$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1564f4a-7df0-4932-af96-1ebffff2e421.roa File: b1564f4a-7df0-4932-af96-1ebffff2e421.roa (raw, json) Hash identifier: WB254UKSXELj1S1T2ji1PdxUBw7x9Oh28bVhMZZ8IK8= Subject key identifier: DF:15:8B:03:37:5F:2F:E1:AC:00:13:F4:A8:74:7C:18:CB:09:C8:DE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2AAF9C5BD64723D3DB2A634F295334BC3B5D03FF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1564f4a-7df0-4932-af96-1ebffff2e421.roa Signing time: Fri 04 Apr 2025 00:11:18 +0000 ROA not before: Fri 04 Apr 2025 00:11:18 +0000 ROA not after: Fri 09 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 72.29.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:af:9c:5b:d6:47:23:d3:db:2a:63:4f:29:53:34:bc:3b:5d:03:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 4 00:11:18 2025 GMT Not After : May 9 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:fd:09:ba:5c:64:87:69:8a:bd:10:d0:4f: f8:e8:c2:c9:b6:80:b0:8a:f5:74:6a:46:2f:b7:47: 3e:c1:90:22:02:6f:68:f9:d0:e5:ac:de:1a:ab:aa: 67:e0:c1:c8:db:c8:02:d6:84:6a:4e:1c:e5:3d:fa: 3f:75:e8:6c:70:39:69:40:b6:fd:c9:c8:ca:f3:b1: 4a:48:d7:b1:df:28:9c:30:8a:10:ad:75:b2:8c:69: 39:b1:39:1e:7a:f2:e9:d3:dd:1a:a9:5b:cd:ee:ed: 77:b6:96:48:25:ab:31:44:4a:98:83:dd:47:6a:3e: a4:6d:4f:27:63:ee:fd:03:80:31:4f:f8:c1:b0:02: 03:10:5b:7f:49:df:62:16:d0:e1:45:b3:60:c7:df: 92:94:ab:62:76:08:7b:a6:ee:d8:1e:58:ee:ed:f2: 93:11:27:d3:d3:e8:c7:ff:19:e8:7d:e7:a2:fd:c5: 70:2f:9c:ab:ca:7e:c8:d9:8a:73:85:87:06:76:75: 54:2d:a5:93:0e:df:42:b0:bd:d8:df:32:a1:51:c8: 77:01:e8:bf:ff:c6:ba:b5:d4:d9:1e:e6:cf:b9:9b: 95:2d:ee:7e:94:0f:82:7a:b5:39:24:0c:81:70:10: c4:fa:d9:9f:0c:4d:b7:ee:d7:22:56:29:26:2b:d5: a6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:15:8B:03:37:5F:2F:E1:AC:00:13:F4:A8:74:7C:18:CB:09:C8:DE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1564f4a-7df0-4932-af96-1ebffff2e421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.29.0.0/19 Signature Algorithm: sha256WithRSAEncryption 0c:55:e9:57:49:11:da:ca:04:1a:3e:c7:7f:cf:c0:af:06:0c: 5b:77:43:e9:0d:46:90:99:7a:c8:fd:25:28:6e:1a:64:f1:2f: 0e:2f:f4:e2:ce:aa:2e:bd:ed:d8:77:5c:a3:47:8e:30:cb:fe: a8:51:bb:29:df:a1:1c:0b:46:8f:96:8d:f8:00:4b:37:bf:91: 67:c8:d7:2d:71:04:71:b0:e8:56:be:53:1c:8f:6b:83:4a:98: ff:9b:00:e5:68:42:12:8f:30:96:3f:ad:2e:ac:63:e7:f2:0c: 5d:78:5c:73:5b:46:85:23:80:7a:c0:75:c2:d1:86:3a:c8:fd: 8b:fd:aa:78:04:57:d8:81:c9:a0:3b:f3:2c:9f:54:25:a0:f5: e6:8a:c7:f4:a4:b0:06:bb:a9:e5:58:f9:31:0e:8c:25:40:64: 74:28:c5:d3:6d:7b:c1:66:63:69:93:d6:06:68:8a:ea:cd:39: 02:72:09:c6:5e:d4:3f:fa:4e:48:9c:ea:ce:2b:75:9a:31:53: d5:c3:96:7d:46:61:d3:e2:d6:e2:70:5a:24:ce:5c:12:64:25: 0e:3d:1e:24:e3:b7:89:bb:17:8a:c6:ff:c7:52:ef:da:de:d6: 05:1f:38:63:70:e2:03:9a:19:84:01:18:da:7c:e7:5f:1d:aa: ed:e7:fa:a5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKq+cW9ZHI9PbKmNPKVM0vDtdA/8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA0MDAxMTE4WhcNMjUwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZDNkNDZkMmIzNmNkZmJiNDlmYmU0ZWM2ZDdhMzIxNWVl N2MwNTg1NjM0NTBkYzY3MmNhYTBmODgzYTU0OWE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/W/0Julxkh2mKvRDQT/jowsm2gLCK9XRqRi+3Rz7BkCIC b2j50OWs3hqrqmfgwcjbyALWhGpOHOU9+j916GxwOWlAtv3JyMrzsUpI17HfKJww ihCtdbKMaTmxOR568unT3RqpW83u7Xe2lkglqzFESpiD3UdqPqRtTydj7v0DgDFP +MGwAgMQW39J32IW0OFFs2DH35KUq2J2CHum7tgeWO7t8pMRJ9PT6Mf/Geh956L9 xXAvnKvKfsjZinOFhwZ2dVQtpZMO30KwvdjfMqFRyHcB6L//xrq11Nke5s+5m5Ut 7n6UD4J6tTkkDIFwEMT62Z8MTbfu1yJWKSYr1aafAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3xWLAzdfL+GsABP0qHR8GMsJyN4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IxNTY0ZjRhLTdkZjAtNDkzMi1hZjk2LTFlYmZmZmYyZTQyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVIHQAwDQYJKoZIhvcNAQELBQADggEBAAxV6VdJEdrKBBo+x3/PwK8GDFt3 Q+kNRpCZesj9JShuGmTxLw4v9OLOqi697dh3XKNHjjDL/qhRuynfoRwLRo+WjfgA Sze/kWfI1y1xBHGw6Fa+UxyPa4NKmP+bAOVoQhKPMJY/rS6sY+fyDF14XHNbRoUj gHrAdcLRhjrI/Yv9qngEV9iByaA78yyfVCWg9eaKx/SksAa7qeVY+TEOjCVAZHQo xdNte8FmY2mT1gZoiurNOQJyCcZe1D/6Tkic6s4rdZoxU9XDln1GYdPi1uJwWiTO XBJkJQ49HiTjt4m7F4rG/8dS79re1gUfOGNw4gOaGYQBGNp8518dqu3n+qU= -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:49 2025 by rpki-client