$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b01f5a39-26bb-4920-a2d3-e44bbf13abab.roa File: b01f5a39-26bb-4920-a2d3-e44bbf13abab.roa (raw, json) Hash identifier: /2MyLLCneSQVMOxmMYqIEN91rgS5pT4Nyi+BdeTstik= Subject key identifier: 03:DC:02:51:C0:CE:A9:EC:4E:7A:45:0B:D8:68:93:06:79:B3:22:8B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 30FC68473D3BE2E7A8F311A435ECF49AD4A079DE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b01f5a39-26bb-4920-a2d3-e44bbf13abab.roa Signing time: Wed 19 Mar 2025 00:21:16 +0000 ROA not before: Wed 19 Mar 2025 00:21:16 +0000 ROA not after: Wed 23 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.248.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:fc:68:47:3d:3b:e2:e7:a8:f3:11:a4:35:ec:f4:9a:d4:a0:79:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 19 00:21:16 2025 GMT Not After : Apr 23 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d3:78:14:1c:69:30:d4:e3:94:55:dd:f4:94: da:be:3c:62:ba:6e:50:08:3b:76:5f:bf:ea:b1:fc: 6b:6f:85:24:0f:38:58:c7:4a:5f:55:58:e0:a4:02: 7d:de:45:bd:24:49:e0:55:a9:c4:20:8d:3c:c2:28: 57:d8:28:9a:78:e9:93:22:61:52:d6:27:57:b0:a2: 67:f4:03:71:98:de:ff:3e:35:83:87:19:9e:d5:aa: 26:da:4b:25:c7:2a:f7:6c:6d:5c:92:57:e2:b6:08: d9:a3:53:47:7d:a0:46:33:d8:82:21:1a:2b:87:e9: f6:23:2d:96:65:c3:43:ed:85:eb:25:e5:71:3f:02: f7:1c:d5:e4:27:1a:98:9b:7c:38:fb:5c:aa:c9:1d: 0c:e1:65:19:f8:45:10:58:c5:e2:ed:8b:3e:eb:7a: 59:4e:84:52:bb:db:87:dc:f6:23:36:0c:84:d7:aa: c4:1b:4c:13:fa:7f:da:a5:bd:e3:89:2d:b6:8e:34: 1b:85:13:d6:af:bf:08:47:a9:63:5f:16:78:f3:75: 8d:72:52:5a:32:c2:ea:db:9b:4e:f9:38:12:78:6c: a3:65:7c:62:89:a6:e5:b3:26:99:b3:6f:f1:62:79: 3f:e6:f4:74:b5:de:40:33:6b:fd:a3:f2:1c:aa:f1: a2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DC:02:51:C0:CE:A9:EC:4E:7A:45:0B:D8:68:93:06:79:B3:22:8B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b01f5a39-26bb-4920-a2d3-e44bbf13abab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.248.128.0/17 Signature Algorithm: sha256WithRSAEncryption 49:ba:0d:4d:cb:9c:9d:b8:80:66:c8:87:11:36:2e:cb:7a:79: 49:2f:14:75:41:a9:a6:e4:eb:79:9c:29:23:ec:e2:ce:27:cd: 22:68:b4:b7:d1:45:b7:08:ba:fb:ba:02:16:4e:34:cc:03:aa: e6:2b:61:f3:3e:34:c8:a5:95:0a:a0:fa:85:c8:54:20:3f:5f: 96:a4:72:9d:8b:2e:05:0f:c2:79:db:08:97:83:59:b7:9e:2f: 31:57:de:06:1e:8f:21:ee:2b:eb:84:ff:bd:46:c0:b0:f0:27: f1:6e:e4:57:de:9f:06:eb:49:4f:9f:ca:08:aa:63:6c:c0:33: 98:86:f6:c9:e5:7b:b6:a0:9f:b9:e0:bc:d5:c8:bd:a2:f2:7c: 81:6a:5f:45:f3:a2:dd:34:55:be:10:d1:dd:09:b3:a9:da:5b: d0:5a:56:6a:e3:04:eb:f1:00:ab:0a:ab:c9:9c:23:1e:a5:ce: 4a:5f:5a:03:c7:7d:ed:51:f0:dd:af:2a:73:c8:33:48:de:57: e7:8b:c6:48:fa:bd:a3:50:1e:28:8a:79:9b:df:52:4a:55:e6: df:8f:37:ca:4e:08:21:31:f4:7e:5c:f4:59:bf:07:2e:7e:9e: 8c:e0:65:22:df:20:b6:9e:72:76:8a:6d:b8:55:4c:35:60:0f: de:24:f9:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMPxoRz074ueo8xGkNez0mtSged4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE5MDAyMTE2WhcNMjUwNDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTY1NzE5MTUyZjI2YjhjZDg5OTUzYTlkNGU4MjkwNjU2 NTdiZTkzMzRlNDI4MjE2MmE1Y2RlOWNmNzAyOGU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDM03gUHGkw1OOUVd30lNq+PGK6blAIO3Zfv+qx/GtvhSQP OFjHSl9VWOCkAn3eRb0kSeBVqcQgjTzCKFfYKJp46ZMiYVLWJ1ewomf0A3GY3v8+ NYOHGZ7VqibaSyXHKvdsbVySV+K2CNmjU0d9oEYz2IIhGiuH6fYjLZZlw0Pthesl 5XE/Avcc1eQnGpibfDj7XKrJHQzhZRn4RRBYxeLtiz7rellOhFK724fc9iM2DITX qsQbTBP6f9qlveOJLbaONBuFE9avvwhHqWNfFnjzdY1yUloywurbm075OBJ4bKNl fGKJpuWzJpmzb/FieT/m9HS13kAza/2j8hyq8aL1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUA9wCUcDOqexOekUL2GiTBnmzIoswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IwMWY1YTM5LTI2YmItNDkyMC1hMmQzLWU0NGJiZjEzYWJhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfR+IAwDQYJKoZIhvcNAQELBQADggEBAEm6DU3LnJ24gGbIhxE2Lst6eUkv FHVBqabk63mcKSPs4s4nzSJotLfRRbcIuvu6AhZONMwDquYrYfM+NMillQqg+oXI VCA/X5akcp2LLgUPwnnbCJeDWbeeLzFX3gYejyHuK+uE/71GwLDwJ/Fu5Ffenwbr SU+fygiqY2zAM5iG9snle7agn7ngvNXIvaLyfIFqX0Xzot00Vb4Q0d0Js6naW9Ba VmrjBOvxAKsKq8mcIx6lzkpfWgPHfe1R8N2vKnPIM0jeV+eLxkj6vaNQHiiKeZvf UkpV5t+PN8pOCCEx9H5c9Fm/By5+nozgZSLfILaecnaKbbhVTDVgD94k+XU= -----END CERTIFICATE-----Generated at Sat Apr 5 11:02:23 2025 by rpki-client