$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee072b22-d511-4e36-bf63-9dea3fed9955.roa File: ee072b22-d511-4e36-bf63-9dea3fed9955.roa (raw, json) Hash identifier: sdsdt/qcZyulznVLBc3WKPYN6WVQ3DdZEU+dnzacMGM= Subject key identifier: 9F:98:5C:14:B2:7D:48:B0:D1:BF:1B:BF:AB:38:20:64:D4:F9:3D:95 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11E18DF7C04C5586D49145C57651699BBA79D768 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee072b22-d511-4e36-bf63-9dea3fed9955.roa Signing time: Wed 02 Apr 2025 00:20:53 +0000 ROA not before: Wed 02 Apr 2025 00:20:53 +0000 ROA not after: Wed 07 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.40.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e1:8d:f7:c0:4c:55:86:d4:91:45:c5:76:51:69:9b:ba:79:d7:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 2 00:20:53 2025 GMT Not After : May 7 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:ce:18:48:a1:d1:e0:29:14:b3:a2:50:8b: 25:90:1c:e5:ae:e6:95:26:12:b3:f9:aa:7b:37:b1: fa:05:0b:69:27:33:8d:3c:08:3b:54:d4:ce:06:fd: e8:16:6e:14:8f:d6:12:39:e3:83:29:1c:55:22:99: be:7a:e9:79:2f:a3:39:66:f7:bd:16:6c:e2:6c:ab: 3a:a8:36:00:c7:69:52:75:75:d3:34:84:69:9b:54: 9e:4e:f1:10:4f:4a:d4:64:cc:6d:d9:fa:1b:8e:60: 76:ad:94:6b:f2:2e:b3:8a:46:03:3b:39:88:5c:85: db:07:38:6f:c5:9d:36:62:25:37:a9:19:88:29:8d: 2c:c8:70:61:33:93:16:3e:f2:96:0d:67:10:fb:e4: 88:11:3b:09:4d:df:0d:ac:fa:b6:1e:47:0c:13:de: 16:ae:57:80:63:50:ae:69:5a:6b:ec:e7:ae:b0:13: d6:57:52:49:38:cd:3e:e2:74:ef:73:72:5f:85:53: 10:9c:a6:95:2c:b7:77:3d:fe:49:42:50:7f:f2:b6: 88:0d:a9:ea:12:3b:84:a2:70:28:25:7a:4c:47:8e: 8b:48:46:f4:b5:a9:ac:65:5e:02:2b:94:cd:2c:76: f7:e7:3d:34:51:a2:a2:b2:fb:8e:69:8b:9b:31:3c: 1e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:98:5C:14:B2:7D:48:B0:D1:BF:1B:BF:AB:38:20:64:D4:F9:3D:95 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee072b22-d511-4e36-bf63-9dea3fed9955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.40.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9f:a0:b5:87:50:e3:93:02:2b:9e:fc:32:d8:16:df:cd:ea:49: bd:22:c3:08:ad:a6:c7:dc:8d:0b:c6:ff:c9:eb:ff:81:6b:2f: 0d:c7:da:d2:7b:49:1d:6f:75:29:82:1e:24:f6:e3:4e:08:85: 81:ad:9a:8a:6e:ac:fb:77:86:e9:7e:e2:84:1c:4c:25:40:71: 47:4f:f1:24:d0:1b:2f:32:67:05:d4:3e:76:75:e8:88:5a:4d: b1:ec:15:d6:5a:d3:2a:ee:18:31:ce:7a:2b:96:e9:8c:72:9b: 7e:c6:1a:82:f4:77:05:ac:dc:63:ad:c0:27:4f:e6:29:3d:b8: ec:75:b7:1f:7f:ab:a3:bb:ee:b7:1e:81:c3:93:05:6f:9c:c7: 9c:88:eb:ec:10:da:ae:c7:8a:e5:95:b9:ac:bd:51:55:12:d7: ea:ee:03:7f:e2:0e:10:0d:13:0f:f5:de:4d:d9:a5:13:7d:64: 25:8f:96:db:39:52:08:aa:64:65:c5:6c:74:b8:91:a0:53:df: 15:a6:f7:2e:64:df:e2:5b:85:6a:75:fc:8e:7f:54:55:a9:10: 88:92:4f:6f:88:b3:88:7a:be:7c:39:e6:3a:a2:64:e6:bb:f0: e4:26:83:21:62:c6:a0:2f:87:dd:40:f3:ad:81:48:b8:d3:ba: ee:39:81:85 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUEeGN98BMVYbUkUXFdlFpm7p512gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDAyMDAyMDUzWhcNMjUwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTZjMTE1MWNmMDQyZGQ1MGFiOGYyNjlkZWM0ZTlhOGYw OGEyYTZhMDFkNDM4ZjdiMzgxYTczMmNmY2Q4MTk4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf9c4YSKHR4CkUs6JQiyWQHOWu5pUmErP5qns3sfoFC2kn M408CDtU1M4G/egWbhSP1hI544MpHFUimb566Xkvozlm970WbOJsqzqoNgDHaVJ1 ddM0hGmbVJ5O8RBPStRkzG3Z+huOYHatlGvyLrOKRgM7OYhchdsHOG/FnTZiJTep GYgpjSzIcGEzkxY+8pYNZxD75IgROwlN3w2s+rYeRwwT3hauV4BjUK5pWmvs566w E9ZXUkk4zT7idO9zcl+FUxCcppUst3c9/klCUH/ytogNqeoSO4SicCglekxHjotI RvS1qaxlXgIrlM0sdvfnPTRRoqKy+45pi5sxPB5BAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUn5hcFLJ9SLDRvxu/qzggZNT5PZUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VlMDcyYjIyLWQ1MTEtNGUzNi1iZjYzLTlkZWEzZmVkOTk1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4KDANBgkqhkiG9w0BAQsFAAOCAQEAn6C1h1DjkwIrnvwy2BbfzepJvSLD CK2mx9yNC8b/yev/gWsvDcfa0ntJHW91KYIeJPbjTgiFga2aim6s+3eG6X7ihBxM JUBxR0/xJNAbLzJnBdQ+dnXoiFpNsewV1lrTKu4YMc56K5bpjHKbfsYagvR3Bazc Y63AJ0/mKT247HW3H3+ro7vutx6Bw5MFb5zHnIjr7BDarseK5ZW5rL1RVRLX6u4D f+IOEA0TD/XeTdmlE31kJY+W2zlSCKpkZcVsdLiRoFPfFab3LmTf4luFanX8jn9U VakQiJJPb4iziHq+fDnmOqJk5rvw5CaDIWLGoC+H3UDzrYFIuNO67jmBhQ== -----END CERTIFICATE-----Generated at Sat Apr 5 13:22:42 2025 by rpki-client