$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c47ed4c8-aa67-496c-9b5b-0bd92c0e3008.roa File: c47ed4c8-aa67-496c-9b5b-0bd92c0e3008.roa (raw, json) Hash identifier: MCmqPIUkrZHGcwVHpm8ISgcgAsqBlxaeF/gjKV4UOEI= Subject key identifier: 1A:F8:D2:8E:93:50:9F:3F:E0:36:D5:8C:48:50:BB:09:EA:DA:61:CB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F3F012F9639D91E3DB82EB5CE6331867198418B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c47ed4c8-aa67-496c-9b5b-0bd92c0e3008.roa Signing time: Fri 28 Mar 2025 15:12:06 +0000 ROA not before: Fri 28 Mar 2025 15:12:06 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.194.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3f:01:2f:96:39:d9:1e:3d:b8:2e:b5:ce:63:31:86:71:98:41:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 15:12:06 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:39:c2:a2:7d:0d:be:91:bf:e6:86:db:c4:f8: 58:d0:9c:96:59:5c:0c:60:71:26:19:78:e6:81:55: 83:84:07:c7:c0:d3:18:66:f4:e8:cd:9f:e5:02:8b: c2:c6:9e:f0:69:66:62:41:8b:16:c6:d8:82:95:a0: c3:6e:d4:8e:20:24:4b:f0:07:4a:64:c4:aa:c9:8e: 09:ee:16:ed:11:12:9c:fb:95:1e:53:08:31:19:b5: 3d:37:36:be:16:03:ef:a9:af:c6:73:c7:16:52:78: 4b:ff:45:c6:c8:41:7d:1d:3c:1b:e9:ed:be:35:7e: f9:d9:3f:57:64:0a:dc:3d:aa:ef:de:06:12:f5:04: 78:d9:a5:ce:7c:57:76:77:34:09:7b:47:ae:ea:ee: 30:81:49:f4:a9:89:ea:99:65:00:79:fe:5b:8f:3e: f3:03:4e:47:79:15:78:20:25:8a:93:a4:66:a7:a4: e1:9b:7f:85:85:3b:a2:3c:e0:e3:9f:81:41:92:ad: 48:86:10:1d:32:5f:91:ab:75:cd:88:60:d5:9b:54: 70:75:64:d1:dc:8b:cc:f0:1c:21:8c:37:98:ad:cf: 34:d3:c8:52:fb:87:e4:05:1f:d5:7a:9b:5f:3e:83: 80:28:68:49:b8:0c:4c:c3:8e:c7:d5:cf:eb:c6:63: 3c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F8:D2:8E:93:50:9F:3F:E0:36:D5:8C:48:50:BB:09:EA:DA:61:CB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c47ed4c8-aa67-496c-9b5b-0bd92c0e3008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.194.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3a:b7:73:d0:21:ff:ea:b0:e4:74:a5:28:3b:30:e2:29:0f:5d: a3:85:a8:7f:b7:02:fb:0b:ec:27:45:45:16:91:d1:b8:7e:3d: 07:c3:14:42:44:e9:c5:32:63:f7:27:a3:03:92:a0:17:f7:ac: 19:00:43:83:1c:00:4a:99:2c:d8:40:9a:0b:38:05:a9:b2:10: f8:b1:91:3e:91:ae:b3:b5:ce:84:36:20:44:bb:3c:a6:82:0a: 5a:cb:22:95:ce:03:75:0c:0f:72:4e:02:b0:34:41:84:f9:82: 8d:96:35:fa:12:d4:35:a2:78:e1:e8:8f:3d:33:57:94:ec:aa: 87:69:7e:ba:c5:a2:d5:71:42:26:b2:26:b8:c3:3f:82:af:3e: 39:41:26:ce:ab:de:df:06:05:3c:b4:ec:d1:64:07:6a:80:31: 6a:3c:95:88:b3:df:7d:ac:b4:9b:21:f5:ac:4d:95:93:0a:ac: b7:00:cf:16:26:7c:6e:66:c3:fb:0a:10:40:72:ca:c4:8f:7f: 80:d5:7d:95:1d:88:b0:02:b8:4b:b4:df:20:02:b5:55:8c:fd: fc:1f:90:57:27:67:26:5e:a3:ef:94:29:44:12:23:4a:ed:9d: 25:75:3f:db:ac:17:0a:19:4b:a8:0f:95:d5:3a:0c:35:4f:9c: bb:ff:0b:ed -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXz8BL5Y52R49uC61zmMxhnGYQYswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTUxMjA2WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMDhkYzYxZDlmYjY5ZmQ2NTBhYzdlNzgyZTg1ZTM0NjQw M2E0Nzc0MjIyOWVjZTQ2ZDcxNTllNTMzMDIyOTE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwOcKifQ2+kb/mhtvE+FjQnJZZXAxgcSYZeOaBVYOEB8fA 0xhm9OjNn+UCi8LGnvBpZmJBixbG2IKVoMNu1I4gJEvwB0pkxKrJjgnuFu0REpz7 lR5TCDEZtT03Nr4WA++pr8ZzxxZSeEv/RcbIQX0dPBvp7b41fvnZP1dkCtw9qu/e BhL1BHjZpc58V3Z3NAl7R67q7jCBSfSpieqZZQB5/luPPvMDTkd5FXggJYqTpGan pOGbf4WFO6I84OOfgUGSrUiGEB0yX5Grdc2IYNWbVHB1ZNHci8zwHCGMN5itzzTT yFL7h+QFH9V6m18+g4AoaEm4DEzDjsfVz+vGYzwjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUGvjSjpNQnz/gNtWMSFC7CeraYcswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M0N2VkNGM4LWFhNjctNDk2Yy05YjViLTBiZDkyYzBlMzAwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQwjANBgkqhkiG9w0BAQsFAAOCAQEAOrdz0CH/6rDkdKUoOzDiKQ9do4Wo f7cC+wvsJ0VFFpHRuH49B8MUQkTpxTJj9yejA5KgF/esGQBDgxwASpks2ECaCzgF qbIQ+LGRPpGus7XOhDYgRLs8poIKWssilc4DdQwPck4CsDRBhPmCjZY1+hLUNaJ4 4eiPPTNXlOyqh2l+usWi1XFCJrImuMM/gq8+OUEmzqve3wYFPLTs0WQHaoAxajyV iLPffay0myH1rE2VkwqstwDPFiZ8bmbD+woQQHLKxI9/gNV9lR2IsAK4S7TfIAK1 VYz9/B+QVydnJl6j75QpRBIjSu2dJXU/26wXChlLqA+V1ToMNU+cu/8L7Q== -----END CERTIFICATE-----Generated at Sat Apr 5 11:02:15 2025 by rpki-client