$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb055652-9b74-418d-8b49-f94fdbf4fcc2.roa File: fb055652-9b74-418d-8b49-f94fdbf4fcc2.roa (raw, json) Hash identifier: 8QUy6fk7sGA/DKU+3bKL5iXVuc3C7Ro4FNbZmsEx6/4= Subject key identifier: 29:CB:D6:E7:48:0B:82:B2:5C:61:E6:01:B9:40:B7:85:39:7E:9D:23 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5BDFD556E037DEE673A201AF7ADBD7FB5B552718 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb055652-9b74-418d-8b49-f94fdbf4fcc2.roa Signing time: Wed 19 Mar 2025 00:10:21 +0000 ROA not before: Wed 19 Mar 2025 00:10:21 +0000 ROA not after: Wed 23 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:df:d5:56:e0:37:de:e6:73:a2:01:af:7a:db:d7:fb:5b:55:27:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 19 00:10:21 2025 GMT Not After : Apr 23 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6b:bb:fc:96:1d:04:86:37:fe:e4:2f:39:bc: 9b:6e:45:91:35:3a:40:21:7f:db:c5:05:1f:bd:c9: 54:c0:9c:b2:70:66:1f:13:a8:a3:dc:eb:53:31:62: 75:ad:fb:6d:61:81:a6:10:36:de:67:6d:dc:44:1f: 59:5f:f6:a5:5c:de:59:b2:29:ae:40:ec:3b:63:bf: 9b:74:f0:d8:86:e3:b2:f2:c6:45:f9:9b:f7:18:44: f9:b8:61:3c:5e:49:d4:80:cf:d0:4e:62:e4:26:2a: 39:a3:41:7a:a3:72:ae:ff:a3:db:90:fb:36:41:99: f4:b8:6a:96:72:56:6b:6c:1b:b2:ee:18:6d:0e:12: bd:45:d1:91:48:63:30:cd:e7:d4:a2:a3:90:78:13: 98:bf:21:31:15:73:3b:9c:15:86:62:89:26:6e:7c: a6:fc:04:7f:57:54:e1:2e:42:57:b4:5c:da:9a:92: 95:7f:f7:b0:71:88:4c:60:4c:00:de:ff:51:99:07: bd:28:12:97:01:9e:aa:57:40:1f:94:f7:6d:a7:2e: 1e:ef:63:00:ce:c9:a9:fe:ef:83:94:62:c0:a9:f5: 36:61:78:a5:d8:cf:a9:5b:37:43:d1:72:90:e8:4a: 93:90:e7:58:97:1d:ef:fe:d9:95:b4:cc:13:fc:81: 0a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CB:D6:E7:48:0B:82:B2:5C:61:E6:01:B9:40:B7:85:39:7E:9D:23 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb055652-9b74-418d-8b49-f94fdbf4fcc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.33.0/24 Signature Algorithm: sha256WithRSAEncryption ac:b4:e0:ac:6e:38:3c:01:7b:cf:c6:f6:d8:fb:d5:67:48:0d: 6d:5b:4a:4c:cf:20:e9:d2:34:8e:4f:ae:b7:f4:fa:a3:7f:38: eb:3d:6e:51:02:49:6c:d0:e4:09:f2:48:8e:6a:b6:6e:3e:fd: b7:c2:7c:8c:41:f9:63:43:8b:a9:a7:ec:16:0c:14:d9:93:97: 35:65:5e:40:5b:84:8f:23:44:c4:29:07:9d:24:16:c4:01:92: 1d:7e:f6:77:45:97:08:cf:c3:d2:65:e9:96:95:f0:64:f0:de: 57:ed:f0:5a:57:f7:bd:67:f5:96:61:15:62:6e:cb:46:46:4a: 17:f1:49:ab:51:5c:90:b4:a7:c3:0c:5e:11:4b:c9:1b:a7:67: 3b:2b:e5:aa:d6:44:0d:24:62:10:66:ed:50:f2:82:6d:b6:b5: 5e:48:e2:55:dc:ff:91:5a:b1:6a:d3:3c:e1:a4:81:47:f8:e7: bf:2a:6b:19:1c:89:48:c2:6d:a2:0e:e8:a7:ca:a8:65:39:ed: 80:1b:0a:72:9f:11:ca:b2:91:84:34:80:7a:1d:22:51:45:94: 7e:b6:8a:9b:d4:73:8c:5a:ff:2f:df:90:42:6e:cc:90:cb:ef: 6b:a9:91:f8:09:ec:1e:67:3c:b7:a8:7b:cc:11:c4:46:45:23: ce:2d:59:4e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW9/VVuA33uZzogGvetvX+1tVJxgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE5MDAxMDIxWhcNMjUwNDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDgyYmZkMGY4N2JhMmViYjZhYzVlMmRkY2FlZTAzODgx MTRlZmQwM2NjODJkNGQ4MzUyNmIyNmE1MjBlMjg4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8a7v8lh0Ehjf+5C85vJtuRZE1OkAhf9vFBR+9yVTAnLJw Zh8TqKPc61MxYnWt+21hgaYQNt5nbdxEH1lf9qVc3lmyKa5A7Dtjv5t08NiG47Ly xkX5m/cYRPm4YTxeSdSAz9BOYuQmKjmjQXqjcq7/o9uQ+zZBmfS4apZyVmtsG7Lu GG0OEr1F0ZFIYzDN59Sio5B4E5i/ITEVczucFYZiiSZufKb8BH9XVOEuQle0XNqa kpV/97BxiExgTADe/1GZB70oEpcBnqpXQB+U922nLh7vYwDOyan+74OUYsCp9TZh eKXYz6lbN0PRcpDoSpOQ51iXHe/+2ZW0zBP8gQobAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKcvW50gLgrJcYeYBuUC3hTl+nSMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZiMDU1NjUyLTliNzQtNDE4ZC04YjQ5LWY5NGZkYmY0ZmNjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEiEwDQYJKoZIhvcNAQELBQADggEBAKy04KxuODwBe8/G9tj71WdIDW1b SkzPIOnSNI5Prrf0+qN/OOs9blECSWzQ5AnySI5qtm4+/bfCfIxB+WNDi6mn7BYM FNmTlzVlXkBbhI8jRMQpB50kFsQBkh1+9ndFlwjPw9Jl6ZaV8GTw3lft8FpX971n 9ZZhFWJuy0ZGShfxSatRXJC0p8MMXhFLyRunZzsr5arWRA0kYhBm7VDygm22tV5I 4lXc/5FasWrTPOGkgUf4578qaxkciUjCbaIO6KfKqGU57YAbCnKfEcqykYQ0gHod IlFFlH62ipvUc4xa/y/fkEJuzJDL72upkfgJ7B5nPLeoe8wRxEZFI84tWU4= -----END CERTIFICATE-----Generated at Sat Apr 5 21:55:41 2025 by rpki-client