$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc79889b-d361-432d-a85b-eab3ce52c1d9.roa File: dc79889b-d361-432d-a85b-eab3ce52c1d9.roa (raw, json) Hash identifier: GJPkcYLAjgPnfeAxjuDICfrUNj42VpN3KAeNF5fqzPQ= Subject key identifier: 28:FF:39:24:FC:BF:EC:27:09:08:FE:EA:64:64:D1:DF:9E:BE:DC:B0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 249A4617D235F508686174444D0366D7E08821E7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc79889b-d361-432d-a85b-eab3ce52c1d9.roa Signing time: Sat 15 Mar 2025 00:01:03 +0000 ROA not before: Sat 15 Mar 2025 00:01:03 +0000 ROA not after: Sat 19 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 198.200.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:9a:46:17:d2:35:f5:08:68:61:74:44:4d:03:66:d7:e0:88:21:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 15 00:01:03 2025 GMT Not After : Apr 19 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4e:6f:b2:5f:20:5d:f6:a5:9e:cf:a4:44:bf: 19:b9:09:a9:25:01:fd:93:c8:c4:bf:98:78:f7:6b: 46:23:81:55:ea:1d:a6:7a:4a:66:7f:91:e9:8b:67: f0:90:5f:6f:1d:64:d1:86:41:0a:98:03:a3:01:a7: a0:d1:d0:9e:36:9d:b3:e5:83:8f:10:21:c4:7d:dc: 8c:5f:39:cd:93:82:02:41:ae:26:f6:49:1d:20:1a: 1e:9f:9f:bd:77:4a:75:87:57:7b:fd:31:17:b8:38: 8d:4b:86:8c:60:e8:a6:bd:f2:cc:5d:47:72:d9:68: f9:04:7f:a0:cd:82:58:ce:56:4c:59:34:e6:ad:97: f0:f4:11:db:36:d1:ee:f8:25:3e:fc:71:81:40:24: bb:26:70:96:cd:6f:6c:49:4b:bc:8b:5a:2c:72:fa: 94:1e:eb:1a:a7:43:0f:6f:17:57:05:85:9a:7f:bf: 54:fb:40:08:93:2b:a6:57:b2:e4:b6:d3:f0:8d:92: dd:57:ac:2f:a0:c0:9f:88:be:7a:9d:d6:17:d4:3f: cf:9f:3d:a2:fa:2a:b3:e2:a8:33:67:b8:8f:55:dd: 93:c6:b5:3a:ee:3e:22:62:24:b6:48:06:49:6e:16: d0:e4:3d:88:21:36:02:c7:7d:c3:27:d2:0a:3c:66: ed:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FF:39:24:FC:BF:EC:27:09:08:FE:EA:64:64:D1:DF:9E:BE:DC:B0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc79889b-d361-432d-a85b-eab3ce52c1d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.200.149.0/24 Signature Algorithm: sha256WithRSAEncryption 74:15:76:96:4f:22:e0:a5:1d:76:98:7c:cd:40:96:da:3b:49: 4d:04:54:d5:29:e1:b3:73:52:db:ef:9c:65:bf:76:6a:d4:75: 74:10:b2:b7:be:90:0c:13:f6:6c:27:7c:2a:b6:03:d9:a4:9c: e7:47:88:d6:0b:7f:b7:94:27:1e:11:a8:fa:89:81:a0:99:89: f4:e3:44:37:d0:a8:0d:b0:8b:1b:40:0a:96:82:70:2e:ea:40: 8a:61:a8:39:75:0b:3a:bc:58:62:54:f2:e9:04:e5:d3:05:d8: 0c:9a:ff:94:7d:03:c3:80:9d:dd:a2:d2:4b:a9:4a:16:42:59: eb:c3:e1:56:b8:d5:54:c2:fd:48:26:9b:98:42:9e:3f:43:f4: f0:6e:71:c3:9a:47:af:e0:5e:46:96:a6:1e:9c:09:bb:6c:88: b8:e9:70:78:89:c7:37:d4:c6:76:9b:7e:50:7a:72:fa:8e:4b: 5d:88:2d:3e:b6:82:8f:94:3e:84:79:ca:a9:3b:0b:f1:cb:1a: b6:bb:5e:57:03:95:07:56:43:2d:7e:9a:06:25:78:d5:46:24: 5e:0f:6e:e6:e8:c6:ee:a9:1e:75:e2:78:e9:b3:f4:6c:6e:bf: 9d:07:20:86:54:39:b5:7a:f6:ef:81:31:1b:79:0e:bc:6b:d3: 0a:78:87:41 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJJpGF9I19QhoYXRETQNm1+CIIecwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE1MDAwMTAzWhcNMjUwNDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTIzMjNkYmRkNTJhNzAwY2UxZGYyOGEzMDk2MDNiNGNk MjAxYjRmMWYyZGUxZWYwODg5ODgwZjNkM2ZhYWQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxTm+yXyBd9qWez6REvxm5CaklAf2TyMS/mHj3a0YjgVXq HaZ6SmZ/kemLZ/CQX28dZNGGQQqYA6MBp6DR0J42nbPlg48QIcR93IxfOc2TggJB rib2SR0gGh6fn713SnWHV3v9MRe4OI1Lhoxg6Ka98sxdR3LZaPkEf6DNgljOVkxZ NOatl/D0Eds20e74JT78cYFAJLsmcJbNb2xJS7yLWixy+pQe6xqnQw9vF1cFhZp/ v1T7QAiTK6ZXsuS20/CNkt1XrC+gwJ+Ivnqd1hfUP8+fPaL6KrPiqDNnuI9V3ZPG tTruPiJiJLZIBkluFtDkPYghNgLHfcMn0go8Zu1tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKP85JPy/7CcJCP7qZGTR356+3LAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RjNzk4ODliLWQzNjEtNDMyZC1hODViLWVhYjNjZTUyYzFkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGyJUwDQYJKoZIhvcNAQELBQADggEBAHQVdpZPIuClHXaYfM1Alto7SU0E VNUp4bNzUtvvnGW/dmrUdXQQsre+kAwT9mwnfCq2A9mknOdHiNYLf7eUJx4RqPqJ gaCZifTjRDfQqA2wixtACpaCcC7qQIphqDl1Czq8WGJU8ukE5dMF2Aya/5R9A8OA nd2i0kupShZCWevD4Va41VTC/Ugmm5hCnj9D9PBuccOaR6/gXkaWph6cCbtsiLjp cHiJxzfUxnabflB6cvqOS12ILT62go+UPoR5yqk7C/HLGra7XlcDlQdWQy1+mgYl eNVGJF4Pbuboxu6pHnXieOmz9Gxuv50HIIZUObV69u+BMRt5Drxr0wp4h0E= -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:38 2025 by rpki-client