$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c425c799-15f2-4001-afeb-0ec060306310.roa File: c425c799-15f2-4001-afeb-0ec060306310.roa (raw, json) Hash identifier: xBTpFDCpCO6gX1tg24zc5jG32NP0uD1nGtsz3W6hY1o= Subject key identifier: 39:34:9F:03:3C:7F:21:B9:2E:15:AE:56:D6:5F:5D:AE:B5:A1:A3:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D3E114AEED01B90860A3FB66F8F436E7F9AD945 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c425c799-15f2-4001-afeb-0ec060306310.roa Signing time: Fri 28 Mar 2025 17:32:06 +0000 ROA not before: Fri 28 Mar 2025 17:32:06 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 85.150.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:3e:11:4a:ee:d0:1b:90:86:0a:3f:b6:6f:8f:43:6e:7f:9a:d9:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 17:32:06 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: serialNumber=86225e9bf89d45b3b0c8ea28cc91b1e11cc590512dea8db9708bc1973b710ce7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:96:0d:54:82:66:27:b5:74:c2:dd:f5:f9:5b: 8f:6e:f3:04:91:1b:c9:e4:0d:75:0b:80:c8:27:9d: e9:d6:a9:2d:83:c1:0e:15:00:b8:40:4e:fa:f2:eb: bc:b0:84:62:d5:94:29:d6:d0:b9:cd:16:82:4e:19: 6f:e5:21:43:a9:0f:8e:da:1a:bf:32:5c:48:12:d7: 4b:e0:09:01:3c:d4:3d:92:36:77:b3:20:9c:73:95: 8c:ad:bc:16:21:fd:63:32:b4:c3:3f:ca:3c:12:03: af:4d:3a:81:3f:97:27:af:03:6a:55:8c:79:f8:14: f2:0a:7b:fa:71:ac:cf:df:61:22:9d:23:df:82:8a: ba:06:96:5d:93:59:9d:0c:d9:bf:1b:78:f9:25:15: 4e:d3:13:74:a6:f1:56:b0:ef:22:ff:9e:07:43:b0: f7:a0:1c:4a:04:12:da:36:9b:42:57:8b:5d:65:54: f8:03:86:ab:c0:e6:fd:3f:70:c9:30:c8:a3:83:37: 8b:d9:48:f9:0c:24:1a:82:f0:b3:71:c8:1d:3e:95: 80:ca:e1:7f:be:12:91:77:b4:c7:2f:2f:8d:ea:c8: 9d:34:89:1f:5c:b4:f0:ac:f4:9f:fb:41:ef:e6:0d: d4:ea:2d:ba:ef:f8:99:b2:5c:c5:90:96:e8:03:4a: ef:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:34:9F:03:3C:7F:21:B9:2E:15:AE:56:D6:5F:5D:AE:B5:A1:A3:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c425c799-15f2-4001-afeb-0ec060306310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.150.0.0/16 Signature Algorithm: sha256WithRSAEncryption d3:3e:3b:9d:dc:c2:cb:0d:6a:e0:dc:f0:b3:97:2a:b9:fc:61: c7:f4:13:3f:66:20:36:61:f4:28:7c:c2:b2:39:94:73:13:bc: da:5f:40:22:89:85:dc:c6:f2:1b:17:22:81:8d:8b:02:77:17: 04:fd:75:5c:c1:ec:c6:bb:78:21:d1:a0:60:f7:8d:56:b5:12: 16:8f:dd:03:f8:25:70:60:c5:dc:4b:22:9a:23:fa:68:21:a8: 18:a4:91:6e:a5:96:5e:ca:5b:ed:7a:4a:48:8b:b7:7e:5a:c4: 9e:ee:7f:1d:b8:f8:3c:1c:6b:55:40:13:62:7b:9b:3f:64:ee: 4f:9b:90:79:88:dd:10:87:b8:65:4d:6b:52:c1:84:94:a6:53: ea:e0:65:fd:2d:da:bd:7f:15:84:51:7c:53:aa:ae:32:00:4d: 6c:1c:b6:1a:8c:45:c5:a0:b5:99:24:3e:32:c9:30:8a:59:c7: 34:fa:72:09:92:24:d6:29:1d:b1:5e:81:47:c4:e4:69:c4:8d: d7:76:9d:0c:02:f6:38:5c:88:fc:d6:63:47:bc:1c:ec:b6:e9: 49:d2:3a:51:db:c8:82:fd:64:45:6f:41:6d:99:39:c5:b6:61: 0f:d1:aa:26:7f:36:d6:c6:4a:d5:96:be:c2:a2:18:13:d1:9b: 82:1b:fe:ec -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPT4RSu7QG5CGCj+2b49Dbn+a2UUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTczMjA2WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjIyNWU5YmY4OWQ0NWIzYjBjOGVhMjhjYzkxYjFlMTFj YzU5MDUxMmRlYThkYjk3MDhiYzE5NzNiNzEwY2U3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqlg1UgmYntXTC3fX5W49u8wSRG8nkDXULgMgnnenWqS2D wQ4VALhATvry67ywhGLVlCnW0LnNFoJOGW/lIUOpD47aGr8yXEgS10vgCQE81D2S NnezIJxzlYytvBYh/WMytMM/yjwSA69NOoE/lyevA2pVjHn4FPIKe/pxrM/fYSKd I9+CiroGll2TWZ0M2b8bePklFU7TE3Sm8Vaw7yL/ngdDsPegHEoEEto2m0JXi11l VPgDhqvA5v0/cMkwyKODN4vZSPkMJBqC8LNxyB0+lYDK4X++EpF3tMcvL43qyJ00 iR9ctPCs9J/7Qe/mDdTqLbrv+JmyXMWQlugDSu8DAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUOTSfAzx/IbkuFa5W1l9drrWhozswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M0MjVjNzk5LTE1ZjItNDAwMS1hZmViLTBlYzA2MDMwNjMxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBVljANBgkqhkiG9w0BAQsFAAOCAQEA0z47ndzCyw1q4Nzws5cqufxhx/QT P2YgNmH0KHzCsjmUcxO82l9AIomF3MbyGxcigY2LAncXBP11XMHsxrt4IdGgYPeN VrUSFo/dA/glcGDF3EsimiP6aCGoGKSRbqWWXspb7XpKSIu3flrEnu5/Hbj4PBxr VUATYnubP2TuT5uQeYjdEIe4ZU1rUsGElKZT6uBl/S3avX8VhFF8U6quMgBNbBy2 GoxFxaC1mSQ+MskwilnHNPpyCZIk1ikdsV6BR8TkacSN13adDAL2OFyI/NZjR7wc 7LbpSdI6UdvIgv1kRW9BbZk5xbZhD9GqJn821sZK1Za+wqIYE9Gbghv+7A== -----END CERTIFICATE-----Generated at Wed Apr 16 17:17:54 2025 by rpki-client