$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9c65ad6-72a2-4464-8c5f-50a3e14f1c34.roa File: d9c65ad6-72a2-4464-8c5f-50a3e14f1c34.roa (raw, json) Hash identifier: b6Z3p81rpqPpdHXf+jYSULMeuxwVtECACyU4ijaHxBg= Subject key identifier: 84:24:3B:C0:4F:B3:AD:BE:49:03:9D:2E:D5:90:C7:46:E0:B0:F6:22 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 745B8D8743683B2B2D10C4E28717C36D3B7D3FE4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9c65ad6-72a2-4464-8c5f-50a3e14f1c34.roa Signing time: Tue 11 Feb 2025 00:00:00 +0000 ROA not before: Tue 11 Feb 2025 00:00:00 +0000 ROA not after: Tue 18 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.148.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:5b:8d:87:43:68:3b:2b:2d:10:c4:e2:87:17:c3:6d:3b:7d:3f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 11 00:00:00 2025 GMT Not After : Mar 18 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:45:89:61:41:2f:38:a8:2b:cc:dd:18:63:31: 79:5f:2b:6e:db:24:d9:02:60:2b:6a:73:f6:e9:17: e1:68:61:3e:d0:c2:19:99:5e:78:69:e2:63:0e:44: 28:35:53:3a:05:db:f3:09:81:02:c5:02:2d:8c:ce: 95:b2:3d:84:80:59:e8:28:ba:fa:00:eb:03:02:ac: 75:fc:06:80:bc:f6:6c:24:da:ef:3f:0a:80:86:8c: 68:fc:eb:7d:26:68:0d:25:be:44:2e:29:5b:3b:91: 8d:3d:54:ac:3d:09:ac:52:cd:54:02:41:42:77:89: cf:17:dd:e6:1f:30:00:18:ab:43:6d:1a:aa:37:13: 3a:b3:a1:42:a7:04:1d:d3:e7:49:0d:13:e0:f4:55: cf:f3:86:f7:b5:df:3a:ef:f4:4a:d2:c1:fc:08:22: 41:51:80:68:25:44:cf:1e:10:f4:ff:c2:64:f2:1d: f2:a8:c5:3e:d2:d4:da:9f:52:1a:2a:80:3b:db:ca: a1:ad:22:43:7d:3b:99:74:0c:df:c5:35:be:b4:a4: 97:2a:13:b9:69:fa:91:a3:37:2f:19:28:8d:6f:11: 7b:67:54:09:3f:c7:5e:95:91:a2:ad:67:4d:7d:30: ab:6e:83:4a:9c:76:cf:d2:83:5e:a1:fa:35:67:71: 0f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:24:3B:C0:4F:B3:AD:BE:49:03:9D:2E:D5:90:C7:46:E0:B0:F6:22 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9c65ad6-72a2-4464-8c5f-50a3e14f1c34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.148.0.0/16 Signature Algorithm: sha256WithRSAEncryption 75:5d:31:7b:c2:93:5b:c3:8f:ed:3a:c5:b4:b2:76:19:77:59: 86:2f:40:7d:69:c4:ef:ba:bd:1e:8c:21:10:a9:88:f5:72:1c: 27:f8:ac:5e:f9:7e:5f:ec:02:d1:a9:7d:9d:45:29:2c:86:54: 14:c1:e4:cd:02:b3:86:53:13:7c:24:46:3a:74:32:fa:ae:bb: 1e:40:c4:85:76:1d:9c:2b:41:98:08:08:20:ec:09:28:2b:44: ae:84:bd:dc:7c:88:cb:a6:b0:83:68:3d:22:a4:02:65:dd:56: e1:b3:8b:70:00:58:88:7f:0f:c9:19:7c:f6:70:6c:ae:de:87: 3a:3f:ab:3f:c4:cf:77:55:d7:06:14:4d:47:53:70:28:a2:b5: cc:79:b5:6d:8a:fb:45:c1:e7:02:97:85:df:fb:c2:c0:46:c8: bf:6c:76:4e:c6:66:7c:d9:38:1b:e7:35:4b:c9:48:6b:83:04: 6e:3e:11:cc:95:b5:9d:db:ce:03:7d:da:1e:26:72:58:af:9f: 6c:6c:7a:87:24:73:84:11:f6:62:34:e4:53:18:32:fb:e2:37: 35:b8:3d:68:1d:98:8e:27:69:27:ff:2c:32:58:b5:4c:9f:7a: f8:69:69:e3:60:97:ea:0c:0b:39:9a:b7:75:2a:ef:35:d2:dd: f7:19:04:d2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdFuNh0NoOystEMTihxfDbTt9P+QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjExMDAwMDAwWhcNMjUwMzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YTk5ZTI1NjljMDNiZTljYjUxZjU5MjcwYTJkYzEwZGY4 ZDA2ZTk0ZDA2M2MxMWY2ZGY5OTkzOGVlNjE0MmVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIRYlhQS84qCvM3RhjMXlfK27bJNkCYCtqc/bpF+FoYT7Q whmZXnhp4mMORCg1UzoF2/MJgQLFAi2MzpWyPYSAWegouvoA6wMCrHX8BoC89mwk 2u8/CoCGjGj8630maA0lvkQuKVs7kY09VKw9CaxSzVQCQUJ3ic8X3eYfMAAYq0Nt Gqo3EzqzoUKnBB3T50kNE+D0Vc/zhve13zrv9ErSwfwIIkFRgGglRM8eEPT/wmTy HfKoxT7S1NqfUhoqgDvbyqGtIkN9O5l0DN/FNb60pJcqE7lp+pGjNy8ZKI1vEXtn VAk/x16VkaKtZ019MKtug0qcds/Sg16h+jVncQ8zAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUhCQ7wE+zrb5JA50u1ZDHRuCw9iIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q5YzY1YWQ2LTcyYTItNDQ2NC04YzVmLTUwYTNlMTRmMWMzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQlDANBgkqhkiG9w0BAQsFAAOCAQEAdV0xe8KTW8OP7TrFtLJ2GXdZhi9A fWnE77q9HowhEKmI9XIcJ/isXvl+X+wC0al9nUUpLIZUFMHkzQKzhlMTfCRGOnQy +q67HkDEhXYdnCtBmAgIIOwJKCtEroS93HyIy6awg2g9IqQCZd1W4bOLcABYiH8P yRl89nBsrt6HOj+rP8TPd1XXBhRNR1NwKKK1zHm1bYr7RcHnApeF3/vCwEbIv2x2 TsZmfNk4G+c1S8lIa4MEbj4RzJW1ndvOA33aHiZyWK+fbGx6hyRzhBH2YjTkUxgy ++I3Nbg9aB2YjidpJ/8sMli1TJ96+Glp42CX6gwLOZq3dSrvNdLd9xkE0g== -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:19 2025 by rpki-client