$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b99b6bff-0f0d-4cfe-b052-73b7537e87b3.roa File: b99b6bff-0f0d-4cfe-b052-73b7537e87b3.roa (raw, json) Hash identifier: ID6HJ421PiQjyvjtuQUv+W/4Uvia0+ir9Y8hR/tJ6s4= Subject key identifier: 3E:0B:55:DF:0D:5A:CB:25:D6:85:62:2A:2C:43:78:D9:B2:17:67:DD Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 54921B91B70B38CBA48376E7B2128B4D8E0891C0 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b99b6bff-0f0d-4cfe-b052-73b7537e87b3.roa Signing time: Tue 01 Apr 2025 15:00:23 +0000 ROA not before: Tue 01 Apr 2025 15:00:23 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.97.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:92:1b:91:b7:0b:38:cb:a4:83:76:e7:b2:12:8b:4d:8e:08:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 1 15:00:23 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:64:da:97:4c:48:cb:27:e5:ad:05:b6:5c:57: 61:31:65:bb:7b:71:3d:e4:b7:db:32:c9:b2:8d:f8: d8:01:54:43:6c:df:ea:5a:5d:e8:90:11:32:9e:51: 0e:16:43:d1:f3:48:c0:24:9e:1c:e0:3d:55:80:67: 1f:3a:59:27:9c:4f:83:3a:df:9f:3b:04:d3:69:28: 49:66:05:26:89:76:3b:69:48:9e:0d:fb:1b:a0:bc: 5a:6c:6a:c7:88:ac:24:3f:da:5a:e3:16:54:f4:f0: 86:9f:69:f7:62:90:46:7c:c8:24:d9:d3:4b:b3:a0: f8:0b:ad:d0:03:61:21:06:cc:d7:17:04:9c:75:48: 40:7f:ca:72:89:fe:ad:d5:43:80:eb:87:cd:e2:83: e6:ec:88:28:7d:cf:63:33:2d:db:05:da:10:b4:4e: e4:e7:67:f7:05:ca:92:e1:6d:46:c2:55:6f:c2:52: d0:b1:9d:b8:f3:eb:4b:43:4d:32:cb:27:8e:cb:52: 46:0d:ad:0c:06:18:d1:7d:24:1c:37:46:55:62:9a: 61:a7:07:99:32:ea:3d:2d:d2:48:31:2d:33:f5:ea: d5:95:84:e9:c2:6a:9e:14:18:4a:b4:7b:0e:bd:b1: ca:51:62:34:d8:00:67:e8:71:20:2c:c9:ab:d9:cb: 21:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0B:55:DF:0D:5A:CB:25:D6:85:62:2A:2C:43:78:D9:B2:17:67:DD X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b99b6bff-0f0d-4cfe-b052-73b7537e87b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.97.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2a:5f:36:5e:ec:16:58:14:6a:5e:21:74:ca:45:2c:81:42:4f: 77:b3:70:8f:30:66:af:81:15:9e:d0:49:cb:0c:6a:41:fb:8b: b4:fa:af:ed:6f:b3:81:5f:fc:d4:36:d1:2a:eb:92:09:ea:d0: 47:11:55:bd:8b:c7:bc:b3:17:6c:a3:0e:e4:69:21:76:45:b9: ab:79:fa:7b:83:48:a9:2d:2f:ae:55:5d:7c:a4:ba:09:3d:04: a4:d3:1a:7e:c0:d1:dc:82:11:e9:09:00:9a:9e:ac:0f:e6:71: b3:ec:bf:4b:3c:d7:2f:e1:83:73:f7:e0:21:20:57:f0:a6:22: c1:a7:9d:54:0b:b4:03:af:ef:89:d1:4b:d2:7e:cf:b4:ce:5a: 66:2f:9a:02:84:69:94:24:f4:c6:3b:98:04:e5:fa:d5:aa:26: 45:a4:18:b9:7e:45:1c:49:db:14:36:44:ee:f8:e5:07:2d:13: 9c:9f:b0:c3:32:7a:06:ca:73:2f:dc:0e:ff:af:f0:d2:cb:66: 07:10:ea:b9:85:a6:d8:bd:c5:ce:d5:54:f7:ac:ca:95:d7:61: 63:61:5f:c0:57:bd:00:f0:cb:d0:44:2e:86:ed:be:cd:2e:7e: e6:fe:c2:f0:b5:47:df:33:29:b1:49:8f:fc:aa:b2:84:c8:62: 28:b6:76:c2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVJIbkbcLOMukg3bnshKLTY4IkcAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDAxMTUwMDIzWhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZDA1ZDVmNGY2NjYyYWYwMmZhMDkxMTQxNmZiYzVkZGU0 NDYwYmQ4OGFiYWU0NWNmNjY5ZmZiNjRlZTYzYzBmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRZNqXTEjLJ+WtBbZcV2ExZbt7cT3kt9syybKN+NgBVENs 3+paXeiQETKeUQ4WQ9HzSMAknhzgPVWAZx86WSecT4M63587BNNpKElmBSaJdjtp SJ4N+xugvFpsaseIrCQ/2lrjFlT08IafafdikEZ8yCTZ00uzoPgLrdADYSEGzNcX BJx1SEB/ynKJ/q3VQ4Drh83ig+bsiCh9z2MzLdsF2hC0TuTnZ/cFypLhbUbCVW/C UtCxnbjz60tDTTLLJ47LUkYNrQwGGNF9JBw3RlVimmGnB5ky6j0t0kgxLTP16tWV hOnCap4UGEq0ew69scpRYjTYAGfocSAsyavZyyHtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUPgtV3w1ayyXWhWIqLEN42bIXZ90wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2I5OWI2YmZmLTBmMGQtNGNmZS1iMDUyLTczYjc1MzdlODdiMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjYTANBgkqhkiG9w0BAQsFAAOCAQEAKl82XuwWWBRqXiF0ykUsgUJPd7Nw jzBmr4EVntBJywxqQfuLtPqv7W+zgV/81DbRKuuSCerQRxFVvYvHvLMXbKMO5Gkh dkW5q3n6e4NIqS0vrlVdfKS6CT0EpNMafsDR3IIR6QkAmp6sD+Zxs+y/SzzXL+GD c/fgISBX8KYiwaedVAu0A6/vidFL0n7PtM5aZi+aAoRplCT0xjuYBOX61aomRaQY uX5FHEnbFDZE7vjlBy0TnJ+wwzJ6BspzL9wO/6/w0stmBxDquYWm2L3FztVU96zK lddhY2FfwFe9APDL0EQuhu2+zS5+5v7C8LVH3zMpsUmP/KqyhMhiKLZ2wg== -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:50 2025 by rpki-client