$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940d4db1-8435-4b14-9f65-40384956f3cf.roa File: 940d4db1-8435-4b14-9f65-40384956f3cf.roa (raw, json) Hash identifier: NvnNRp6eg1XOJJQ/IYwEF7iVajlfTbjDbfkhWtHaTco= Subject key identifier: 14:CA:4E:2B:26:E9:B1:AB:94:68:9C:9B:0E:BF:FA:14:45:53:E4:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 55C2B2B4F3F27DF954C2D5C28B0CE5D7EEDB3DD1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940d4db1-8435-4b14-9f65-40384956f3cf.roa Signing time: Fri 04 Apr 2025 00:11:57 +0000 ROA not before: Fri 04 Apr 2025 00:11:57 +0000 ROA not after: Fri 09 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.51.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c2:b2:b4:f3:f2:7d:f9:54:c2:d5:c2:8b:0c:e5:d7:ee:db:3d:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 4 00:11:57 2025 GMT Not After : May 9 23:59:59 2025 GMT Subject: serialNumber=a60a9c87b4e5ba9ec1f106ed9e9fb0715b32cead8b5202df83ea50109dafb8f8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3c:38:9e:be:a8:a7:63:90:23:0e:2a:df:07: 27:7a:55:f4:37:2d:a9:d9:a8:99:91:3c:d2:aa:09: 98:1a:bf:85:fc:a3:fe:d4:e2:a4:01:37:0c:a5:6a: 18:19:28:f6:72:39:90:e2:d2:f0:0d:49:93:9f:5b: 2f:96:e3:c0:5b:51:05:00:44:39:c2:9a:6c:65:a8: 76:38:f1:16:1d:b9:70:b4:36:44:24:90:67:60:6e: ce:0b:54:a5:47:18:cf:fe:60:d4:dc:f3:1d:72:87: f9:6c:b6:16:70:24:82:b4:2d:51:74:4d:eb:02:48: 94:4d:fa:21:8f:09:64:11:53:48:39:7c:95:18:58: 5d:36:4a:82:4b:15:d9:96:b8:49:7c:ff:9c:e6:2a: 62:30:02:29:1f:22:9b:a3:fa:87:a5:ea:8d:fa:4a: b9:44:1f:a3:48:df:7d:99:8e:a9:08:4a:5e:55:fb: 65:49:a8:0c:d5:69:f8:ca:7e:89:2d:8b:4e:a7:30: 23:ba:77:57:ab:42:1d:2e:59:3f:5b:b0:42:2e:c3: ea:ef:b7:b8:60:88:58:85:ee:28:4f:2c:24:d0:43: d9:16:a2:23:96:03:f6:07:bb:4a:83:33:9d:9d:1f: 6d:a9:30:08:89:ee:ac:dd:cc:f8:1b:91:b0:c5:12: 97:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CA:4E:2B:26:E9:B1:AB:94:68:9C:9B:0E:BF:FA:14:45:53:E4:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940d4db1-8435-4b14-9f65-40384956f3cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.51.0.0/16 Signature Algorithm: sha256WithRSAEncryption 00:ba:85:85:43:70:41:6c:5c:52:f5:6e:e6:ea:5f:a3:f0:db: b4:db:5c:78:95:2a:84:0e:92:6e:81:31:20:e1:81:d6:e4:ab: c0:42:84:ff:82:ae:f0:dd:6f:cb:a6:9c:96:c7:21:6c:ea:21: f0:37:b3:48:13:cb:0d:18:24:0b:fb:c2:cc:24:08:a3:cc:90: 8b:e3:82:1f:94:80:64:c9:1c:7f:f1:ef:99:ef:60:01:6e:7e: 56:f0:b7:e2:52:cd:5c:bb:fb:db:f5:63:a6:1c:79:5c:c0:de: 9e:70:c9:d8:e2:ef:b4:34:fd:a9:d5:5b:6e:58:05:90:84:b5: 54:7b:f9:ae:d2:05:6f:8e:fe:35:67:80:c1:ae:03:ae:26:1d: 73:69:a6:ed:49:5c:ec:e7:5e:53:97:c3:e5:3e:f5:26:d4:47: 61:39:a9:25:66:bd:21:53:e5:82:17:87:bd:c2:a8:1f:9b:47: f5:bb:f3:99:a0:9d:db:66:b0:b2:a1:73:20:9b:c4:00:35:98: e5:d7:f1:7a:71:36:d3:01:ce:bc:8b:29:6c:ac:5f:33:81:fa: d0:e2:b6:97:de:2c:6c:59:8f:3b:c9:d3:c6:b6:81:3c:89:cd: a7:5e:30:30:e1:27:f7:56:4c:fc:2c:55:64:ac:1f:c7:fb:84: 0d:55:32:95 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVcKytPPyfflUwtXCiwzl1+7bPdEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA0MDAxMTU3WhcNMjUwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNjBhOWM4N2I0ZTViYTllYzFmMTA2ZWQ5ZTlmYjA3MTVi MzJjZWFkOGI1MjAyZGY4M2VhNTAxMDlkYWZiOGY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgPDievqinY5AjDirfByd6VfQ3LanZqJmRPNKqCZgav4X8 o/7U4qQBNwylahgZKPZyOZDi0vANSZOfWy+W48BbUQUARDnCmmxlqHY48RYduXC0 NkQkkGdgbs4LVKVHGM/+YNTc8x1yh/lsthZwJIK0LVF0TesCSJRN+iGPCWQRU0g5 fJUYWF02SoJLFdmWuEl8/5zmKmIwAikfIpuj+oel6o36SrlEH6NI332ZjqkISl5V +2VJqAzVafjKfokti06nMCO6d1erQh0uWT9bsEIuw+rvt7hgiFiF7ihPLCTQQ9kW oiOWA/YHu0qDM52dH22pMAiJ7qzdzPgbkbDFEpffAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUFMpOKybpsauUaJybDr/6FEVT5AkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk0MGQ0ZGIxLTg0MzUtNGIxNC05ZjY1LTQwMzg0OTU2ZjNjZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjMzANBgkqhkiG9w0BAQsFAAOCAQEAALqFhUNwQWxcUvVu5upfo/DbtNtc eJUqhA6SboExIOGB1uSrwEKE/4Ku8N1vy6aclschbOoh8DezSBPLDRgkC/vCzCQI o8yQi+OCH5SAZMkcf/Hvme9gAW5+VvC34lLNXLv72/Vjphx5XMDennDJ2OLvtDT9 qdVbblgFkIS1VHv5rtIFb47+NWeAwa4DriYdc2mm7Ulc7OdeU5fD5T71JtRHYTmp JWa9IVPlgheHvcKoH5tH9bvzmaCd22awsqFzIJvEADWY5dfxenE20wHOvIspbKxf M4H60OK2l94sbFmPO8nTxraBPInNp14wMOEn91ZM/CxVZKwfx/uEDVUylQ== -----END CERTIFICATE-----Generated at Wed Apr 16 17:19:20 2025 by rpki-client