$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/798bdfdb-6923-40e7-a829-d9ba99fe4971.roa File: 798bdfdb-6923-40e7-a829-d9ba99fe4971.roa (raw, json) Hash identifier: HzhfpoCi6Pz788s/jUEHMqBQY5gmRw/mbxjns03nYEU= Subject key identifier: A0:71:04:F6:52:5E:98:97:53:51:7A:E3:68:77:4C:D8:5F:04:7B:5A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D6F0165074F786D695E5F55061CE3C9C5568F02 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/798bdfdb-6923-40e7-a829-d9ba99fe4971.roa Signing time: Mon 31 Mar 2025 15:10:50 +0000 ROA not before: Mon 31 Mar 2025 15:10:50 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.236.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6f:01:65:07:4f:78:6d:69:5e:5f:55:06:1c:e3:c9:c5:56:8f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 31 15:10:50 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d7:92:d4:86:4c:a8:10:1e:34:c9:2f:1d:65: 65:04:c4:f7:26:50:4c:90:ac:2c:f3:76:49:0a:25: c6:47:d4:5c:33:bc:22:56:2c:db:f7:e2:2e:ec:1b: d1:39:bc:67:d6:b2:7d:9f:88:22:75:df:e8:84:a6: 40:9d:5f:de:3f:66:b7:a7:d2:83:bf:be:07:ba:5b: 92:bc:49:06:bc:aa:55:10:4a:e9:40:0c:24:b0:4b: 37:6b:c2:84:5c:7d:e3:1d:66:79:c3:f4:9d:71:77: 90:5c:d5:5d:8d:3f:8a:a9:ca:87:ef:01:13:24:88: f8:27:f9:0a:c9:8b:25:44:fe:a8:1f:10:b9:cf:69: 98:0f:57:83:52:4d:17:3f:30:3a:87:93:07:eb:d0: b8:39:46:ff:4d:a9:ba:04:db:0f:e2:00:fa:9d:f1: e7:8f:d0:95:71:1c:3c:c0:8e:dc:ac:8f:38:cb:24: 9e:14:de:86:90:4e:8b:5d:55:dd:0c:79:4b:d0:fc: f3:9b:18:d4:8f:26:d6:f0:e8:46:42:9c:a5:d4:53: 80:ca:62:ab:9b:d6:5c:83:b0:39:36:49:16:72:85: e6:23:c7:e9:62:59:b0:4a:35:f6:09:cf:86:a4:03: 93:bb:bb:40:10:b8:a3:80:38:7d:ec:7a:7e:9e:60: c1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:71:04:F6:52:5E:98:97:53:51:7A:E3:68:77:4C:D8:5F:04:7B:5A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/798bdfdb-6923-40e7-a829-d9ba99fe4971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.160.0/19 Signature Algorithm: sha256WithRSAEncryption 05:e4:50:2d:d0:de:ca:86:11:c6:43:3a:ce:3d:b4:83:7a:d1: 12:1c:74:fc:a1:ee:8e:3f:c4:54:fb:e1:b7:6b:a9:0a:3f:d9: ce:43:91:0f:3e:2e:72:b9:1b:86:3d:27:29:11:ad:11:f6:20: 92:0b:8c:12:af:db:84:08:0c:8c:13:40:0c:57:39:d3:1b:fe: a6:8e:25:a4:ae:54:98:06:1a:d0:06:af:06:e1:8b:94:37:8e: 46:3a:5f:39:68:7f:18:03:11:1b:df:0b:6e:d6:a7:6a:cd:35: 1d:be:ea:eb:4b:92:19:b9:66:1e:6f:6b:64:b6:a8:fe:15:e4: b0:2f:9d:ef:b5:05:30:89:0d:ee:c2:24:16:23:5d:6f:c3:8f: 2b:6f:88:e5:b8:28:4b:e9:a3:f0:db:ec:dc:25:4b:f2:94:ae: 56:e1:e7:ed:50:35:ce:34:a7:23:3d:b2:ad:86:da:28:ef:61: 34:0e:61:aa:22:62:23:de:ed:ec:69:a5:76:69:2c:a0:a5:93: 3e:34:a2:28:33:5d:f0:d5:02:92:b6:62:d8:ec:19:22:8d:2b: 6b:30:41:77:5f:73:71:fe:cf:a9:a7:1e:bc:51:c4:65:1c:c1: e0:72:b7:cd:a4:e1:49:27:00:d3:be:2e:ce:38:b4:48:0c:56: b2:1f:89:80 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbW8BZQdPeG1pXl9VBhzjycVWjwIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTUxMDUwWhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDU3MmY4MmEzYmRhMjg1YzEzM2RlZjVmZGFmMDk2ZjI3 Y2NiYTQ4ZjQ4N2I1ZTkwZDJkMWYxMTNlY2YwMDQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI15LUhkyoEB40yS8dZWUExPcmUEyQrCzzdkkKJcZH1Fwz vCJWLNv34i7sG9E5vGfWsn2fiCJ13+iEpkCdX94/Zren0oO/vge6W5K8SQa8qlUQ SulADCSwSzdrwoRcfeMdZnnD9J1xd5Bc1V2NP4qpyofvARMkiPgn+QrJiyVE/qgf ELnPaZgPV4NSTRc/MDqHkwfr0Lg5Rv9NqboE2w/iAPqd8eeP0JVxHDzAjtysjzjL JJ4U3oaQTotdVd0MeUvQ/PObGNSPJtbw6EZCnKXUU4DKYqub1lyDsDk2SRZyheYj x+liWbBKNfYJz4akA5O7u0AQuKOAOH3sen6eYMGRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoHEE9lJemJdTUXrjaHdM2F8Ee1owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc5OGJkZmRiLTY5MjMtNDBlNy1hODI5LWQ5YmE5OWZlNDk3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXM7KAwDQYJKoZIhvcNAQELBQADggEBAAXkUC3Q3sqGEcZDOs49tIN60RIc dPyh7o4/xFT74bdrqQo/2c5DkQ8+LnK5G4Y9JykRrRH2IJILjBKv24QIDIwTQAxX OdMb/qaOJaSuVJgGGtAGrwbhi5Q3jkY6XzlofxgDERvfC27Wp2rNNR2+6utLkhm5 Zh5va2S2qP4V5LAvne+1BTCJDe7CJBYjXW/DjytviOW4KEvpo/Db7NwlS/KUrlbh 5+1QNc40pyM9sq2G2ijvYTQOYaoiYiPe7exppXZpLKClkz40oigzXfDVApK2Ytjs GSKNK2swQXdfc3H+z6mnHrxRxGUcweByt82k4UknANO+Ls44tEgMVrIfiYA= -----END CERTIFICATE-----Generated at Wed Apr 9 12:53:46 2025 by rpki-client