$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82501f6a-2c1b-410d-80a6-2cd75228e8b0.roa File: 82501f6a-2c1b-410d-80a6-2cd75228e8b0.roa (raw, json) Hash identifier: 2hrq+Mw+pVl3nURIQ2fssW4BjeXtiOgkUIMeeSjXC3k= Subject key identifier: 40:0A:19:FD:3D:BB:06:4B:EF:E1:78:24:07:69:C8:72:4E:52:68:5B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03D3691A2D336BF697E9F8044CD3F4F602B56597 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82501f6a-2c1b-410d-80a6-2cd75228e8b0.roa Signing time: Wed 12 Mar 2025 00:21:22 +0000 ROA not before: Wed 12 Mar 2025 00:21:22 +0000 ROA not after: Wed 16 Apr 2025 23:59:59 +0000 asID: 14618 IP address blocks: 162.250.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d3:69:1a:2d:33:6b:f6:97:e9:f8:04:4c:d3:f4:f6:02:b5:65:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 00:21:22 2025 GMT Not After : Apr 16 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:c7:32:aa:90:31:92:06:9b:18:6c:3c:d0: e1:20:80:ef:70:13:9b:3e:81:22:b5:28:23:e1:2d: 5d:a9:f9:bb:08:09:b8:40:89:45:a4:92:d8:b9:69: 08:13:cd:aa:89:c6:3c:2d:83:41:dd:ae:13:1e:c6: 7c:85:a0:f2:06:ed:51:23:21:32:c7:0e:35:87:8b: aa:bf:53:2a:63:55:b1:a2:98:c3:60:5e:2b:3c:56: eb:a6:df:af:22:22:39:47:b1:b8:62:04:c7:a2:9a: a4:8e:83:c4:03:ac:26:ab:97:ca:5c:e8:95:fb:05: ae:96:99:19:ac:0c:a0:22:a0:43:b8:73:f6:8f:4d: ed:e2:20:82:5c:51:71:f5:ac:c1:aa:a1:85:a9:00: aa:7a:ea:f1:4e:a6:f7:d7:be:8c:2d:ca:e0:dd:f4: 75:9b:72:bf:a1:b2:78:87:75:6f:52:fc:62:9d:ea: cf:4b:17:d1:f7:d1:9e:0b:68:a0:63:43:40:df:93: d1:bf:b4:6d:d0:c6:5c:04:6c:56:87:cb:b7:a8:40: a8:00:d4:1e:af:ad:18:82:c3:2c:6b:26:c2:96:0d: d2:81:67:fc:4e:c3:2a:0b:d6:26:d4:2a:7a:ee:6d: af:86:71:ef:21:ef:82:46:b8:e1:1a:65:4e:56:0d: ad:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0A:19:FD:3D:BB:06:4B:EF:E1:78:24:07:69:C8:72:4E:52:68:5B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82501f6a-2c1b-410d-80a6-2cd75228e8b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.250.237.0/24 Signature Algorithm: sha256WithRSAEncryption 01:c2:58:e3:7f:ab:22:43:49:70:50:ff:ba:f0:f6:f8:4b:89: 8a:37:b6:70:f9:0c:40:79:22:6d:58:a6:0b:54:49:24:6b:7b: 5b:39:d1:7c:74:7e:7f:ae:90:17:54:68:1f:04:0c:cd:14:c8: 3e:9c:dc:0b:00:f4:80:6b:ae:c2:4e:74:3b:cb:5a:ef:6b:83: b6:48:cf:fc:f5:36:a3:da:3a:df:b7:9c:36:94:de:c4:f3:ec: c2:4f:fc:5e:57:b3:75:c6:6d:e3:0e:17:38:6f:49:c2:a0:69: f0:20:6d:c0:52:9e:26:5c:4b:22:fe:b6:08:c0:5c:b8:50:a0: f0:83:6e:0d:46:82:81:5e:82:97:db:59:87:b7:3f:92:2b:6a: 3a:ce:5c:0c:12:cc:2e:2b:7e:9c:7b:ea:6b:fe:e2:ed:d2:26: 9a:e4:94:73:67:5b:57:e2:30:ef:98:30:7d:d0:8f:4c:6a:e2: b6:e2:89:12:ce:7d:bd:37:3c:13:86:24:14:fa:39:55:cd:40: be:81:45:38:92:25:dd:3c:cf:82:49:6e:78:42:0b:ee:61:8c: f2:7e:e6:d3:a7:b7:2c:f4:cd:d9:23:1c:77:02:b2:51:b2:71: e3:75:e5:42:e1:79:5f:eb:e0:31:65:54:f3:53:b9:78:d1:00: 91:b7:4e:21 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA9NpGi0za/aX6fgETNP09gK1ZZcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzEyMDAyMTIyWhcNMjUwNDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDg1MzAzM2UyZGQ4YjUxOGJiYTJmODhkMWE1ODlmM2Fj MWYzZDU3ZjQ4ZDM1YmU0MWYwZGEwMThlZTEyMGIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxZccyqpAxkgabGGw80OEggO9wE5s+gSK1KCPhLV2p+bsI CbhAiUWkkti5aQgTzaqJxjwtg0HdrhMexnyFoPIG7VEjITLHDjWHi6q/UypjVbGi mMNgXis8Vuum368iIjlHsbhiBMeimqSOg8QDrCarl8pc6JX7Ba6WmRmsDKAioEO4 c/aPTe3iIIJcUXH1rMGqoYWpAKp66vFOpvfXvowtyuDd9HWbcr+hsniHdW9S/GKd 6s9LF9H30Z4LaKBjQ0Dfk9G/tG3QxlwEbFaHy7eoQKgA1B6vrRiCwyxrJsKWDdKB Z/xOwyoL1ibUKnruba+Gce8h74JGuOEaZU5WDa3TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQAoZ/T27Bkvv4XgkB2nIck5SaFswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgyNTAxZjZhLTJjMWItNDEwZC04MGE2LTJjZDc1MjI4ZThiMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACi+u0wDQYJKoZIhvcNAQELBQADggEBAAHCWON/qyJDSXBQ/7rw9vhLiYo3 tnD5DEB5Im1YpgtUSSRre1s50Xx0fn+ukBdUaB8EDM0UyD6c3AsA9IBrrsJOdDvL Wu9rg7ZIz/z1NqPaOt+3nDaU3sTz7MJP/F5Xs3XGbeMOFzhvScKgafAgbcBSniZc SyL+tgjAXLhQoPCDbg1GgoFegpfbWYe3P5IrajrOXAwSzC4rfpx76mv+4u3SJprk lHNnW1fiMO+YMH3Qj0xq4rbiiRLOfb03PBOGJBT6OVXNQL6BRTiSJd08z4JJbnhC C+5hjPJ+5tOntyz0zdkjHHcCslGyceN15ULheV/r4DFlVPNTuXjRAJG3TiE= -----END CERTIFICATE-----Generated at Fri Apr 4 23:45:29 2025 by rpki-client