$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85f7629-042d-460b-8057-96331b4ff972.roa File: e85f7629-042d-460b-8057-96331b4ff972.roa (raw, json) Hash identifier: 6FF38A5HbRUynuImPYvqX7oYSqqZXamdYPHbJRVOmoQ= Subject key identifier: B6:A8:99:86:17:0C:EF:24:8A:9E:D2:64:12:E6:CC:67:AB:0B:4C:D2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2B109A181E2C3C52679BC1ACAC95E4C62039BA68 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85f7629-042d-460b-8057-96331b4ff972.roa Signing time: Wed 19 Mar 2025 00:21:16 +0000 ROA not before: Wed 19 Mar 2025 00:21:16 +0000 ROA not after: Wed 23 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.19.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:10:9a:18:1e:2c:3c:52:67:9b:c1:ac:ac:95:e4:c6:20:39:ba:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 19 00:21:16 2025 GMT Not After : Apr 23 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8e:79:3f:a2:65:8f:d7:a6:c7:44:32:db:87: 96:c6:b6:61:bb:8a:c0:46:da:5e:21:ba:59:5b:d0: 07:7f:29:08:29:f6:9c:ca:bf:13:5f:53:32:9a:a2: 08:a5:a9:fb:73:c6:5b:28:ce:0f:43:0a:63:f8:f1: bb:a0:db:e0:c1:dc:4b:83:c7:0b:10:d1:74:f1:e2: b3:2d:39:cd:f9:3f:3b:e3:d1:ab:85:ce:22:3a:cf: 3b:8a:77:c0:56:5b:33:0f:81:aa:b7:27:df:fb:30: ba:06:03:8e:1d:84:a4:58:b3:05:71:b9:0a:51:fe: 87:8a:34:3d:a9:35:50:8f:87:58:7f:40:0a:46:eb: 3e:df:86:a4:75:16:1b:a1:7f:38:3a:3c:eb:d4:7b: ae:79:e9:99:df:15:4b:79:83:d7:14:d6:66:d1:74: 7e:38:f8:87:a4:f2:d7:14:cb:c7:8a:ef:61:97:d6: 39:a2:21:df:65:e7:12:65:29:82:6a:25:9d:9b:06: 22:5f:32:12:7f:c4:e4:34:c3:5b:1f:69:a2:d6:4d: 41:01:9a:d3:d3:b5:05:58:d4:67:d3:25:c4:77:5a: 3f:1a:ae:6d:eb:f2:ba:28:5d:d1:f0:27:9e:2b:80: 12:19:df:cb:13:c9:07:54:02:39:7e:53:c6:dd:fa: a7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A8:99:86:17:0C:EF:24:8A:9E:D2:64:12:E6:CC:67:AB:0B:4C:D2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85f7629-042d-460b-8057-96331b4ff972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.19.0.0/17 Signature Algorithm: sha256WithRSAEncryption b5:ef:5f:5c:9b:c1:ec:1e:2d:d0:1a:54:4c:ed:c0:34:a8:1a: c5:e2:85:50:b5:b2:dc:a8:31:45:a0:ba:17:ae:30:8e:d7:3b: 3c:cc:ef:96:92:43:ec:04:82:32:01:22:d5:5f:34:07:48:3a: 54:b2:33:17:a0:e0:85:01:a9:b5:58:41:fa:0b:fe:92:41:f9: 86:1a:c1:4b:09:e4:9d:68:75:6e:6e:24:e1:52:0c:0b:1c:12: 45:29:72:6a:e2:6a:f9:4a:ab:2f:48:3f:ec:55:c4:8a:61:7e: b9:1b:ed:cc:7b:0b:68:b6:3a:38:36:5c:8c:40:6e:e9:64:ea: 10:9f:88:91:6f:1e:bb:5a:f9:65:6a:1d:b7:eb:6f:f6:ba:2a: d9:69:15:84:b8:3e:9c:8e:ad:bf:1c:aa:b1:c3:0e:4f:bf:d0: 50:e3:46:f7:9e:02:4a:08:7f:4b:a0:e3:a3:b0:7b:ee:57:b7: 1e:1a:c9:a0:04:8e:be:89:7e:94:14:91:e7:7f:31:c5:22:c8: a9:fc:5a:9b:9b:c6:00:52:6e:eb:1a:fb:6d:1d:80:e3:47:5d: a2:80:47:1d:32:5c:06:f9:30:40:7d:2d:71:24:6e:20:a4:13: 68:45:97:1f:48:77:e2:8b:46:0a:40:eb:65:92:5c:d6:17:2a: 74:f1:ce:5f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKxCaGB4sPFJnm8GsrJXkxiA5umgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE5MDAyMTE2WhcNMjUwNDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTZjMTZhOTk3MDVmN2MyNjE1NDQ5NWZhZmE1MzM4NTM1 ZWQ4MmM5ZmI3NWViNTljM2M2OTY3ZmYzZTAxNDRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAjnk/omWP16bHRDLbh5bGtmG7isBG2l4hullb0Ad/KQgp 9pzKvxNfUzKaogilqftzxlsozg9DCmP48bug2+DB3EuDxwsQ0XTx4rMtOc35Pzvj 0auFziI6zzuKd8BWWzMPgaq3J9/7MLoGA44dhKRYswVxuQpR/oeKND2pNVCPh1h/ QApG6z7fhqR1Fhuhfzg6POvUe6556ZnfFUt5g9cU1mbRdH44+Iek8tcUy8eK72GX 1jmiId9l5xJlKYJqJZ2bBiJfMhJ/xOQ0w1sfaaLWTUEBmtPTtQVY1GfTJcR3Wj8a rm3r8rooXdHwJ54rgBIZ38sTyQdUAjl+U8bd+qffAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtqiZhhcM7ySKntJkEubMZ6sLTNIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U4NWY3NjI5LTA0MmQtNDYwYi04MDU3LTk2MzMxYjRmZjk3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfREwAwDQYJKoZIhvcNAQELBQADggEBALXvX1ybweweLdAaVEztwDSoGsXi hVC1styoMUWguheuMI7XOzzM75aSQ+wEgjIBItVfNAdIOlSyMxeg4IUBqbVYQfoL /pJB+YYawUsJ5J1odW5uJOFSDAscEkUpcmriavlKqy9IP+xVxIphfrkb7cx7C2i2 Ojg2XIxAbulk6hCfiJFvHrta+WVqHbfrb/a6KtlpFYS4PpyOrb8cqrHDDk+/0FDj RveeAkoIf0ug46Owe+5Xtx4ayaAEjr6JfpQUked/McUiyKn8WpubxgBSbusa+20d gONHXaKARx0yXAb5MEB9LXEkbiCkE2hFlx9Id+KLRgpA62WSXNYXKnTxzl8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:25 2025 by rpki-client