$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddc963e2-4b9c-4ede-ba23-8ab86fef5ed0.roa File: ddc963e2-4b9c-4ede-ba23-8ab86fef5ed0.roa (raw, json) Hash identifier: E6GaUhWqRG+ucN97z1VxFdAhMB4sugg479E9nZQpesE= Subject key identifier: 1D:8B:DE:F2:81:E2:5D:16:20:AD:EF:85:CB:94:89:F3:24:C3:D9:57 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 56D2F3B614D0FD46EE58838123F042B00E3D6AFB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddc963e2-4b9c-4ede-ba23-8ab86fef5ed0.roa Signing time: Sat 15 Mar 2025 00:01:44 +0000 ROA not before: Sat 15 Mar 2025 00:01:44 +0000 ROA not after: Sat 19 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d2:f3:b6:14:d0:fd:46:ee:58:83:81:23:f0:42:b0:0e:3d:6a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 15 00:01:44 2025 GMT Not After : Apr 19 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:32:de:f3:04:8b:0a:a4:3e:15:35:ec:64:d7: b5:da:37:a2:70:4a:66:cc:44:a2:d4:b0:dd:cd:0c: 4a:78:12:cb:cc:ad:0d:2f:09:fb:08:70:d5:27:72: 1c:e6:af:82:69:b3:60:0f:0c:98:b6:30:1c:b3:7a: bb:f9:a7:57:34:9e:c2:f6:3b:ee:b1:8f:ec:9d:03: 7d:42:00:ef:0c:08:13:a0:b9:30:3e:8e:f7:6e:5e: db:93:5e:99:c8:3a:a8:3d:72:cc:30:e1:59:6e:c0: 20:ae:ed:18:c9:47:85:d8:18:ac:f4:36:d9:86:6c: 40:61:f9:1d:dd:d8:91:0b:45:8b:ab:7a:57:8b:6d: 93:d7:77:6b:c3:45:cf:8d:6f:77:22:47:c7:b4:ab: b2:43:1f:ff:b2:6b:d2:8b:01:40:6d:21:bc:b0:a8: 3f:9f:c5:55:2b:ac:5d:c7:0e:6c:32:8a:f6:b1:5d: fe:31:63:67:3a:85:e9:87:e3:54:5a:47:e4:d8:93: a7:83:3a:4b:f4:ba:a2:77:67:02:0e:7d:68:bc:55: f2:39:2f:e2:95:d4:ba:ba:8c:c7:77:7a:37:73:d6: c8:0b:44:4f:0c:14:55:13:8c:d9:77:3a:fd:cc:70: a1:90:b7:c7:6a:77:55:f0:40:0f:02:cd:86:95:65: 11:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8B:DE:F2:81:E2:5D:16:20:AD:EF:85:CB:94:89:F3:24:C3:D9:57 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddc963e2-4b9c-4ede-ba23-8ab86fef5ed0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.0.0/16 Signature Algorithm: sha256WithRSAEncryption 13:ef:1a:37:12:a5:ef:b0:a3:d1:50:84:b1:0e:2e:2d:a6:f6: 86:c9:4a:60:9c:68:26:57:f6:3c:28:ee:b7:f4:e5:d4:0a:68: d8:67:a3:e4:74:7e:a7:9e:23:d6:53:0f:07:92:71:c0:4c:7d: 90:d7:b4:0a:4a:78:51:39:c3:e0:6b:eb:b8:5f:63:55:98:20: d8:b1:cb:84:c9:80:b0:67:fc:ba:cc:7c:58:7c:55:a1:57:67: 91:f0:87:65:cd:24:94:89:7b:0b:ae:9a:79:ce:e6:67:e7:c1: bf:d8:bc:0a:81:5b:c1:57:e4:28:f4:c5:9e:39:b5:30:64:71: bb:0b:ff:8d:80:74:a1:36:4d:30:e8:d1:37:d7:60:bb:fc:26: eb:bf:06:5e:9b:15:c7:b8:6e:8d:ad:37:e2:65:7c:c3:de:50: 8e:f8:1b:82:1d:af:46:e5:e6:f2:8f:9a:48:15:fb:69:b8:0f: ac:80:af:14:a9:84:52:62:d6:ae:aa:ac:da:46:78:ec:53:ed: e7:ba:25:8a:45:b7:7a:22:a2:0a:61:46:88:e3:3c:31:87:23: 10:4c:70:ab:11:a9:0a:a9:a4:31:da:ee:4e:e3:ba:39:6c:07: 9e:ec:cc:9d:b0:99:a5:9f:77:88:78:7c:c8:e6:c9:22:79:8f: fb:94:82:3d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVtLzthTQ/UbuWIOBI/BCsA49avswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE1MDAwMTQ0WhcNMjUwNDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYWIyYWI5YTllMDM1YzU5NTZkNjUyY2UwNjI0OTI3MDNj MzYwNmEwMmExMTE0Njc4NzAyMjJmMWMwZTE4OGMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMMt7zBIsKpD4VNexk17XaN6JwSmbMRKLUsN3NDEp4EsvM rQ0vCfsIcNUnchzmr4Jps2APDJi2MByzerv5p1c0nsL2O+6xj+ydA31CAO8MCBOg uTA+jvduXtuTXpnIOqg9csww4VluwCCu7RjJR4XYGKz0NtmGbEBh+R3d2JELRYur eleLbZPXd2vDRc+Nb3ciR8e0q7JDH/+ya9KLAUBtIbywqD+fxVUrrF3HDmwyivax Xf4xY2c6hemH41RaR+TYk6eDOkv0uqJ3ZwIOfWi8VfI5L+KV1Lq6jMd3ejdz1sgL RE8MFFUTjNl3Ov3McKGQt8dqd1XwQA8CzYaVZREDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUHYve8oHiXRYgre+Fy5SJ8yTD2VcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RkYzk2M2UyLTRiOWMtNGVkZS1iYTIzLThhYjg2ZmVmNWVkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCCsDANBgkqhkiG9w0BAQsFAAOCAQEAE+8aNxKl77Cj0VCEsQ4uLab2hslK YJxoJlf2PCjut/Tl1Apo2Gej5HR+p54j1lMPB5JxwEx9kNe0Ckp4UTnD4GvruF9j VZgg2LHLhMmAsGf8usx8WHxVoVdnkfCHZc0klIl7C66aec7mZ+fBv9i8CoFbwVfk KPTFnjm1MGRxuwv/jYB0oTZNMOjRN9dgu/wm678GXpsVx7huja034mV8w95Qjvgb gh2vRuXm8o+aSBX7abgPrICvFKmEUmLWrqqs2kZ47FPt57olikW3eiKiCmFGiOM8 MYcjEExwqxGpCqmkMdruTuO6OWwHnuzMnbCZpZ93iHh8yObJInmP+5SCPQ== -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:10 2025 by rpki-client