$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/725de74a-ea25-4864-a260-52460f0b56de.roa File: 725de74a-ea25-4864-a260-52460f0b56de.roa (raw, json) Hash identifier: j4shayxhCfCflqwDonjCHmBNGFnkIzd5LNy53vGrTo4= Subject key identifier: 24:51:62:D2:17:3A:56:E8:CC:2D:EB:CE:B8:8F:6F:8D:EB:57:52:3F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F63D18BF4E718565EE8612E40A4EF2D62870B0B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/725de74a-ea25-4864-a260-52460f0b56de.roa Signing time: Wed 12 Mar 2025 00:22:07 +0000 ROA not before: Wed 12 Mar 2025 00:22:07 +0000 ROA not after: Wed 16 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 192.43.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:63:d1:8b:f4:e7:18:56:5e:e8:61:2e:40:a4:ef:2d:62:87:0b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 00:22:07 2025 GMT Not After : Apr 16 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:c1:b3:27:fd:94:a0:18:ba:ed:e4:43:b0: 6c:51:3e:26:13:de:46:70:7d:3b:ca:56:84:7d:00: d3:c5:c2:c2:da:9e:1c:6b:63:6d:52:b7:27:8b:91: c1:12:99:6d:13:4a:1b:35:9a:2b:ae:b8:24:22:7b: e8:62:ca:6c:64:a2:3d:58:08:c9:eb:54:4a:72:af: 3d:a8:b6:4f:2b:b8:bb:5f:f9:ae:ec:7d:40:a9:54: d8:fe:ca:43:6c:03:60:44:19:9b:fa:7c:be:41:db: 17:05:18:67:7e:c3:11:17:15:f8:24:fa:81:d8:60: e4:2c:e1:5c:b9:5e:f1:fa:24:b1:38:07:7c:4f:5f: fd:a8:49:2e:9e:45:b1:fc:25:74:09:f2:b3:b3:31: a8:19:44:d6:0e:e6:25:d1:16:33:64:5e:98:84:ae: 99:45:75:23:bf:ec:11:48:28:12:14:4f:fc:15:77: d7:7f:ae:4b:5d:df:17:32:9e:4d:2a:60:22:1f:d1: bd:4f:08:19:b4:c6:a0:87:8b:d1:a3:9a:51:a5:e6: 56:4c:f8:04:91:0e:0a:d2:09:85:9a:30:43:13:d6: 75:ee:6d:03:c2:e0:01:4b:ee:98:31:2b:80:4e:ca: ac:a5:2a:65:7b:28:59:66:b6:99:23:dc:91:29:94: f4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:51:62:D2:17:3A:56:E8:CC:2D:EB:CE:B8:8F:6F:8D:EB:57:52:3F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/725de74a-ea25-4864-a260-52460f0b56de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.43.175.0/24 Signature Algorithm: sha256WithRSAEncryption 10:51:3a:81:7f:90:5e:9b:28:0a:1c:7e:34:c9:a4:a7:0e:e1: a0:90:e3:7b:70:a1:31:c4:b7:86:35:7b:01:2b:3e:19:1d:c3: 72:02:e1:c8:e4:b2:57:cc:e2:c2:c4:59:76:98:70:65:f8:1c: 58:de:73:4a:a3:64:de:72:b7:2d:b4:49:f0:5f:b3:5a:29:d6: fc:2e:34:03:58:4c:1b:cc:f4:1b:db:eb:b3:ae:b1:07:c8:06: 04:46:e7:53:8f:6c:51:1f:0b:bc:07:e5:b4:09:85:35:b9:f8: ab:b1:f9:22:0c:00:d5:e9:fa:9b:52:78:51:f3:4c:4c:f4:d2: b5:e6:d9:af:5c:b6:74:9b:22:e7:c8:53:97:71:43:ea:4a:f3: ce:17:bd:43:10:5d:0e:b5:d8:09:dd:a7:de:37:bd:c4:cb:92: f3:ce:38:fe:1e:0a:a2:0d:27:e9:1a:fb:79:ed:8f:54:64:de: ed:72:a5:7a:f5:25:c7:4b:0c:01:97:63:86:38:a5:53:d7:3d: fb:ea:6f:a1:77:31:3a:da:35:11:c6:ce:12:76:9d:f9:c5:f2: 74:32:a2:5c:38:ba:ef:4d:25:06:21:11:1e:03:ff:3d:19:d3: 12:85:ae:b1:80:e5:e9:7a:91:53:6e:c0:f6:5d:3b:2c:70:42: 79:0f:89:97 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH2PRi/TnGFZe6GEuQKTvLWKHCwswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzEyMDAyMjA3WhcNMjUwNDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjQxMTU4ZDFlNTc4MDlmYTRiMDEyZGFmODRkMjVlMTA0 YmUzYTZhOTUzYmQyMGVhYmE1OWU2MWM4MWI3MWE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCztMGzJ/2UoBi67eRDsGxRPiYT3kZwfTvKVoR9ANPFwsLa nhxrY21StyeLkcESmW0TShs1miuuuCQie+hiymxkoj1YCMnrVEpyrz2otk8ruLtf +a7sfUCpVNj+ykNsA2BEGZv6fL5B2xcFGGd+wxEXFfgk+oHYYOQs4Vy5XvH6JLE4 B3xPX/2oSS6eRbH8JXQJ8rOzMagZRNYO5iXRFjNkXpiErplFdSO/7BFIKBIUT/wV d9d/rktd3xcynk0qYCIf0b1PCBm0xqCHi9GjmlGl5lZM+ASRDgrSCYWaMEMT1nXu bQPC4AFL7pgxK4BOyqylKmV7KFlmtpkj3JEplPQdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJFFi0hc6VujMLevOuI9vjetXUj8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcyNWRlNzRhLWVhMjUtNDg2NC1hMjYwLTUyNDYwZjBiNTZkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADAK68wDQYJKoZIhvcNAQELBQADggEBABBROoF/kF6bKAocfjTJpKcO4aCQ 43twoTHEt4Y1ewErPhkdw3IC4cjkslfM4sLEWXaYcGX4HFjec0qjZN5yty20SfBf s1op1vwuNANYTBvM9Bvb67OusQfIBgRG51OPbFEfC7wH5bQJhTW5+Kux+SIMANXp +ptSeFHzTEz00rXm2a9ctnSbIufIU5dxQ+pK884XvUMQXQ612Andp943vcTLkvPO OP4eCqINJ+ka+3ntj1Rk3u1ypXr1JcdLDAGXY4Y4pVPXPfvqb6F3MTraNRHGzhJ2 nfnF8nQyolw4uu9NJQYhER4D/z0Z0xKFrrGA5el6kVNuwPZdOyxwQnkPiZc= -----END CERTIFICATE-----Generated at Sat Apr 5 22:10:13 2025 by rpki-client