$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc5cd5cf-3949-4b2d-9b8e-f2e740346129.roa File: cc5cd5cf-3949-4b2d-9b8e-f2e740346129.roa (raw, json) Hash identifier: RM8pHvmzNgiWO37y10rzmT19bz/REB+vnTmpi18uGuc= Subject key identifier: 57:4A:24:41:82:07:94:73:1F:56:75:1B:60:B7:A7:B9:9D:73:CB:D0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2D0C0869A4C5F7689A89CBDBA231698A23060B17 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc5cd5cf-3949-4b2d-9b8e-f2e740346129.roa Signing time: Wed 09 Apr 2025 00:41:17 +0000 ROA not before: Wed 09 Apr 2025 00:41:17 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 96.0.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:0c:08:69:a4:c5:f7:68:9a:89:cb:db:a2:31:69:8a:23:06:0b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:41:17 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: serialNumber=b8941eb072918898bdd42d84bb5274e35f868cf461677e037a9e39ed634505ef, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cb:1c:70:87:17:c9:f7:95:29:1e:b7:f3:72: 72:90:cc:ab:86:d1:41:8c:55:e0:aa:f7:b8:81:22: 52:26:b6:34:a2:20:d1:65:b3:01:c9:98:11:27:28: 90:c2:cd:71:49:c2:44:5e:99:0d:37:3b:83:eb:42: 18:5b:d1:38:de:07:94:57:b1:86:84:f3:24:11:3c: 58:0d:de:f6:73:18:7f:f0:7a:e4:6e:00:8c:c1:b9: 83:98:7e:77:05:e3:63:c0:c8:96:c6:07:0f:98:4b: 70:41:70:42:91:6a:ee:79:79:c0:7a:26:32:e3:79: d6:a4:2a:11:c3:2f:a7:c4:04:14:62:27:06:cc:7f: 04:a7:26:44:8f:0a:7c:51:d0:7c:64:68:36:0e:02: 2d:ac:0b:34:bb:02:a8:a2:2d:f9:25:ca:84:ef:6a: 40:55:9a:01:8e:8b:00:e4:12:69:4b:a5:fb:bb:65: 20:86:80:dc:76:fd:21:7b:1e:5a:80:88:75:7c:f8: 61:67:cb:e8:a4:dd:7c:82:e1:54:e2:3e:cb:f3:a3: 39:90:d1:45:ee:f8:d9:fb:5e:a6:74:4e:ab:8b:b4: 23:29:ff:8d:ec:40:47:05:ba:1d:1e:99:82:fd:67: 5a:ca:2b:c4:f4:c8:39:03:5c:8e:38:a6:a7:72:24: bd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4A:24:41:82:07:94:73:1F:56:75:1B:60:B7:A7:B9:9D:73:CB:D0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc5cd5cf-3949-4b2d-9b8e-f2e740346129.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.131.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:92:fa:15:a7:9e:f4:c3:3a:73:0c:6f:ba:a9:ad:b7:1e:ee: 19:41:6b:38:62:8e:1e:c9:fe:08:5e:11:3a:11:42:fb:5b:22: 2e:ee:8b:8c:5e:ab:14:89:56:09:d5:68:4c:e6:c4:e8:03:06: fe:10:3b:d1:56:a9:c4:54:21:84:3a:9f:8c:07:72:2c:ed:d1: 1b:d5:70:c0:e1:9d:56:87:2d:3c:5b:ed:55:61:1f:63:3a:7a: ba:98:40:8b:ce:56:b4:51:6b:eb:2d:9f:a6:44:a8:d4:8c:48: df:d6:c7:ab:a8:ff:1e:61:28:c1:e0:58:9a:1b:90:aa:15:d6: 38:a0:48:5f:73:ed:55:e9:00:38:61:12:39:ab:46:d0:8b:27: 8e:6f:30:94:d2:7f:65:94:51:a1:d6:74:60:5e:aa:fb:89:ff: 0b:58:0f:d8:4f:da:db:ad:57:b5:b2:20:40:76:dc:26:6b:60: e3:52:9c:4d:1a:49:f0:85:70:35:34:51:00:50:19:d3:4e:24: 96:ce:59:f0:a2:76:a6:58:d7:d2:4e:9c:4f:8b:d5:83:19:dd: 6c:59:79:4b:29:cd:1a:5c:31:30:07:82:68:55:18:0e:77:f1: ea:96:15:b2:ab:a1:e3:20:02:61:86:3f:32:6f:ed:11:89:b7: 43:c3:e5:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULQwIaaTF92iaicvbojFpiiMGCxcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDA0MTE3WhcNMjUwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiODk0MWViMDcyOTE4ODk4YmRkNDJkODRiYjUyNzRlMzVm ODY4Y2Y0NjE2NzdlMDM3YTllMzllZDYzNDUwNWVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNyxxwhxfJ95UpHrfzcnKQzKuG0UGMVeCq97iBIlImtjSi INFlswHJmBEnKJDCzXFJwkRemQ03O4PrQhhb0TjeB5RXsYaE8yQRPFgN3vZzGH/w euRuAIzBuYOYfncF42PAyJbGBw+YS3BBcEKRau55ecB6JjLjedakKhHDL6fEBBRi JwbMfwSnJkSPCnxR0HxkaDYOAi2sCzS7AqiiLfklyoTvakBVmgGOiwDkEmlLpfu7 ZSCGgNx2/SF7HlqAiHV8+GFny+ik3XyC4VTiPsvzozmQ0UXu+Nn7XqZ0TquLtCMp /43sQEcFuh0emYL9Z1rKK8T0yDkDXI44pqdyJL3tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUV0okQYIHlHMfVnUbYLenuZ1zy9AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NjNWNkNWNmLTM5NDktNGIyZC05YjhlLWYyZTc0MDM0NjEyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABgAIMwDQYJKoZIhvcNAQELBQADggEBAF+S+hWnnvTDOnMMb7qprbce7hlB azhijh7J/gheEToRQvtbIi7ui4xeqxSJVgnVaEzmxOgDBv4QO9FWqcRUIYQ6n4wH cizt0RvVcMDhnVaHLTxb7VVhH2M6erqYQIvOVrRRa+stn6ZEqNSMSN/Wx6uo/x5h KMHgWJobkKoV1jigSF9z7VXpADhhEjmrRtCLJ45vMJTSf2WUUaHWdGBeqvuJ/wtY D9hP2tutV7WyIEB23CZrYONSnE0aSfCFcDU0UQBQGdNOJJbOWfCidqZY19JOnE+L 1YMZ3WxZeUspzRpcMTAHgmhVGA538eqWFbKroeMgAmGGPzJv7RGJt0PD5VM= -----END CERTIFICATE-----Generated at Wed Apr 16 22:07:00 2025 by rpki-client