$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f5b1387-7bbb-4343-91e2-7123055c203c.roa File: 7f5b1387-7bbb-4343-91e2-7123055c203c.roa (raw, json) Hash identifier: ehdzvHIzr6mYvW/67vQsXKwwrrNNBmjXDaFeHxbXqwE= Subject key identifier: 92:92:34:05:B3:91:24:12:32:20:58:2C:87:B8:3D:03:76:6F:86:6B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 09453A35BE80755B7526BF004F7C682F9F952070 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f5b1387-7bbb-4343-91e2-7123055c203c.roa Signing time: Fri 28 Mar 2025 15:40:12 +0000 ROA not before: Fri 28 Mar 2025 15:40:12 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 157.175.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:45:3a:35:be:80:75:5b:75:26:bf:00:4f:7c:68:2f:9f:95:20:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 15:40:12 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:9c:0a:19:34:aa:25:c3:e8:3d:4a:c9:8f: 6e:ca:ec:74:ed:fe:f8:5d:bb:12:3f:43:d4:1f:72: f1:5f:b2:32:c6:2b:9e:b0:1c:37:ed:af:76:1d:d5: ea:04:2b:b6:4b:56:e8:ce:e9:94:09:9b:69:ec:9f: a6:b5:32:3c:a5:25:01:c7:af:48:f9:4c:f3:5c:5b: 49:1b:8b:f3:06:c1:9f:46:fe:62:2e:49:72:71:4e: 51:08:c2:92:3f:8d:e3:50:3f:89:d2:64:1a:ea:3c: fe:15:e6:94:36:59:d5:a6:c7:4f:8b:23:9d:99:07: bd:cd:9d:33:eb:d4:c0:56:6b:02:30:b8:ac:d6:da: c5:d6:8d:eb:98:8e:ed:80:cc:2d:f6:67:66:63:9e: 4a:2a:ea:1a:dd:b6:29:6a:ce:7c:75:f4:a3:51:b6: 59:0a:0c:23:06:f7:56:08:7f:6d:52:00:c0:1b:33: ce:6e:52:47:ad:22:66:59:40:03:5b:6b:6d:e7:20: 16:10:0f:1d:6a:f8:63:4e:e3:7d:6e:2c:97:4c:9d: d6:1c:48:38:e1:9f:79:4c:ba:24:9c:9c:ab:98:58: 51:c4:c8:17:37:a7:7c:7f:6a:0d:66:bf:f7:3d:0d: c7:b7:ef:71:0c:4e:75:f6:bd:e7:36:e0:a6:54:2a: 9c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:92:34:05:B3:91:24:12:32:20:58:2C:87:B8:3D:03:76:6F:86:6B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f5b1387-7bbb-4343-91e2-7123055c203c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.175.0.0/24 Signature Algorithm: sha256WithRSAEncryption 43:ce:a3:d5:fd:f5:b4:93:8c:ca:72:37:30:46:95:0b:64:0e: d2:c6:e9:5e:a0:6a:53:23:47:93:b7:99:af:be:d6:32:54:40: 13:2f:6d:f2:2e:95:77:b1:8d:64:af:cb:07:42:f0:3a:b7:17: 6f:40:89:91:bf:d6:d8:dd:52:a8:d4:e5:04:1f:76:b6:41:29: 0a:4b:13:61:da:2a:47:b2:c3:19:8d:6b:36:8f:23:29:b9:26: eb:37:d3:74:6f:df:bb:42:1d:51:2c:66:1d:2f:38:7f:d0:97: cf:4f:30:64:15:ae:83:d4:32:cc:2d:3d:ab:21:c4:08:26:50: 9a:88:07:04:2e:62:a4:5f:aa:9c:0a:d7:d2:57:7b:46:8c:d6: 01:6d:06:7d:d3:da:e2:3a:12:0b:1e:04:fb:a8:f5:1c:65:6a: 95:1b:fa:f4:d5:70:df:1d:d8:cf:cb:6d:e1:0a:03:35:f9:cc: 88:f7:d1:20:92:0a:e3:4f:04:64:41:4d:18:3d:3b:65:3b:bb: 8e:ca:70:c1:ac:d1:ec:3f:ab:92:94:b6:fe:ca:a9:92:76:56: 45:ff:77:28:9c:0d:65:64:1f:3b:90:98:bd:ac:28:f5:0f:3e: 54:f7:1f:9a:e0:e5:1e:b3:df:2e:5d:f8:c4:f9:70:29:00:6b: 3e:ba:cd:f1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCUU6Nb6AdVt1Jr8AT3xoL5+VIHAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTU0MDEyWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZmYxY2U0YjQzY2RkYzk2OTY1ZjM0ZTNkNmI1MzlhNDll ZTFmYzVkNTZiYTU4ZGE5MTlkZWNmM2I4OTA1ZGI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCo75wKGTSqJcPoPUrJj27K7HTt/vhduxI/Q9QfcvFfsjLG K56wHDftr3Yd1eoEK7ZLVujO6ZQJm2nsn6a1MjylJQHHr0j5TPNcW0kbi/MGwZ9G /mIuSXJxTlEIwpI/jeNQP4nSZBrqPP4V5pQ2WdWmx0+LI52ZB73NnTPr1MBWawIw uKzW2sXWjeuYju2AzC32Z2Zjnkoq6hrdtilqznx19KNRtlkKDCMG91YIf21SAMAb M85uUketImZZQANba23nIBYQDx1q+GNO431uLJdMndYcSDjhn3lMuiScnKuYWFHE yBc3p3x/ag1mv/c9Dce373EMTnX2vec24KZUKpwDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkpI0BbORJBIyIFgsh7g9A3ZvhmswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdmNWIxMzg3LTdiYmItNDM0My05MWUyLTcxMjMwNTVjMjAzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACdrwAwDQYJKoZIhvcNAQELBQADggEBAEPOo9X99bSTjMpyNzBGlQtkDtLG 6V6galMjR5O3ma++1jJUQBMvbfIulXexjWSvywdC8Dq3F29AiZG/1tjdUqjU5QQf drZBKQpLE2HaKkeywxmNazaPIym5Jus303Rv37tCHVEsZh0vOH/Ql89PMGQVroPU MswtPashxAgmUJqIBwQuYqRfqpwK19JXe0aM1gFtBn3T2uI6EgseBPuo9RxlapUb +vTVcN8d2M/LbeEKAzX5zIj30SCSCuNPBGRBTRg9O2U7u47KcMGs0ew/q5KUtv7K qZJ2VkX/dyicDWVkHzuQmL2sKPUPPlT3H5rg5R6z3y5d+MT5cCkAaz66zfE= -----END CERTIFICATE-----Generated at Sat Apr 5 22:04:20 2025 by rpki-client