$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3644e6f-c01d-42ed-8246-2062e3ce6d28.roa File: c3644e6f-c01d-42ed-8246-2062e3ce6d28.roa (raw, json) Hash identifier: bOJhOn7clmpd59/Y+KeJETT1WhKio1vlOTU7ZE3D/ZQ= Subject key identifier: 06:F3:1B:43:F4:BF:A0:B8:04:AD:3B:37:63:17:BD:BA:44:77:6A:87 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0DBF14CFF790649D520678735F11FB867A238B78 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3644e6f-c01d-42ed-8246-2062e3ce6d28.roa Signing time: Mon 17 Feb 2025 16:41:14 +0000 ROA not before: Mon 17 Feb 2025 16:41:14 +0000 ROA not after: Mon 24 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:bf:14:cf:f7:90:64:9d:52:06:78:73:5f:11:fb:86:7a:23:8b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 17 16:41:14 2025 GMT Not After : Mar 24 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0b:c9:7c:84:fc:7d:bb:9d:d2:22:26:d6:10: 03:7e:6d:ec:cd:0e:03:99:5b:36:bd:0b:82:5b:08: 53:ba:7b:08:52:8f:4b:be:6e:6f:5b:f7:2f:06:52: 27:85:bf:3c:52:fc:89:69:da:e5:36:0b:c4:14:bb: a9:b6:e4:0e:2b:0b:94:ea:f9:32:61:4a:b6:dd:68: b8:cf:f5:45:da:8f:ac:46:ad:ee:2a:fc:c9:16:5e: 0c:fe:da:29:33:c5:b7:c2:1b:6c:07:b5:5a:b4:a1: 1d:c8:b8:e1:dc:d4:22:ba:e7:a7:d7:c4:5c:d2:47: 3b:2b:30:a8:ba:fd:e6:13:5b:ee:74:1a:e6:5b:d9: c5:9b:36:da:20:85:a5:20:44:73:f7:a7:d7:c1:b2: 71:17:11:ad:ab:0c:32:44:b7:c1:36:26:d5:b9:5a: ae:ec:b6:7c:ec:05:30:92:7c:61:cd:30:aa:13:ae: ba:6f:30:7b:d3:4e:21:af:5a:6d:8f:e2:6d:4a:c4: b4:b2:51:b0:8d:98:64:bb:ac:42:d0:86:50:21:61: f4:4e:84:82:0d:81:46:7e:7e:60:68:36:37:c9:bf: 21:58:5d:3d:47:cb:57:de:89:d4:1a:79:38:37:23: d3:a2:99:8c:e1:55:97:f1:e9:95:dc:63:28:a1:0b: 08:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F3:1B:43:F4:BF:A0:B8:04:AD:3B:37:63:17:BD:BA:44:77:6A:87 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3644e6f-c01d-42ed-8246-2062e3ce6d28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.80.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:ee:21:2e:25:0a:33:81:ae:71:1f:39:c0:8b:af:7f:8e:93: 22:21:36:ac:be:10:9b:85:2f:d9:c4:66:b3:e7:70:b4:33:00: d9:75:21:5e:b9:2b:03:07:08:25:6d:39:86:02:c6:b8:7e:6a: 20:cf:b7:76:9c:15:57:b3:49:30:09:41:2e:3a:06:08:dd:b5: 27:af:c3:8d:98:88:7a:25:7e:c7:fa:e7:a2:11:da:6c:f5:ff: b1:21:b7:b8:83:64:da:d6:06:a4:77:50:26:e3:10:9b:92:63: 08:56:4c:a2:d5:71:9d:63:86:e6:a9:00:3f:f9:c2:55:cd:6e: e8:7b:56:dd:b4:8a:49:05:03:34:52:7d:71:77:68:ec:af:81: 9d:0c:58:07:c4:27:84:a2:a0:79:92:9b:99:24:0e:6a:fe:df: 3a:b3:a9:ff:72:40:90:b1:d8:b5:fa:47:e7:82:82:ad:a2:93: 36:93:86:fa:dc:c0:a2:9f:35:84:70:71:0a:3c:81:f8:e1:0b: b6:72:57:63:27:e3:7b:14:23:e2:75:f2:d5:4d:c7:24:50:07: d1:6f:f4:b6:8a:f5:ad:8a:38:e5:12:ac:93:c3:d4:49:35:30: 72:ca:40:2e:84:8e:16:bc:9c:e0:32:c0:68:8c:cd:0f:58:ac: 31:ee:20:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDb8Uz/eQZJ1SBnhzXxH7hnoji3gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjE3MTY0MTE0WhcNMjUwMzI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxN2Q1NDZmM2Y1MTI5NTQ3NzU2YzgwNmVhNTE4NzUxYzEy ZDFjMDYyNzcxZjcxY2NhNmQ2OWU1OGEwMGM3OTU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZC8l8hPx9u53SIibWEAN+bezNDgOZWza9C4JbCFO6ewhS j0u+bm9b9y8GUieFvzxS/Ilp2uU2C8QUu6m25A4rC5Tq+TJhSrbdaLjP9UXaj6xG re4q/MkWXgz+2ikzxbfCG2wHtVq0oR3IuOHc1CK656fXxFzSRzsrMKi6/eYTW+50 GuZb2cWbNtoghaUgRHP3p9fBsnEXEa2rDDJEt8E2JtW5Wq7stnzsBTCSfGHNMKoT rrpvMHvTTiGvWm2P4m1KxLSyUbCNmGS7rELQhlAhYfROhIINgUZ+fmBoNjfJvyFY XT1Hy1feidQaeTg3I9OimYzhVZfx6ZXcYyihCwgvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBvMbQ/S/oLgErTs3Yxe9ukR3aocwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MzNjQ0ZTZmLWMwMWQtNDJlZC04MjQ2LTIwNjJlM2NlNmQyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/FAwDQYJKoZIhvcNAQELBQADggEBACvuIS4lCjOBrnEfOcCLr3+OkyIh Nqy+EJuFL9nEZrPncLQzANl1IV65KwMHCCVtOYYCxrh+aiDPt3acFVezSTAJQS46 BgjdtSevw42YiHolfsf656IR2mz1/7Eht7iDZNrWBqR3UCbjEJuSYwhWTKLVcZ1j huapAD/5wlXNbuh7Vt20ikkFAzRSfXF3aOyvgZ0MWAfEJ4SioHmSm5kkDmr+3zqz qf9yQJCx2LX6R+eCgq2ikzaThvrcwKKfNYRwcQo8gfjhC7ZyV2Mn43sUI+J18tVN xyRQB9Fv9LaK9a2KOOUSrJPD1Ek1MHLKQC6Ejha8nOAywGiMzQ9YrDHuINk= -----END CERTIFICATE-----Generated at Thu Mar 13 23:53:10 2025 by rpki-client