$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7066401-6e27-443a-a174-bf22e8ce1b76.roa File: c7066401-6e27-443a-a174-bf22e8ce1b76.roa (raw, json) Hash identifier: n9YtgwWPJ8UqZmvKdGtSBKfrdgrtHgh5lj23CR5rkE0= Subject key identifier: 7F:C0:6F:AB:F8:DA:3A:85:9F:76:AA:DE:16:82:CF:3E:87:E1:F7:9E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 19987C8768A794E584223979CF976F3232676E8B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7066401-6e27-443a-a174-bf22e8ce1b76.roa Signing time: Mon 14 Apr 2025 15:11:40 +0000 ROA not before: Mon 14 Apr 2025 15:11:40 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 184.72.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:98:7c:87:68:a7:94:e5:84:22:39:79:cf:97:6f:32:32:67:6e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 14 15:11:40 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=109b0ab86fcc12290166af80ba2618694948d9cd2ff69718226f8f0509578386, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:28:0c:30:c7:ef:e3:61:eb:a3:09:e7:38: f8:95:30:76:5a:83:3c:07:58:7e:a9:e4:7b:17:cb: d5:ec:9d:ae:74:30:9c:da:d2:76:37:50:bb:50:bf: 36:51:5c:b9:fb:45:91:77:b2:c2:55:eb:bf:50:d8: 6d:d0:70:97:6e:9e:0c:52:4f:76:bb:db:3d:04:71: 80:42:3d:99:84:e1:7e:e8:de:ac:b5:1b:dc:4a:9f: b1:29:4e:86:d1:e9:ef:c8:42:f6:85:2a:85:72:65: c0:31:df:34:c0:2a:da:7e:35:d7:d1:3b:0d:99:6e: 52:ef:48:3e:9a:1a:e9:a8:7d:62:f9:77:d4:eb:fa: 85:5d:42:fb:00:76:4c:96:c6:d6:96:c7:d9:3b:03: 0a:11:d5:1d:8c:bf:18:d1:aa:94:57:17:34:5e:eb: 1f:fa:2f:18:32:b9:ac:d9:d6:da:ad:16:96:32:45: cd:a0:83:f9:b1:85:1d:63:12:af:05:49:a8:01:af: 9d:64:b5:b5:37:6f:11:b5:40:9b:a1:3d:b5:ab:09: 7b:f4:fb:b0:8c:6c:f7:cf:37:a7:05:b9:c8:5d:f4: 86:0c:bd:14:05:8f:28:4c:39:3d:44:de:3c:a0:27: ca:db:0f:45:62:11:78:03:63:1b:10:19:1d:1b:bb: 97:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C0:6F:AB:F8:DA:3A:85:9F:76:AA:DE:16:82:CF:3E:87:E1:F7:9E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7066401-6e27-443a-a174-bf22e8ce1b76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.80.0/21 Signature Algorithm: sha256WithRSAEncryption 5b:76:1e:4b:d6:8e:75:0a:c6:7a:e6:ec:c5:95:1d:8e:77:b1: fb:cb:3b:9f:e2:bb:13:26:51:a8:4b:5e:e0:fe:15:f9:bc:ab: 93:10:90:99:4e:25:8f:a4:91:28:cb:89:75:73:1f:45:cf:11: dd:9c:2a:f8:db:f9:35:0f:c4:d1:ae:88:62:02:db:56:29:08: 96:15:2b:ba:12:26:d2:05:35:83:24:5a:60:3b:9d:07:0e:99: d2:8b:fb:b9:20:c1:39:be:92:73:27:b6:69:d8:8c:47:77:76: 14:8a:20:c0:51:22:79:57:5d:9d:fe:08:ae:c8:d7:48:43:7c: ce:26:fb:e5:e4:f1:9e:d3:f3:d9:94:57:e1:f0:17:7d:81:71: 11:0c:f4:4b:57:f0:4b:67:f1:fc:b2:6d:5f:bb:7d:01:88:8b: ec:18:fa:43:61:b5:aa:33:70:de:34:aa:5b:da:87:31:60:de: 9f:af:e3:90:bd:6e:ca:d1:75:36:e2:70:c1:1c:61:fb:f5:6b: 33:54:f1:cb:63:d1:c3:fb:2a:d9:1a:59:29:c5:a2:a5:4c:20: a2:c4:48:30:64:93:29:cf:25:ed:c2:31:bc:91:c0:dc:0e:e1: 79:16:ca:c7:6a:74:ec:eb:9d:dd:48:b0:18:6d:a3:6c:bd:4c: 31:a1:d5:1d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGZh8h2inlOWEIjl5z5dvMjJnboswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE0MTUxMTQwWhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMDliMGFiODZmY2MxMjI5MDE2NmFmODBiYTI2MTg2OTQ5 NDhkOWNkMmZmNjk3MTgyMjZmOGYwNTA5NTc4Mzg2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCofCgMMMfv42HrownnOPiVMHZagzwHWH6p5HsXy9Xsna50 MJza0nY3ULtQvzZRXLn7RZF3ssJV679Q2G3QcJdungxST3a72z0EcYBCPZmE4X7o 3qy1G9xKn7EpTobR6e/IQvaFKoVyZcAx3zTAKtp+NdfROw2ZblLvSD6aGumofWL5 d9Tr+oVdQvsAdkyWxtaWx9k7AwoR1R2MvxjRqpRXFzRe6x/6LxgyuazZ1tqtFpYy Rc2gg/mxhR1jEq8FSagBr51ktbU3bxG1QJuhPbWrCXv0+7CMbPfPN6cFuchd9IYM vRQFjyhMOT1E3jygJ8rbD0ViEXgDYxsQGR0bu5c3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUf8Bvq/jaOoWfdqreFoLPPofh954wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M3MDY2NDAxLTZlMjctNDQzYS1hMTc0LWJmMjJlOGNlMWI3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO4SFAwDQYJKoZIhvcNAQELBQADggEBAFt2HkvWjnUKxnrm7MWVHY53sfvL O5/iuxMmUahLXuD+Ffm8q5MQkJlOJY+kkSjLiXVzH0XPEd2cKvjb+TUPxNGuiGIC 21YpCJYVK7oSJtIFNYMkWmA7nQcOmdKL+7kgwTm+knMntmnYjEd3dhSKIMBRInlX XZ3+CK7I10hDfM4m++Xk8Z7T89mUV+HwF32BcREM9EtX8Etn8fyybV+7fQGIi+wY +kNhtaozcN40qlvahzFg3p+v45C9bsrRdTbicMEcYfv1azNU8ctj0cP7KtkaWSnF oqVMIKLESDBkkynPJe3CMbyRwNwO4XkWysdqdOzrnd1IsBhto2y9TDGh1R0= -----END CERTIFICATE-----Generated at Wed Apr 16 17:11:32 2025 by rpki-client