$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e06824cb-2a7f-4608-9566-85c5d5041fb2.roa File: e06824cb-2a7f-4608-9566-85c5d5041fb2.roa (raw, json) Hash identifier: 5zm/MB+5q651s3iNPddp7jDsJVP7RTy6Zk6gnCOQCXw= Subject key identifier: 36:18:D3:4B:04:38:C0:B4:FA:11:6C:44:76:BE:5F:BB:68:20:AD:0A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54F6B866637D75A0D83F07A5FC9A4F54B32A332C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e06824cb-2a7f-4608-9566-85c5d5041fb2.roa Signing time: Tue 25 Mar 2025 16:50:41 +0000 ROA not before: Tue 25 Mar 2025 16:50:41 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.128.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f6:b8:66:63:7d:75:a0:d8:3f:07:a5:fc:9a:4f:54:b3:2a:33:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 25 16:50:41 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:89:2b:ce:b7:c6:f2:43:16:34:61:b9:09:43: a7:2b:4b:c4:68:2a:61:10:7f:94:04:cf:79:6a:d9: ac:95:78:c6:84:f2:4b:e7:8c:c2:0c:b6:e8:1d:b4: 3c:20:64:7e:73:ff:22:ea:f9:cc:8e:00:87:69:98: 2e:02:b5:6d:17:6b:ac:dd:3e:67:8c:ca:be:e5:81: 76:e7:b6:77:7b:ca:b2:49:12:80:b6:be:d9:3f:c4: ef:41:56:d5:9a:0a:a4:cf:ca:14:38:ab:d2:48:c2: f6:75:b6:a2:16:77:a3:7b:fa:8f:f2:34:55:72:7c: 65:d9:01:3e:4f:83:2b:03:be:09:95:28:7f:a0:d2: 3b:33:21:c5:51:6a:ea:68:06:81:c9:96:22:43:fb: 0b:01:d1:93:f5:13:9b:18:67:e9:d4:bb:3b:6e:8e: 7d:44:3b:12:87:de:1d:19:1a:9f:c1:7f:4b:99:06: ab:c0:26:f6:cc:9e:b1:4d:69:b7:9b:3e:26:c2:5c: 27:45:d7:a2:b6:28:9c:76:e2:2e:75:53:e3:d0:32: 8a:b1:b8:fd:03:0c:74:9e:b0:c3:dc:34:b5:18:f1: dd:21:6f:95:a6:18:77:69:c5:4c:51:1a:e2:a8:cf: 2d:dd:9a:48:16:a4:54:b8:21:10:17:a4:56:98:af: c1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:18:D3:4B:04:38:C0:B4:FA:11:6C:44:76:BE:5F:BB:68:20:AD:0A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e06824cb-2a7f-4608-9566-85c5d5041fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.128.0.0/16 Signature Algorithm: sha256WithRSAEncryption 68:d2:b4:7d:fa:98:dd:44:ec:12:92:7d:a8:72:9d:66:e6:8d: 42:81:1d:ef:e5:47:b7:28:d6:88:29:15:f5:ed:13:27:54:c9: 71:9c:f4:54:91:13:e1:8c:25:59:ce:15:17:28:0e:ec:88:24: 3b:03:f0:95:ab:f0:d9:eb:1f:de:b2:fc:c8:8a:88:24:da:b3: 0f:f6:30:68:d9:87:d8:ca:51:fd:1c:6f:30:66:7f:3c:47:d7: fe:b0:b3:da:0a:fc:34:d1:ef:89:0f:4b:2b:46:05:72:cb:e3: 8b:1f:e8:bd:56:4f:0e:69:b0:2b:fd:0d:66:f8:38:c3:ed:71: 78:85:21:fb:a9:8f:a2:85:4e:1d:5e:03:d7:cd:f9:82:20:c7: 03:bf:38:85:69:af:a6:53:c2:2d:36:b2:6c:6b:23:74:57:93: 5a:81:01:d0:c7:23:3a:18:a7:d1:6f:d2:6e:7c:40:f7:ca:7f: ae:da:e8:bd:84:54:74:43:fe:dd:98:80:d0:17:16:fa:b1:c1: fb:bf:4b:a4:4e:f8:9b:a0:9f:b2:67:ae:8a:fe:8c:36:53:87: 8a:9d:28:48:6a:ee:a5:36:19:0d:db:3e:d9:13:c6:43:4b:00: 6e:cb:5c:f7:31:98:89:d5:63:03:3a:17:17:6b:3e:ff:e0:d6: bb:33:f7:42 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVPa4ZmN9daDYPwel/JpPVLMqMywwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI1MTY1MDQxWhcNMjUwNDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzkyMzlkYmFiMjgwMzVmZDEzYzgxMjQ3ZTdmY2Y0ZDM2 MDIzZGM2MTE1ZWM3ODYyZTJiZmRkYzJkNzAyMWE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD4iSvOt8byQxY0YbkJQ6crS8RoKmEQf5QEz3lq2ayVeMaE 8kvnjMIMtugdtDwgZH5z/yLq+cyOAIdpmC4CtW0Xa6zdPmeMyr7lgXbntnd7yrJJ EoC2vtk/xO9BVtWaCqTPyhQ4q9JIwvZ1tqIWd6N7+o/yNFVyfGXZAT5PgysDvgmV KH+g0jszIcVRaupoBoHJliJD+wsB0ZP1E5sYZ+nUuztujn1EOxKH3h0ZGp/Bf0uZ BqvAJvbMnrFNabebPibCXCdF16K2KJx24i51U+PQMoqxuP0DDHSesMPcNLUY8d0h b5WmGHdpxUxRGuKozy3dmkgWpFS4IRAXpFaYr8FJAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUNhjTSwQ4wLT6EWxEdr5fu2ggrQowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UwNjgyNGNiLTJhN2YtNDYwOC05NTY2LTg1YzVkNTA0MWZiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPgDANBgkqhkiG9w0BAQsFAAOCAQEAaNK0ffqY3UTsEpJ9qHKdZuaNQoEd 7+VHtyjWiCkV9e0TJ1TJcZz0VJET4YwlWc4VFygO7IgkOwPwlavw2esf3rL8yIqI JNqzD/YwaNmH2MpR/RxvMGZ/PEfX/rCz2gr8NNHviQ9LK0YFcsvjix/ovVZPDmmw K/0NZvg4w+1xeIUh+6mPooVOHV4D1835giDHA784hWmvplPCLTaybGsjdFeTWoEB 0McjOhin0W/SbnxA98p/rtrovYRUdEP+3ZiA0BcW+rHB+79LpE74m6Cfsmeuiv6M NlOHip0oSGrupTYZDds+2RPGQ0sAbstc9zGYidVjAzoXF2s+/+DWuzP3Qg== -----END CERTIFICATE-----Generated at Sat Apr 5 11:22:09 2025 by rpki-client