$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa File: 5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa (raw, json) Hash identifier: V1G05uND0X61Y5YsjsMiVkG1B6Rz0tUbt7UO6YkSIfM= Subject key identifier: 60:B1:BB:A7:87:9D:CB:24:BD:74:09:AB:82:56:19:83:6E:62:53:A9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7F8D0251D3FF6D4847BEEA753B614DC3EF71C6FC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa Signing time: Sat 29 Mar 2025 00:10:32 +0000 ROA not before: Sat 29 Mar 2025 00:10:32 +0000 ROA not after: Sat 03 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.20.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:8d:02:51:d3:ff:6d:48:47:be:ea:75:3b:61:4d:c3:ef:71:c6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 29 00:10:32 2025 GMT Not After : May 3 23:59:59 2025 GMT Subject: serialNumber=9d4e148b836d1cef1eebcd22b5253898b9525259933a07599abc32b3c010a87f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:59:ca:91:86:d4:4f:3a:66:85:c8:1d:a2:6f: 37:de:b1:fe:f9:2a:44:66:84:6a:33:a5:18:2f:6b: 67:02:27:aa:76:c0:4b:6e:46:76:63:36:c6:25:98: b1:74:b5:52:45:fe:73:1e:c9:d1:19:67:5d:08:3a: 16:bc:4e:27:73:7f:ba:21:a8:44:36:3f:ac:c1:e7: 54:d4:59:db:ff:b9:d2:cb:5a:6d:59:e0:48:cb:4f: 3a:13:b0:3b:61:9e:2f:ad:b0:ad:ea:4d:e9:3b:81: 24:35:35:de:da:5d:e3:49:29:13:05:cb:d0:73:ef: 6c:bf:20:14:71:2f:dd:30:67:2d:de:34:17:65:7c: 91:4b:fe:76:df:31:f8:48:dd:e8:6c:81:44:62:6d: 48:dd:ed:64:77:bd:9e:61:90:92:c7:a2:88:c8:0a: 2c:3b:93:47:dc:fa:e1:ca:d1:5c:d0:ab:db:46:04: c3:d3:1c:8a:09:f2:03:65:c1:06:ba:bf:ae:38:c5: fd:ce:4d:97:89:d7:48:2a:ed:dc:a9:5a:d9:37:0e: bc:a2:85:26:05:2a:7f:4d:9e:52:83:45:67:9f:09: 7e:82:3d:a6:de:ab:25:61:29:4a:4a:b4:0d:51:46: 60:ff:24:2f:5a:4f:c7:03:cf:16:aa:6a:a6:dd:76: e4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B1:BB:A7:87:9D:CB:24:BD:74:09:AB:82:56:19:83:6E:62:53:A9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.20.136.0/21 Signature Algorithm: sha256WithRSAEncryption 29:f3:2d:3a:3e:06:bb:0e:13:8a:c3:17:04:10:59:1f:17:27: f2:15:04:dc:0a:34:53:18:63:6d:93:38:70:3b:cc:c7:6b:fc: 2a:b7:eb:e9:70:e5:41:56:6a:61:67:f6:ee:13:fe:20:a2:d3: 88:e4:92:3c:08:e2:e8:c4:4a:78:04:3d:96:a2:9f:f6:3f:44: 13:27:9f:dc:ad:6c:3c:49:76:25:85:84:d3:e9:a3:a2:47:6e: 46:0f:52:b0:2a:8f:2f:de:2f:d6:2b:96:c1:a9:4a:70:85:47: b3:4e:ed:ac:cd:5f:96:e1:8c:a7:6a:88:e0:36:70:93:2a:4a: 3e:83:89:45:14:4e:ef:4a:29:e2:6c:90:ed:a9:26:61:6e:84: cb:60:db:96:88:88:e6:c8:f3:fa:1e:bc:04:09:88:19:ad:a1: 8b:17:ae:ac:7d:6d:29:2d:1b:8d:86:87:e3:98:ec:dd:dc:76: ab:a5:56:8f:77:ad:ca:5a:3e:51:9b:73:32:2d:07:0a:98:7e: ed:1c:b6:b8:1e:51:02:04:84:58:8f:53:62:a6:db:08:c3:31: 81:ca:eb:81:66:e8:4c:3f:5c:a0:68:c4:fd:75:56:0a:e3:9b: ec:54:01:d7:bd:10:f1:15:cb:e8:f1:76:b9:3f:20:04:1e:0a: 17:f3:ff:3b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUf40CUdP/bUhHvup1O2FNw+9xxvwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI5MDAxMDMyWhcNMjUwNTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDRlMTQ4YjgzNmQxY2VmMWVlYmNkMjJiNTI1Mzg5OGI5 NTI1MjU5OTMzYTA3NTk5YWJjMzJiM2MwMTBhODdmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdWcqRhtRPOmaFyB2ibzfesf75KkRmhGozpRgva2cCJ6p2 wEtuRnZjNsYlmLF0tVJF/nMeydEZZ10IOha8Tidzf7ohqEQ2P6zB51TUWdv/udLL Wm1Z4EjLTzoTsDthni+tsK3qTek7gSQ1Nd7aXeNJKRMFy9Bz72y/IBRxL90wZy3e NBdlfJFL/nbfMfhI3ehsgURibUjd7WR3vZ5hkJLHoojICiw7k0fc+uHK0VzQq9tG BMPTHIoJ8gNlwQa6v644xf3OTZeJ10gq7dypWtk3DryihSYFKn9NnlKDRWefCX6C PabeqyVhKUpKtA1RRmD/JC9aT8cDzxaqaqbdduS5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYLG7p4edyyS9dAmrglYZg25iU6kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlYTdiYjk4LWZjN2ItNDU0NC1hODhjLTJhNmQyMmY5MmZkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANrFIgwDQYJKoZIhvcNAQELBQADggEBACnzLTo+BrsOE4rDFwQQWR8XJ/IV BNwKNFMYY22TOHA7zMdr/Cq36+lw5UFWamFn9u4T/iCi04jkkjwI4ujESngEPZai n/Y/RBMnn9ytbDxJdiWFhNPpo6JHbkYPUrAqjy/eL9YrlsGpSnCFR7NO7azNX5bh jKdqiOA2cJMqSj6DiUUUTu9KKeJskO2pJmFuhMtg25aIiObI8/oevAQJiBmtoYsX rqx9bSktG42Gh+OY7N3cdqulVo93rcpaPlGbczItBwqYfu0ctrgeUQIEhFiPU2Km 2wjDMYHK64Fm6Ew/XKBoxP11Vgrjm+xUAde9EPEVy+jxdrk/IAQeChfz/zs= -----END CERTIFICATE-----Generated at Wed Apr 16 16:57:02 2025 by rpki-client