$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5cf6d6da-60a8-4b7b-88a8-0efcf205a596.roa File: 5cf6d6da-60a8-4b7b-88a8-0efcf205a596.roa (raw, json) Hash identifier: 97sg3t9WxbxLpXNJzec8hwcgki1DopduskcYdu5Kr0g= Subject key identifier: 08:40:40:0B:92:33:DB:62:68:E6:42:BD:88:9D:66:83:BE:AC:5E:00 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0AF723F1F5F72E05AEBF44076EB80A2623AC9195 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5cf6d6da-60a8-4b7b-88a8-0efcf205a596.roa Signing time: Mon 31 Mar 2025 15:31:59 +0000 ROA not before: Mon 31 Mar 2025 15:31:59 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.38.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f7:23:f1:f5:f7:2e:05:ae:bf:44:07:6e:b8:0a:26:23:ac:91:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 31 15:31:59 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7d:47:2e:ad:71:83:b9:c5:36:a9:27:29:b0: 78:76:fe:9f:48:a0:16:b7:5a:09:56:82:a1:7f:9d: 74:a1:06:54:7b:11:60:f5:5e:56:64:b8:76:53:56: 8f:2d:ea:6f:2c:89:dc:10:4e:07:3a:1d:9e:fa:38: 5d:36:a7:c6:b1:6a:2c:b6:12:45:12:c0:20:0d:c9: 70:6a:e9:2d:ba:89:13:6b:af:54:fe:3d:0a:9b:78: 0b:d2:36:c5:dd:57:de:b3:c3:e6:6a:ea:e6:f5:ed: 4a:f9:b7:12:74:3c:1d:65:69:bf:a5:85:ca:00:45: a9:d7:6d:38:2a:84:e7:23:13:0b:2d:69:6f:3e:35: ad:88:24:c5:ac:03:3f:d4:96:64:70:b8:66:35:7f: d5:4a:a2:cb:b3:a2:06:04:36:b7:c9:c9:30:11:48: d3:bd:c8:55:6a:12:2a:59:73:ae:c8:a9:36:19:11: d7:94:6f:27:a1:cb:92:b1:9e:c1:59:66:95:76:6d: 78:3b:1d:fd:35:36:ce:59:5e:f0:a4:a0:b5:3a:f3: 63:a8:82:92:ab:e8:6b:d4:54:1a:32:fd:b4:06:9b: ac:46:e1:b8:87:87:ab:e0:56:f4:92:74:0f:ff:43: 6a:00:1b:26:cb:a8:66:03:2c:d9:a6:2f:ed:0e:09: 47:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:40:40:0B:92:33:DB:62:68:E6:42:BD:88:9D:66:83:BE:AC:5E:00 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5cf6d6da-60a8-4b7b-88a8-0efcf205a596.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.38.0.0/16 Signature Algorithm: sha256WithRSAEncryption a8:20:ed:58:df:6c:f2:51:01:fb:3e:aa:d7:7b:b0:f6:31:bf: 0f:65:63:4a:41:d0:e2:41:23:85:89:59:46:a8:33:dc:6e:d6: 34:ea:ea:81:1c:10:7c:a5:ed:74:ad:8a:24:c6:52:06:b2:66: e4:2d:33:8f:15:af:b6:83:ca:d6:d5:73:d3:b9:9b:b0:3b:bd: 4a:f0:a2:28:f2:c0:84:80:9e:87:15:bc:c0:ea:f5:98:a3:bc: 9b:8c:cc:0a:13:3f:6f:7f:16:24:c7:aa:27:0f:e3:3a:7e:4c: 6e:aa:ba:37:e9:60:2d:39:88:5f:2d:ea:35:23:72:a6:14:87: 36:d5:8c:b3:31:fe:fd:2b:28:3e:c4:4e:a4:97:1e:a0:b8:3a: 0c:cf:8b:00:d9:b5:15:52:b4:d3:20:a9:ed:d8:c0:e4:f3:2a: 77:b9:39:6c:37:d0:06:37:a7:79:a4:73:bf:20:4c:a8:56:bb: 90:84:dd:6c:47:32:24:a0:7b:32:d1:c4:c0:e7:72:6f:2f:40: 6c:92:5b:7e:e4:6f:91:bb:0c:73:87:fb:0a:6e:af:50:0f:08: 56:ec:45:f6:55:7e:17:4a:42:a9:45:0b:55:80:e5:e3:01:9d: 9e:b8:54:b8:5e:2d:eb:a2:95:70:02:d6:e6:79:36:42:6e:fd: f9:21:d6:9e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCvcj8fX3LgWuv0QHbrgKJiOskZUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTUzMTU5WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MThlNzM1NzE3YWFkMzk2MjQwOWFiNzNlZTA3OGU1YTU4 OWNhYTgxMDJhYTliMzRhMWYyMjI5ZTRlMDY3MmE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDffUcurXGDucU2qScpsHh2/p9IoBa3WglWgqF/nXShBlR7 EWD1XlZkuHZTVo8t6m8sidwQTgc6HZ76OF02p8axaiy2EkUSwCANyXBq6S26iRNr r1T+PQqbeAvSNsXdV96zw+Zq6ub17Ur5txJ0PB1lab+lhcoARanXbTgqhOcjEwst aW8+Na2IJMWsAz/UlmRwuGY1f9VKosuzogYENrfJyTARSNO9yFVqEipZc67IqTYZ EdeUbyehy5KxnsFZZpV2bXg7Hf01Ns5ZXvCkoLU682OogpKr6GvUVBoy/bQGm6xG 4biHh6vgVvSSdA//Q2oAGybLqGYDLNmmL+0OCUezAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUCEBAC5Iz22Jo5kK9iJ1mg76sXgAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVjZjZkNmRhLTYwYTgtNGI3Yi04OGE4LTBlZmNmMjA1YTU5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAoJjANBgkqhkiG9w0BAQsFAAOCAQEAqCDtWN9s8lEB+z6q13uw9jG/D2Vj SkHQ4kEjhYlZRqgz3G7WNOrqgRwQfKXtdK2KJMZSBrJm5C0zjxWvtoPK1tVz07mb sDu9SvCiKPLAhICehxW8wOr1mKO8m4zMChM/b38WJMeqJw/jOn5Mbqq6N+lgLTmI Xy3qNSNyphSHNtWMszH+/SsoPsROpJceoLg6DM+LANm1FVK00yCp7djA5PMqd7k5 bDfQBjeneaRzvyBMqFa7kITdbEcyJKB7MtHEwOdyby9AbJJbfuRvkbsMc4f7Cm6v UA8IVuxF9lV+F0pCqUULVYDl4wGdnrhUuF4t66KVcALW5nk2Qm79+SHWng== -----END CERTIFICATE-----Generated at Sat Apr 5 11:12:53 2025 by rpki-client