$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0baad54a-dc1f-452b-8384-51f385f5e3c5.roa File: 0baad54a-dc1f-452b-8384-51f385f5e3c5.roa (raw, json) Hash identifier: 73aLw8/rMwXXk5J2F6dmgZJa/UPsf7Dk4+e+nW0Y1Zk= Subject key identifier: 58:54:70:D8:EA:65:53:20:66:55:7F:7F:E7:78:54:12:11:4F:8C:3F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 551FA28F36C208706A2EEB2AD7D562629720BFF5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0baad54a-dc1f-452b-8384-51f385f5e3c5.roa Signing time: Wed 12 Mar 2025 00:00:37 +0000 ROA not before: Wed 12 Mar 2025 00:00:37 +0000 ROA not after: Wed 16 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 149.190.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:1f:a2:8f:36:c2:08:70:6a:2e:eb:2a:d7:d5:62:62:97:20:bf:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 00:00:37 2025 GMT Not After : Apr 16 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:ae:0d:b9:47:33:4a:d6:01:e2:3b:bc:84: 03:96:1b:29:22:97:b8:b2:cc:70:54:44:f4:d0:ca: 76:b3:69:fd:a6:b2:2c:6b:57:a0:c2:50:7e:92:6e: 90:49:03:7a:d5:90:f8:34:2c:89:44:0f:d5:c9:10: ce:f6:2f:ae:ea:cb:37:ce:85:8f:be:7e:cd:e5:88: de:f1:89:03:bb:3f:45:40:47:cf:2f:86:c9:32:0e: 2d:f9:d0:e1:98:1a:d3:de:02:d8:8d:79:41:0b:96: df:e6:95:58:31:49:4f:21:c2:72:4e:20:b7:93:80: 20:b6:b7:77:4a:5f:c9:cf:13:13:a4:d7:62:98:3f: a9:86:3b:51:a8:43:5a:5b:4d:d7:72:92:28:fd:70: 86:f8:c4:c8:22:9a:44:5c:d7:1b:1a:91:c5:7a:20: 14:27:6b:38:74:7b:61:46:1e:b9:a6:cc:8b:c8:d7: a4:83:0b:27:ce:e2:a8:0f:e2:a1:a4:03:7a:7d:07: f2:de:98:24:8c:e0:6e:dc:03:94:2a:12:dd:25:92: 47:06:da:af:d9:2e:e4:9e:23:03:36:d3:e4:b7:45: d8:56:e4:c2:a5:2b:c9:8d:ff:27:d6:de:b2:50:3d: f4:ad:d2:83:12:95:3a:00:27:f1:c4:b1:a3:f7:c0: df:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:54:70:D8:EA:65:53:20:66:55:7F:7F:E7:78:54:12:11:4F:8C:3F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0baad54a-dc1f-452b-8384-51f385f5e3c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.190.0.0/16 Signature Algorithm: sha256WithRSAEncryption 49:37:c3:92:32:32:65:c1:87:49:07:8a:db:15:85:f1:d4:bc: d8:2d:7b:c4:54:55:6f:a2:69:19:aa:36:29:5b:60:9c:31:e1: 91:79:5c:ea:ed:25:d6:96:34:ae:40:1f:a9:3d:d1:7d:52:44: 5a:b1:e0:be:8c:d7:56:ad:54:dd:51:e6:f6:2d:87:c2:b7:aa: aa:77:a9:a3:b3:f8:42:93:4b:86:9b:8f:c1:d1:91:c2:11:10: 87:dd:bd:08:5f:f1:9d:4c:8a:df:51:97:00:d9:90:b4:20:5d: 19:92:22:48:dc:6d:47:54:29:f8:59:c6:25:0a:d8:58:7e:65: dc:d7:00:05:59:36:c7:97:f9:4f:f3:f4:7e:1a:27:85:06:13: 08:9c:19:24:c9:93:b1:40:54:e8:b7:1b:a8:26:c5:7d:97:56: ed:3f:33:de:c5:8c:90:83:21:06:39:a5:37:55:ec:b9:e4:a0: 22:14:ca:76:33:5f:7d:85:f8:50:45:56:aa:7e:22:00:bc:4c: 5a:ab:5a:52:e1:14:23:50:0c:71:d7:3f:e6:9e:e6:85:13:1a: a1:9a:7d:10:3f:2f:eb:ec:8c:e1:23:c8:c9:74:55:8b:99:18: cc:37:37:3f:a6:b6:17:3a:96:db:a4:ae:db:c5:a3:c8:ff:87: e0:46:3d:da -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVR+ijzbCCHBqLusq19ViYpcgv/UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzEyMDAwMDM3WhcNMjUwNDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTZlYzdiMGIxNjlhYzkzMDFlYTQ4ZTFiOGRlY2QxZmVm NjE4MDJjZTk5ZTA0M2NjYzkxNjUwNjQ2Y2I2YjM1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClH64NuUczStYB4ju8hAOWGykil7iyzHBURPTQynazaf2m sixrV6DCUH6SbpBJA3rVkPg0LIlED9XJEM72L67qyzfOhY++fs3liN7xiQO7P0VA R88vhskyDi350OGYGtPeAtiNeUELlt/mlVgxSU8hwnJOILeTgCC2t3dKX8nPExOk 12KYP6mGO1GoQ1pbTddykij9cIb4xMgimkRc1xsakcV6IBQnazh0e2FGHrmmzIvI 16SDCyfO4qgP4qGkA3p9B/LemCSM4G7cA5QqEt0lkkcG2q/ZLuSeIwM20+S3RdhW 5MKlK8mN/yfW3rJQPfSt0oMSlToAJ/HEsaP3wN/dAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUWFRw2OplUyBmVX9/53hUEhFPjD8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBiYWFkNTRhLWRjMWYtNDUyYi04Mzg0LTUxZjM4NWY1ZTNjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCVvjANBgkqhkiG9w0BAQsFAAOCAQEASTfDkjIyZcGHSQeK2xWF8dS82C17 xFRVb6JpGao2KVtgnDHhkXlc6u0l1pY0rkAfqT3RfVJEWrHgvozXVq1U3VHm9i2H wreqqnepo7P4QpNLhpuPwdGRwhEQh929CF/xnUyK31GXANmQtCBdGZIiSNxtR1Qp +FnGJQrYWH5l3NcABVk2x5f5T/P0fhonhQYTCJwZJMmTsUBU6LcbqCbFfZdW7T8z 3sWMkIMhBjmlN1XsueSgIhTKdjNffYX4UEVWqn4iALxMWqtaUuEUI1AMcdc/5p7m hRMaoZp9ED8v6+yM4SPIyXRVi5kYzDc3P6a2FzqW26Su28WjyP+H4EY92g== -----END CERTIFICATE-----Generated at Thu Mar 13 23:54:34 2025 by rpki-client