY0MzJm OWI0N2EwOGE2MGY0NzkxNzkyNTczYzc5MzFmMzQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNPDLq35EE1OV/VRXBPo7Lycixpp+s4rI4QSNOOCtkHaep AbLQgsn9UecAD/sluH6dO6MJJcyTAQlyaOf78igfhrAQBWrYSMV+6iFjzRfD7vaY 7LCDrZuIqfM4nR4dQfc7vHN08/cb47wNyvWvS0t2ih2CbeAZSiKHPW+Lnq0ID/l9 LJP17/n1cNJU4NWvvs3igaz8WIq+XxVRrYciX81NKpv6pZqYd83n73NLAAfE7ub9 4L0yxZzk9+p0X/eDK2JtVihJmTPrqNVusk+kQJHv/YmL7NHUCqZ0/SmuKXHGEy6a yEA+M6klkRHwEEOaNyZxl3Q3SEU7toMfhHPefQvVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjZhhd2aineUh1W+csDKdkk1zMZkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU0OTA2MmFlLWM1YjEtNGRiOC04MDI5LTI5ZGFjMzVlMzg5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVZ/iAwDQYJKoZIhvcNAQELBQADggEBAHOPo0qt7YZIWK7rddWEy/w5+qiE +4mQesKo6egOlGTapa7EMzcJtapeTt0g4lTLb0bL3rUpVNnJEj2hzuCect34lnes YUDgkxN4Ehm2h8bljYrxdHc+/Q4774VVHaq2ZR8mVgEqKCiKZzUezIwHxrvZ0pEQ H40K3hPV2UALtnOKm0YQu+tztzSKEeuDO5nnwSOmLQDlz04UATV5H3Ytprk66OpT nq4kJ+DXZQadlTMIZsujTkmFOQqBzkw3/Z293hIv30XwfzkwzxWNF31f/Gm092mt JV4+Ng5NAAgamr74GWKjyV8qww/8TVkGstdK27uXh22jWkjx8j3nEBo2DJE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:21:47 2025 by rpki-client