$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbc87493-0fce-429d-8060-e6fb407a845b.roa File: cbc87493-0fce-429d-8060-e6fb407a845b.roa (raw, json) Hash identifier: XxlLP0REBHlbyJfrNiWKv22dMyb9u5/1S9Xk2DYyu4Y= Subject key identifier: C3:85:BC:34:6C:20:94:70:E4:9A:AC:50:58:F2:63:F7:F3:68:B0:4C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E3AE9B450EBBFAE6DF9695CDB6816D6A6C884E7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbc87493-0fce-429d-8060-e6fb407a845b.roa Signing time: Mon 31 Mar 2025 16:01:31 +0000 ROA not before: Mon 31 Mar 2025 16:01:31 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 98.82.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3a:e9:b4:50:eb:bf:ae:6d:f9:69:5c:db:68:16:d6:a6:c8:84:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 31 16:01:31 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:51:bb:5f:02:ff:bf:42:22:33:55:75:b0:2f: bf:39:d7:78:9a:c1:05:60:f8:58:c6:ab:6a:3d:d5: da:6c:20:7b:3a:5c:d0:35:a7:08:5d:d3:16:e6:c2: 05:2f:14:a6:00:d2:08:ce:98:ea:01:41:58:8f:84: d2:9f:62:46:da:23:71:ae:f4:bc:32:d1:ea:b4:fd: 62:76:d6:2c:cd:bb:14:b9:ee:c5:b2:ef:7c:22:0d: 1f:1d:4b:7b:34:5b:89:f5:7e:77:3f:39:1b:c5:ef: 10:eb:ab:e0:0e:aa:d4:ae:bc:16:06:97:ce:13:15: 88:09:03:c7:73:aa:4a:4f:b9:cb:c0:d1:07:82:23: fb:dd:67:32:17:12:af:70:04:e6:94:82:c2:a9:e5: cd:f7:b9:3d:8b:64:7f:08:40:d6:b8:45:34:06:ab: 15:74:e6:9c:86:1b:08:d0:45:e8:79:9f:65:5c:6b: f3:9f:ec:43:2f:10:05:2b:a3:2f:33:5f:2c:11:57: a4:45:5e:69:92:e6:70:db:6e:ef:ed:a4:29:94:f0: f4:f1:f6:7a:63:fe:77:7b:7b:1a:03:66:63:db:e5: 07:c4:72:f6:97:1e:00:59:7d:f4:ed:f5:00:64:e8: df:8e:18:f4:fd:9d:a5:a8:a2:95:dd:1a:88:69:c9: 57:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:85:BC:34:6C:20:94:70:E4:9A:AC:50:58:F2:63:F7:F3:68:B0:4C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbc87493-0fce-429d-8060-e6fb407a845b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.82.158.0/23 Signature Algorithm: sha256WithRSAEncryption c3:27:5f:63:5b:a8:ed:a6:ce:dc:14:3f:c8:aa:ce:d0:81:87: d4:14:6f:89:c4:64:71:b6:b1:90:83:79:5f:3d:e1:b5:2f:ac: 06:0b:a1:c7:9a:80:19:41:31:1d:e3:cf:67:10:b1:be:6b:72: 32:52:df:ad:96:c6:30:3a:42:77:d4:cf:04:5f:b8:77:3c:fa: 60:2d:1a:27:95:07:1d:18:0b:32:90:bf:00:93:14:8c:fb:37: 89:7c:f3:f7:b3:98:19:17:85:5e:be:66:24:26:f0:ee:31:05: e9:02:f4:99:0a:44:df:17:0a:95:ab:5e:90:ee:e1:03:67:71: e5:71:65:65:2d:77:a7:58:97:bc:ef:2f:53:9f:51:54:10:2d: 15:f3:28:a1:dd:10:48:8c:fc:98:e5:71:07:0f:3c:32:43:8e: 6c:ea:3e:7e:66:2b:5f:8e:78:8b:20:bc:bc:18:55:26:d0:1d: 3b:7e:10:a0:de:ed:6e:2d:1a:86:d1:3d:c8:36:11:03:6b:df: c0:c7:31:11:bc:f9:6c:e4:cd:ce:18:60:f1:81:b1:e6:bc:53: 5d:9b:38:27:e2:f1:10:e3:d0:ef:df:5b:49:f1:3e:54:aa:db: bf:4e:94:8a:df:9c:bd:da:a2:e1:30:32:6a:d2:df:36:92:fe: cb:77:f7:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfjrptFDrv65t+Wlc22gW1qbIhOcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTYwMTMxWhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzI2YzU1ZmZjMzdhYjJiMTFlZTI1MmIxYTJhYjBiOGIx NzNiOTE2MDQwNjdhNzgzNmNlOGIzZGMxMjkwZDcwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmUbtfAv+/QiIzVXWwL78513iawQVg+FjGq2o91dpsIHs6 XNA1pwhd0xbmwgUvFKYA0gjOmOoBQViPhNKfYkbaI3Gu9Lwy0eq0/WJ21izNuxS5 7sWy73wiDR8dS3s0W4n1fnc/ORvF7xDrq+AOqtSuvBYGl84TFYgJA8dzqkpPucvA 0QeCI/vdZzIXEq9wBOaUgsKp5c33uT2LZH8IQNa4RTQGqxV05pyGGwjQReh5n2Vc a/Of7EMvEAUroy8zXywRV6RFXmmS5nDbbu/tpCmU8PTx9npj/nd7exoDZmPb5QfE cvaXHgBZffTt9QBk6N+OGPT9naWoopXdGohpyVc7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUw4W8NGwglHDkmqxQWPJj9/NosEwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiYzg3NDkzLTBmY2UtNDI5ZC04MDYwLWU2ZmI0MDdhODQ1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFiUp4wDQYJKoZIhvcNAQELBQADggEBAMMnX2NbqO2mztwUP8iqztCBh9QU b4nEZHG2sZCDeV894bUvrAYLoceagBlBMR3jz2cQsb5rcjJS362WxjA6QnfUzwRf uHc8+mAtGieVBx0YCzKQvwCTFIz7N4l88/ezmBkXhV6+ZiQm8O4xBekC9JkKRN8X CpWrXpDu4QNnceVxZWUtd6dYl7zvL1OfUVQQLRXzKKHdEEiM/JjlcQcPPDJDjmzq Pn5mK1+OeIsgvLwYVSbQHTt+EKDe7W4tGobRPcg2EQNr38DHMRG8+Wzkzc4YYPGB sea8U12bOCfi8RDj0O/fW0nxPlSq279OlIrfnL3aouEwMmrS3zaS/st399k= -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:39 2025 by rpki-client