$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80c452dc-effd-446c-b6eb-9d13759e7287.roa File: 80c452dc-effd-446c-b6eb-9d13759e7287.roa (raw, json) Hash identifier: V+qttHlJCirCj+u33s7Jf55Kv1pgIVnpdMuSIn4n0L8= Subject key identifier: 9C:BA:6A:0B:66:54:61:25:40:49:37:E2:6D:9A:5B:D4:8D:91:68:EE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C9391FCB8EB79D81CCF5ED93FB03E65B527656A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80c452dc-effd-446c-b6eb-9d13759e7287.roa Signing time: Fri 14 Mar 2025 00:02:12 +0000 ROA not before: Fri 14 Mar 2025 00:02:12 +0000 ROA not after: Fri 18 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 206.217.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:93:91:fc:b8:eb:79:d8:1c:cf:5e:d9:3f:b0:3e:65:b5:27:65:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 14 00:02:12 2025 GMT Not After : Apr 18 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:66:c4:71:37:e7:49:f6:f6:9c:f9:08:bd:42: b4:02:d2:bf:99:69:d9:ee:72:07:80:ef:8f:7c:dd: b8:fa:c3:f1:9a:26:bb:56:7b:5d:9d:cc:80:7e:c3: 60:21:d6:67:22:88:ed:e0:29:a1:15:0b:f1:e8:06: 92:7a:e8:fc:d7:b6:d5:70:83:19:93:8c:b9:d4:db: 2d:d9:b0:0f:1b:48:40:60:aa:ec:fb:8d:8e:2a:dd: 36:03:74:51:f8:b7:6b:60:ea:08:89:52:be:32:f5: 69:0f:6f:4c:2d:a8:61:34:47:3a:e3:17:bf:90:db: e3:7a:70:cc:63:fc:ca:f8:ec:4b:0e:3a:8b:37:64: cb:6f:5d:59:8a:89:4b:a6:52:c0:a0:e2:98:67:56: 3d:30:8e:29:d4:22:1d:e1:38:24:ab:2c:43:48:a6: dc:3e:cb:8e:96:b5:d8:49:39:5c:e9:45:2a:e7:ac: c7:02:b1:fd:35:c5:e3:d7:4a:b3:a5:64:49:65:08: d2:1a:14:ce:e5:ad:db:c4:d9:f5:cf:25:70:1d:c9: 4e:4c:96:de:ad:f7:23:67:77:20:dd:b0:1a:4e:4d: d1:dc:3f:89:9c:e6:32:6b:f4:88:79:3a:aa:52:1d: 34:38:b1:12:8b:5e:f3:55:75:59:ee:90:59:f6:7a: eb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BA:6A:0B:66:54:61:25:40:49:37:E2:6D:9A:5B:D4:8D:91:68:EE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80c452dc-effd-446c-b6eb-9d13759e7287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.217.160.0/19 Signature Algorithm: sha256WithRSAEncryption 1d:e7:69:0b:9f:17:a6:af:1a:15:6c:9b:50:be:de:ec:ab:c8: 23:1e:4a:c9:5c:67:b5:be:51:f2:73:d9:0a:30:1e:78:90:b6: e8:81:03:d3:d8:10:72:f6:e3:b8:d8:b6:04:12:08:47:fd:42: 16:97:24:10:a4:32:a0:46:5f:3f:89:cf:48:2f:57:d1:a0:09: 23:8b:a1:1b:72:45:90:43:14:6e:d9:4e:f6:ba:9d:ce:b8:c7: 17:4c:4e:11:06:b2:eb:4d:7c:dc:0a:2b:dc:19:d4:97:1d:25: ab:b4:3b:01:cf:70:ae:a7:89:af:d9:d3:6d:e3:a7:3f:1f:7e: b6:cd:fa:f2:0a:14:88:47:78:0d:c4:14:dd:e6:59:6f:a8:58: 54:e1:6b:7e:43:24:c0:9c:10:36:70:d2:fc:3e:af:01:a2:f3: 87:76:98:9f:ea:aa:c6:57:67:4c:2b:27:5a:cc:82:22:97:bf: 5f:fe:88:ab:99:e0:22:a7:55:d7:ec:80:f2:62:36:7c:2f:36: d7:a2:77:d2:07:57:45:e7:e7:0c:de:fa:10:c1:7d:92:cf:c0: 10:95:e3:67:94:d9:f6:f1:79:ec:d0:09:1c:50:89:f9:88:36: 90:cd:dd:56:9c:31:1a:24:6d:e2:9f:05:d9:92:a4:86:e0:e4: a8:e1:b7:eb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXJOR/Ljredgcz17ZP7A+ZbUnZWowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE0MDAwMjEyWhcNMjUwNDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMmE1YmU1NTMwODk1ZTBiNzY2M2MyZjViYjM1MTU1YjA2 YWJmZDM1YjE3Zjk4NjVjODcwM2QwZDVkZTRkNDExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwZsRxN+dJ9vac+Qi9QrQC0r+ZadnucgeA74983bj6w/Ga JrtWe12dzIB+w2Ah1mciiO3gKaEVC/HoBpJ66PzXttVwgxmTjLnU2y3ZsA8bSEBg quz7jY4q3TYDdFH4t2tg6giJUr4y9WkPb0wtqGE0RzrjF7+Q2+N6cMxj/Mr47EsO Oos3ZMtvXVmKiUumUsCg4phnVj0wjinUIh3hOCSrLENIptw+y46WtdhJOVzpRSrn rMcCsf01xePXSrOlZEllCNIaFM7lrdvE2fXPJXAdyU5Mlt6t9yNndyDdsBpOTdHc P4mc5jJr9Ih5OqpSHTQ4sRKLXvNVdVnukFn2eutXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnLpqC2ZUYSVASTfibZpb1I2RaO4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgwYzQ1MmRjLWVmZmQtNDQ2Yy1iNmViLTlkMTM3NTllNzI4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXO2aAwDQYJKoZIhvcNAQELBQADggEBAB3naQufF6avGhVsm1C+3uyryCMe SslcZ7W+UfJz2QowHniQtuiBA9PYEHL247jYtgQSCEf9QhaXJBCkMqBGXz+Jz0gv V9GgCSOLoRtyRZBDFG7ZTva6nc64xxdMThEGsutNfNwKK9wZ1JcdJau0OwHPcK6n ia/Z023jpz8ffrbN+vIKFIhHeA3EFN3mWW+oWFTha35DJMCcEDZw0vw+rwGi84d2 mJ/qqsZXZ0wrJ1rMgiKXv1/+iKuZ4CKnVdfsgPJiNnwvNteid9IHV0Xn5wze+hDB fZLPwBCV42eU2fbxeezQCRxQifmINpDN3VacMRokbeKfBdmSpIbg5Kjht+s= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:36 2025 by rpki-client