$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c33c1fa0-c684-4fc0-8fb4-477281ed1723.roa File: c33c1fa0-c684-4fc0-8fb4-477281ed1723.roa (raw, json) Hash identifier: yGe15Z28cWMiwitc7l5qu1LpaIkszsipkuI7Cv+FG3w= Subject key identifier: AB:82:09:04:CC:F8:92:52:22:BC:C1:7B:94:90:C4:E0:9A:A3:7A:3F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 60E02B20B84D665CFC46DAA754CBC18C3D1D70F3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c33c1fa0-c684-4fc0-8fb4-477281ed1723.roa Signing time: Mon 24 Mar 2025 15:42:09 +0000 ROA not before: Mon 24 Mar 2025 15:42:09 +0000 ROA not after: Mon 28 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 66.155.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e0:2b:20:b8:4d:66:5c:fc:46:da:a7:54:cb:c1:8c:3d:1d:70:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 24 15:42:09 2025 GMT Not After : Apr 28 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:05:55:aa:dc:6a:25:e7:b2:27:4e:be:f8: b1:61:5c:d7:e9:44:2b:d2:4a:b9:53:50:4b:a7:06: f8:9e:9c:0e:16:88:4d:8e:1f:3c:40:4b:ed:82:d6: 1a:98:99:21:ca:34:b8:cf:d0:3b:b2:5f:69:7e:28: 15:20:e6:1a:cc:ae:51:7e:03:c1:ac:ce:1b:0d:ca: 4c:7c:24:04:47:6d:93:7a:fe:6c:22:37:bb:db:e9: 75:c8:39:86:1d:90:5e:c2:23:0f:c0:61:37:cd:57: 0c:57:d5:cf:63:ea:ab:2b:33:2f:22:69:dd:87:17: f3:11:ee:f2:5d:c7:88:e3:d7:4e:ac:3c:1e:86:d0: f0:0a:93:8b:b0:87:a4:1b:5a:e0:ef:fb:66:1a:54: 0e:a1:bd:b6:46:2c:17:c6:01:37:23:fa:58:75:b6: 64:5d:19:c9:4c:5c:30:d8:3e:1d:14:c5:68:07:dd: a4:0e:4e:c0:00:11:e2:7a:63:18:16:2e:fe:c9:a3: 6c:bf:c1:0c:1e:dc:07:7c:6b:75:f1:fa:8d:54:21: b4:86:ef:4f:b8:b5:7c:af:04:ff:cb:11:4e:e4:1a: f7:3d:28:39:d0:de:08:69:e7:0d:58:39:b6:e4:36: e1:45:da:22:ec:66:c0:1f:30:15:ad:eb:63:21:af: 63:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:82:09:04:CC:F8:92:52:22:BC:C1:7B:94:90:C4:E0:9A:A3:7A:3F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c33c1fa0-c684-4fc0-8fb4-477281ed1723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.155.112.0/20 Signature Algorithm: sha256WithRSAEncryption bb:9f:a5:44:65:82:de:7c:7f:83:f3:e2:c8:ed:b7:6a:42:a7: 37:47:37:37:6e:ce:e3:c3:12:5e:70:18:1a:7c:42:70:d8:65: cd:b6:23:8c:02:41:7e:13:29:90:80:c1:a7:3b:df:f9:c0:89: 19:eb:c9:02:5c:e2:b0:3a:0a:8b:60:4f:1d:da:5e:96:3d:8a: 1c:72:67:c9:33:44:d7:de:e5:5a:b8:95:75:ec:d2:d3:84:f9: 7d:78:c7:93:24:4f:21:87:a3:a8:b0:70:37:f0:41:2a:32:69: 29:e5:58:03:fe:59:95:22:11:74:e0:3b:fc:ed:ca:8e:0a:54: 22:b4:84:cc:78:f1:f8:46:17:37:84:e3:94:fe:fd:55:82:39: 30:ed:e1:bf:72:6d:20:c1:bc:8b:2e:6e:c7:16:8d:6f:d8:3c: fc:76:ee:61:a0:5c:74:09:9f:93:a4:17:e5:92:1f:47:e9:c4: a2:a5:ee:c6:8d:1f:10:e4:72:d4:30:67:d5:f4:17:94:ca:6a: 97:d5:71:74:fb:89:5f:ec:c6:b4:5c:87:20:c5:57:64:6e:db: c6:65:bb:0c:0f:7d:32:11:65:c1:77:7f:68:cc:cb:51:3b:99: f1:59:15:d4:f3:c0:93:3d:af:95:0c:6d:57:82:f1:1b:d6:2d: d7:e6:98:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYOArILhNZlz8RtqnVMvBjD0dcPMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI0MTU0MjA5WhcNMjUwNDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YThjYTA5NTdiNWNlNDUyNzlhNDE3OGI5YTIxN2Q5MDRh YzNjNTUzMTAxNDk5MmRlZmM3MmUyMmU3M2MwZWEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2HAVVqtxqJeeyJ06++LFhXNfpRCvSSrlTUEunBvienA4W iE2OHzxAS+2C1hqYmSHKNLjP0DuyX2l+KBUg5hrMrlF+A8GszhsNykx8JARHbZN6 /mwiN7vb6XXIOYYdkF7CIw/AYTfNVwxX1c9j6qsrMy8iad2HF/MR7vJdx4jj106s PB6G0PAKk4uwh6QbWuDv+2YaVA6hvbZGLBfGATcj+lh1tmRdGclMXDDYPh0UxWgH 3aQOTsAAEeJ6YxgWLv7Jo2y/wQwe3Ad8a3Xx+o1UIbSG70+4tXyvBP/LEU7kGvc9 KDnQ3ghp5w1YObbkNuFF2iLsZsAfMBWt62Mhr2OJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUq4IJBMz4klIivMF7lJDE4Jqjej8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MzM2MxZmEwLWM2ODQtNGZjMC04ZmI0LTQ3NzI4MWVkMTcyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARCm3AwDQYJKoZIhvcNAQELBQADggEBALufpURlgt58f4Pz4sjtt2pCpzdH NzduzuPDEl5wGBp8QnDYZc22I4wCQX4TKZCAwac73/nAiRnryQJc4rA6CotgTx3a XpY9ihxyZ8kzRNfe5Vq4lXXs0tOE+X14x5MkTyGHo6iwcDfwQSoyaSnlWAP+WZUi EXTgO/ztyo4KVCK0hMx48fhGFzeE45T+/VWCOTDt4b9ybSDBvIsubscWjW/YPPx2 7mGgXHQJn5OkF+WSH0fpxKKl7saNHxDkctQwZ9X0F5TKapfVcXT7iV/sxrRchyDF V2Ru28ZluwwPfTIRZcF3f2jMy1E7mfFZFdTzwJM9r5UMbVeC8RvWLdfmmLs= -----END CERTIFICATE-----Generated at Sat Apr 5 11:17:43 2025 by rpki-client