$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ef98fd6-26e9-4572-9293-a4d286b28ba6.roa File: 6ef98fd6-26e9-4572-9293-a4d286b28ba6.roa (raw, json) Hash identifier: YmpS3MfUmfWS2Evuymn655MuuqKwWvEKDL9jCB7IivQ= Subject key identifier: 51:26:C8:C0:4C:C2:7E:8A:EF:49:B3:B3:F7:4B:64:AD:7C:DD:91:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 49316D4D60846521D67711CD7D5A98EAB0A4EDB1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ef98fd6-26e9-4572-9293-a4d286b28ba6.roa Signing time: Mon 24 Mar 2025 15:20:17 +0000 ROA not before: Mon 24 Mar 2025 15:20:17 +0000 ROA not after: Mon 28 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 115.177.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:31:6d:4d:60:84:65:21:d6:77:11:cd:7d:5a:98:ea:b0:a4:ed:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 24 15:20:17 2025 GMT Not After : Apr 28 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6c:b1:9b:ad:f0:0b:03:b9:7d:41:46:8a:f8: da:b0:cf:8f:4f:af:2a:42:66:2d:b1:89:19:b3:92: e0:92:aa:80:81:db:f4:a7:50:ec:77:51:7a:93:e9: fd:73:ab:91:88:e2:89:84:f1:df:54:85:ad:77:ef: 88:06:62:65:a8:3c:66:af:7d:ea:2b:7d:8d:e8:50: a4:22:ce:17:a7:90:10:0a:b3:78:46:aa:37:20:18: df:a3:00:d6:5a:01:48:33:48:d8:50:e1:50:4a:73: 36:1c:47:b5:bb:ef:ac:d9:72:3c:a1:a2:0c:48:a8: 65:00:4e:15:f5:eb:c6:e6:23:0c:c6:44:c3:6b:86: 9d:87:44:ae:28:17:eb:c7:e9:13:56:27:8d:05:7e: 79:6d:c8:45:00:2a:0f:60:dd:22:07:d8:1b:dd:a3: 7f:f2:4b:94:fd:c7:15:ea:d6:63:73:31:c0:1b:71: 27:6c:09:af:6f:59:07:41:e0:db:22:09:d6:25:25: 39:fa:94:d2:0d:73:56:26:24:19:dc:ee:e2:12:86: f7:39:a4:00:71:c8:28:73:73:26:54:f3:78:0a:26: f2:0f:ed:b7:37:4d:b1:8f:f3:21:dd:5a:d2:4b:db: 7f:e5:26:e9:b0:b8:47:11:c4:07:97:61:d3:cd:34: e9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:26:C8:C0:4C:C2:7E:8A:EF:49:B3:B3:F7:4B:64:AD:7C:DD:91:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ef98fd6-26e9-4572-9293-a4d286b28ba6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.177.0.0/17 Signature Algorithm: sha256WithRSAEncryption 29:4c:f5:b0:4f:5b:1e:cf:66:7e:bb:67:9e:75:1e:a8:e3:2f: f6:d5:ac:74:9d:4c:07:26:54:f5:24:78:9c:c5:c4:3f:16:6d: b4:0f:e2:1c:ea:1a:12:5e:45:ca:c2:c8:e2:a6:e1:bb:bf:b1: ac:d6:ea:1f:e6:4d:c3:1f:26:88:47:8b:b2:c8:fb:2e:82:b8: 4b:89:e8:f0:5d:f7:56:d9:da:ea:a5:e7:16:71:7a:f4:55:ab: eb:f1:ef:eb:71:d8:2f:c2:31:64:9b:52:3a:4f:78:17:12:ba: 21:36:1e:8c:b7:7d:55:a8:55:56:31:c9:36:1b:f8:50:bc:69: c1:84:ad:24:ea:8d:2b:f5:c9:f2:8c:d2:7f:32:68:c2:fb:3f: f3:dd:f7:ba:10:ff:10:f4:42:db:92:13:85:ec:c9:05:e0:0b: d2:76:9d:ed:90:da:a7:fb:d8:26:a1:90:a1:96:b0:c8:3e:b5: 17:e6:dc:d1:06:cf:6d:24:aa:c7:3f:c3:87:da:21:99:07:19: ab:88:b6:18:46:0f:f2:75:0e:65:64:fb:e8:20:d6:30:87:bd: e5:f2:a7:c7:23:aa:09:85:c6:8f:46:06:37:42:97:8c:41:38: ad:6a:1f:67:de:6e:6b:06:92:3f:cb:60:a5:ae:c0:31:0b:39: 86:ea:59:4f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSTFtTWCEZSHWdxHNfVqY6rCk7bEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI0MTUyMDE3WhcNMjUwNDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NWUwNmU1ZWExMGQ1ZGZlZjUwMjFjZDg0NDRiNjdmNDFk Y2QyMDU2NDE2YjVlM2YyMGJjNjI0YzQ1NzQ2OTM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFbLGbrfALA7l9QUaK+Nqwz49PrypCZi2xiRmzkuCSqoCB 2/SnUOx3UXqT6f1zq5GI4omE8d9Uha1374gGYmWoPGavfeorfY3oUKQizhenkBAK s3hGqjcgGN+jANZaAUgzSNhQ4VBKczYcR7W776zZcjyhogxIqGUAThX168bmIwzG RMNrhp2HRK4oF+vH6RNWJ40FfnltyEUAKg9g3SIH2Bvdo3/yS5T9xxXq1mNzMcAb cSdsCa9vWQdB4NsiCdYlJTn6lNINc1YmJBnc7uIShvc5pABxyChzcyZU83gKJvIP 7bc3TbGP8yHdWtJL23/lJumwuEcRxAeXYdPNNOlvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUSbIwEzCforvSbOz90tkrXzdkbgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZlZjk4ZmQ2LTI2ZTktNDU3Mi05MjkzLWE0ZDI4NmIyOGJhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdzsQAwDQYJKoZIhvcNAQELBQADggEBAClM9bBPWx7PZn67Z551HqjjL/bV rHSdTAcmVPUkeJzFxD8WbbQP4hzqGhJeRcrCyOKm4bu/sazW6h/mTcMfJohHi7LI +y6CuEuJ6PBd91bZ2uql5xZxevRVq+vx7+tx2C/CMWSbUjpPeBcSuiE2Hoy3fVWo VVYxyTYb+FC8acGErSTqjSv1yfKM0n8yaML7P/Pd97oQ/xD0QtuSE4XsyQXgC9J2 ne2Q2qf72CahkKGWsMg+tRfm3NEGz20kqsc/w4faIZkHGauIthhGD/J1DmVk++gg 1jCHveXyp8cjqgmFxo9GBjdCl4xBOK1qH2febmsGkj/LYKWuwDELOYbqWU8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:46 2025 by rpki-client