$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30290b49-2338-484b-b6b1-a4e2daf71d2c.roa File: 30290b49-2338-484b-b6b1-a4e2daf71d2c.roa (raw, json) Hash identifier: iqzSEQnwddf8Ly6BGX3NQhZuF+SOVJ7nB1v8m2ZHOCI= Subject key identifier: 67:77:9E:F6:CF:90:EF:CF:CE:59:8B:6B:CF:B1:A8:CE:C3:42:09:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 174421C06669B91276DB6DE8D89E4B8E365B8F83 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30290b49-2338-484b-b6b1-a4e2daf71d2c.roa Signing time: Mon 17 Feb 2025 16:30:17 +0000 ROA not before: Mon 17 Feb 2025 16:30:17 +0000 ROA not after: Mon 24 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.38.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:44:21:c0:66:69:b9:12:76:db:6d:e8:d8:9e:4b:8e:36:5b:8f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 17 16:30:17 2025 GMT Not After : Mar 24 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:48:1f:28:48:c1:11:26:32:63:04:35:c6: 2d:7b:aa:c0:a3:0e:a9:16:8f:08:7b:07:52:95:5d: d2:9a:83:32:03:4e:ce:5e:76:bd:bc:b5:9f:20:67: 99:20:d9:ab:27:85:36:73:55:6e:3c:47:35:1e:57: 71:a9:6f:6e:d4:2e:33:2f:df:d7:88:bc:84:1b:38: 79:b8:e3:3b:5e:7b:4f:ed:1b:4f:a4:40:43:a2:6a: c4:f4:68:7d:f6:7b:17:f9:2e:b1:b9:89:3b:5a:fa: 6b:af:c4:b8:0d:5a:03:6e:c2:c8:6e:c6:d1:a7:98: ca:77:ea:04:8c:b9:97:f0:46:9e:b7:8f:7e:aa:fe: fc:c3:65:b2:9c:c0:e6:3e:a6:92:8e:94:99:56:aa: 2b:64:86:fd:02:c0:05:4b:d7:58:15:3c:76:e2:5f: 3e:4c:df:ec:80:1d:cf:56:80:7c:ba:2e:ed:90:88: c8:c6:20:4e:a8:09:4b:48:32:67:69:91:ac:f8:17: 12:9d:28:9b:27:cf:20:48:2b:f7:58:82:d6:67:a3: 21:c7:2f:79:6f:dc:7b:59:90:22:80:e7:9f:d1:b7: e1:f9:ac:4b:cd:0a:7b:a6:d0:95:7b:b3:32:0f:d9: 64:de:f2:45:1d:84:8d:dd:71:f5:03:e9:a1:d6:22: 4b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:77:9E:F6:CF:90:EF:CF:CE:59:8B:6B:CF:B1:A8:CE:C3:42:09:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30290b49-2338-484b-b6b1-a4e2daf71d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.38.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8a:c5:9d:60:93:cf:3b:19:3c:f5:1a:16:a5:18:93:9a:bd:12: 98:71:f9:04:7e:b5:9c:ad:32:e8:b4:31:4c:34:81:cc:ac:d1: e4:71:21:07:bc:d9:91:ea:3d:41:79:b9:1c:7a:68:28:7c:26: 71:98:86:52:2b:18:f2:85:1f:1c:ec:84:58:d7:0d:f1:58:70: 89:0e:2b:32:70:27:75:83:c0:4a:c2:88:b0:0c:c3:fa:1c:2b: 2d:36:32:f4:a7:0e:4e:54:16:8f:67:4d:87:d8:26:75:50:7c: 4f:c4:e1:68:cd:95:95:92:11:57:f7:33:11:a6:f3:01:53:c3: 5a:1d:d6:77:a5:78:c6:c4:06:e1:b8:82:71:a0:c6:e5:ad:23: 1a:57:08:f3:71:20:57:b5:f2:ec:ba:4c:88:3c:ff:a3:57:32: 56:13:c4:ab:a5:11:e4:03:7b:43:87:8b:13:e5:fb:0d:6c:dd: 68:18:93:d9:db:18:49:17:48:9f:01:f6:f3:7e:27:c6:76:f5: 8e:19:c1:f6:71:dc:94:b6:ca:e0:cb:0c:41:1d:12:47:9b:e3: b6:eb:11:55:36:d6:0d:86:de:4d:85:c9:97:ba:2c:b6:34:8a: c3:97:b8:2b:1c:bd:a1:d3:e9:59:0b:69:65:5b:78:e1:d9:bc: 45:be:37:93 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUF0QhwGZpuRJ2223o2J5LjjZbj4MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjE3MTYzMDE3WhcNMjUwMzI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlODI5ODJjMDUzMTA4Yzg0MDQ1MTQ5NWNlNTdkNTM4MDg4 MjRiZTMxMDU3NzRiZTU3OWRjZDNmMDcxYjQ3YWFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtyUgfKEjBESYyYwQ1xi17qsCjDqkWjwh7B1KVXdKagzID Ts5edr28tZ8gZ5kg2asnhTZzVW48RzUeV3Gpb27ULjMv39eIvIQbOHm44ztee0/t G0+kQEOiasT0aH32exf5LrG5iTta+muvxLgNWgNuwshuxtGnmMp36gSMuZfwRp63 j36q/vzDZbKcwOY+ppKOlJlWqitkhv0CwAVL11gVPHbiXz5M3+yAHc9WgHy6Lu2Q iMjGIE6oCUtIMmdpkaz4FxKdKJsnzyBIK/dYgtZnoyHHL3lv3HtZkCKA55/Rt+H5 rEvNCnum0JV7szIP2WTe8kUdhI3dcfUD6aHWIkthAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUZ3ee9s+Q78/OWYtrz7GozsNCCRMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMwMjkwYjQ5LTIzMzgtNDg0Yi1iNmIxLWE0ZTJkYWY3MWQyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4JjANBgkqhkiG9w0BAQsFAAOCAQEAisWdYJPPOxk89RoWpRiTmr0SmHH5 BH61nK0y6LQxTDSBzKzR5HEhB7zZkeo9QXm5HHpoKHwmcZiGUisY8oUfHOyEWNcN 8VhwiQ4rMnAndYPASsKIsAzD+hwrLTYy9KcOTlQWj2dNh9gmdVB8T8ThaM2VlZIR V/czEabzAVPDWh3Wd6V4xsQG4biCcaDG5a0jGlcI83EgV7Xy7LpMiDz/o1cyVhPE q6UR5AN7Q4eLE+X7DWzdaBiT2dsYSRdInwH2834nxnb1jhnB9nHclLbK4MsMQR0S R5vjtusRVTbWDYbeTYXJl7ostjSKw5e4Kxy9odPpWQtpZVt44dm8Rb43kw== -----END CERTIFICATE-----Generated at Thu Mar 13 23:39:51 2025 by rpki-client