$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f0b048d-2305-43d3-a474-0e095ab7e09b.roa File: 4f0b048d-2305-43d3-a474-0e095ab7e09b.roa (raw, json) Hash identifier: q2BbJFhkMGkSPD9aB5ByPAxNq1LbwID1WDNrsclraw4= Subject key identifier: 0A:FD:E4:64:3B:72:E0:7B:5D:50:1A:D3:BB:56:CF:83:ED:B8:34:60 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 697CF555F74CA425CF202DD71AEAD95606A37757 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f0b048d-2305-43d3-a474-0e095ab7e09b.roa Signing time: Tue 28 Jan 2025 00:00:00 +0000 ROA not before: Tue 28 Jan 2025 00:00:00 +0000 ROA not after: Tue 04 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.53.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:7c:f5:55:f7:4c:a4:25:cf:20:2d:d7:1a:ea:d9:56:06:a3:77:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 28 00:00:00 2025 GMT Not After : Mar 4 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:60:5c:e9:7a:5a:a9:fd:5a:c6:d7:59:0e:4c: e1:cc:ed:9f:51:a3:f2:7e:c8:1a:b3:22:4d:36:63: 44:f1:0d:c8:2b:fc:73:ef:12:53:03:71:19:ef:ac: 78:fe:d2:c3:4f:70:97:1c:bb:1e:51:d4:ce:47:7b: ca:02:19:16:bd:c4:93:3d:05:0f:55:e9:08:a4:fd: 0c:dd:c3:e2:7b:41:7b:1c:73:79:52:01:c7:16:d5: dc:4a:f6:ed:62:da:0e:07:ec:6a:23:01:8f:3e:03: af:96:d2:85:36:15:26:26:16:32:f7:c2:4f:01:33: d5:2f:c8:17:13:8e:e1:28:3c:14:d9:6e:9a:36:1e: 98:31:ed:f5:81:02:95:2a:68:6a:52:2a:19:31:1e: ee:a8:1f:07:04:e5:09:59:eb:4e:57:e2:88:27:07: cc:91:c9:14:c9:be:86:49:19:02:d9:e5:d4:04:51: ff:ee:ff:5f:8f:75:1c:5a:4a:ce:73:48:bc:9f:a6: 03:7a:76:a0:4d:37:35:27:6f:4c:a6:1c:b3:1c:f4: 89:86:84:75:bf:18:54:30:23:1c:96:4c:e2:0e:46: 01:13:58:a2:0d:8b:13:bd:39:4f:af:d8:d0:ea:fa: d8:55:4b:78:07:ed:51:37:b6:12:65:20:a1:a9:09: 02:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FD:E4:64:3B:72:E0:7B:5D:50:1A:D3:BB:56:CF:83:ED:B8:34:60 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f0b048d-2305-43d3-a474-0e095ab7e09b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.53.192.0/20 Signature Algorithm: sha256WithRSAEncryption 3e:4c:65:5c:1d:01:91:68:91:76:d8:92:e0:f7:63:6f:63:70: 3a:f2:e5:41:30:a1:c6:bc:d8:b9:b8:36:fe:e4:a2:0a:73:bd: 64:96:34:49:1d:3e:53:92:9a:d9:0a:eb:23:33:3b:7b:30:73: 5b:02:8b:99:cb:ab:ff:8b:65:22:85:4d:b7:d3:cd:89:93:4d: 16:51:b5:73:0c:7f:9d:58:ff:ac:90:43:0f:5b:23:a0:76:72: 39:86:e3:a4:7f:e0:3e:ab:ef:9a:81:d3:ba:af:49:fa:d7:77: 27:e2:c8:1e:1d:dd:c0:13:47:b7:c5:c2:42:7a:e5:5b:13:98: 9d:fc:ab:7c:aa:c4:c0:c5:d6:f2:48:c9:a5:f1:91:52:ef:f5: c2:ce:25:1a:60:5b:2e:13:d5:d3:4f:3a:4f:32:31:4a:e1:f2: 42:30:2b:c7:9e:0a:d7:9a:c2:6d:fa:78:17:52:4b:88:52:a3: 23:07:ed:3d:63:2f:12:74:75:df:a4:28:ec:12:df:4b:31:bb: b1:5c:7f:98:b9:5b:68:ca:66:fa:c7:b8:cd:0e:ef:d3:96:38: ee:cf:ec:58:a3:6e:05:f5:12:91:fa:76:c1:41:2e:09:0b:61: d8:ed:a2:30:8f:13:68:fa:65:28:fc:b9:63:89:cb:37:8e:99: 7d:51:da:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaXz1VfdMpCXPIC3XGurZVgajd1cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI4MDAwMDAwWhcNMjUwMzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NWYzOWU4NmM3MjYwMGIyODJhY2Y3ZWI3YWViM2EyNmM5 MTQyMmYzODM0YTI2ZWRhYWFmYmU3NTlhN2Q4NDdjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRYFzpelqp/VrG11kOTOHM7Z9Ro/J+yBqzIk02Y0TxDcgr /HPvElMDcRnvrHj+0sNPcJccux5R1M5He8oCGRa9xJM9BQ9V6Qik/Qzdw+J7QXsc c3lSAccW1dxK9u1i2g4H7GojAY8+A6+W0oU2FSYmFjL3wk8BM9UvyBcTjuEoPBTZ bpo2Hpgx7fWBApUqaGpSKhkxHu6oHwcE5QlZ605X4ognB8yRyRTJvoZJGQLZ5dQE Uf/u/1+PdRxaSs5zSLyfpgN6dqBNNzUnb0ymHLMc9ImGhHW/GFQwIxyWTOIORgET WKINixO9OU+v2NDq+thVS3gH7VE3thJlIKGpCQINAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCv3kZDty4HtdUBrTu1bPg+24NGAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRmMGIwNDhkLTIzMDUtNDNkMy1hNDc0LTBlMDk1YWI3ZTA5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARFNcAwDQYJKoZIhvcNAQELBQADggEBAD5MZVwdAZFokXbYkuD3Y29jcDry 5UEwoca82Lm4Nv7kogpzvWSWNEkdPlOSmtkK6yMzO3swc1sCi5nLq/+LZSKFTbfT zYmTTRZRtXMMf51Y/6yQQw9bI6B2cjmG46R/4D6r75qB07qvSfrXdyfiyB4d3cAT R7fFwkJ65VsTmJ38q3yqxMDF1vJIyaXxkVLv9cLOJRpgWy4T1dNPOk8yMUrh8kIw K8eeCteawm36eBdSS4hSoyMH7T1jLxJ0dd+kKOwS30sxu7Fcf5i5W2jKZvrHuM0O 79OWOO7P7FijbgX1EpH6dsFBLgkLYdjtojCPE2j6ZSj8uWOJyzeOmX1R2g8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:12 2025 by rpki-client