$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4c27a19-911c-477c-b4e8-1ba9b1e3da76.roa File: f4c27a19-911c-477c-b4e8-1ba9b1e3da76.roa (raw, json) Hash identifier: ni3RqqnPh/gE37a0AEM+TAuQbTWpU7kpGNR3tOLe6bI= Subject key identifier: C6:38:43:11:0C:22:E5:8E:63:2F:3D:C4:1B:72:9F:71:A6:0F:F1:C3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7B932129A415E54056E6A1C2D880C806B3967B0A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4c27a19-911c-477c-b4e8-1ba9b1e3da76.roa Signing time: Tue 18 Mar 2025 00:31:51 +0000 ROA not before: Tue 18 Mar 2025 00:31:51 +0000 ROA not after: Tue 22 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.18.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:93:21:29:a4:15:e5:40:56:e6:a1:c2:d8:80:c8:06:b3:96:7b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 18 00:31:51 2025 GMT Not After : Apr 22 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:34:62:e6:c0:1f:57:88:5f:2c:c3:3b:1e:9c: 8f:7a:aa:52:3d:a5:fb:14:48:f6:bf:e9:57:13:92: a9:97:89:36:d7:cc:11:df:d5:07:e0:72:56:65:f0: 4c:ce:a2:fd:e3:21:b0:bb:f9:99:a1:fc:6c:0e:e8: d5:e1:c5:d0:47:82:5f:57:87:47:d0:e2:48:80:a4: 65:df:78:59:89:dd:50:7f:29:fe:78:52:a3:6e:7b: f8:f7:10:c6:d6:c5:0e:9f:b6:39:29:d7:dd:55:b1: 55:42:54:b8:27:b4:2a:45:01:bb:58:6f:56:46:97: dd:a3:0b:72:c5:c0:dc:7a:c9:98:03:21:7f:dd:b5: 7d:bc:e4:23:53:6c:52:5c:e1:8a:50:f1:83:ff:ee: 23:1d:d3:53:e3:73:65:89:b6:96:5c:7f:db:04:59: 30:58:a8:82:63:46:47:b8:cb:26:77:2f:81:c4:d9: b1:b0:eb:26:27:6e:d0:e8:33:9f:01:fb:5a:80:d2: 23:6d:22:6e:8f:09:15:c8:da:5c:1f:75:fa:90:71: 9d:f0:b7:29:80:34:2c:c7:c5:f5:58:e9:32:58:26: 3a:0c:de:20:82:dc:c5:b1:c2:79:6b:3c:e8:12:39: 49:66:0c:6a:a2:72:88:59:5b:5f:24:75:c1:93:07: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:38:43:11:0C:22:E5:8E:63:2F:3D:C4:1B:72:9F:71:A6:0F:F1:C3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4c27a19-911c-477c-b4e8-1ba9b1e3da76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.18.192.0/19 Signature Algorithm: sha256WithRSAEncryption 18:62:32:94:51:a6:71:7c:1f:16:c2:43:72:a4:66:4b:f4:b7: bc:8b:93:77:65:ba:0f:dd:a1:3b:c1:a1:0a:50:ee:e5:76:86: bc:43:17:50:1f:bd:b0:2b:f9:eb:d6:f7:8d:d9:9f:d0:c4:39: 44:3e:8d:a1:df:8b:3c:bc:fc:d3:db:f9:d4:bd:ec:8c:e1:e6: 4a:15:94:7c:b3:c2:a2:0d:90:ca:43:1c:bd:90:0d:f9:88:e6: 81:95:04:70:66:42:a2:6f:e8:45:4e:59:d7:91:69:90:66:16: 9d:6b:be:18:0e:94:76:2e:d5:78:df:bc:7f:b8:47:0a:99:69: ab:38:ca:15:40:c2:3f:00:34:77:c0:ce:56:9b:82:a6:b1:87: d6:b0:9f:c6:21:fd:2b:28:6d:fb:df:a6:f0:20:4b:d8:75:de: 75:45:5d:05:d5:8a:77:14:78:6b:82:a2:dd:bd:e1:4c:90:ca: c0:c4:4a:62:11:ef:5e:9c:87:57:ba:b0:94:84:c9:44:95:fe: 3d:22:f2:9e:c5:e6:d2:c4:3a:56:1f:6d:2e:2f:26:5b:7e:4f: fa:bf:ce:ef:41:7e:eb:ae:bf:ee:55:1f:e3:a0:2c:4d:7a:16: 35:9d:38:63:31:44:22:39:05:c8:01:44:1f:cb:57:6f:ae:a1: 6b:92:df:4d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUe5MhKaQV5UBW5qHC2IDIBrOWewowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE4MDAzMTUxWhcNMjUwNDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDRjN2Y1MTk0ODczOGY1NWM3MTdhZGJiNDllMzliMzFl YzJiODY3ZjE4YzQ3ZDY5Mzk3NzEyNTNkYWNkNTRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbNGLmwB9XiF8swzsenI96qlI9pfsUSPa/6VcTkqmXiTbX zBHf1QfgclZl8EzOov3jIbC7+Zmh/GwO6NXhxdBHgl9Xh0fQ4kiApGXfeFmJ3VB/ Kf54UqNue/j3EMbWxQ6ftjkp191VsVVCVLgntCpFAbtYb1ZGl92jC3LFwNx6yZgD IX/dtX285CNTbFJc4YpQ8YP/7iMd01Pjc2WJtpZcf9sEWTBYqIJjRke4yyZ3L4HE 2bGw6yYnbtDoM58B+1qA0iNtIm6PCRXI2lwfdfqQcZ3wtymANCzHxfVY6TJYJjoM 3iCC3MWxwnlrPOgSOUlmDGqicohZW18kdcGTBwTFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxjhDEQwi5Y5jLz3EG3KfcaYP8cMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y0YzI3YTE5LTkxMWMtNDc3Yy1iNGU4LTFiYTliMWUzZGE3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUyEsAwDQYJKoZIhvcNAQELBQADggEBABhiMpRRpnF8HxbCQ3KkZkv0t7yL k3dlug/doTvBoQpQ7uV2hrxDF1AfvbAr+evW943Zn9DEOUQ+jaHfizy8/NPb+dS9 7Izh5koVlHyzwqINkMpDHL2QDfmI5oGVBHBmQqJv6EVOWdeRaZBmFp1rvhgOlHYu 1XjfvH+4RwqZaas4yhVAwj8ANHfAzlabgqaxh9awn8Yh/SsobfvfpvAgS9h13nVF XQXVincUeGuCot294UyQysDESmIR716ch1e6sJSEyUSV/j0i8p7F5tLEOlYfbS4v Jlt+T/q/zu9Bfuuuv+5VH+OgLE16FjWdOGMxRCI5BcgBRB/LV2+uoWuS300= -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:12 2025 by rpki-client