$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39dca287-26d4-4bbc-a590-f5bf14971de6.roa File: 39dca287-26d4-4bbc-a590-f5bf14971de6.roa (raw, json) Hash identifier: gq6GX54WVwnIz2P9n6/VLzczTO6tZnKz6KC2ETHuueM= Subject key identifier: 7F:24:3C:E5:57:4E:E8:CB:01:BD:E4:52:8F:76:63:BD:6D:85:AC:0A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5911EA12406C3A62DC892CEC09301EFE54115048 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39dca287-26d4-4bbc-a590-f5bf14971de6.roa Signing time: Wed 05 Mar 2025 00:20:20 +0000 ROA not before: Wed 05 Mar 2025 00:20:20 +0000 ROA not after: Wed 09 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.187.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:11:ea:12:40:6c:3a:62:dc:89:2c:ec:09:30:1e:fe:54:11:50:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 5 00:20:20 2025 GMT Not After : Apr 9 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5b:25:5f:22:00:fa:39:b6:de:5d:73:00:1c: df:e5:44:5f:5b:af:35:12:e2:af:ba:ae:fd:41:4e: ce:64:98:68:d3:fa:13:2f:53:77:d7:1c:22:46:fc: d5:fd:71:c2:87:64:86:d8:85:17:9b:f2:c0:ea:9e: 7c:bb:3f:4d:68:71:cf:61:97:c4:fb:a2:98:87:99: a9:45:c9:62:b0:d3:d7:1b:ab:7d:6c:2e:10:7a:8a: 79:80:60:88:5e:99:83:38:7e:d2:2d:06:bc:c7:34: 3d:c3:2e:86:0c:85:eb:47:02:f1:7f:35:d8:d1:f1: 43:59:55:0d:e9:28:74:06:96:3e:1b:67:8b:18:c2: 4d:8e:f1:64:11:41:46:2a:fa:1e:bf:aa:5e:92:12: b7:6b:06:75:a6:d4:19:34:89:1a:e0:1c:fc:69:06: ec:8c:9a:c1:26:24:f7:e6:05:0e:0b:12:58:20:24: 43:6b:86:00:1b:6f:59:3d:1b:b4:10:c9:86:7b:78: 06:31:9b:d2:83:fb:29:98:20:cb:d4:c6:08:26:b3: b0:50:d8:6b:44:d9:91:50:63:39:0b:7d:8a:c5:d0: 59:16:ec:75:ca:8e:e1:54:f7:bd:3e:cf:f3:26:fc: a0:2d:9b:ff:9f:03:b3:31:82:3c:fd:aa:86:19:2d: 2e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:24:3C:E5:57:4E:E8:CB:01:BD:E4:52:8F:76:63:BD:6D:85:AC:0A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39dca287-26d4-4bbc-a590-f5bf14971de6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.187.0.0/16 Signature Algorithm: sha256WithRSAEncryption 55:aa:f9:19:5c:d0:80:2c:ba:14:2e:38:1e:aa:ba:5e:5a:17: 1f:6a:52:a4:46:18:c9:81:74:70:aa:13:1e:ef:b1:a7:42:3c: 74:52:50:18:b5:dd:b7:d4:fc:85:02:86:9a:ce:ab:67:74:5b: 3c:13:dd:c7:72:66:3d:21:14:73:4e:b1:4d:d7:34:4f:0a:06: 02:db:a3:d0:84:a4:b6:ad:9e:84:ea:f2:ed:c7:03:de:af:3e: 5d:db:3a:5d:72:35:6b:f5:f2:74:fd:11:50:88:84:59:04:28: bb:37:fd:8c:82:cb:39:a3:0e:c7:6c:74:7e:fa:44:96:ab:1b: 3c:68:58:f9:d5:57:10:fc:2b:19:d8:ba:9b:7b:24:db:b3:e1: 72:5f:3f:23:bd:1c:48:40:ca:28:f8:e0:53:c9:89:0e:2e:26: e3:4b:6e:9f:3c:8a:59:65:cb:e3:17:c9:f7:0e:17:80:2f:5b: f8:07:f2:ad:ae:ab:81:e8:4a:6c:2f:79:38:92:57:e1:e9:bf: ce:37:ec:f6:25:c9:34:ed:cf:0e:b2:11:c5:f7:7a:b0:b1:46: 3d:e0:43:7d:e9:8d:b8:b6:20:4f:86:fe:99:a8:38:b9:0c:e9: 32:f1:23:75:1d:f8:01:db:b7:e6:f4:b0:6b:f1:cc:4e:12:30: 4c:e0:d1:d6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWRHqEkBsOmLciSzsCTAe/lQRUEgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzA1MDAyMDIwWhcNMjUwNDA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YWYzMDQ2ZTQzNTRhMTI5NzQ3OTQ4ZDMyNzQ2M2ZhOTNh ZmJhODgwMmQxNDBmMmRjYjIyMDc0ODY0ZThmMjdiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1WyVfIgD6ObbeXXMAHN/lRF9brzUS4q+6rv1BTs5kmGjT +hMvU3fXHCJG/NX9ccKHZIbYhReb8sDqnny7P01occ9hl8T7opiHmalFyWKw09cb q31sLhB6inmAYIhemYM4ftItBrzHND3DLoYMhetHAvF/NdjR8UNZVQ3pKHQGlj4b Z4sYwk2O8WQRQUYq+h6/ql6SErdrBnWm1Bk0iRrgHPxpBuyMmsEmJPfmBQ4LElgg JENrhgAbb1k9G7QQyYZ7eAYxm9KD+ymYIMvUxggms7BQ2GtE2ZFQYzkLfYrF0FkW 7HXKjuFU970+z/Mm/KAtm/+fA7Mxgjz9qoYZLS5JAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUfyQ85VdO6MsBveRSj3ZjvW2FrAowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM5ZGNhMjg3LTI2ZDQtNGJiYy1hNTkwLWY1YmYxNDk3MWRlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQuzANBgkqhkiG9w0BAQsFAAOCAQEAVar5GVzQgCy6FC44Hqq6XloXH2pS pEYYyYF0cKoTHu+xp0I8dFJQGLXdt9T8hQKGms6rZ3RbPBPdx3JmPSEUc06xTdc0 TwoGAtuj0ISktq2ehOry7ccD3q8+Xds6XXI1a/XydP0RUIiEWQQouzf9jILLOaMO x2x0fvpElqsbPGhY+dVXEPwrGdi6m3sk27Phcl8/I70cSEDKKPjgU8mJDi4m40tu nzyKWWXL4xfJ9w4XgC9b+Afyra6rgehKbC95OJJX4em/zjfs9iXJNO3PDrIRxfd6 sLFGPeBDfemNuLYgT4b+mag4uQzpMvEjdR34Adu35vSwa/HMThIwTODR1g== -----END CERTIFICATE-----Generated at Thu Mar 13 23:27:42 2025 by rpki-client