$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d556d4ad-3617-4c1e-8e59-ecf8fec0873e.roa File: d556d4ad-3617-4c1e-8e59-ecf8fec0873e.roa (raw, json) Hash identifier: WkCWYwL3+2SSDgf62aRlrYT849TYRUYWo5b5dncOjHE= Subject key identifier: 9E:BD:A9:B0:A7:B0:55:63:EC:5F:82:8D:01:E7:14:22:00:42:0C:E9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 07FB3B92ED2360F823CCF7F5E46B14048925C67E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d556d4ad-3617-4c1e-8e59-ecf8fec0873e.roa Signing time: Wed 19 Mar 2025 00:11:13 +0000 ROA not before: Wed 19 Mar 2025 00:11:13 +0000 ROA not after: Wed 23 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 184.72.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:fb:3b:92:ed:23:60:f8:23:cc:f7:f5:e4:6b:14:04:89:25:c6:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 19 00:11:13 2025 GMT Not After : Apr 23 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a7:67:83:3e:83:a7:27:5b:c2:e1:0d:df:53: 65:9d:5d:e4:41:0e:1f:8b:10:7c:f8:76:b6:1e:7e: 01:16:5f:0a:45:89:c6:ba:b4:5b:41:a3:d9:4d:3e: 53:e9:d2:3b:f6:75:0f:73:be:dd:b7:ad:38:21:cd: 10:f8:a2:ed:77:87:fe:5b:f1:a5:96:8a:fb:dc:fb: ee:73:38:1d:c2:00:22:86:7a:89:87:79:21:26:3e: a0:58:eb:51:9f:fb:a2:ad:fe:74:1f:9f:97:92:20: 2a:37:08:e8:62:42:0d:33:48:4f:5d:aa:78:b4:36: 52:e2:7e:ce:ed:2b:7d:18:91:18:26:4c:97:97:d6: 69:b5:a7:c0:93:e9:e9:a0:02:5a:75:69:f3:7a:fe: fe:c3:ac:32:21:83:24:08:c1:63:ea:b6:93:09:fa: 3d:1a:50:a3:64:e4:db:22:a5:d8:2f:99:e1:70:31: b0:3e:72:60:a8:d0:1d:5f:a7:d6:28:5f:92:e9:87: 5a:85:2d:e0:9a:cd:cd:22:63:de:5b:2b:1e:8d:db: 47:de:cd:e6:83:21:ff:d0:c0:e3:e1:9d:5f:7f:d7: 01:bd:b1:91:dc:44:83:3b:3d:44:7e:5b:cd:60:7b: 68:db:89:6c:d4:91:cd:f1:4c:0a:9e:83:d1:e4:8d: 7e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BD:A9:B0:A7:B0:55:63:EC:5F:82:8D:01:E7:14:22:00:42:0C:E9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d556d4ad-3617-4c1e-8e59-ecf8fec0873e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.93.0/24 Signature Algorithm: sha256WithRSAEncryption 43:16:5d:b9:29:63:29:c2:46:98:ed:3b:77:2e:69:fa:3b:76: 22:66:4e:ba:02:c8:8f:95:23:95:34:d9:82:de:55:59:e9:ac: a2:bc:11:c8:0f:e5:3b:c7:67:44:80:92:79:22:c0:95:25:b0: d3:d8:7b:08:f4:b0:e5:7f:d4:6a:48:70:09:c3:5d:ce:dc:23: fd:1f:9a:55:f7:ed:d2:ae:1a:70:9c:15:6d:e8:8a:bb:ec:62: 7f:76:2c:4d:5d:03:97:6c:c2:f0:75:84:9f:d7:c8:24:5c:66: f2:73:19:64:cd:20:fd:3c:4e:a7:55:47:ba:58:65:54:ba:59: d7:4c:c7:70:31:08:00:4b:c4:bb:70:0e:e9:e4:0b:15:cd:36: eb:3d:77:49:fe:c5:ce:65:bf:e5:53:6c:2f:3b:4a:ba:e4:94: 5a:f1:c8:4a:e3:11:8a:42:8d:5e:c2:90:37:9b:a3:d0:0b:95: ae:86:06:3a:d7:5a:bd:92:22:48:e5:77:77:a4:c1:a7:fe:41: ee:18:51:45:51:ea:94:b6:e7:36:c6:81:94:29:d4:d1:2f:69: 50:5a:19:00:f6:a7:b4:01:5a:2a:a7:5a:32:e6:3b:10:c7:30: 6c:a6:99:99:4c:ee:99:7d:74:f3:50:08:33:51:c4:89:77:02: dd:58:da:3b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB/s7ku0jYPgjzPf15GsUBIklxn4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE5MDAxMTEzWhcNMjUwNDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzUyYTY3ZTJlOWYxOWNiOTMwMDE2M2ZjNjgwYmFiZTI2 OWQ0YTEwNzI3M2MzZGY1MzIxNjA2YWI5MmU0OWE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKp2eDPoOnJ1vC4Q3fU2WdXeRBDh+LEHz4drYefgEWXwpF ica6tFtBo9lNPlPp0jv2dQ9zvt23rTghzRD4ou13h/5b8aWWivvc++5zOB3CACKG eomHeSEmPqBY61Gf+6Kt/nQfn5eSICo3COhiQg0zSE9dqni0NlLifs7tK30YkRgm TJeX1mm1p8CT6emgAlp1afN6/v7DrDIhgyQIwWPqtpMJ+j0aUKNk5NsipdgvmeFw MbA+cmCo0B1fp9YoX5Lph1qFLeCazc0iY95bKx6N20fezeaDIf/QwOPhnV9/1wG9 sZHcRIM7PUR+W81ge2jbiWzUkc3xTAqeg9HkjX5xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnr2psKewVWPsX4KNAecUIgBCDOkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q1NTZkNGFkLTM2MTctNGMxZS04ZTU5LWVjZjhmZWMwODczZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC4SF0wDQYJKoZIhvcNAQELBQADggEBAEMWXbkpYynCRpjtO3cuafo7diJm TroCyI+VI5U02YLeVVnprKK8EcgP5TvHZ0SAknkiwJUlsNPYewj0sOV/1GpIcAnD Xc7cI/0fmlX37dKuGnCcFW3oirvsYn92LE1dA5dswvB1hJ/XyCRcZvJzGWTNIP08 TqdVR7pYZVS6WddMx3AxCABLxLtwDunkCxXNNus9d0n+xc5lv+VTbC87SrrklFrx yErjEYpCjV7CkDebo9ALla6GBjrXWr2SIkjld3ekwaf+Qe4YUUVR6pS25zbGgZQp 1NEvaVBaGQD2p7QBWiqnWjLmOxDHMGymmZlM7pl9dPNQCDNRxIl3At1Y2js= -----END CERTIFICATE-----Generated at Sat Apr 5 11:18:08 2025 by rpki-client