$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bba0470-96dd-404d-b988-2277e8fcd55f.roa File: 5bba0470-96dd-404d-b988-2277e8fcd55f.roa (raw, json) Hash identifier: vUgnZrV57F7sPpUUkri2Gd4PnBJ8NiGZRXw1KEEjWyU= Subject key identifier: F2:68:C5:7C:48:03:0C:52:52:10:F8:71:36:C1:33:16:B7:FD:01:8F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 427D619C8D4F1646519B250E66852B8C34A6769F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bba0470-96dd-404d-b988-2277e8fcd55f.roa Signing time: Fri 07 Feb 2025 00:00:00 +0000 ROA not before: Fri 07 Feb 2025 00:00:00 +0000 ROA not after: Fri 14 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.200.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7d:61:9c:8d:4f:16:46:51:9b:25:0e:66:85:2b:8c:34:a6:76:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 7 00:00:00 2025 GMT Not After : Mar 14 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8a:5c:de:4f:78:f6:d5:b0:28:86:9f:8f:96: 15:7f:46:f2:57:fd:ec:79:4f:15:49:a6:e1:f7:02: 3b:7c:a2:65:15:6d:cc:75:e0:a4:35:38:07:7b:b7: f9:ed:dd:8e:2a:1b:15:c4:e7:35:97:90:d0:e8:06: bc:9b:4f:17:6d:ce:87:5f:f5:77:b7:92:14:c9:7d: 0c:e7:65:48:2b:d0:52:2e:a6:4d:7e:df:2d:89:3a: 31:fe:5e:0b:f8:bd:ac:e9:c6:4b:94:44:a6:5e:b9: 19:69:49:f7:7e:95:1f:62:d9:64:d2:3e:99:19:e2: 4e:70:a2:c1:83:b8:e8:54:c2:4a:f8:07:54:dc:90: 95:34:bf:e5:19:a1:ab:12:32:2d:a1:50:56:0b:7c: 68:31:0c:df:40:7b:e9:c6:ce:8a:b6:07:43:53:fb: 90:0e:06:9d:4e:9b:fa:40:80:15:ec:e8:6b:04:ed: 5a:3e:4f:72:e3:ce:38:aa:9a:8c:34:cf:fe:89:16: 0a:aa:b3:3f:25:0f:07:9b:b6:db:8f:e9:a5:67:54: ff:2e:b8:35:7b:96:10:98:86:3d:cc:51:27:25:4e: 6b:05:d9:2f:cb:de:74:03:36:53:ac:06:6a:ae:9e: 0d:04:7e:6c:a5:b6:03:d2:b1:87:ff:14:24:a9:8c: 98:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:68:C5:7C:48:03:0C:52:52:10:F8:71:36:C1:33:16:B7:FD:01:8F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bba0470-96dd-404d-b988-2277e8fcd55f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.200.0.0/16 Signature Algorithm: sha256WithRSAEncryption 89:55:3e:0f:8b:9d:4b:ac:44:bb:0d:6f:33:85:bf:7f:ba:82: 99:e6:bc:8d:df:cd:14:58:4d:ce:5f:b4:44:64:08:19:e6:07: c5:5c:05:44:1f:1b:8f:2d:f8:c1:fa:4e:c0:a3:56:ff:40:d9: 58:93:4a:14:e2:0b:e0:e7:ec:52:dc:f2:da:4e:75:48:7d:1a: 90:f5:dc:b8:f0:2c:df:11:89:c8:c1:8b:5d:37:ff:17:e5:d4: ae:9f:ad:1e:19:aa:76:9e:1d:c0:f5:65:ea:f8:1d:a5:28:95: d2:e5:ee:ec:8d:05:f6:45:19:11:8b:eb:cf:bc:4a:03:7d:15: e1:95:dd:da:cf:f3:0a:41:8a:59:2e:fd:60:66:fb:ce:d4:34: 3d:7c:27:6b:82:99:34:a6:af:c2:f3:15:18:9d:4d:0c:27:f6: 69:22:32:a8:c2:af:7f:9f:03:7b:32:34:d9:a8:4f:cb:5f:0a: c3:a1:58:af:c0:db:81:64:43:04:12:d7:73:09:85:14:3c:6a: 9b:9d:84:a6:18:d7:15:4e:df:44:3f:c1:84:d0:46:fa:90:d5: 8e:f7:b6:3e:2e:1a:ff:44:d3:2f:bd:a8:97:dd:05:63:94:57: 40:29:c3:ff:be:e4:2a:24:63:f0:e5:ef:26:e9:97:d3:d5:c9: 99:fe:c9:aa -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQn1hnI1PFkZRmyUOZoUrjDSmdp8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA3MDAwMDAwWhcNMjUwMzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYmNhODI3YTZjYWViOTYwMGI4MmZmMDg3NzY1MGQ5MGVi NzBiMGE1YWUwZThiYzM5NTFmNTAyNzNjNzhjMjdiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkilzeT3j21bAohp+PlhV/RvJX/ex5TxVJpuH3Ajt8omUV bcx14KQ1OAd7t/nt3Y4qGxXE5zWXkNDoBrybTxdtzodf9Xe3khTJfQznZUgr0FIu pk1+3y2JOjH+Xgv4vazpxkuURKZeuRlpSfd+lR9i2WTSPpkZ4k5wosGDuOhUwkr4 B1TckJU0v+UZoasSMi2hUFYLfGgxDN9Ae+nGzoq2B0NT+5AOBp1Om/pAgBXs6GsE 7Vo+T3Ljzjiqmow0z/6JFgqqsz8lDwebttuP6aVnVP8uuDV7lhCYhj3MUSclTmsF 2S/L3nQDNlOsBmqung0EfmyltgPSsYf/FCSpjJgdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU8mjFfEgDDFJSEPhxNsEzFrf9AY8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzViYmEwNDcwLTk2ZGQtNDA0ZC1iOTg4LTIyNzdlOGZjZDU1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4yDANBgkqhkiG9w0BAQsFAAOCAQEAiVU+D4udS6xEuw1vM4W/f7qCmea8 jd/NFFhNzl+0RGQIGeYHxVwFRB8bjy34wfpOwKNW/0DZWJNKFOIL4OfsUtzy2k51 SH0akPXcuPAs3xGJyMGLXTf/F+XUrp+tHhmqdp4dwPVl6vgdpSiV0uXu7I0F9kUZ EYvrz7xKA30V4ZXd2s/zCkGKWS79YGb7ztQ0PXwna4KZNKavwvMVGJ1NDCf2aSIy qMKvf58DezI02ahPy18Kw6FYr8DbgWRDBBLXcwmFFDxqm52EphjXFU7fRD/BhNBG +pDVjve2Pi4a/0TTL72ol90FY5RXQCnD/77kKiRj8OXvJumX09XJmf7Jqg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:32 2025 by rpki-client