$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa File: 58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa (raw, json) Hash identifier: Rgxx6txmOzCjQyJEHGKZTlazjkKNcU6pU2JNZ1BQzkI= Subject key identifier: 3E:EF:5A:E3:9C:7E:CD:43:A4:DF:75:90:63:30:24:47:F1:35:DA:1F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2C7501EC2A7BF28283B7B3943DE230CC829106CB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa Signing time: Mon 17 Feb 2025 16:20:12 +0000 ROA not before: Mon 17 Feb 2025 16:20:12 +0000 ROA not after: Mon 24 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.114.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:75:01:ec:2a:7b:f2:82:83:b7:b3:94:3d:e2:30:cc:82:91:06:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 17 16:20:12 2025 GMT Not After : Mar 24 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:1b:6d:47:83:46:ca:8d:54:7c:b0:17:52: 7d:65:8e:cc:b3:7a:e1:2a:1a:78:7d:ff:17:0e:0e: f8:16:fd:c8:74:08:05:09:19:e9:e0:ae:c5:ab:4a: 00:b8:90:14:17:e7:75:c1:69:2f:12:78:f6:cd:f9: c0:91:c0:c8:47:93:08:e6:b0:cf:dd:98:11:c5:8f: d4:e5:5b:61:e8:88:bf:bf:7f:10:3c:3c:30:5a:a7: 9c:97:66:03:41:fb:65:5b:ca:b7:31:a4:63:19:6f: a9:71:91:39:ec:93:7c:bb:a5:ff:1f:f7:b3:d8:69: 2a:02:44:61:34:c1:7b:2b:de:43:14:f0:4c:6a:68: 3f:7a:03:9b:1a:4d:8a:0c:c5:66:82:47:41:ca:9a: cd:f0:01:a6:59:bb:2d:a9:1d:de:f7:7a:2d:97:c9: 72:d4:06:b5:be:b7:03:e1:63:b2:87:4d:57:b7:6c: 32:ab:56:93:a3:a7:fd:ab:74:b8:ce:85:37:44:d7: f0:08:02:c5:2d:f6:92:6b:3e:c2:ef:b4:3c:01:c5: cc:41:d4:03:ad:15:28:44:3c:8f:19:97:97:0b:c0: ac:d8:1f:5b:e6:79:1d:81:b4:21:dc:cf:a4:02:7d: 86:4d:c2:01:cb:ab:c7:c2:d7:7c:8c:f1:48:af:24: da:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EF:5A:E3:9C:7E:CD:43:A4:DF:75:90:63:30:24:47:F1:35:DA:1F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.114.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0c:df:a2:4c:c9:4e:a4:24:b6:a2:ff:48:e0:84:94:ab:68:f8: 58:fd:72:09:fb:b0:ad:08:04:5b:45:3c:cd:f4:86:f9:fc:10: 4a:1f:3d:b3:06:28:10:ae:78:f3:95:a3:bf:f7:00:52:b5:33: bc:d7:68:a2:55:42:f8:39:02:d8:a6:e5:72:16:4f:54:d3:5a: 41:ae:e1:c2:a7:2f:5c:a2:86:63:fc:6a:af:a6:da:fd:29:3c: 48:34:a1:c4:fa:ec:8c:a7:0f:0d:80:82:0b:a6:23:d4:ed:0e: e0:a9:c5:b9:50:4c:91:2b:67:77:fb:3b:c2:1f:c9:6a:82:94: 2d:a6:fe:a6:8b:ba:48:3f:a3:f0:b9:33:d9:20:17:68:ee:ea: 9e:f8:e6:23:8b:30:8a:45:1c:d3:81:66:02:7c:72:af:75:e0: 9d:22:8b:e6:2c:55:5c:96:a7:fa:b6:04:81:5e:51:e7:ca:64: 65:84:c0:c3:05:65:ff:17:a6:41:67:3d:30:62:2b:b2:2d:d9: 3c:54:3d:06:f4:3f:08:a0:f5:c4:e7:5a:fb:e2:4f:0d:0b:18: 50:02:2f:5d:4a:fc:9b:b0:aa:fc:03:6b:53:3b:56:23:01:ff: 3d:5f:59:6f:32:f6:21:bc:eb:0f:68:9e:a5:64:78:34:5b:66: d7:1b:35:ab -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULHUB7Cp78oKDt7OUPeIwzIKRBsswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjE3MTYyMDEyWhcNMjUwMzI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTcyYzIwNTAzNGU0MmM4YzA5MDQ2ZTUzMzg2NDVmMjkz NWM1NmE4ODA3ODQ0NGU1ZGU1NjdmMTZlYmEwMTU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFdxttR4NGyo1UfLAXUn1ljsyzeuEqGnh9/xcODvgW/ch0 CAUJGengrsWrSgC4kBQX53XBaS8SePbN+cCRwMhHkwjmsM/dmBHFj9TlW2HoiL+/ fxA8PDBap5yXZgNB+2VbyrcxpGMZb6lxkTnsk3y7pf8f97PYaSoCRGE0wXsr3kMU 8ExqaD96A5saTYoMxWaCR0HKms3wAaZZuy2pHd73ei2XyXLUBrW+twPhY7KHTVe3 bDKrVpOjp/2rdLjOhTdE1/AIAsUt9pJrPsLvtDwBxcxB1AOtFShEPI8Zl5cLwKzY H1vmeR2BtCHcz6QCfYZNwgHLq8fC13yM8UivJNrRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUPu9a45x+zUOk33WQYzAkR/E12h8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU4Yjk2Yzc4LTk1NGItNDFjMi04N2ZmLTRjZjhmN2JlOWUyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4cjANBgkqhkiG9w0BAQsFAAOCAQEADN+iTMlOpCS2ov9I4ISUq2j4WP1y CfuwrQgEW0U8zfSG+fwQSh89swYoEK5485Wjv/cAUrUzvNdoolVC+DkC2KblchZP VNNaQa7hwqcvXKKGY/xqr6ba/Sk8SDShxPrsjKcPDYCCC6Yj1O0O4KnFuVBMkStn d/s7wh/JaoKULab+pou6SD+j8Lkz2SAXaO7qnvjmI4swikUc04FmAnxyr3XgnSKL 5ixVXJan+rYEgV5R58pkZYTAwwVl/xemQWc9MGIrsi3ZPFQ9BvQ/CKD1xOda++JP DQsYUAIvXUr8m7Cq/ANrUztWIwH/PV9ZbzL2IbzrD2iepWR4NFtm1xs1qw== -----END CERTIFICATE-----Generated at Thu Mar 13 23:31:38 2025 by rpki-client