$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/845ded7d-c662-40e3-8568-64e43ad8874b.roa File: 845ded7d-c662-40e3-8568-64e43ad8874b.roa (raw, json) Hash identifier: WCJ5Aa15AmztFX3W8Ltl/HMpP2W8buXrq9VEKQi/THg= Subject key identifier: ED:84:B4:60:D4:DB:BB:2C:54:0D:64:E3:6A:00:DA:12:39:3D:77:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1BCADC14F8A6D3235E3E726C09DD48912CF4F707 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/845ded7d-c662-40e3-8568-64e43ad8874b.roa Signing time: Wed 05 Feb 2025 00:00:00 +0000 ROA not before: Wed 05 Feb 2025 00:00:00 +0000 ROA not after: Wed 12 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.198.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ca:dc:14:f8:a6:d3:23:5e:3e:72:6c:09:dd:48:91:2c:f4:f7:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 5 00:00:00 2025 GMT Not After : Mar 12 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:54:2b:27:e9:c7:9f:a2:eb:e7:36:53:bc:89: 5d:ff:2f:9d:9b:40:c2:c9:84:17:45:0b:f6:f3:4a: 33:60:c2:ce:31:e2:60:5a:e1:2b:53:f0:0b:dd:f0: 09:02:cc:c9:19:c1:91:ee:3a:58:f1:e1:89:6a:41: 51:2d:cf:04:cf:cb:6c:41:35:69:ce:b0:55:d2:f0: 1f:74:f7:f5:f5:72:4a:6d:72:87:4e:fa:34:13:29: 87:8d:06:de:20:d4:21:8a:c5:e9:d1:c3:ca:a9:30: 41:da:a5:e1:60:58:f7:34:99:f2:8c:86:b2:a0:ae: 40:39:c7:66:ab:40:35:63:47:7e:51:75:fd:e0:63: 46:8e:44:32:58:ef:48:e5:9e:26:0b:98:f0:f6:d2: 3e:b9:2c:3b:4c:31:2e:cf:f3:d3:a4:b3:f1:37:fc: fc:a5:97:84:53:fb:c3:d4:6c:55:7b:e8:74:04:ba: ee:f9:b1:c6:e7:e1:b5:01:ee:f7:83:f5:bc:3a:1c: 77:cd:fd:c8:a7:e2:5c:16:42:87:50:ac:bb:41:c0: 0f:ae:76:21:df:21:49:d4:41:0f:e6:76:15:70:af: 43:4a:52:77:fa:64:69:0c:82:36:bf:1f:19:29:f8: d5:e7:b1:83:7a:dd:0a:bc:3b:6b:06:ee:37:21:8b: 50:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:84:B4:60:D4:DB:BB:2C:54:0D:64:E3:6A:00:DA:12:39:3D:77:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/845ded7d-c662-40e3-8568-64e43ad8874b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.198.0.0/16 Signature Algorithm: sha256WithRSAEncryption b8:c8:c5:12:f9:4d:5c:46:a4:12:e5:e1:a0:57:a6:0e:71:63: a9:b8:71:01:6c:3d:f1:c6:db:1a:28:0e:98:23:62:0a:c8:0c: e1:a6:1e:3e:85:0d:42:51:ea:4b:53:0d:bb:f7:99:f3:c3:f1: 5b:92:b5:51:92:cf:17:ac:9d:81:5e:16:f7:15:27:41:93:fa: 18:d1:89:d4:7d:d9:5d:6b:f8:45:b6:52:0a:b4:b5:b4:83:7d: 59:a9:b5:3e:32:55:dc:48:e5:fc:a2:b6:62:d4:3d:04:a6:7a: a2:01:53:3a:4b:aa:11:bd:73:54:cb:d5:fa:b0:cb:a0:e9:db: 10:10:8b:3a:9b:ca:b2:80:92:c9:c0:57:7a:6f:8d:f1:a6:9c: 62:21:c3:99:31:87:11:41:74:22:1c:9e:18:74:8e:be:8c:23: 13:fe:2c:58:f3:76:25:3d:90:44:c5:9b:b2:b6:d6:1c:b2:26: de:26:b1:b1:4e:99:f8:1c:ca:31:51:ef:82:71:fd:17:7f:07: 0d:5f:4b:f5:f8:b3:ec:f2:c2:68:a2:e4:84:83:81:94:2a:ea: 02:4a:39:dd:18:9b:72:e0:ba:9f:ef:0d:1c:0c:d2:ae:1e:49: b9:07:2e:e6:a4:52:79:52:6a:39:c1:1a:4c:4a:9c:33:3d:66: 44:2b:e5:08 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUG8rcFPim0yNePnJsCd1IkSz09wcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA1MDAwMDAwWhcNMjUwMzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMWM1NDQyYTM3ZTEyMDViYTEzZjJhYjc5MDE5Y2MzMjYz NDkzZThkNmQyYmY2ZmJlYzYzZmU2ZTBiZDgxYzFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVVCsn6cefouvnNlO8iV3/L52bQMLJhBdFC/bzSjNgws4x 4mBa4StT8Avd8AkCzMkZwZHuOljx4YlqQVEtzwTPy2xBNWnOsFXS8B909/X1ckpt codO+jQTKYeNBt4g1CGKxenRw8qpMEHapeFgWPc0mfKMhrKgrkA5x2arQDVjR35R df3gY0aORDJY70jlniYLmPD20j65LDtMMS7P89Oks/E3/Pyll4RT+8PUbFV76HQE uu75scbn4bUB7veD9bw6HHfN/cin4lwWQodQrLtBwA+udiHfIUnUQQ/mdhVwr0NK Unf6ZGkMgja/Hxkp+NXnsYN63Qq8O2sG7jchi1B7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU7YS0YNTbuyxUDWTjagDaEjk9d34wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg0NWRlZDdkLWM2NjItNDBlMy04NTY4LTY0ZTQzYWQ4ODc0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQxjANBgkqhkiG9w0BAQsFAAOCAQEAuMjFEvlNXEakEuXhoFemDnFjqbhx AWw98cbbGigOmCNiCsgM4aYePoUNQlHqS1MNu/eZ88PxW5K1UZLPF6ydgV4W9xUn QZP6GNGJ1H3ZXWv4RbZSCrS1tIN9Wam1PjJV3Ejl/KK2YtQ9BKZ6ogFTOkuqEb1z VMvV+rDLoOnbEBCLOpvKsoCSycBXem+N8aacYiHDmTGHEUF0IhyeGHSOvowjE/4s WPN2JT2QRMWbsrbWHLIm3iaxsU6Z+BzKMVHvgnH9F38HDV9L9fiz7PLCaKLkhIOB lCrqAko53RibcuC6n+8NHAzSrh5JuQcu5qRSeVJqOcEaTEqcMz1mRCvlCA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:15 2025 by rpki-client