$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8a1d699-66bf-4eac-bb45-6e3527625d81.roa File: b8a1d699-66bf-4eac-bb45-6e3527625d81.roa (raw, json) Hash identifier: vNcIamHTCa79oOl85mwydRKDYc82gIn3a5/Fa5NzUno= Subject key identifier: 92:71:1C:46:DD:92:7A:F1:FE:BE:BF:98:0F:0F:60:92:B9:AE:FA:C5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 67B7DECAE28A35760B508360FB00CE214F2B1434 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8a1d699-66bf-4eac-bb45-6e3527625d81.roa Signing time: Fri 28 Mar 2025 00:01:11 +0000 ROA not before: Fri 28 Mar 2025 00:01:11 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 192.43.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b7:de:ca:e2:8a:35:76:0b:50:83:60:fb:00:ce:21:4f:2b:14:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 00:01:11 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c3:ac:bc:0e:92:d2:40:2d:df:53:36:c7:d8: 00:b9:77:2f:d4:74:23:fe:9f:b4:07:ac:c1:76:e4: bc:51:cd:2a:dc:f1:b1:0f:05:03:b9:c6:0d:b6:dd: 53:65:51:08:f9:11:79:41:16:d3:7c:1f:c7:93:dd: 41:5e:1f:2f:18:11:4c:71:6a:6a:a4:4d:fd:90:f6: 5e:fb:59:c7:87:47:c9:21:a5:70:b6:22:87:36:86: cb:b4:fe:1e:04:0a:36:fd:92:5c:03:f3:2e:37:5c: 0c:9d:f2:9f:79:3a:d8:6a:78:62:a3:41:81:90:1a: 28:b3:cf:4b:21:f3:ff:d1:07:24:52:48:9c:e7:df: 65:b4:69:aa:b6:8f:d0:4b:a8:f3:25:51:db:a9:f0: c7:d8:fb:5c:d5:a3:a3:c6:c4:42:b5:48:28:da:8c: c7:22:df:28:55:0a:cb:7d:63:b3:57:84:8f:c3:60: dd:61:67:31:73:ea:aa:1d:79:5d:db:ec:d5:6c:d4: f2:ad:54:82:fb:aa:93:8b:15:19:dd:4e:e3:56:16: 2f:ad:88:f4:73:88:e7:c5:cd:67:0c:2b:4a:6d:a8: 1d:5c:8d:63:62:65:df:84:d8:3a:fc:30:34:71:c6: 86:fe:5e:64:4b:66:ee:f2:67:e9:7b:ad:d3:c7:90: 05:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:71:1C:46:DD:92:7A:F1:FE:BE:BF:98:0F:0F:60:92:B9:AE:FA:C5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8a1d699-66bf-4eac-bb45-6e3527625d81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.43.184.0/24 Signature Algorithm: sha256WithRSAEncryption 21:8d:e9:da:d6:63:a1:f9:bf:47:58:21:f0:0b:92:79:64:ba: 0d:e2:53:7f:e0:dc:46:06:c3:91:0f:42:8c:4a:6b:8b:c5:92: ea:cc:44:cb:f4:8b:ed:66:78:1a:15:bd:8c:d2:5d:48:01:b8: e3:fd:85:4e:0b:9b:2a:7d:cc:33:dd:5a:72:21:36:2d:0a:b3: b5:93:95:e9:b8:f0:be:63:2e:44:b3:3f:1b:d6:cd:bf:dd:25: 13:5d:36:34:ba:73:7f:e9:c6:80:b2:a1:8d:c8:36:1e:29:59: 6d:76:25:1c:f6:f1:05:f8:35:bd:b8:6d:3b:62:c8:83:2e:bb: 06:6f:bb:72:f7:16:6b:a5:77:13:a2:9c:f7:81:2e:f2:b9:48: 9a:43:dc:4d:99:6f:5e:1e:f4:84:61:dc:a5:04:92:61:12:d6: 55:b2:69:93:bc:24:7e:c7:0c:d2:a5:2c:55:a5:c4:a9:97:6d: 3c:0e:19:ed:06:82:2f:f6:94:e2:a6:4c:6b:46:44:d9:f3:b6: 21:d6:0d:1d:4a:7d:45:b9:49:e4:c1:c4:f5:98:05:35:7b:df: 76:bf:a2:28:19:66:1b:3a:1f:ae:87:42:f4:2a:d3:c4:02:4c: 97:70:30:17:1f:41:09:a2:e8:8e:fa:d6:ac:d9:28:c4:27:e8: ec:0b:3e:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ7feyuKKNXYLUINg+wDOIU8rFDQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MDAwMTExWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMmY0ODYzYzY4YWIwNGE4MDUyNDlmZGFkMWQ0MjNkMDg1 MGYyMzI5M2Y4MzJlYmE2ODRhNmQwYWI4MGVmMjdlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXw6y8DpLSQC3fUzbH2AC5dy/UdCP+n7QHrMF25LxRzSrc 8bEPBQO5xg223VNlUQj5EXlBFtN8H8eT3UFeHy8YEUxxamqkTf2Q9l77WceHR8kh pXC2Ioc2hsu0/h4ECjb9klwD8y43XAyd8p95OthqeGKjQYGQGiizz0sh8//RByRS SJzn32W0aaq2j9BLqPMlUdup8MfY+1zVo6PGxEK1SCjajMci3yhVCst9Y7NXhI/D YN1hZzFz6qodeV3b7NVs1PKtVIL7qpOLFRndTuNWFi+tiPRziOfFzWcMK0ptqB1c jWNiZd+E2Dr8MDRxxob+XmRLZu7yZ+l7rdPHkAUnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUknEcRt2SevH+vr+YDw9gkrmu+sUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4YTFkNjk5LTY2YmYtNGVhYy1iYjQ1LTZlMzUyNzYyNWQ4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADAK7gwDQYJKoZIhvcNAQELBQADggEBACGN6drWY6H5v0dYIfALknlkug3i U3/g3EYGw5EPQoxKa4vFkurMRMv0i+1meBoVvYzSXUgBuOP9hU4Lmyp9zDPdWnIh Ni0Ks7WTlem48L5jLkSzPxvWzb/dJRNdNjS6c3/pxoCyoY3INh4pWW12JRz28QX4 Nb24bTtiyIMuuwZvu3L3FmuldxOinPeBLvK5SJpD3E2Zb14e9IRh3KUEkmES1lWy aZO8JH7HDNKlLFWlxKmXbTwOGe0Ggi/2lOKmTGtGRNnztiHWDR1KfUW5SeTBxPWY BTV733a/oigZZhs6H66HQvQq08QCTJdwMBcfQQmi6I761qzZKMQn6OwLPug= -----END CERTIFICATE-----Generated at Sat Apr 5 08:17:22 2025 by rpki-client