$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9e07de-e076-42d6-a7cb-8400f81babe2.roa File: 9b9e07de-e076-42d6-a7cb-8400f81babe2.roa (raw, json) Hash identifier: hBghAppA7jRMUpu51KBDFE+7Rp2sT0dQzitqI8zVhmA= Subject key identifier: DA:2F:1B:46:6B:99:59:0B:BF:F6:1D:E4:8F:BC:B6:0D:F9:EC:91:D3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3BC19689F585B30BCE9DC06D07EC3E12195E45AB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9e07de-e076-42d6-a7cb-8400f81babe2.roa Signing time: Mon 17 Feb 2025 16:31:45 +0000 ROA not before: Mon 17 Feb 2025 16:31:45 +0000 ROA not after: Mon 24 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 57.91.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c1:96:89:f5:85:b3:0b:ce:9d:c0:6d:07:ec:3e:12:19:5e:45:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 17 16:31:45 2025 GMT Not After : Mar 24 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d6:2b:28:a5:5d:e0:67:d5:80:7c:08:f6:1d: f7:d5:d7:c0:72:2e:77:c8:d2:d7:e3:f1:28:f6:7c: 07:c0:4b:7b:73:ce:c0:78:cb:2e:d3:f5:7d:c0:88: 28:2f:b3:51:c7:b7:0d:70:78:14:5a:05:96:f6:e9: b6:2f:f4:08:ce:b9:74:aa:dd:7e:65:a7:11:ee:e5: ea:d7:f6:57:7d:61:d7:77:9a:fe:d8:20:4b:4c:e9: 05:13:98:da:88:b7:e5:46:21:44:57:08:7b:fc:e7: f8:0d:d9:9d:c3:ed:bb:8e:dd:9f:0b:15:b1:e7:c3: 7b:1b:1e:bf:5f:3a:50:20:6b:cf:66:10:4f:63:e6: d7:b8:ce:fc:4d:54:2e:4b:06:bd:19:2d:7d:85:7c: 7d:5a:70:34:a6:bd:81:39:4b:d8:00:c4:21:1b:3d: c2:e6:95:71:42:b7:83:90:bd:e3:e1:61:7e:22:ee: 45:06:da:d6:c9:11:c4:46:b6:f5:76:1a:05:43:fa: bd:03:b8:d0:56:df:5c:6c:c5:de:a7:5b:8b:cc:e0: 53:fc:7f:8b:93:d4:e5:84:67:61:44:e2:a8:4e:88: c1:24:57:68:58:e9:a4:a7:fc:f4:b8:c4:2b:2e:5e: e9:03:4f:11:20:e8:b9:46:2c:e8:34:8c:1a:0b:73: f9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2F:1B:46:6B:99:59:0B:BF:F6:1D:E4:8F:BC:B6:0D:F9:EC:91:D3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9e07de-e076-42d6-a7cb-8400f81babe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.91.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9b:8c:02:3e:e2:af:0c:e4:b1:5c:f0:33:5a:e8:94:23:58:d1: 26:6c:22:7c:54:4d:08:91:4c:0a:8d:c5:67:ba:2e:55:df:3b: 08:f3:be:cf:c5:99:a2:94:eb:b5:d2:24:ec:e1:18:a7:f4:cc: 9e:28:6e:c2:8b:79:6c:e4:c5:83:01:61:2f:07:e5:bf:e2:82: 02:ea:c3:9b:18:a4:32:40:aa:f7:79:11:88:34:3c:63:ee:cd: 9d:16:5f:0f:4d:5f:de:bf:31:5e:7f:7a:c7:20:88:7a:0e:1c: b0:e6:e4:2d:fc:a1:48:62:e9:bc:a4:10:dd:8f:e4:8d:15:cc: 6e:3c:fb:51:a7:b7:de:45:ca:8e:aa:d8:a9:2d:2b:16:b7:ce: 61:6e:8c:d1:5f:0c:2b:33:62:fa:0c:4a:4d:cb:a3:c0:31:05: 58:bb:31:59:b6:86:9a:81:56:35:01:a1:99:01:fc:07:db:5b: d6:f5:9f:31:63:b3:31:66:06:f1:f8:be:58:ba:88:8a:14:90: a5:4c:80:dd:7c:ab:4b:ac:9e:f3:fc:b8:bc:30:62:01:7a:9b: 63:ff:6f:05:dc:b4:9d:94:31:2d:20:9d:96:6c:86:53:6f:8b: 4a:0d:e3:ea:34:bf:b0:0c:52:60:8b:94:43:d8:ca:29:9c:e4: ff:4f:11:c2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUO8GWifWFswvOncBtB+w+EhleRaswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjE3MTYzMTQ1WhcNMjUwMzI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTJmNGRjZjI0ODViY2IyNGEyNDRiODU2MmQ0MDMxYTlm MGYyZTRlNjFjMjM2YjNiMDgwMWI5YzY1YzljMDNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA1isopV3gZ9WAfAj2HffV18ByLnfI0tfj8Sj2fAfAS3tz zsB4yy7T9X3AiCgvs1HHtw1weBRaBZb26bYv9AjOuXSq3X5lpxHu5erX9ld9Ydd3 mv7YIEtM6QUTmNqIt+VGIURXCHv85/gN2Z3D7buO3Z8LFbHnw3sbHr9fOlAga89m EE9j5te4zvxNVC5LBr0ZLX2FfH1acDSmvYE5S9gAxCEbPcLmlXFCt4OQvePhYX4i 7kUG2tbJEcRGtvV2GgVD+r0DuNBW31xsxd6nW4vM4FP8f4uT1OWEZ2FE4qhOiMEk V2hY6aSn/PS4xCsuXukDTxEg6LlGLOg0jBoLc/nZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU2i8bRmuZWQu/9h3kj7y2DfnskdMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzliOWUwN2RlLWUwNzYtNDJkNi1hN2NiLTg0MDBmODFiYWJlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA5WzANBgkqhkiG9w0BAQsFAAOCAQEAm4wCPuKvDOSxXPAzWuiUI1jRJmwi fFRNCJFMCo3FZ7ouVd87CPO+z8WZopTrtdIk7OEYp/TMnihuwot5bOTFgwFhLwfl v+KCAurDmxikMkCq93kRiDQ8Y+7NnRZfD01f3r8xXn96xyCIeg4csObkLfyhSGLp vKQQ3Y/kjRXMbjz7Uae33kXKjqrYqS0rFrfOYW6M0V8MKzNi+gxKTcujwDEFWLsx WbaGmoFWNQGhmQH8B9tb1vWfMWOzMWYG8fi+WLqIihSQpUyA3XyrS6ye8/y4vDBi AXqbY/9vBdy0nZQxLSCdlmyGU2+LSg3j6jS/sAxSYIuUQ9jKKZzk/08Rwg== -----END CERTIFICATE-----Generated at Thu Mar 13 23:29:38 2025 by rpki-client