$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69e51013-5a25-4eee-a0a3-d6dbe81cf91f.roa File: 69e51013-5a25-4eee-a0a3-d6dbe81cf91f.roa (raw, json) Hash identifier: UKw7T+ougIs9T2FH404WWzsBFG0zurkkcHc7wgJkzX8= Subject key identifier: 69:D3:A9:0B:D5:DF:76:19:3A:F7:12:73:01:DF:90:60:EB:17:A5:23 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A137EBB2617A361AF50612769E6697A2C05CE2A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69e51013-5a25-4eee-a0a3-d6dbe81cf91f.roa Signing time: Mon 31 Mar 2025 15:41:10 +0000 ROA not before: Mon 31 Mar 2025 15:41:10 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 45.33.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:13:7e:bb:26:17:a3:61:af:50:61:27:69:e6:69:7a:2c:05:ce:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 31 15:41:10 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:88:e4:c9:46:4e:c8:1a:fd:1e:fb:24:9e: c4:ec:c5:55:39:ec:69:4e:52:d4:f7:90:06:73:1d: 0c:6d:e2:7c:31:23:04:d9:e3:fa:53:e3:a6:64:27: 5f:64:c1:dd:1f:de:f8:45:e5:fb:a6:18:4e:25:71: 40:4d:ef:5c:2c:91:f6:ce:e8:77:31:80:94:d6:e3: bd:6c:c1:62:0f:55:63:4c:f4:b5:43:ca:5c:16:b0: bf:6b:a2:03:ed:7f:b4:35:ab:b9:86:72:6d:0b:49: 4d:1f:15:61:6b:03:6a:4f:7d:20:e2:62:8d:80:f3: a6:6e:36:5d:c9:eb:09:0f:15:6e:55:a4:10:7a:8e: 0d:f5:51:7f:56:20:f3:b0:c5:56:6a:76:e4:7d:58: d3:1a:13:a0:39:eb:7c:b3:03:98:9f:07:bc:9e:fe: 2e:5a:02:e8:11:06:ae:75:fd:91:ae:c5:d8:b7:38: 18:0c:31:20:d9:ee:59:a3:72:9b:bf:7e:8e:00:eb: 51:67:db:e6:a9:6c:7f:b2:a6:51:62:a9:bd:af:83: 97:79:6c:1f:22:80:58:08:6e:65:50:4d:70:9c:34: c5:c2:bb:10:2f:7f:fa:1e:e6:50:ea:93:07:1f:e7: 60:b5:e7:f6:c3:ad:39:68:b4:ae:e5:2f:81:22:26: ee:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D3:A9:0B:D5:DF:76:19:3A:F7:12:73:01:DF:90:60:EB:17:A5:23 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69e51013-5a25-4eee-a0a3-d6dbe81cf91f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.33.160.0/19 Signature Algorithm: sha256WithRSAEncryption 9d:97:e7:9c:24:2d:fd:ed:02:a4:8d:53:5b:3d:24:83:39:c2: 74:08:e7:7d:8c:69:5f:f9:e1:b2:01:15:2e:09:2f:46:a4:a4: 8c:a7:6b:df:21:ec:e5:03:8d:65:6c:7f:96:7c:fd:71:d9:17: dc:51:80:aa:9a:3c:ae:47:b5:b5:c6:f9:71:ec:40:90:e2:a8: 19:be:83:a0:cc:c3:2c:61:e9:a0:98:fa:ae:c4:dc:08:8e:7a: 07:c4:86:b3:2b:e3:c1:01:3a:e2:b4:32:3e:3a:19:1f:0a:09: a6:a1:19:d6:3b:fd:bd:5d:14:2a:2d:f2:05:9a:1e:cc:ce:ad: 2b:ac:79:44:67:ff:79:7b:51:1b:4f:3f:57:8c:4c:2c:79:de: 52:14:23:9c:6d:bf:9f:56:5d:32:1e:07:0b:65:2e:63:e8:f0: 5f:35:1c:c9:1d:22:98:7b:44:7a:58:f6:bc:ad:2c:2b:0c:a9: 90:1f:87:43:13:d3:ce:d5:2d:3d:77:dc:93:d4:f7:61:f3:4a: aa:aa:aa:ad:fc:63:7c:f3:e4:95:37:b4:31:c1:d6:29:82:74: 77:7e:c9:10:78:60:8d:b9:8e:8d:24:85:e8:b3:2f:a0:7c:b6: c0:4b:a4:52:64:7c:36:87:38:8c:a9:84:f7:8d:a1:d4:04:74: 01:a6:2e:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUShN+uyYXo2GvUGEnaeZpeiwFziowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTU0MTEwWhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyY2NiM2MwYWU0MTc3OWM3YjQ1Y2MyMmI2ZGZlNjM3OGRk ZWVmMTIwOGRlMDUzMzVmNjIxNDBiNDFlYmY4MTQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA/IjkyUZOyBr9HvsknsTsxVU57GlOUtT3kAZzHQxt4nwx IwTZ4/pT46ZkJ19kwd0f3vhF5fumGE4lcUBN71wskfbO6HcxgJTW471swWIPVWNM 9LVDylwWsL9rogPtf7Q1q7mGcm0LSU0fFWFrA2pPfSDiYo2A86ZuNl3J6wkPFW5V pBB6jg31UX9WIPOwxVZqduR9WNMaE6A563yzA5ifB7ye/i5aAugRBq51/ZGuxdi3 OBgMMSDZ7lmjcpu/fo4A61Fn2+apbH+yplFiqb2vg5d5bB8igFgIbmVQTXCcNMXC uxAvf/oe5lDqkwcf52C15/bDrTlotK7lL4EiJu6HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUadOpC9Xfdhk69xJzAd+QYOsXpSMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY5ZTUxMDEzLTVhMjUtNGVlZS1hMGEzLWQ2ZGJlODFjZjkxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUtIaAwDQYJKoZIhvcNAQELBQADggEBAJ2X55wkLf3tAqSNU1s9JIM5wnQI 532MaV/54bIBFS4JL0akpIyna98h7OUDjWVsf5Z8/XHZF9xRgKqaPK5HtbXG+XHs QJDiqBm+g6DMwyxh6aCY+q7E3AiOegfEhrMr48EBOuK0Mj46GR8KCaahGdY7/b1d FCot8gWaHszOrSuseURn/3l7URtPP1eMTCx53lIUI5xtv59WXTIeBwtlLmPo8F81 HMkdIph7RHpY9rytLCsMqZAfh0MT087VLT133JPU92HzSqqqqq38Y3zz5JU3tDHB 1imCdHd+yRB4YI25jo0kheizL6B8tsBLpFJkfDaHOIyphPeNodQEdAGmLhw= -----END CERTIFICATE-----Generated at Sat Apr 5 13:22:48 2025 by rpki-client