$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0baad54a-dc1f-452b-8384-51f385f5e3c5.roa File: 0baad54a-dc1f-452b-8384-51f385f5e3c5.roa (raw, json) Hash identifier: LMrlowg4BblZ4irR3ORkBtK2pTUklqjUzt6i9OsC7zo= Subject key identifier: 07:F1:E2:A9:FF:AE:80:57:B9:44:C7:42:7A:63:C4:80:35:82:5E:D9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11B7C964AA3CB6AD86659B1319F6AAC576B15ADE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0baad54a-dc1f-452b-8384-51f385f5e3c5.roa Signing time: Sat 15 Feb 2025 00:01:31 +0000 ROA not before: Sat 15 Feb 2025 00:01:31 +0000 ROA not after: Sat 22 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 149.190.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b7:c9:64:aa:3c:b6:ad:86:65:9b:13:19:f6:aa:c5:76:b1:5a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 15 00:01:31 2025 GMT Not After : Mar 22 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:42:b1:b6:0d:7b:b1:2b:91:cd:5e:01:80:b6: 56:a8:cb:1e:da:47:fb:40:74:67:1c:3a:d3:2f:13: fe:7b:ff:9a:d5:72:e4:23:9d:68:05:b1:c9:e1:dd: fb:64:4d:e8:96:8a:ff:30:1a:22:6e:fb:42:2f:0d: c0:5d:2b:a6:0f:8d:4e:32:c2:16:e3:1f:24:79:cf: ac:41:31:3f:dd:80:6a:d6:e2:9f:cd:d7:8a:d7:87: ac:91:8c:fd:ae:e3:4f:75:13:b7:66:48:9b:58:13: 5c:9e:92:c9:e7:60:45:ff:46:30:ab:6b:f5:3f:cc: 70:8d:43:a5:5f:df:55:07:2b:b4:a3:22:5d:a4:98: ee:0b:64:d0:17:97:08:f4:2e:6d:88:93:ae:5a:37: e9:86:e4:0f:81:74:36:a1:a5:54:fb:46:35:4c:88: 93:f3:bd:3d:02:26:08:a6:55:ed:90:d3:ad:4f:09: 6e:24:16:94:a0:08:e1:3a:a8:7a:50:f3:89:7f:16: 6e:f5:15:8b:40:b9:a3:47:63:a7:f4:f8:b7:b2:18: bc:0c:ca:56:58:ca:7c:c4:f4:29:d7:ba:8a:b0:c1: 10:38:af:b7:f4:98:31:26:aa:91:ce:f0:8d:8a:24: 3d:dd:a4:ba:65:be:af:ba:84:89:7f:c1:d2:26:2d: 1e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F1:E2:A9:FF:AE:80:57:B9:44:C7:42:7A:63:C4:80:35:82:5E:D9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0baad54a-dc1f-452b-8384-51f385f5e3c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.190.0.0/16 Signature Algorithm: sha256WithRSAEncryption 85:39:a4:97:d6:b7:91:32:b3:d8:64:37:b5:a2:17:7e:55:3a: cb:58:de:58:d9:28:c5:b6:55:98:86:82:3b:78:62:1e:3c:53: 4e:0a:26:5f:f3:c0:5a:07:cd:85:f3:59:75:75:46:20:82:30: 3f:3a:be:12:08:89:99:ba:f1:d8:28:b7:41:27:74:62:f3:ac: d7:d3:dc:48:ca:6d:f0:cc:4a:40:4e:19:e1:21:04:33:13:98: 8c:9a:07:1b:ea:f4:b6:74:89:18:47:fb:04:a8:55:ae:0f:aa: 15:29:1a:22:72:5a:fd:c3:ee:68:41:65:20:b7:59:9d:b1:16: 4d:1a:ca:14:d1:64:26:d4:f4:39:7e:94:f9:77:63:29:af:51: 2c:5f:91:2a:34:1e:58:46:74:dd:1b:c3:d7:8f:1f:e0:44:20: b2:0b:f0:e4:10:f5:8a:c3:cc:a3:e5:96:58:40:33:23:15:65: 8c:d2:ed:cd:21:6c:0f:cd:98:af:22:ca:86:fb:f8:c9:2d:49: a0:28:86:1a:14:d0:b4:f7:6b:59:84:27:8f:e0:12:8f:a5:cd: 3c:f7:3b:e1:4a:fe:a6:99:0b:ac:b3:98:6c:e4:5c:ef:79:87: 99:a6:b5:68:7d:c4:51:73:e5:8f:51:8e:ec:86:98:3f:c6:9c: ad:cd:e3:fe -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUEbfJZKo8tq2GZZsTGfaqxXaxWt4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjE1MDAwMTMxWhcNMjUwMzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NjNhZDhmYTI3MTQzOWVmMzRlMmY1NWY4ZTYxMWQ0YmNl Mjc1NzNlZGQ3ZTMyMjBiNmZlODk1MmU5ZTNjODdhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrQrG2DXuxK5HNXgGAtlaoyx7aR/tAdGccOtMvE/57/5rV cuQjnWgFscnh3ftkTeiWiv8wGiJu+0IvDcBdK6YPjU4ywhbjHyR5z6xBMT/dgGrW 4p/N14rXh6yRjP2u4091E7dmSJtYE1yeksnnYEX/RjCra/U/zHCNQ6Vf31UHK7Sj Il2kmO4LZNAXlwj0Lm2Ik65aN+mG5A+BdDahpVT7RjVMiJPzvT0CJgimVe2Q061P CW4kFpSgCOE6qHpQ84l/Fm71FYtAuaNHY6f0+LeyGLwMylZYynzE9CnXuoqwwRA4 r7f0mDEmqpHO8I2KJD3dpLplvq+6hIl/wdImLR6NAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUB/Hiqf+ugFe5RMdCemPEgDWCXtkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBiYWFkNTRhLWRjMWYtNDUyYi04Mzg0LTUxZjM4NWY1ZTNjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCVvjANBgkqhkiG9w0BAQsFAAOCAQEAhTmkl9a3kTKz2GQ3taIXflU6y1je WNkoxbZVmIaCO3hiHjxTTgomX/PAWgfNhfNZdXVGIIIwPzq+EgiJmbrx2Ci3QSd0 YvOs19PcSMpt8MxKQE4Z4SEEMxOYjJoHG+r0tnSJGEf7BKhVrg+qFSkaInJa/cPu aEFlILdZnbEWTRrKFNFkJtT0OX6U+XdjKa9RLF+RKjQeWEZ03RvD148f4EQgsgvw 5BD1isPMo+WWWEAzIxVljNLtzSFsD82YryLKhvv4yS1JoCiGGhTQtPdrWYQnj+AS j6XNPPc74Ur+ppkLrLOYbORc73mHmaa1aH3EUXPlj1GO7IaYP8acrc3j/g== -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:29 2025 by rpki-client