$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1478bf7-fa63-45f0-9446-063288b8821d.roa File: d1478bf7-fa63-45f0-9446-063288b8821d.roa (raw, json) Hash identifier: ghTGP3JSA5S1EPfrAE28YApSI53BDfxihric5ER2exY= Subject key identifier: B1:15:B7:D1:88:53:25:E5:8C:4B:BA:8B:64:C2:95:8E:78:DE:41:68 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 02A5A6CB9FC4C6B2FD7F5B3F7C40A17A8FAF8D89 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1478bf7-fa63-45f0-9446-063288b8821d.roa Signing time: Tue 18 Feb 2025 15:01:12 +0000 ROA not before: Tue 18 Feb 2025 15:01:12 +0000 ROA not after: Tue 25 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a5:a6:cb:9f:c4:c6:b2:fd:7f:5b:3f:7c:40:a1:7a:8f:af:8d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 18 15:01:12 2025 GMT Not After : Mar 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1a:28:97:e5:b5:d5:d7:59:03:d1:91:a9:3b: 1f:dd:20:03:89:8c:a1:db:70:02:be:0d:2a:40:c4: 97:87:b6:69:54:8e:bd:0f:8c:29:8e:c0:ef:7b:21: 2a:c8:f4:5f:e6:9e:db:f4:15:c3:90:dc:37:5d:10: b6:1b:5b:d3:a2:f2:1e:e1:98:b0:be:e8:ba:af:7a: 90:5b:78:aa:9b:68:4a:d3:64:87:9f:75:21:c0:9b: 61:0e:cd:83:93:a5:07:2b:0e:01:81:7c:cc:ea:c6: 6b:7a:4a:ff:2c:e7:38:bc:a8:32:84:ab:a4:fc:3d: 46:9d:c6:bc:59:f3:31:11:8a:fa:77:ab:1a:86:8d: e9:fd:e2:37:a6:c4:72:17:37:2c:1d:ba:f4:23:b4: a3:2e:e2:2c:0f:a2:3a:b6:65:c8:61:f8:10:b9:1a: 78:c5:af:6c:1b:e5:bc:93:42:d2:5e:53:08:37:62: 0e:8f:8b:ec:da:fa:e2:0a:9c:61:49:fe:8c:00:4e: 7c:99:56:c0:d7:2d:0a:29:72:ef:63:8a:a7:aa:26: e9:d8:b7:b3:91:02:b3:f9:da:5f:57:92:8a:7c:d2: c1:ed:24:6f:a6:e2:4b:ad:74:3e:87:f1:a2:82:71: 82:3d:02:c6:96:e0:fa:c5:29:f6:ae:8c:34:7a:8a: d8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:15:B7:D1:88:53:25:E5:8C:4B:BA:8B:64:C2:95:8E:78:DE:41:68 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1478bf7-fa63-45f0-9446-063288b8821d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.82.0/24 Signature Algorithm: sha256WithRSAEncryption a7:0c:7c:eb:a5:32:01:22:80:c9:67:fb:05:08:9d:66:26:a0: 0f:82:8a:17:63:2f:6d:33:f5:af:de:68:87:c4:7c:9e:19:e7: 22:d9:8f:95:36:e3:7c:68:8c:17:87:41:4f:d5:0c:f4:50:33: 88:3d:a0:bf:dc:c2:de:0c:1f:c3:ca:e9:9e:e0:62:1c:e5:b4: 88:af:ca:24:69:72:bd:fe:49:20:a8:f1:51:9c:74:52:53:6b: cd:08:59:e3:fd:14:e7:2e:a7:d5:89:f2:11:70:4c:81:86:5e: 9e:80:98:94:bb:b8:e2:5b:52:b9:11:11:d9:0f:b7:8f:b6:f4: 22:58:cd:bc:d0:a4:41:cc:c2:10:a8:02:37:56:14:8d:1a:5a: c5:57:0f:7f:c4:3a:65:18:59:36:ad:33:e8:48:26:a4:a5:6e: 67:05:54:39:a1:b3:56:bd:23:6f:3c:18:ed:e1:3e:8e:ca:63: da:6e:df:55:f2:11:6d:d9:86:91:89:74:16:1e:26:7e:85:ed: bd:9b:81:d0:62:62:a0:2b:12:0a:fc:1b:3f:dd:ee:3b:62:67: 9b:b7:f4:15:78:6f:33:d1:81:5c:a7:a7:51:2c:72:71:4c:35: f5:4d:c8:8b:58:62:10:4f:2b:ff:00:16:f9:cd:a8:1c:7e:9e: 24:46:3c:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAqWmy5/ExrL9f1s/fECheo+vjYkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjE4MTUwMTEyWhcNMjUwMzI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMjg0NzBlZjM2M2Q5Nzc2N2FlZWQ5MWU1MWMwNGEyNzBm NWVjNTM1MDEwMTM2YjBlNDNhOTA1NzY3NDgwMzY5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaGiiX5bXV11kD0ZGpOx/dIAOJjKHbcAK+DSpAxJeHtmlU jr0PjCmOwO97ISrI9F/mntv0FcOQ3DddELYbW9Oi8h7hmLC+6LqvepBbeKqbaErT ZIefdSHAm2EOzYOTpQcrDgGBfMzqxmt6Sv8s5zi8qDKEq6T8PUadxrxZ8zERivp3 qxqGjen94jemxHIXNywduvQjtKMu4iwPojq2Zchh+BC5GnjFr2wb5byTQtJeUwg3 Yg6Pi+za+uIKnGFJ/owATnyZVsDXLQopcu9jiqeqJunYt7ORArP52l9Xkop80sHt JG+m4kutdD6H8aKCcYI9AsaW4PrFKfaujDR6itiZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsRW30YhTJeWMS7qLZMKVjnjeQWgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QxNDc4YmY3LWZhNjMtNDVmMC05NDQ2LTA2MzI4OGI4ODIxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/FIwDQYJKoZIhvcNAQELBQADggEBAKcMfOulMgEigMln+wUInWYmoA+C ihdjL20z9a/eaIfEfJ4Z5yLZj5U243xojBeHQU/VDPRQM4g9oL/cwt4MH8PK6Z7g YhzltIivyiRpcr3+SSCo8VGcdFJTa80IWeP9FOcup9WJ8hFwTIGGXp6AmJS7uOJb UrkREdkPt4+29CJYzbzQpEHMwhCoAjdWFI0aWsVXD3/EOmUYWTatM+hIJqSlbmcF VDmhs1a9I288GO3hPo7KY9pu31XyEW3ZhpGJdBYeJn6F7b2bgdBiYqArEgr8Gz/d 7jtiZ5u39BV4bzPRgVynp1EscnFMNfVNyItYYhBPK/8AFvnNqBx+niRGPO8= -----END CERTIFICATE-----Generated at Thu Mar 13 23:49:11 2025 by rpki-client