$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa File: b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa (raw, json) Hash identifier: /c/MzlWVAgbbv2wewpEeaVqjZOeaCqWvtz+9QhHX8eg= Subject key identifier: 1F:B7:78:26:EE:CD:8E:11:5C:CC:97:FA:1F:87:28:C8:4F:7A:12:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E75480799A0C12A807E7E42B315D2348B8DAF47 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa Signing time: Wed 12 Mar 2025 00:11:49 +0000 ROA not before: Wed 12 Mar 2025 00:11:49 +0000 ROA not after: Wed 16 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.150.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:75:48:07:99:a0:c1:2a:80:7e:7e:42:b3:15:d2:34:8b:8d:af:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 00:11:49 2025 GMT Not After : Apr 16 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:94:95:3a:d8:4d:dc:bb:ae:f5:fd:9b:04: 76:5b:3a:47:22:ad:22:9a:f0:0b:57:3a:3c:ce:24: da:d3:85:d6:82:12:d4:71:95:d2:59:2c:d1:95:27: bc:d6:57:a6:4d:8c:ce:09:48:c9:40:c6:0b:2c:72: 33:94:6d:8c:62:33:fc:e8:47:a2:64:98:1c:33:dc: a6:c9:52:fb:1a:2e:09:37:61:4c:08:3d:6a:84:d9: 0c:ac:69:3c:15:85:99:73:60:94:46:63:6c:76:b2: 1e:1d:aa:1e:94:18:ca:3f:5c:6e:ac:e3:b0:71:94: fe:b1:60:7b:9c:ef:c9:8b:f4:c8:0a:90:65:8f:01: cc:ac:2f:df:f4:3e:d7:23:33:ad:96:25:28:af:80: f5:5c:56:7d:e2:f0:b1:78:67:22:e1:fe:8f:91:61: c7:ae:50:c7:35:04:7d:a5:51:63:62:f7:f2:a1:f5: d8:86:36:23:46:02:ee:2b:6a:d1:cd:0a:14:86:4d: ef:89:31:14:31:ed:86:cf:81:a7:19:8c:a6:e7:d3: cc:eb:8e:3b:89:ae:d4:7d:b5:a4:2e:aa:a7:a8:26: df:78:8e:f9:9d:1b:54:2d:a3:37:be:62:34:ee:5c: 88:57:b1:62:52:de:b7:ac:4a:c1:d8:ff:8d:f6:8d: d7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B7:78:26:EE:CD:8E:11:5C:CC:97:FA:1F:87:28:C8:4F:7A:12:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.150.0.0/16 Signature Algorithm: sha256WithRSAEncryption d4:0d:8a:24:6d:4f:40:b0:ed:b6:35:0c:00:8a:d7:21:b4:9e: 47:3d:55:b0:8b:d1:dd:69:7d:f1:e1:0c:f6:f9:d6:c6:53:99: fa:8d:65:72:88:60:b8:a9:84:6a:7d:cd:d5:b0:58:23:f6:21: 08:51:71:13:bf:9a:0a:f0:23:ef:33:f2:c8:4f:33:49:e3:8e: b1:d7:40:8f:25:05:3e:f5:dc:d8:7c:19:be:2e:57:0f:d0:d2: f4:46:6c:26:50:2c:db:cf:f4:d0:d9:72:e6:92:07:50:30:1a: b7:bb:bd:6f:03:73:77:3d:1c:92:a0:7c:dd:8d:9f:55:6d:2b: 13:09:5e:ec:8e:7e:db:de:de:10:79:df:f5:b0:88:d9:6c:ac: d8:a0:54:a2:c9:b8:f2:4f:7e:59:93:b2:b8:87:e9:3a:19:4d: e5:52:aa:1c:89:5e:9f:f9:15:ec:7e:46:d4:01:67:4a:4e:a3: 05:e8:c8:83:88:43:9e:02:ab:00:a0:e6:6c:75:1d:0a:c4:09: 4d:c3:14:9c:41:ef:1e:fa:70:43:4b:33:20:88:ac:15:17:ed: 23:b9:9f:c5:f4:30:09:11:2f:6a:a6:d8:44:27:77:d9:60:74: 32:09:8c:74:03:e1:dc:dc:69:47:ae:e9:aa:3b:4f:0e:7a:5a: df:5d:c2:6d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTnVIB5mgwSqAfn5CsxXSNIuNr0cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzEyMDAxMTQ5WhcNMjUwNDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZDEwNjExYzg3NDcwZmZmYmFmYmYzZTVjNDQ1YTA5NjNi YTNmMTcyYTk1YWIxZDc2OGJlNmZiY2MxMTc4OTk1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0CpSVOthN3Luu9f2bBHZbOkcirSKa8AtXOjzOJNrThdaC EtRxldJZLNGVJ7zWV6ZNjM4JSMlAxgsscjOUbYxiM/zoR6JkmBwz3KbJUvsaLgk3 YUwIPWqE2QysaTwVhZlzYJRGY2x2sh4dqh6UGMo/XG6s47BxlP6xYHuc78mL9MgK kGWPAcysL9/0PtcjM62WJSivgPVcVn3i8LF4ZyLh/o+RYceuUMc1BH2lUWNi9/Kh 9diGNiNGAu4ratHNChSGTe+JMRQx7YbPgacZjKbn08zrjjuJrtR9taQuqqeoJt94 jvmdG1Qtoze+YjTuXIhXsWJS3resSsHY/432jdfzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUH7d4Ju7NjhFczJf6H4coyE96EnwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I5ZTI2MDZhLTcwYjAtNDVjYy1hMDNkLWI1YTU0ZmI5Yjc1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQljANBgkqhkiG9w0BAQsFAAOCAQEA1A2KJG1PQLDttjUMAIrXIbSeRz1V sIvR3Wl98eEM9vnWxlOZ+o1lcohguKmEan3N1bBYI/YhCFFxE7+aCvAj7zPyyE8z SeOOsddAjyUFPvXc2HwZvi5XD9DS9EZsJlAs28/00Nly5pIHUDAat7u9bwNzdz0c kqB83Y2fVW0rEwle7I5+297eEHnf9bCI2Wys2KBUosm48k9+WZOyuIfpOhlN5VKq HIlen/kV7H5G1AFnSk6jBejIg4hDngKrAKDmbHUdCsQJTcMUnEHvHvpwQ0szIIis FRftI7mfxfQwCREvaqbYRCd32WB0MgmMdAPh3NxpR67pqjtPDnpa313CbQ== -----END CERTIFICATE-----Generated at Sat Apr 5 11:12:11 2025 by rpki-client