$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5aec560-9ee2-4706-a412-e145d8614aad.roa File: f5aec560-9ee2-4706-a412-e145d8614aad.roa (raw, json) Hash identifier: SIBOsa8MKlyCe4EXgDaCn3/6UA5ZFhtwHwSBaj9f8sY= Subject key identifier: 51:58:55:88:36:79:13:1F:EA:C9:94:38:6A:5C:9B:11:EB:ED:5F:94 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6244444550C0D589F1296C66C15BE930511A13D2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5aec560-9ee2-4706-a412-e145d8614aad.roa Signing time: Wed 19 Mar 2025 00:21:12 +0000 ROA not before: Wed 19 Mar 2025 00:21:12 +0000 ROA not after: Wed 23 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.168.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:44:44:45:50:c0:d5:89:f1:29:6c:66:c1:5b:e9:30:51:1a:13:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 19 00:21:12 2025 GMT Not After : Apr 23 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:42:7f:a6:a6:60:4c:f1:fa:ef:41:96:07:66: 95:f0:2e:44:48:39:af:70:81:0b:c1:3d:51:d3:0b: a4:54:1b:c5:e3:f8:a4:d3:91:68:e0:7e:6b:ed:28: 9f:19:61:94:9d:40:26:89:e0:bf:f4:8c:13:70:1f: 4c:61:41:08:c9:1e:2b:5e:c6:7c:02:fe:11:ff:d0: 78:0b:7d:14:ac:fd:45:ec:fb:a4:4a:78:6b:35:e1: 6a:e8:0c:1c:22:b3:0a:cb:9e:47:9e:a3:c1:c7:48: fc:ca:96:a1:b1:da:b9:c6:4c:28:09:e0:6d:d4:6e: 41:74:40:f2:66:e3:ea:1c:14:86:af:d1:17:86:10: d2:37:26:75:a2:d7:11:54:b9:dd:62:2c:de:07:72: da:9d:fa:20:72:93:50:ab:f4:85:71:c7:51:0d:79: 00:19:e4:5a:65:6f:13:81:ca:b4:6c:9b:cd:6b:08: 73:a9:3b:dc:e5:c5:50:5c:3c:61:36:95:14:55:10: 5b:45:75:5a:9b:d7:4b:f5:f0:ce:d6:0a:ec:3b:34: d3:5d:ca:ac:f5:be:0b:e7:69:d7:ab:33:3f:4e:bf: 70:cf:20:58:54:5d:19:2a:b0:bd:e2:54:f0:92:5c: c9:93:dc:85:1b:0d:73:83:f8:8b:0d:b3:2b:fe:dd: 62:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:58:55:88:36:79:13:1F:EA:C9:94:38:6A:5C:9B:11:EB:ED:5F:94 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5aec560-9ee2-4706-a412-e145d8614aad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.168.128.0/17 Signature Algorithm: sha256WithRSAEncryption 44:e2:fe:67:44:cf:05:a6:af:f8:79:85:d6:b1:7d:24:46:31: d2:67:cf:62:2e:2c:06:5e:6c:18:21:23:09:e6:47:67:88:58: 29:4b:3f:9b:4c:1a:24:fa:cf:45:e0:34:7f:28:72:b8:15:09: 59:86:67:86:5f:60:38:79:c5:dc:87:13:a4:70:49:24:8e:ae: dd:6a:58:21:6f:d8:a4:4a:45:58:94:08:0e:47:4d:ad:77:5c: d9:56:92:45:6d:9a:0d:59:67:21:91:47:b5:37:09:8f:91:ac: fc:bf:3c:26:ec:9a:09:92:a0:75:20:94:e8:cc:d2:0d:72:4f: 82:da:9f:2b:75:99:88:67:06:57:a9:1c:80:dd:1d:25:3b:45: 86:8d:ae:77:a7:a3:a2:ac:5f:8b:18:05:9b:e5:e4:12:f1:73: 4d:67:59:13:e1:43:e7:72:55:ae:36:bf:7f:c1:f7:e3:6e:4c: cd:51:36:a1:05:0a:f5:a0:6b:39:6b:da:a8:dd:c4:93:c5:66: 54:6c:b6:8a:81:70:e3:b1:d6:db:8d:6a:2b:d5:36:cf:69:0e: 6c:7a:7b:b3:2e:9e:f1:09:41:6e:72:fb:c5:a3:fa:74:47:d4: bd:fa:a6:82:71:b4:13:6c:49:01:e6:e9:87:32:2f:79:37:e1: 68:27:a8:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYkRERVDA1YnxKWxmwVvpMFEaE9IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE5MDAyMTEyWhcNMjUwNDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjQ3ODAxMzZlOGIwMjA0NGIxNTY4NGJkODY2ODMwMzZk ZmQ0MDczMDUxN2RjMmNiMWQ5ZWY1M2Q3MjkxZTE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvQn+mpmBM8frvQZYHZpXwLkRIOa9wgQvBPVHTC6RUG8Xj +KTTkWjgfmvtKJ8ZYZSdQCaJ4L/0jBNwH0xhQQjJHitexnwC/hH/0HgLfRSs/UXs +6RKeGs14WroDBwiswrLnkeeo8HHSPzKlqGx2rnGTCgJ4G3UbkF0QPJm4+ocFIav 0ReGENI3JnWi1xFUud1iLN4Hctqd+iByk1Cr9IVxx1ENeQAZ5FplbxOByrRsm81r CHOpO9zlxVBcPGE2lRRVEFtFdVqb10v18M7WCuw7NNNdyqz1vgvnaderMz9Ov3DP IFhUXRkqsL3iVPCSXMmT3IUbDXOD+IsNsyv+3WJ9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUVhViDZ5Ex/qyZQ4alybEevtX5QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y1YWVjNTYwLTllZTItNDcwNi1hNDEyLWUxNDVkODYxNGFhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfRqIAwDQYJKoZIhvcNAQELBQADggEBAETi/mdEzwWmr/h5hdaxfSRGMdJn z2IuLAZebBghIwnmR2eIWClLP5tMGiT6z0XgNH8ocrgVCVmGZ4ZfYDh5xdyHE6Rw SSSOrt1qWCFv2KRKRViUCA5HTa13XNlWkkVtmg1ZZyGRR7U3CY+RrPy/PCbsmgmS oHUglOjM0g1yT4Lanyt1mYhnBlepHIDdHSU7RYaNrneno6KsX4sYBZvl5BLxc01n WRPhQ+dyVa42v3/B9+NuTM1RNqEFCvWgazlr2qjdxJPFZlRstoqBcOOx1tuNaivV Ns9pDmx6e7MunvEJQW5y+8Wj+nRH1L36poJxtBNsSQHm6YcyL3k34WgnqI4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:27 2025 by rpki-client