$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a373310-e697-4fb7-91aa-bd2254f6ceaa.roa File: 7a373310-e697-4fb7-91aa-bd2254f6ceaa.roa (raw, json) Hash identifier: XJFUSBnsSptykUU/XUiX5epSrQL+K9IM6guk4Nntchw= Subject key identifier: 5B:C2:ED:CE:5D:50:D6:B1:3B:30:6C:6B:8E:6E:6D:D3:BF:82:E4:EB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0274B04E58EFC85638336ED93F1073CD3E800DD7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a373310-e697-4fb7-91aa-bd2254f6ceaa.roa Signing time: Sat 22 Mar 2025 00:10:21 +0000 ROA not before: Sat 22 Mar 2025 00:10:21 +0000 ROA not after: Sat 26 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 93.78.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:74:b0:4e:58:ef:c8:56:38:33:6e:d9:3f:10:73:cd:3e:80:0d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 22 00:10:21 2025 GMT Not After : Apr 26 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:c8:2a:2b:0b:8e:03:29:67:67:95:b2:2d: 2c:01:c9:01:b7:fa:0b:18:06:81:cd:ee:d8:64:54: dd:ec:99:88:c8:53:74:f4:40:82:5d:1a:34:ef:27: b6:fb:dc:80:0a:bc:31:ec:a0:60:25:d9:2f:98:75: c4:1a:d1:39:89:0c:03:4b:7f:73:be:01:dd:90:0c: 8d:49:62:31:ea:7c:69:2b:a5:56:80:9e:de:4d:c8: 01:e6:c3:f2:ef:5b:95:12:4a:5b:10:4e:3a:c2:88: 16:72:0e:ac:21:cf:9a:a5:50:59:b0:cc:e2:30:e1: 11:90:02:34:54:8f:4b:ca:b3:fb:5b:1e:c1:64:c3: b9:ee:a6:9c:8a:e4:ed:03:ce:87:8e:e7:63:20:f3: 30:74:19:c2:0d:f4:cd:b4:0e:1a:38:4d:31:c3:c5: c6:12:73:13:2e:75:f1:3e:c6:7c:24:be:49:66:74: 72:37:c0:6d:37:00:8a:13:ac:fb:d3:d3:4a:46:eb: 28:da:d2:a2:02:31:fc:b6:ce:1b:ad:48:a4:c0:b9: 20:7a:d2:c0:fe:a0:11:a2:3e:0e:51:7b:97:12:14: 27:28:8e:0c:1b:78:9b:44:54:28:89:1a:8b:23:81: f3:29:05:8e:a8:d4:36:5e:32:45:64:ba:20:dd:2f: 0d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C2:ED:CE:5D:50:D6:B1:3B:30:6C:6B:8E:6E:6D:D3:BF:82:E4:EB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a373310-e697-4fb7-91aa-bd2254f6ceaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.78.128.0/17 Signature Algorithm: sha256WithRSAEncryption cf:2a:90:a8:bc:6a:40:06:ee:78:ed:41:9c:d3:64:d3:63:86: d4:bf:33:9b:8f:ed:0d:1b:f6:c9:92:92:a7:ff:21:ea:e6:07: 9f:ea:c9:0f:eb:3f:3e:f9:be:bc:41:67:86:5b:ac:59:71:4e: 1a:46:70:af:98:00:0d:c9:ec:bc:52:c9:55:84:3e:e4:71:7c: c1:c6:a8:fc:0d:cd:7e:b5:92:7c:94:e8:d1:08:ce:65:50:d3: c4:59:0e:8a:40:e5:fb:42:bd:0e:16:10:89:f1:e7:fd:e4:89: 21:93:b4:79:c1:69:28:e7:10:fa:8a:d7:38:c3:c0:57:f4:32: 88:33:1c:12:c9:4a:0e:87:d1:42:ea:09:65:86:51:e0:4c:55: 21:55:a4:cf:d5:51:62:48:7e:3d:0d:2d:49:82:3a:a9:ee:e8: ca:65:ce:88:4f:2f:a4:2c:55:e4:b8:24:d5:3f:08:15:d2:34: b1:04:e7:ba:d4:97:bd:3e:f3:fb:1d:d1:08:0d:96:c4:e2:90: 1b:03:b5:5c:72:64:4b:d3:42:fe:9b:64:fa:f2:ea:d0:e7:87: e1:78:8d:a9:c1:ce:b8:bd:8c:4b:97:f0:0a:97:a8:13:55:ca: d4:f3:a2:c7:4d:e0:0b:a3:cd:24:6b:4b:53:c7:ee:30:ff:e2: 04:d0:71:d4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAnSwTljvyFY4M27ZPxBzzT6ADdcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzIyMDAxMDIxWhcNMjUwNDI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNzYxNGYyZWE4MDJjMWVmYWZiMGQ2YzJkNjEwMDY1NzU2 MDcwZDk0ODRhZmQwMzkyMjhjZWNiNTEwZDA2MWUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu38gqKwuOAylnZ5WyLSwByQG3+gsYBoHN7thkVN3smYjI U3T0QIJdGjTvJ7b73IAKvDHsoGAl2S+YdcQa0TmJDANLf3O+Ad2QDI1JYjHqfGkr pVaAnt5NyAHmw/LvW5USSlsQTjrCiBZyDqwhz5qlUFmwzOIw4RGQAjRUj0vKs/tb HsFkw7nuppyK5O0DzoeO52Mg8zB0GcIN9M20Dho4TTHDxcYScxMudfE+xnwkvklm dHI3wG03AIoTrPvT00pG6yja0qICMfy2zhutSKTAuSB60sD+oBGiPg5Re5cSFCco jgwbeJtEVCiJGosjgfMpBY6o1DZeMkVkuiDdLw35AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW8Ltzl1Q1rE7MGxrjm5t07+C5OswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdhMzczMzEwLWU2OTctNGZiNy05MWFhLWJkMjI1NGY2Y2VhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAddToAwDQYJKoZIhvcNAQELBQADggEBAM8qkKi8akAG7njtQZzTZNNjhtS/ M5uP7Q0b9smSkqf/IermB5/qyQ/rPz75vrxBZ4ZbrFlxThpGcK+YAA3J7LxSyVWE PuRxfMHGqPwNzX61knyU6NEIzmVQ08RZDopA5ftCvQ4WEInx5/3kiSGTtHnBaSjn EPqK1zjDwFf0MogzHBLJSg6H0ULqCWWGUeBMVSFVpM/VUWJIfj0NLUmCOqnu6Mpl zohPL6QsVeS4JNU/CBXSNLEE57rUl70+8/sd0QgNlsTikBsDtVxyZEvTQv6bZPry 6tDnh+F4janBzri9jEuX8AqXqBNVytTzosdN4AujzSRrS1PH7jD/4gTQcdQ= -----END CERTIFICATE-----Generated at Sat Apr 5 11:21:36 2025 by rpki-client