$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f274adda-c9b3-4804-8075-13ef31eb0adf.roa File: f274adda-c9b3-4804-8075-13ef31eb0adf.roa (raw, json) Hash identifier: /07+zuehi5VEQbz7oMqs+s4EYNXZz59OL53CY+my4Fs= Subject key identifier: A5:42:06:80:54:D3:D0:8F:08:82:5D:63:73:3B:FD:C3:14:F4:14:6F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4ADB19D30448A5B7DCE0C41A0121514B200F1E0B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f274adda-c9b3-4804-8075-13ef31eb0adf.roa Signing time: Mon 24 Mar 2025 15:40:18 +0000 ROA not before: Mon 24 Mar 2025 15:40:18 +0000 ROA not after: Mon 28 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.230.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:db:19:d3:04:48:a5:b7:dc:e0:c4:1a:01:21:51:4b:20:0f:1e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 24 15:40:18 2025 GMT Not After : Apr 28 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:8c:7f:59:80:bb:bf:fb:83:c3:86:90:db: c6:34:21:59:7e:e3:ae:4e:a8:dc:3a:54:9b:5e:fa: 15:ff:13:0a:1b:58:28:fd:92:d3:69:e7:78:d5:ec: 24:2f:0e:73:bd:a5:35:89:a9:df:1b:09:18:7b:fb: 78:dc:79:d6:fc:31:b5:eb:94:b2:07:61:1a:b6:09: 83:cf:d3:87:24:13:8b:82:fb:6e:a2:dd:df:dd:e7: 00:49:2c:b6:f6:22:76:1c:07:91:13:9e:47:fd:f3: e3:72:60:dd:92:5d:37:a8:46:7d:77:a0:f4:67:eb: d7:40:78:a8:c2:ae:6a:0d:39:3c:d1:2d:fa:b8:50: f3:b7:eb:63:9e:d9:e7:cc:e5:58:18:a1:5d:7f:4b: ed:f8:e3:2f:01:74:f4:7f:a4:02:b4:e3:15:03:bf: fe:24:c9:bb:b1:cc:57:3d:2c:0c:e9:1e:e0:ac:46: 26:20:f4:d7:4b:5e:65:b0:a0:6c:5c:30:ab:d6:64: 55:fb:e6:b6:f8:d9:d1:b6:99:7f:12:59:f4:ed:39: 57:f5:6d:ae:84:64:31:c2:37:18:ce:c2:35:59:2a: d0:84:b7:d8:2b:f6:6f:88:dd:7c:bb:49:df:f7:59: d8:20:d1:62:72:09:ca:75:a1:ef:90:2f:74:a7:1b: 57:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:42:06:80:54:D3:D0:8F:08:82:5D:63:73:3B:FD:C3:14:F4:14:6F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f274adda-c9b3-4804-8075-13ef31eb0adf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.230.77.0/24 Signature Algorithm: sha256WithRSAEncryption 44:63:ab:c5:72:c7:15:65:1e:8b:40:a8:c8:77:ac:17:2b:a6: dd:d4:59:69:df:fd:a6:8a:34:0c:5f:2e:3f:d4:7c:f2:b3:b7: b1:8e:19:0f:42:b0:8e:72:ab:b6:86:e7:10:0c:53:ca:69:9b: 1e:61:ab:08:9f:a5:29:be:96:a6:d6:2f:37:20:30:7a:23:c1: 27:9c:ad:81:51:35:3d:b7:2d:b3:07:9b:0d:0c:b7:34:0b:08: 70:e9:02:d5:9c:b6:5a:9c:21:16:fd:b0:1b:e7:44:7a:fb:7d: b9:6d:e8:09:54:e0:0c:e5:4f:04:c6:a0:8e:44:85:e3:f8:5a: 09:31:b8:11:79:5a:de:81:5b:70:b6:66:3d:21:55:64:da:97: 60:84:e5:52:37:da:ac:2f:b1:38:35:28:a0:ba:21:c6:99:07: ba:8a:87:91:aa:92:4b:9a:23:e4:34:91:0b:3d:07:e8:2f:b0: 58:4c:fb:22:33:54:e7:e2:54:84:5f:7c:1d:44:35:ae:9b:b8: 3b:ee:18:15:e6:db:22:ae:e6:73:30:6b:3d:c6:2b:1d:01:5c: c8:98:5d:c1:1a:08:1b:00:63:3f:df:77:fd:29:48:5a:90:56: 69:2f:ef:f1:26:f9:31:39:c8:32:ab:b2:c4:b6:3b:e6:99:36: 2f:76:9c:21 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUStsZ0wRIpbfc4MQaASFRSyAPHgswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI0MTU0MDE4WhcNMjUwNDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTk3MDdmYzg5NGI3NGJlYWU4Mjg1MzlkOGFjNjk2NWZm YThhODhlOTFiNjI0NmJiNjM5NDgxZWY4M2RiNDQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxwIx/WYC7v/uDw4aQ28Y0IVl+465OqNw6VJte+hX/Ewob WCj9ktNp53jV7CQvDnO9pTWJqd8bCRh7+3jcedb8MbXrlLIHYRq2CYPP04ckE4uC +26i3d/d5wBJLLb2InYcB5ETnkf98+NyYN2SXTeoRn13oPRn69dAeKjCrmoNOTzR Lfq4UPO362Oe2efM5VgYoV1/S+344y8BdPR/pAK04xUDv/4kybuxzFc9LAzpHuCs RiYg9NdLXmWwoGxcMKvWZFX75rb42dG2mX8SWfTtOVf1ba6EZDHCNxjOwjVZKtCE t9gr9m+I3Xy7Sd/3Wdgg0WJyCcp1oe+QL3SnG1eFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpUIGgFTT0I8Igl1jczv9wxT0FG8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyNzRhZGRhLWM5YjMtNDgwNC04MDc1LTEzZWYzMWViMGFkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADY5k0wDQYJKoZIhvcNAQELBQADggEBAERjq8VyxxVlHotAqMh3rBcrpt3U WWnf/aaKNAxfLj/UfPKzt7GOGQ9CsI5yq7aG5xAMU8ppmx5hqwifpSm+lqbWLzcg MHojwSecrYFRNT23LbMHmw0MtzQLCHDpAtWctlqcIRb9sBvnRHr7fblt6AlU4Azl TwTGoI5EheP4WgkxuBF5Wt6BW3C2Zj0hVWTal2CE5VI32qwvsTg1KKC6IcaZB7qK h5GqkkuaI+Q0kQs9B+gvsFhM+yIzVOfiVIRffB1ENa6buDvuGBXm2yKu5nMwaz3G Kx0BXMiYXcEaCBsAYz/fd/0pSFqQVmkv7/Em+TE5yDKrssS2O+aZNi92nCE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:47 2025 by rpki-client