$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeff87b2-1581-477c-aadc-b42a3521569b.roa File: aeff87b2-1581-477c-aadc-b42a3521569b.roa (raw, json) Hash identifier: GGBouEnpivMi+shW2d3ZKpe/sMifHaRjmo/uXrycgsM= Subject key identifier: 2F:7D:33:60:57:F1:3B:76:2A:4A:12:92:69:02:8D:86:1C:66:3B:34 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0DF9D8073BD1B63999035823DF612F428D9F3E35 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeff87b2-1581-477c-aadc-b42a3521569b.roa Signing time: Sat 29 Mar 2025 00:41:27 +0000 ROA not before: Sat 29 Mar 2025 00:41:27 +0000 ROA not after: Sat 03 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 161.178.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f9:d8:07:3b:d1:b6:39:99:03:58:23:df:61:2f:42:8d:9f:3e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 29 00:41:27 2025 GMT Not After : May 3 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8d:6d:33:be:f8:72:e4:60:c2:ad:8e:06:95: 07:1e:0b:9e:e6:e9:e3:90:53:0c:13:45:22:4a:c7: f1:87:0f:ab:f8:f5:d8:7e:a5:e0:e2:c0:7f:32:c2: a7:17:bd:c6:b0:f7:f7:d4:36:60:51:d1:c2:64:c8: 7f:5d:1b:e7:5e:e8:3f:bc:2d:76:04:a1:08:54:14: cb:6f:89:80:98:a6:8b:1b:35:d2:d7:0d:b4:0c:7b: 0a:e9:4c:a7:bf:c9:9a:17:e3:80:7c:1a:7c:b6:63: 02:1c:b5:2b:95:eb:26:9c:77:32:dd:7a:a9:0b:cd: cd:d2:c6:ca:f7:ca:63:4f:ec:56:f8:15:86:66:24: aa:92:38:75:46:41:5c:7d:dd:e9:99:e2:86:29:00: 2a:86:f4:4b:55:01:81:47:71:26:51:54:e3:ed:e2: 5e:c3:99:f4:d8:54:39:2f:80:99:e5:d2:b8:0f:61: c5:08:98:2a:99:86:38:b1:39:a9:b3:b6:c9:98:b1: 6d:21:b0:c1:63:15:16:ff:20:43:3a:41:05:f3:bc: 04:7d:65:3e:ce:83:a5:29:36:1c:c2:c8:44:38:a0: cd:83:2c:14:4d:37:f3:74:66:ac:41:9b:83:b2:73: d6:f5:d5:4d:72:50:3f:2c:29:ba:96:e1:fa:df:cd: 63:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7D:33:60:57:F1:3B:76:2A:4A:12:92:69:02:8D:86:1C:66:3B:34 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeff87b2-1581-477c-aadc-b42a3521569b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.178.128.0/18 Signature Algorithm: sha256WithRSAEncryption be:43:23:81:99:18:5e:9c:12:78:f4:d9:3e:fe:ab:dd:95:5e: 0c:3d:73:47:e0:34:eb:33:87:87:c4:b9:a4:e5:b7:73:70:97: 46:d3:36:29:bd:6f:f2:bb:73:4a:8a:12:09:0d:c5:78:58:0d: 7a:0a:e7:ba:3d:04:2d:49:5f:94:d3:bc:53:01:17:c6:9f:1f: b3:4f:b3:f2:2b:0e:bb:ea:cf:0e:ea:59:6a:b6:db:2b:a7:05: a7:b5:3e:af:2f:1e:d6:67:60:22:b4:49:72:e9:95:8b:4f:7a: c1:c6:9e:ae:e8:00:b4:9e:43:98:26:ba:90:63:d9:24:63:56: 76:40:e7:f1:d2:84:87:b1:e8:01:66:d3:b8:7b:e8:4e:10:30: 78:bd:63:17:6e:a2:34:53:81:62:77:14:15:98:31:65:10:9a: 06:5d:dd:09:eb:38:15:39:be:3d:b5:b3:09:b8:11:45:24:ff: 81:e9:f6:e0:52:07:67:f1:ca:81:ee:c9:ab:e4:e5:3c:90:47: 12:e6:9f:97:45:7f:09:4d:de:3e:08:99:e9:dd:b5:ec:85:d9: 4f:5e:fa:bf:c3:4c:c4:77:23:48:a7:eb:0b:ee:35:01:a7:5c: 79:61:f8:85:f5:cf:5f:33:43:ed:e0:89:a0:71:ff:55:09:aa: ba:cf:50:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDfnYBzvRtjmZA1gj32EvQo2fPjUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI5MDA0MTI3WhcNMjUwNTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMWFlNTYyNDNjYTUxZDdkMGIwOGQ2ODVkM2Y3N2JjYmY1 MmZhOTBlMDhhZTc5YzY2NmFkYzUwZDMwYjFkZGJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDljW0zvvhy5GDCrY4GlQceC57m6eOQUwwTRSJKx/GHD6v4 9dh+peDiwH8ywqcXvcaw9/fUNmBR0cJkyH9dG+de6D+8LXYEoQhUFMtviYCYposb NdLXDbQMewrpTKe/yZoX44B8Gny2YwIctSuV6yacdzLdeqkLzc3Sxsr3ymNP7Fb4 FYZmJKqSOHVGQVx93emZ4oYpACqG9EtVAYFHcSZRVOPt4l7DmfTYVDkvgJnl0rgP YcUImCqZhjixOamztsmYsW0hsMFjFRb/IEM6QQXzvAR9ZT7Og6UpNhzCyEQ4oM2D LBRNN/N0ZqxBm4Oyc9b11U1yUD8sKbqW4frfzWN9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUL30zYFfxO3YqShKSaQKNhhxmOzQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlZmY4N2IyLTE1ODEtNDc3Yy1hYWRjLWI0MmEzNTIxNTY5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAahsoAwDQYJKoZIhvcNAQELBQADggEBAL5DI4GZGF6cEnj02T7+q92VXgw9 c0fgNOszh4fEuaTlt3Nwl0bTNim9b/K7c0qKEgkNxXhYDXoK57o9BC1JX5TTvFMB F8afH7NPs/IrDrvqzw7qWWq22yunBae1Pq8vHtZnYCK0SXLplYtPesHGnq7oALSe Q5gmupBj2SRjVnZA5/HShIex6AFm07h76E4QMHi9YxduojRTgWJ3FBWYMWUQmgZd 3QnrOBU5vj21swm4EUUk/4Hp9uBSB2fxyoHuyavk5TyQRxLmn5dFfwlN3j4Imend teyF2U9e+r/DTMR3I0in6wvuNQGnXHlh+IX1z18zQ+3giaBx/1UJqrrPUM0= -----END CERTIFICATE-----Generated at Sat Apr 5 12:14:50 2025 by rpki-client