$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfac5e42-d87d-4980-a4d4-ab785bf678d8.roa File: cfac5e42-d87d-4980-a4d4-ab785bf678d8.roa (raw, json) Hash identifier: wP4K/3Eb7xG/sB4/0ys7l5j6GMYL85SiGKFiYWXTXg0= Subject key identifier: C8:C3:DE:FF:FC:BA:F9:86:7E:CA:49:33:E8:9F:05:6F:D9:B7:D8:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4BBD1993A55F985E7501FF81C828D9621534EDD3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfac5e42-d87d-4980-a4d4-ab785bf678d8.roa Signing time: Fri 28 Mar 2025 20:07:00 +0000 ROA not before: Fri 28 Mar 2025 20:07:00 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 114.56.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:bd:19:93:a5:5f:98:5e:75:01:ff:81:c8:28:d9:62:15:34:ed:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 20:07:00 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e5:e3:d2:4e:01:00:35:b5:16:37:ec:e1:40: f6:f1:d8:d2:0c:3a:ae:3d:7b:4b:10:c2:22:61:f4: d8:63:75:5a:72:e2:7f:f6:c6:a3:b3:57:e9:5a:3a: 65:6a:04:58:2f:40:ad:1c:da:89:ef:b3:8e:c3:50: a0:e8:ae:b7:d0:d3:76:46:06:1d:15:62:b7:20:15: d4:20:dd:27:2a:4e:a9:47:fc:60:3a:79:1d:7a:22: 42:0d:ec:d6:c2:5c:6b:66:e3:13:50:ce:48:99:67: 11:3d:18:e4:05:15:14:f1:e1:9c:70:d2:ae:9d:37: f6:a7:ff:94:9f:08:a7:ae:68:0c:b7:6f:0d:89:77: da:5f:d6:73:a3:5f:7b:57:ae:1f:b2:0a:97:c0:83: 73:a2:de:52:d2:f9:d4:5b:1b:bb:36:3b:19:6d:36: 74:6f:fe:4d:86:b8:2d:5a:ef:ca:40:6a:65:5e:d6: 54:eb:e5:d7:e2:a9:79:98:8c:2d:6a:95:27:2a:85: 1f:6b:bb:20:d6:8f:f1:58:69:5d:95:a8:6a:13:ff: 15:ef:10:ba:3d:8a:5e:99:82:dc:56:0a:d4:00:90: 9c:7a:47:97:c3:95:d0:08:65:20:00:66:4f:70:5b: 93:74:72:7e:5c:83:70:42:82:8f:78:28:68:56:3b: 3a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C3:DE:FF:FC:BA:F9:86:7E:CA:49:33:E8:9F:05:6F:D9:B7:D8:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfac5e42-d87d-4980-a4d4-ab785bf678d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.56.185.0/24 Signature Algorithm: sha256WithRSAEncryption d1:fe:fa:ac:c6:21:b9:c8:78:28:43:2f:76:fc:00:42:f4:e5: 5b:b7:68:a4:11:7b:b1:f6:bc:17:79:ed:8e:6f:22:a8:d8:90: ef:a6:95:ab:5c:1e:63:42:5b:cc:eb:e0:50:84:47:24:e7:30: 42:04:84:7d:3b:0f:b0:cc:fd:2a:66:25:be:72:ad:bf:60:69: d8:7c:3d:10:65:15:02:1c:e7:21:0f:33:10:03:1f:9f:99:51: 2a:b9:3a:0a:8d:d7:e5:a2:ed:97:fd:8f:ce:d4:b8:9a:8a:53: 5d:b8:7a:e9:6a:c0:db:18:2b:4b:1a:04:05:79:73:27:75:96: 74:8c:2e:e6:90:4b:34:9b:8a:60:b2:9c:59:74:a0:96:7f:27: 9d:7b:e5:13:6f:f6:ab:0d:d2:09:57:4a:79:bd:3c:04:8f:27: 97:c3:e6:e6:3c:96:26:5d:e5:1f:6c:d6:f8:7c:b3:52:46:89: 34:95:20:56:ae:fe:70:2b:ff:75:b0:c3:ae:df:58:85:4c:ee: 0c:5d:00:e8:15:66:6f:35:91:d4:f2:c2:18:b7:f6:34:34:e1: 20:6e:f0:28:8f:a6:d2:16:4c:ac:74:c3:02:a3:a4:02:c8:b4: 4e:d2:a7:cb:26:a9:6e:57:d4:e5:37:d9:0c:07:ea:60:0c:34: e3:9a:8d:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS70Zk6VfmF51Af+ByCjZYhU07dMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MjAwNzAwWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NGE4YzE2YWE5MDY4YzBkOGVjODg2ZDdmOTY4Y2VjZDcw N2E2ZGYyZGExYmJjMWEyNmY4YmJkMDZjZGZmZjY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH5ePSTgEANbUWN+zhQPbx2NIMOq49e0sQwiJh9NhjdVpy 4n/2xqOzV+laOmVqBFgvQK0c2onvs47DUKDorrfQ03ZGBh0VYrcgFdQg3ScqTqlH /GA6eR16IkIN7NbCXGtm4xNQzkiZZxE9GOQFFRTx4Zxw0q6dN/an/5SfCKeuaAy3 bw2Jd9pf1nOjX3tXrh+yCpfAg3Oi3lLS+dRbG7s2OxltNnRv/k2GuC1a78pAamVe 1lTr5dfiqXmYjC1qlScqhR9ruyDWj/FYaV2VqGoT/xXvELo9il6ZgtxWCtQAkJx6 R5fDldAIZSAAZk9wW5N0cn5cg3BCgo94KGhWOzpnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyMPe//y6+YZ+ykkz6J8Fb9m32C0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmYWM1ZTQyLWQ4N2QtNDk4MC1hNGQ0LWFiNzg1YmY2NzhkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAByOLkwDQYJKoZIhvcNAQELBQADggEBANH++qzGIbnIeChDL3b8AEL05Vu3 aKQRe7H2vBd57Y5vIqjYkO+mlatcHmNCW8zr4FCERyTnMEIEhH07D7DM/SpmJb5y rb9gadh8PRBlFQIc5yEPMxADH5+ZUSq5OgqN1+Wi7Zf9j87UuJqKU124eulqwNsY K0saBAV5cyd1lnSMLuaQSzSbimCynFl0oJZ/J5175RNv9qsN0glXSnm9PASPJ5fD 5uY8liZd5R9s1vh8s1JGiTSVIFau/nAr/3Www67fWIVM7gxdAOgVZm81kdTywhi3 9jQ04SBu8CiPptIWTKx0wwKjpALItE7Sp8smqW5X1OU32QwH6mAMNOOajY4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:19:45 2025 by rpki-client