$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73d38cbc-8e57-413b-a607-243ebf7b63e0.roa File: 73d38cbc-8e57-413b-a607-243ebf7b63e0.roa (raw, json) Hash identifier: /xr3GjXLphkark56H8diOFQ7NM4ZSQcXb5Q+EsJpFis= Subject key identifier: 66:49:A7:40:67:1A:DF:F8:12:A4:5F:1C:44:B4:B1:9F:FF:60:30:C2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 66EFC4A7A306CCD648CAD7C0F6D65E2CDE6EEEEE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73d38cbc-8e57-413b-a607-243ebf7b63e0.roa Signing time: Tue 01 Apr 2025 00:07:05 +0000 ROA not before: Tue 01 Apr 2025 00:07:05 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 210.56.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ef:c4:a7:a3:06:cc:d6:48:ca:d7:c0:f6:d6:5e:2c:de:6e:ee:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 1 00:07:05 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b8:46:37:30:34:63:c6:9b:28:e6:de:b0:3a: e0:56:ea:bb:38:29:6d:58:4f:e6:85:09:23:80:f3: 05:37:98:bd:90:1f:42:05:8f:95:ac:e3:73:4c:1f: 40:79:b7:2c:92:ff:5e:6d:f8:21:ba:4e:bb:52:5e: 02:f8:5e:a4:df:05:11:41:ca:95:db:58:99:f3:4e: 16:2f:6a:bc:74:68:9d:aa:8d:3f:37:69:43:68:97: b4:07:fc:23:58:a5:c5:af:f4:7e:d4:91:76:29:c3: a8:b6:bf:03:8f:70:6f:64:40:f2:13:2c:1c:4a:ea: bd:79:4d:ae:e7:20:bf:10:28:12:cc:e9:aa:4e:94: ef:ba:e1:e6:4b:c4:cd:73:0b:fa:1e:19:25:ef:21: ff:ab:bf:e8:a4:5b:30:0c:1e:a7:55:8e:7b:d6:68: 8c:2d:41:68:1b:7d:2f:bf:a4:8a:91:61:8c:3f:bd: 2f:47:68:b8:9a:93:4c:3c:f1:fa:47:d2:99:7a:38: d8:5f:57:95:6e:b8:f0:99:6c:a2:7c:48:94:b9:f1: 84:fc:9c:25:d4:92:85:66:3e:f8:da:e8:9c:ef:66: 70:d6:cd:46:2f:2a:eb:25:15:4c:7c:f7:cc:f8:40: 16:14:91:c1:5b:e0:2a:c8:42:8f:6a:49:c4:ea:c7: 55:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:49:A7:40:67:1A:DF:F8:12:A4:5F:1C:44:B4:B1:9F:FF:60:30:C2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73d38cbc-8e57-413b-a607-243ebf7b63e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.56.66.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:5d:91:bf:e9:6f:2b:46:5b:da:32:90:48:99:c8:a7:1f:90: d9:fa:be:74:3a:13:1e:5e:a9:7b:1f:15:77:5f:cc:71:7e:d8: d8:cf:3a:86:15:34:ea:29:b4:5f:3f:de:95:81:f4:bb:75:b5: d5:6e:1a:c3:ca:3b:92:bd:cb:d4:f3:35:66:48:0a:85:34:13: 06:c2:f9:00:c1:a8:b8:0b:04:1d:0e:0f:d0:2d:ab:8b:af:ce: d9:61:8f:68:27:ba:c8:45:17:f2:44:af:57:a6:ef:7b:29:42: 9a:9d:c6:d9:50:59:7c:93:98:82:08:e5:78:e7:a2:df:1e:b9: bf:71:35:29:d8:56:ca:20:23:88:4b:b9:95:84:89:b8:f4:ad: 09:14:25:c2:b9:cb:29:73:2e:c0:9a:2d:56:9b:f3:6d:6f:87: ad:a3:e8:9e:23:30:eb:13:4c:ce:b9:32:20:8c:ad:b8:56:23: 60:5f:62:7c:6c:3c:31:88:89:69:f0:ca:65:7b:7e:b4:72:26: 20:ab:6d:b5:07:00:88:63:9f:d5:47:21:1a:62:7e:af:5d:58: c3:07:af:2b:ed:b8:3f:41:9f:a5:d8:72:e1:e4:33:a1:61:c6: d4:c4:64:88:4a:84:e8:f3:69:01:1d:a5:ed:b4:22:a8:17:da: 19:cc:e7:88 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZu/Ep6MGzNZIytfA9tZeLN5u7u4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDAxMDAwNzA1WhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjFlZDg5NDgyNWU5ZGY2MzRiMzg5MjgwZGNkYmYzYTMz N2ZhMWJlODVlMjljZmVhYTU5OGRjMzA4N2Y0ZTc0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpuEY3MDRjxpso5t6wOuBW6rs4KW1YT+aFCSOA8wU3mL2Q H0IFj5Ws43NMH0B5tyyS/15t+CG6TrtSXgL4XqTfBRFBypXbWJnzThYvarx0aJ2q jT83aUNol7QH/CNYpcWv9H7UkXYpw6i2vwOPcG9kQPITLBxK6r15Ta7nIL8QKBLM 6apOlO+64eZLxM1zC/oeGSXvIf+rv+ikWzAMHqdVjnvWaIwtQWgbfS+/pIqRYYw/ vS9HaLiak0w88fpH0pl6ONhfV5VuuPCZbKJ8SJS58YT8nCXUkoVmPvja6JzvZnDW zUYvKuslFUx898z4QBYUkcFb4CrIQo9qScTqx1VrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZkmnQGca3/gSpF8cRLSxn/9gMMIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzczZDM4Y2JjLThlNTctNDEzYi1hNjA3LTI0M2ViZjdiNjNlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHSOEIwDQYJKoZIhvcNAQELBQADggEBAAtdkb/pbytGW9oykEiZyKcfkNn6 vnQ6Ex5eqXsfFXdfzHF+2NjPOoYVNOoptF8/3pWB9Lt1tdVuGsPKO5K9y9TzNWZI CoU0EwbC+QDBqLgLBB0OD9Atq4uvztlhj2gnushFF/JEr1em73spQpqdxtlQWXyT mIII5Xjnot8eub9xNSnYVsogI4hLuZWEibj0rQkUJcK5yylzLsCaLVab821vh62j 6J4jMOsTTM65MiCMrbhWI2BfYnxsPDGIiWnwymV7frRyJiCrbbUHAIhjn9VHIRpi fq9dWMMHryvtuD9Bn6XYcuHkM6FhxtTEZIhKhOjzaQEdpe20IqgX2hnM54g= -----END CERTIFICATE-----Generated at Sat Apr 5 11:19:44 2025 by rpki-client