$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75dc0196-dbba-412b-92e6-c3cb6a606623.roa File: 75dc0196-dbba-412b-92e6-c3cb6a606623.roa (raw, json) Hash identifier: OZZKDZdJFGuJ7T53HTDdGA5aiurnN00170KpiBLbKBU= Subject key identifier: 96:C1:1E:E1:8C:44:A5:1F:DF:3B:AB:A6:D1:F9:0B:0C:A8:0F:F1:87 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 72FCB079FF63C32ECF88C106EF2A74616B032A6D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75dc0196-dbba-412b-92e6-c3cb6a606623.roa Signing time: Tue 18 Mar 2025 00:41:59 +0000 ROA not before: Tue 18 Mar 2025 00:41:59 +0000 ROA not after: Tue 22 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.145.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fc:b0:79:ff:63:c3:2e:cf:88:c1:06:ef:2a:74:61:6b:03:2a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 18 00:41:59 2025 GMT Not After : Apr 22 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c0:3f:f4:eb:0d:e7:6c:83:b1:ae:82:e8:ba: 43:62:9d:f6:02:4d:ed:01:6e:c8:ff:ce:76:8b:70: 8f:2a:7d:26:ab:64:30:cc:30:5d:cb:77:6f:ea:ca: d0:13:ef:0d:39:60:4a:11:78:21:f0:9d:fb:b4:a6: 46:28:c8:85:7d:81:49:28:e5:1a:14:d4:0d:67:52: 12:73:ed:0c:f8:ed:c3:0d:27:0a:7f:c7:85:13:0c: 4d:c7:b9:de:d8:0a:5e:f5:0f:14:ee:da:de:00:ff: 1f:57:9f:2c:29:42:e4:3a:bf:e3:84:75:f7:ac:d6: 41:9e:2f:2a:96:35:22:c8:b7:9a:d4:58:6f:6c:9e: 98:0f:bf:01:d0:ca:2d:33:13:13:40:5a:dd:dc:6d: a9:c9:77:aa:7f:38:88:af:4a:c8:c9:8f:e3:7a:65: aa:3e:c0:de:a4:fe:99:07:12:24:f3:57:6d:b4:7a: 4f:ff:d6:9c:1b:7c:82:25:24:22:c5:87:59:20:d5: b0:ac:f7:18:9a:01:fd:6a:bc:22:1f:5e:0e:85:29: da:f7:3f:6e:b9:d8:83:74:7d:a2:4b:06:61:00:22: 12:1c:97:c2:2b:69:52:72:32:19:de:96:af:7d:e2: 13:67:76:0c:11:3f:05:d3:02:a0:22:da:f9:40:b0: df:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C1:1E:E1:8C:44:A5:1F:DF:3B:AB:A6:D1:F9:0B:0C:A8:0F:F1:87 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75dc0196-dbba-412b-92e6-c3cb6a606623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.145.0.0/16 Signature Algorithm: sha256WithRSAEncryption ac:51:9f:b2:ab:2a:19:2b:19:28:e9:10:f6:6b:49:f5:4f:aa: 82:a0:04:37:6d:cc:77:8c:c1:6d:09:c4:4e:54:69:80:fe:fa: 6b:32:8c:14:42:d5:c0:e5:03:39:b4:dc:fc:9a:86:1e:0f:50: 95:25:94:f7:78:7b:ee:7f:89:f0:8f:f3:2d:a1:c9:3b:25:d4: 9d:d5:bc:18:2d:6a:eb:df:51:db:39:e3:53:71:3e:c0:a3:00: f4:8d:e7:c5:12:05:10:5f:b0:f6:22:ec:cd:64:70:cd:ee:2c: 71:ac:91:a8:cc:9c:a9:55:74:12:bf:70:b4:ac:13:ff:e8:58: 57:d3:ba:c0:f2:be:1a:be:c0:27:a5:9f:7b:62:7c:c0:33:59: b4:4e:80:33:0d:79:5f:91:66:84:c6:b7:65:34:a9:94:64:5f: 14:8f:57:60:0f:1b:b5:d0:59:e7:ed:35:5f:b8:a0:13:8e:fa: 6b:b9:61:a3:c1:54:7b:3b:ee:1d:ca:43:8b:02:f1:e3:c8:ea: a5:75:31:1d:4d:3d:93:6f:e2:ef:55:c1:f5:4a:76:44:b4:41: 4d:b5:43:1d:86:1d:9c:5a:ca:c6:ca:42:05:ef:61:20:7a:5a: 87:04:2c:6f:93:0d:84:3a:1a:8b:fa:88:73:23:71:af:ad:45: 1c:a4:74:fa -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcvywef9jwy7PiMEG7yp0YWsDKm0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE4MDA0MTU5WhcNMjUwNDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlY2JkYzQ5YTMzMTA0MzlmMDNmNzAzMDIwNzMwMzNjNmQy NjFiNGQ1MTBhMGY0ZWE1YTE0M2RiOTQ5MTUyYjM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3wD/06w3nbIOxroLoukNinfYCTe0Bbsj/znaLcI8qfSar ZDDMMF3Ld2/qytAT7w05YEoReCHwnfu0pkYoyIV9gUko5RoU1A1nUhJz7Qz47cMN Jwp/x4UTDE3Hud7YCl71DxTu2t4A/x9XnywpQuQ6v+OEdfes1kGeLyqWNSLIt5rU WG9snpgPvwHQyi0zExNAWt3cbanJd6p/OIivSsjJj+N6Zao+wN6k/pkHEiTzV220 ek//1pwbfIIlJCLFh1kg1bCs9xiaAf1qvCIfXg6FKdr3P2652IN0faJLBmEAIhIc l8IraVJyMhnelq994hNndgwRPwXTAqAi2vlAsN99AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUlsEe4YxEpR/fO6um0fkLDKgP8YcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1ZGMwMTk2LWRiYmEtNDEyYi05MmU2LWMzY2I2YTYwNjYyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4kTANBgkqhkiG9w0BAQsFAAOCAQEArFGfsqsqGSsZKOkQ9mtJ9U+qgqAE N23Md4zBbQnETlRpgP76azKMFELVwOUDObTc/JqGHg9QlSWU93h77n+J8I/zLaHJ OyXUndW8GC1q699R2znjU3E+wKMA9I3nxRIFEF+w9iLszWRwze4scayRqMycqVV0 Er9wtKwT/+hYV9O6wPK+Gr7AJ6Wfe2J8wDNZtE6AMw15X5FmhMa3ZTSplGRfFI9X YA8btdBZ5+01X7igE476a7lho8FUezvuHcpDiwLx48jqpXUxHU09k2/i71XB9Up2 RLRBTbVDHYYdnFrKxspCBe9hIHpahwQsb5MNhDoai/qIcyNxr61FHKR0+g== -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:09 2025 by rpki-client