$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63cb1e87-639b-487c-bdb6-3408ff537e1d.roa File: 63cb1e87-639b-487c-bdb6-3408ff537e1d.roa (raw, json) Hash identifier: kmfBL/anqUJPlhfAbKcskO4ub9JL2sRAmBZlnG34Az4= Subject key identifier: F7:DA:C1:08:E0:38:45:DD:8B:76:24:64:7D:2A:DC:74:98:8D:42:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 721B43540305F0868300ED331A959204CF51145F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63cb1e87-639b-487c-bdb6-3408ff537e1d.roa Signing time: Fri 07 Mar 2025 00:02:06 +0000 ROA not before: Fri 07 Mar 2025 00:02:06 +0000 ROA not after: Fri 11 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 148.94.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:1b:43:54:03:05:f0:86:83:00:ed:33:1a:95:92:04:cf:51:14:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 7 00:02:06 2025 GMT Not After : Apr 11 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:4d:66:3f:9d:d5:0e:e6:83:91:fa:d2:a6: 15:46:d8:cb:04:d3:05:9f:0b:48:ec:c7:24:22:ae: 56:58:fd:3d:02:7a:ff:0a:59:c8:02:46:72:39:63: eb:8d:a3:0f:ab:33:4b:e0:4e:92:40:75:4d:8f:40: 42:db:d4:a8:6b:0a:49:d4:54:2c:92:db:1f:ba:ce: 54:89:33:95:81:66:2d:1e:f7:e6:4d:eb:7e:00:ce: 3f:7e:3d:86:d1:8c:d0:35:81:7c:23:8e:eb:17:09: 5e:9c:b4:2e:66:08:52:17:90:c5:82:db:c0:07:92: c4:85:0a:9c:f2:8b:66:16:33:da:fa:b2:8d:14:57: df:31:6a:c7:26:23:7b:09:e5:f6:78:5a:74:3f:8b: 2d:79:75:a6:52:05:a7:a8:ea:dc:b5:d3:62:53:6a: 42:38:d2:8d:fc:89:43:b9:49:9d:00:9e:6a:17:cf: 95:85:f7:87:55:6f:8e:90:30:62:8b:8c:07:a7:7d: 79:0e:e4:f2:5b:6d:74:5c:66:75:7f:38:34:02:82: 48:92:ae:1c:c9:ef:b8:91:de:2b:66:c5:10:19:76: 72:be:9f:e3:1f:e7:e9:01:93:12:ae:be:7b:63:f4: 56:f6:37:a7:1b:44:a6:a8:fd:05:4c:26:b9:cd:a9: 73:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DA:C1:08:E0:38:45:DD:8B:76:24:64:7D:2A:DC:74:98:8D:42:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63cb1e87-639b-487c-bdb6-3408ff537e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.94.0.0/16 Signature Algorithm: sha256WithRSAEncryption 70:ba:fc:29:2a:f4:96:da:36:20:20:79:11:34:bb:c2:a2:b0: 4d:5a:61:67:5d:f8:ed:61:b9:0b:20:6b:c6:df:2d:b3:70:07: be:6a:08:f3:3d:66:05:60:ef:96:4b:36:2c:ae:92:8d:d0:b8: c6:02:e5:06:a2:d5:fa:8a:8e:4d:4a:06:33:50:d9:3a:b2:d2: 18:8f:60:03:98:44:b6:98:44:05:af:86:68:e6:18:50:93:7b: 04:dd:cc:b8:8a:fb:c1:dc:f1:83:db:34:19:15:27:54:e8:ab: 02:02:ca:de:ea:c0:e0:fd:11:54:75:8d:fc:3f:d7:15:99:83: 2a:5c:02:d5:5d:95:4a:e4:69:88:99:93:83:51:4a:ee:96:7e: 11:0d:d5:c3:d5:bd:c9:13:97:b9:b1:63:5d:d7:6e:fd:05:95: 4e:ff:f0:39:4d:75:4b:32:cb:64:a9:a6:de:cf:e0:b0:9a:c9: 61:f5:5d:f6:3e:84:e6:8a:ee:59:66:23:ba:c6:ed:fb:2b:d5: 31:f2:14:44:5d:a7:86:40:bf:26:80:d5:19:01:bd:7d:96:83: e8:b7:b3:8f:b4:77:eb:b6:40:2b:85:5a:82:b4:93:11:d9:5b: ea:8b:2f:8b:72:47:85:a5:5e:f1:ef:4f:ab:07:01:1c:7d:74: 96:fd:5c:46 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUchtDVAMF8IaDAO0zGpWSBM9RFF8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzA3MDAwMjA2WhcNMjUwNDExMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NjU4NzBmNzgyOTVlM2QyYTYwZWU1ZGE0OWY4YTI5NzRm ZDk4NjE1NGQ2MzA0ZjczNmJmYjhkM2U5ZWFlZTllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5001mP53VDuaDkfrSphVG2MsE0wWfC0jsxyQirlZY/T0C ev8KWcgCRnI5Y+uNow+rM0vgTpJAdU2PQELb1KhrCknUVCyS2x+6zlSJM5WBZi0e 9+ZN634Azj9+PYbRjNA1gXwjjusXCV6ctC5mCFIXkMWC28AHksSFCpzyi2YWM9r6 so0UV98xascmI3sJ5fZ4WnQ/iy15daZSBaeo6ty102JTakI40o38iUO5SZ0AnmoX z5WF94dVb46QMGKLjAenfXkO5PJbbXRcZnV/ODQCgkiSrhzJ77iR3itmxRAZdnK+ n+Mf5+kBkxKuvntj9Fb2N6cbRKao/QVMJrnNqXMrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU99rBCOA4Rd2LdiRkfSrcdJiNQt0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYzY2IxZTg3LTYzOWItNDg3Yy1iZGI2LTM0MDhmZjUzN2UxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCUXjANBgkqhkiG9w0BAQsFAAOCAQEAcLr8KSr0lto2ICB5ETS7wqKwTVph Z1347WG5CyBrxt8ts3AHvmoI8z1mBWDvlks2LK6SjdC4xgLlBqLV+oqOTUoGM1DZ OrLSGI9gA5hEtphEBa+GaOYYUJN7BN3MuIr7wdzxg9s0GRUnVOirAgLK3urA4P0R VHWN/D/XFZmDKlwC1V2VSuRpiJmTg1FK7pZ+EQ3Vw9W9yROXubFjXddu/QWVTv/w OU11SzLLZKmm3s/gsJrJYfVd9j6E5oruWWYjusbt+yvVMfIURF2nhkC/JoDVGQG9 fZaD6Lezj7R367ZAK4VagrSTEdlb6osvi3JHhaVe8e9PqwcBHH10lv1cRg== -----END CERTIFICATE-----Generated at Thu Mar 13 23:49:30 2025 by rpki-client