$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d86c343-3dde-49a4-bf11-6b99e467a0bc.roa File: 3d86c343-3dde-49a4-bf11-6b99e467a0bc.roa (raw, json) Hash identifier: Fkpc6q1BgPc0RqWETpDGTqiFyc6Jm/lpmE/oEbrvhFk= Subject key identifier: 72:02:0A:8B:39:AE:32:C1:0E:73:8D:97:F8:3F:7A:39:62:99:38:56 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3BE72E6DCAB99D30B6D25C424CCAE38522F24CEC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d86c343-3dde-49a4-bf11-6b99e467a0bc.roa Signing time: Mon 17 Mar 2025 15:37:14 +0000 ROA not before: Mon 17 Mar 2025 15:37:14 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 14618 IP address blocks: 16.56.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e7:2e:6d:ca:b9:9d:30:b6:d2:5c:42:4c:ca:e3:85:22:f2:4c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 17 15:37:14 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d2:1d:a6:47:bf:43:ab:9d:19:1f:a2:d7:38: 31:22:d6:41:6a:ca:e1:3a:5f:b1:d4:a0:48:43:6c: cf:86:9a:9f:df:9d:30:5d:6a:68:02:be:bd:ff:fa: 28:d6:ad:45:9e:a0:fa:cd:fe:84:1b:db:de:a8:6d: 3c:b3:37:73:f7:ec:36:98:ee:32:00:2a:11:02:88: 52:06:4d:68:26:1f:8d:cf:68:01:a8:a3:b1:38:8a: dd:64:e2:31:fd:3e:bf:99:c8:44:68:f3:99:06:f9: 9a:96:53:61:07:7a:28:8b:86:db:27:6c:6c:f1:9e: bf:6d:5f:df:2a:f9:ac:3b:c9:b5:03:7e:e0:0c:79: 2e:b2:dd:fb:68:fc:73:7f:22:30:a9:61:42:28:d1: f3:03:f1:93:73:63:0b:6f:30:11:4f:df:e3:90:fa: 5d:cf:5a:92:f2:bc:30:47:5f:7b:ba:3b:d1:dc:d5: 85:66:a4:78:af:96:6b:d9:72:6b:b0:3c:83:40:07: aa:d5:89:6e:cd:9f:9c:b8:63:14:c3:4b:45:19:6f: 33:b2:56:d7:a1:e7:ea:5c:78:19:5e:8b:90:13:83: d5:da:d0:30:6b:97:df:a6:9c:ed:db:e2:e9:5d:54: d4:b5:dd:4e:86:d4:6d:f5:18:f8:ab:0c:fe:a1:72: cb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:02:0A:8B:39:AE:32:C1:0E:73:8D:97:F8:3F:7A:39:62:99:38:56 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d86c343-3dde-49a4-bf11-6b99e467a0bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.56.64.0/18 Signature Algorithm: sha256WithRSAEncryption 68:ce:c4:b7:6a:ec:db:82:eb:aa:9a:2d:b2:5b:b9:b4:97:ce: ce:92:21:06:2e:fe:aa:a5:8c:05:61:38:11:c4:67:8c:a0:43: 81:c5:4e:f5:0d:a1:a5:da:b4:f1:87:0b:06:29:0c:93:d9:68: 9d:de:ac:c2:26:aa:cc:8c:cb:cf:1a:69:5a:f1:6e:19:42:b9: 36:34:1a:7b:e4:47:93:46:a1:60:b5:f4:60:38:82:b1:30:c7: be:1f:32:0a:44:98:e5:0c:fa:48:68:6a:b8:b1:8c:f1:fc:36: 57:c0:1c:c2:88:4c:31:06:92:4c:b3:7e:91:e6:96:55:e5:f1: 01:bd:d7:4a:96:d5:a2:c0:1f:97:9c:65:66:28:02:3b:91:8b: 99:75:76:75:92:0c:a9:44:59:df:c6:ef:de:1a:9c:39:36:d4: f0:2a:92:2c:72:bf:89:46:f5:31:a4:1d:23:34:f8:cc:e8:35: bb:3d:f5:ef:bf:44:f3:b7:22:07:eb:14:76:ba:57:f1:58:0c: 0a:41:6f:8a:43:6e:08:b6:91:56:2e:6b:e1:2f:93:9b:f0:37: ad:79:15:9c:d2:10:97:b1:b7:23:58:e2:75:31:7d:39:cb:96: 93:db:dc:b1:a9:5c:7e:62:61:4d:da:44:ba:a2:90:5d:94:a3: 80:58:d8:be -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO+cubcq5nTC20lxCTMrjhSLyTOwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE3MTUzNzE0WhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NTgyNzY3NzI3MWZjNjdiYzliZjgwMzQ4MDg1ODUxMDEx MTAwMDAwMmVjZWQ1ODE4OTExNTFjOGEzMWM0MWIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm0h2mR79Dq50ZH6LXODEi1kFqyuE6X7HUoEhDbM+Gmp/f nTBdamgCvr3/+ijWrUWeoPrN/oQb296obTyzN3P37DaY7jIAKhECiFIGTWgmH43P aAGoo7E4it1k4jH9Pr+ZyERo85kG+ZqWU2EHeiiLhtsnbGzxnr9tX98q+aw7ybUD fuAMeS6y3fto/HN/IjCpYUIo0fMD8ZNzYwtvMBFP3+OQ+l3PWpLyvDBHX3u6O9Hc 1YVmpHivlmvZcmuwPINAB6rViW7Nn5y4YxTDS0UZbzOyVteh5+pceBlei5ATg9Xa 0DBrl9+mnO3b4uldVNS13U6G1G31GPirDP6hcsstAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcgIKizmuMsEOc42X+D96OWKZOFYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNkODZjMzQzLTNkZGUtNDlhNC1iZjExLTZiOTllNDY3YTBiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYQOEAwDQYJKoZIhvcNAQELBQADggEBAGjOxLdq7NuC66qaLbJbubSXzs6S IQYu/qqljAVhOBHEZ4ygQ4HFTvUNoaXatPGHCwYpDJPZaJ3erMImqsyMy88aaVrx bhlCuTY0GnvkR5NGoWC19GA4grEwx74fMgpEmOUM+khoarixjPH8NlfAHMKITDEG kkyzfpHmllXl8QG910qW1aLAH5ecZWYoAjuRi5l1dnWSDKlEWd/G794anDk21PAq kixyv4lG9TGkHSM0+MzoNbs99e+/RPO3IgfrFHa6V/FYDApBb4pDbgi2kVYua+Ev k5vwN615FZzSEJextyNY4nUxfTnLlpPb3LGpXH5iYU3aRLqikF2Uo4BY2L4= -----END CERTIFICATE-----Generated at Fri Apr 4 23:45:27 2025 by rpki-client