$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4753976-20df-4c30-8291-086bd631b618.roa File: f4753976-20df-4c30-8291-086bd631b618.roa (raw, json) Hash identifier: n6xyvVDEcR4VapWc38ZQKKmhhjSQd/h5QCU2CQ2A6fk= Subject key identifier: D5:08:49:BE:BD:39:B3:91:20:37:BF:39:A4:E5:D5:B2:5B:09:63:18 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4222D87E2E6CBF0AADA533E278954CD62113B53E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4753976-20df-4c30-8291-086bd631b618.roa Signing time: Tue 18 Mar 2025 00:41:58 +0000 ROA not before: Tue 18 Mar 2025 00:41:58 +0000 ROA not after: Tue 22 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.132.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:22:d8:7e:2e:6c:bf:0a:ad:a5:33:e2:78:95:4c:d6:21:13:b5:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 18 00:41:58 2025 GMT Not After : Apr 22 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f9:dd:a9:a1:51:4e:3c:fe:31:e9:e4:eb:f4: 95:38:0e:a6:10:9f:26:24:8c:cb:f6:f9:ce:55:9c: 03:12:86:81:13:65:18:18:97:c3:73:c5:b5:ed:6f: e6:2b:0f:87:b4:25:07:66:5d:1a:b0:12:df:7f:15: 76:ef:ff:6f:87:22:02:58:a0:4e:15:15:66:be:b7: 5e:ce:72:69:2c:95:0f:d7:72:ee:9f:f4:21:2a:5d: c1:9c:d8:02:52:c8:cc:80:ed:b4:2f:e0:04:2c:de: 5c:3b:5f:64:7e:24:cc:17:bd:97:60:30:f1:16:45: ed:08:9f:6b:1c:07:ae:51:9b:25:3c:3a:a7:77:ca: 21:1a:f9:e3:a6:db:0b:d7:2e:f7:eb:b4:6c:a4:62: 5e:4d:13:b4:50:23:59:af:7d:e7:9f:15:1f:37:46: 5a:a6:4f:ce:33:50:fb:c1:f1:94:0b:a2:df:20:e1: ee:a8:c3:68:14:6d:d7:56:ea:1e:73:4b:d4:f1:25: c9:5b:0c:f4:ba:8a:c4:81:81:94:70:83:be:87:e1: 1e:4b:d8:fb:76:ad:c0:b1:33:01:9e:78:bb:0c:4a: 72:d4:1f:82:ad:e5:08:bf:9e:db:bc:ad:f2:62:23: bf:b0:7d:37:9e:31:63:9a:66:3a:b4:8d:92:7d:97: f0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:08:49:BE:BD:39:B3:91:20:37:BF:39:A4:E5:D5:B2:5B:09:63:18 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4753976-20df-4c30-8291-086bd631b618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.132.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9d:2b:ed:dc:e1:85:44:48:82:09:68:6b:73:bd:c3:cc:26:f9: 40:70:98:21:0e:48:35:22:a9:dc:42:9e:09:da:86:2f:db:77: fd:f0:66:6a:36:55:14:2b:33:97:b9:57:66:90:49:3e:65:13: 1b:1e:bf:85:ee:5c:63:36:f4:3c:57:0f:97:c8:6c:1d:d8:b7: ff:c7:0a:fb:88:46:6c:ef:81:81:e4:7c:48:1c:8e:4f:58:4d: e7:91:74:5e:6c:ad:26:ec:7e:9a:e3:6c:ff:a1:76:fe:df:1f: 78:20:a3:cd:5a:8d:f0:6a:6c:9d:b0:fd:56:e0:48:3c:07:6b: 5a:8b:b4:20:ec:af:0f:6d:03:0a:75:33:98:ce:16:81:63:c5: 7e:16:96:3b:05:d9:32:28:54:8a:6b:66:1b:7f:06:2f:f4:37: 4f:14:c9:f2:49:13:1d:d3:2c:d1:82:50:c5:fb:96:2b:67:85: c4:1f:f8:06:dc:61:9c:a7:4d:71:35:35:0a:75:e6:7b:25:aa: 86:9a:09:1c:53:c5:40:4f:48:37:49:14:38:7c:14:8c:b8:96: 03:21:bf:6f:9f:aa:b2:bd:50:c3:48:11:ca:30:be:3b:0a:2e: 0e:66:9f:f4:04:c3:be:e7:8d:90:40:80:4b:e3:11:dd:8f:c2: d4:7d:db:9f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQiLYfi5svwqtpTPieJVM1iETtT4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE4MDA0MTU4WhcNMjUwNDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTI1MThhMjllM2RmMmRjYzhjMzMzY2Y3NzRjZDQzMmJi ODljZmVkMmRlNjAzZDdkNTI4MzlhNWE0YzdhMTQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7+d2poVFOPP4x6eTr9JU4DqYQnyYkjMv2+c5VnAMShoET ZRgYl8NzxbXtb+YrD4e0JQdmXRqwEt9/FXbv/2+HIgJYoE4VFWa+t17OcmkslQ/X cu6f9CEqXcGc2AJSyMyA7bQv4AQs3lw7X2R+JMwXvZdgMPEWRe0In2scB65RmyU8 Oqd3yiEa+eOm2wvXLvfrtGykYl5NE7RQI1mvfeefFR83RlqmT84zUPvB8ZQLot8g 4e6ow2gUbddW6h5zS9TxJclbDPS6isSBgZRwg76H4R5L2Pt2rcCxMwGeeLsMSnLU H4Kt5Qi/ntu8rfJiI7+wfTeeMWOaZjq0jZJ9l/B5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU1QhJvr05s5EgN785pOXVslsJYxgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y0NzUzOTc2LTIwZGYtNGMzMC04MjkxLTA4NmJkNjMxYjYxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4hDANBgkqhkiG9w0BAQsFAAOCAQEAnSvt3OGFREiCCWhrc73DzCb5QHCY IQ5INSKp3EKeCdqGL9t3/fBmajZVFCszl7lXZpBJPmUTGx6/he5cYzb0PFcPl8hs Hdi3/8cK+4hGbO+BgeR8SByOT1hN55F0XmytJux+muNs/6F2/t8feCCjzVqN8Gps nbD9VuBIPAdrWou0IOyvD20DCnUzmM4WgWPFfhaWOwXZMihUimtmG38GL/Q3TxTJ 8kkTHdMs0YJQxfuWK2eFxB/4BtxhnKdNcTU1CnXmeyWqhpoJHFPFQE9IN0kUOHwU jLiWAyG/b5+qsr1Qw0gRyjC+OwouDmaf9ATDvueNkECAS+MR3Y/C1H3bnw== -----END CERTIFICATE-----Generated at Sat Apr 5 16:53:32 2025 by rpki-client