$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a48fd68-ae13-4542-b8a0-9413f8573dd6.roa File: 5a48fd68-ae13-4542-b8a0-9413f8573dd6.roa (raw, json) Hash identifier: iMpewVSwSqrc4jKK5tWOSdjamCt+qly/kEZIjsN1F1Y= Subject key identifier: E7:E9:C5:CF:73:D7:BB:3D:92:94:55:42:27:F3:66:B5:94:C8:3C:32 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 63499FBE5BCA44D1C6355BFC25B8F309425099A2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a48fd68-ae13-4542-b8a0-9413f8573dd6.roa Signing time: Sat 15 Feb 2025 00:50:54 +0000 ROA not before: Sat 15 Feb 2025 00:50:54 +0000 ROA not after: Sat 22 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 168.203.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:49:9f:be:5b:ca:44:d1:c6:35:5b:fc:25:b8:f3:09:42:50:99:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 15 00:50:54 2025 GMT Not After : Mar 22 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:03:33:58:12:b9:74:32:dd:4c:ff:d3:65:86: de:fc:79:00:fe:c7:18:5d:97:4e:e3:17:ca:dd:7f: b6:b3:37:9d:99:d5:1c:5e:35:2f:66:ec:90:43:bf: e4:0d:3a:ce:c3:67:64:cb:dc:43:7f:e1:9f:d4:5a: 6c:b4:50:24:1a:a3:b3:b1:43:ef:fe:51:cb:7f:05: ff:a0:fd:cb:39:12:c6:9b:82:ff:37:db:b8:a2:2f: 56:c5:e4:d2:ae:99:18:6a:48:dd:df:93:0a:9e:87: a9:e0:13:81:9a:f4:81:4e:19:d2:51:22:af:93:53: 3e:f4:1e:32:be:ee:7b:11:94:ad:8b:8b:be:b6:0b: 0a:e2:83:1f:66:ab:7d:bc:1f:7d:fb:6b:41:fe:48: 82:cd:60:a5:ba:3f:e2:e0:8e:bd:bd:18:e7:76:46: 2f:be:1c:07:43:a4:2c:56:c5:1b:ac:1b:72:1e:cc: 1f:d1:36:50:b6:ad:16:68:5d:bb:ad:3a:0f:9e:60: 5b:81:c5:a9:84:11:92:b9:a0:27:21:5d:7e:a0:b9: c1:52:d8:20:88:35:6e:84:e5:3a:7d:7d:72:32:3d: cf:08:ba:26:3e:e2:a5:68:8a:8c:64:b8:97:72:9b: 5a:ee:97:45:9b:43:bd:80:13:9c:3c:0c:a8:ee:9a: cd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E9:C5:CF:73:D7:BB:3D:92:94:55:42:27:F3:66:B5:94:C8:3C:32 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a48fd68-ae13-4542-b8a0-9413f8573dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.203.64.0/18 Signature Algorithm: sha256WithRSAEncryption 32:2d:12:3c:a2:29:da:d0:fc:ae:e8:90:0a:f9:39:f3:65:59: f0:11:79:7c:3d:ba:41:bc:87:99:8d:f5:46:49:95:e2:e5:42: 96:98:2a:43:7f:13:36:94:51:cf:79:cf:aa:6f:d1:88:79:eb: 75:40:f7:61:aa:a6:f1:12:f2:cf:c1:ed:0e:92:7d:41:ca:04: 40:ff:ca:d4:80:c4:97:ca:c9:14:7b:8b:29:07:4d:4d:03:93: 78:a5:38:5a:85:30:be:32:73:e0:d9:1f:83:07:60:1c:67:3d: 1a:4d:a2:e8:d4:d4:83:2f:52:ef:9e:23:8d:c2:3a:44:a9:7c: 25:a9:fa:8a:b3:d6:6e:b2:43:34:7f:37:37:a8:f4:a1:00:57: 9a:be:12:ad:74:d5:3b:18:74:f7:66:0a:4a:25:5d:2f:73:bb: 67:ab:34:82:08:0a:04:a9:b6:2f:b0:97:a6:6f:68:a2:d5:74: 60:4d:12:ad:fd:ff:48:5b:0b:0e:74:b9:76:82:db:c5:6d:0f: 09:d4:a3:0f:de:ae:49:f6:63:38:a9:78:1f:5b:01:6b:51:29: 42:76:f0:56:97:ae:b1:cb:5c:87:c9:28:54:17:e6:44:62:54: 4d:cb:df:49:69:b3:83:cb:b5:9f:39:4e:70:ed:4c:4b:d3:80: ca:58:c4:fe -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY0mfvlvKRNHGNVv8JbjzCUJQmaIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjE1MDA1MDU0WhcNMjUwMzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMTM3NzAyZWE2MzdjYWUzYWVjYTljOTM4YjVmNGY4NDUy MWNhYTMwZjIxMDc4NDYzOWI3N2IzNjY5ZjExZTI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvAzNYErl0Mt1M/9Nlht78eQD+xxhdl07jF8rdf7azN52Z 1RxeNS9m7JBDv+QNOs7DZ2TL3EN/4Z/UWmy0UCQao7OxQ+/+Uct/Bf+g/cs5Esab gv8327iiL1bF5NKumRhqSN3fkwqeh6ngE4Ga9IFOGdJRIq+TUz70HjK+7nsRlK2L i762Cwrigx9mq328H337a0H+SILNYKW6P+Lgjr29GOd2Ri++HAdDpCxWxRusG3Ie zB/RNlC2rRZoXbutOg+eYFuBxamEEZK5oCchXX6gucFS2CCINW6E5Tp9fXIyPc8I uiY+4qVoioxkuJdym1rul0WbQ72AE5w8DKjums1/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5+nFz3PXuz2SlFVCJ/NmtZTIPDIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVhNDhmZDY4LWFlMTMtNDU0Mi1iOGEwLTk0MTNmODU3M2RkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaoy0AwDQYJKoZIhvcNAQELBQADggEBADItEjyiKdrQ/K7okAr5OfNlWfAR eXw9ukG8h5mN9UZJleLlQpaYKkN/EzaUUc95z6pv0Yh563VA92GqpvES8s/B7Q6S fUHKBED/ytSAxJfKyRR7iykHTU0Dk3ilOFqFML4yc+DZH4MHYBxnPRpNoujU1IMv Uu+eI43COkSpfCWp+oqz1m6yQzR/Nzeo9KEAV5q+Eq101TsYdPdmCkolXS9zu2er NIIICgSpti+wl6ZvaKLVdGBNEq39/0hbCw50uXaC28VtDwnUow/erkn2YzipeB9b AWtRKUJ28FaXrrHLXIfJKFQX5kRiVE3L30lps4PLtZ85TnDtTEvTgMpYxP4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:21 2025 by rpki-client