$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17721a9e-0a8f-4b71-a56e-234b61d375d3.roa File: 17721a9e-0a8f-4b71-a56e-234b61d375d3.roa (raw, json) Hash identifier: uQVD0O4pT/F+vMkxosJ5jJPiPWClqGB13llUGiAFowA= Subject key identifier: 4D:B3:F2:BC:C6:1D:64:C7:26:11:97:5B:31:84:68:F6:E2:F7:35:B4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 63832B94D212B81AE5A58FC50A2E9BE94E5DD59C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17721a9e-0a8f-4b71-a56e-234b61d375d3.roa Signing time: Sat 15 Feb 2025 00:11:03 +0000 ROA not before: Sat 15 Feb 2025 00:11:03 +0000 ROA not after: Sat 22 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.142.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:83:2b:94:d2:12:b8:1a:e5:a5:8f:c5:0a:2e:9b:e9:4e:5d:d5:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 15 00:11:03 2025 GMT Not After : Mar 22 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2c:75:29:e4:22:f6:94:6b:23:ae:fe:64:a2: da:cb:c3:61:8c:71:c9:95:f4:cd:07:5a:6f:60:9b: 0a:f6:35:bd:2f:ed:83:15:36:c2:7e:00:d9:1f:03: 08:36:8c:62:de:e7:c0:a7:4e:8b:8b:0c:41:75:0d: 8f:90:a5:14:90:df:df:c8:d9:ae:57:43:aa:07:cf: de:28:d7:e2:7e:89:7f:60:b5:66:e5:fc:82:83:e2: 69:8d:21:6f:1f:6b:d8:a8:8d:46:2d:3b:ae:8e:9c: c0:e6:e0:7c:18:94:64:ca:63:1d:fa:41:91:69:44: f3:fe:97:dc:4f:7e:2e:4c:14:ed:55:2c:fe:e8:d2: af:41:74:c6:d2:c5:31:aa:e6:ae:c7:84:ee:da:99: ab:e4:25:98:b6:9e:e6:ce:d7:5a:74:c9:71:12:86: d4:62:c0:03:38:f1:5a:c1:83:2c:58:ba:fe:8a:cb: 24:05:1a:bb:ca:75:52:6c:f2:78:47:61:1d:50:a5: 1e:6f:cd:c7:ee:a7:60:c9:42:a6:cd:62:82:70:18: 51:bd:05:a6:3b:bd:d4:a9:1d:14:18:8e:d9:8f:95: c6:35:f9:bb:3c:76:85:6d:da:72:60:6e:70:f7:94: 75:4d:5b:6e:d4:4c:4b:08:b8:8d:56:ce:5d:19:64: ae:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B3:F2:BC:C6:1D:64:C7:26:11:97:5B:31:84:68:F6:E2:F7:35:B4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17721a9e-0a8f-4b71-a56e-234b61d375d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.142.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0e:bb:eb:6f:5a:1a:28:0a:dd:06:6d:3b:5b:e9:46:d9:e1:44: 4f:a4:56:37:17:89:4a:9f:75:90:35:60:dd:c3:e9:19:3a:92: ab:91:b0:55:22:31:1d:75:59:99:f8:2a:9c:88:8f:b5:f8:63: a9:78:1e:17:42:20:71:aa:b5:a4:41:62:07:fb:94:67:bf:60: 20:54:f8:54:11:38:f9:26:5f:38:38:37:e0:a4:4b:08:b0:00: c9:63:c8:2d:33:e4:41:8b:eb:cf:2c:c8:6c:3f:36:a5:42:5c: 68:11:db:18:c4:bd:dc:22:8f:46:1a:49:d4:bb:20:25:91:bd: e2:b5:89:1d:69:c3:49:8c:0d:2d:7c:7a:64:f3:89:7a:62:f6: e9:8c:2b:a4:73:bf:61:c8:25:fe:e5:b8:45:b0:d5:33:b8:66: ab:9f:b6:c1:36:92:67:90:18:f3:37:b6:01:44:41:9d:7c:37: 81:d8:17:80:ab:e5:3c:36:80:f8:53:61:68:74:93:3b:39:4b: 7a:1b:20:f0:c7:54:f2:fd:6d:4b:eb:12:bf:a5:27:60:f3:33: c1:37:72:0c:fc:3e:71:3f:e8:06:b6:03:d3:36:6d:3d:17:33: 97:fd:2d:9c:cf:bd:93:2e:55:79:c2:01:4f:ae:1e:8f:14:4f: 28:bc:21:e2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUY4MrlNISuBrlpY/FCi6b6U5d1ZwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjE1MDAxMTAzWhcNMjUwMzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YjAzZDQzNDBjOTM0MWQ5OWU1ZjA4YjU3NzEwMjRjOGQ0 MDkyN2QxYzA3NTFhNWNkM2ZmMDE0OGRlYTM2MTNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRLHUp5CL2lGsjrv5kotrLw2GMccmV9M0HWm9gmwr2Nb0v 7YMVNsJ+ANkfAwg2jGLe58CnTouLDEF1DY+QpRSQ39/I2a5XQ6oHz94o1+J+iX9g tWbl/IKD4mmNIW8fa9iojUYtO66OnMDm4HwYlGTKYx36QZFpRPP+l9xPfi5MFO1V LP7o0q9BdMbSxTGq5q7HhO7amavkJZi2nubO11p0yXEShtRiwAM48VrBgyxYuv6K yyQFGrvKdVJs8nhHYR1QpR5vzcfup2DJQqbNYoJwGFG9BaY7vdSpHRQYjtmPlcY1 +bs8doVt2nJgbnD3lHVNW27UTEsIuI1Wzl0ZZK4jAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUTbPyvMYdZMcmEZdbMYRo9uL3NbQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE3NzIxYTllLTBhOGYtNGI3MS1hNTZlLTIzNGI2MWQzNzVkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQjjANBgkqhkiG9w0BAQsFAAOCAQEADrvrb1oaKArdBm07W+lG2eFET6RW NxeJSp91kDVg3cPpGTqSq5GwVSIxHXVZmfgqnIiPtfhjqXgeF0Igcaq1pEFiB/uU Z79gIFT4VBE4+SZfODg34KRLCLAAyWPILTPkQYvrzyzIbD82pUJcaBHbGMS93CKP RhpJ1LsgJZG94rWJHWnDSYwNLXx6ZPOJemL26YwrpHO/Ycgl/uW4RbDVM7hmq5+2 wTaSZ5AY8ze2AURBnXw3gdgXgKvlPDaA+FNhaHSTOzlLehsg8MdU8v1tS+sSv6Un YPMzwTdyDPw+cT/oBrYD0zZtPRczl/0tnM+9ky5VecIBT64ejxRPKLwh4g== -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:06 2025 by rpki-client