$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db463fe4-9f42-45f1-9854-14a5c2057405.roa File: db463fe4-9f42-45f1-9854-14a5c2057405.roa (raw, json) Hash identifier: BOy/vgaVx2Au7pbw4c9zuZGCNDuirv2foCwAgHTSBPw= Subject key identifier: 42:BF:E8:0D:89:08:3C:83:71:04:1D:83:23:08:02:7B:91:3E:2B:85 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6934BB585F531DFAB0A322F055F1493D99DE6E24 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db463fe4-9f42-45f1-9854-14a5c2057405.roa Signing time: Sat 08 Mar 2025 00:00:26 +0000 ROA not before: Sat 08 Mar 2025 00:00:26 +0000 ROA not after: Sat 12 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 146.167.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:34:bb:58:5f:53:1d:fa:b0:a3:22:f0:55:f1:49:3d:99:de:6e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 8 00:00:26 2025 GMT Not After : Apr 12 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fb:2a:ff:1a:7a:6f:2b:8f:9f:7d:a0:72:bb: fc:bf:09:a1:56:7a:84:0d:e3:47:cf:09:03:fd:00: c1:98:f5:64:a2:c2:b6:b4:a1:8e:18:fb:9a:da:1c: 1a:f5:e0:b4:f6:03:4b:f7:d6:98:b4:91:5c:67:c8: 85:ca:11:c2:be:19:dd:d0:68:de:e8:e6:21:85:a6: 89:84:4c:ad:4b:70:6b:6f:74:79:9c:67:70:81:2b: 09:07:19:f1:fb:1e:c9:66:6a:0d:d4:6a:ae:b4:fc: 7a:63:a2:d6:a6:d9:e8:7c:99:d5:8e:f8:cb:c6:37: 1f:d1:1c:98:85:64:8a:e5:d5:7a:d8:3e:64:38:95: 02:4c:e4:be:60:4b:59:0a:f7:ab:d6:d5:50:80:54: 99:3c:6d:c5:77:70:a2:44:49:8f:36:64:e1:89:ee: fb:e8:1f:ac:12:bf:0e:72:54:9c:58:2a:91:d2:02: 3f:10:63:40:71:4f:d5:06:25:6b:97:76:9b:05:9e: 7c:03:a0:32:13:b8:e0:e8:11:fb:b8:aa:94:16:95: 6c:94:a0:eb:58:1c:02:0b:8d:45:6c:0a:d2:18:c3: 04:9c:c7:97:c5:eb:25:1a:34:cc:7e:88:69:df:0d: 30:b3:3a:8a:ec:9c:f5:4f:af:c9:14:f3:1d:a9:08: d3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BF:E8:0D:89:08:3C:83:71:04:1D:83:23:08:02:7B:91:3E:2B:85 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db463fe4-9f42-45f1-9854-14a5c2057405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.167.0.0/16 Signature Algorithm: sha256WithRSAEncryption b9:34:5d:ee:29:2f:10:31:10:71:0e:5f:6b:1b:f5:c2:53:d7: 75:98:6d:62:32:11:5c:63:f0:2f:67:80:5c:8f:3c:af:7d:69: 9f:8d:6c:b5:50:ed:f3:f6:f1:89:82:d3:8d:f1:ae:b9:1f:2d: b1:01:8a:11:7f:bc:db:45:a2:c4:90:3a:0f:dc:35:78:47:7d: 02:c7:2e:67:70:38:4b:86:15:10:8e:93:b2:37:bd:ea:72:ea: fa:a8:8b:27:dd:0e:37:23:3a:86:2a:3f:00:c7:5d:5f:71:e6: 14:80:aa:7d:19:30:41:49:15:9d:23:bf:48:6b:04:03:02:1e: 7e:7e:51:7d:c8:9b:5f:08:b4:aa:fe:bc:50:3c:aa:a6:5c:c6: ed:b2:91:37:74:0d:0b:d2:70:8a:4e:36:46:b4:41:2e:fe:5d: d1:49:77:8f:19:2b:73:62:77:b2:21:5e:a6:6f:22:3b:fc:5d: b0:65:69:e7:ee:d7:4a:1e:7d:52:7a:68:48:52:5e:f2:37:a4: c4:73:7c:25:63:3d:f9:37:81:be:4a:d1:b4:25:8a:6a:4e:a8: 43:46:3e:99:80:63:91:c0:40:bc:21:b5:68:8a:97:2e:64:d2: 53:56:02:4c:7a:3c:3a:09:34:07:ab:d9:e5:fd:fa:cb:30:fe: 9a:21:d9:70 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUaTS7WF9THfqwoyLwVfFJPZnebiQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzA4MDAwMDI2WhcNMjUwNDEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiY2JlZmUxMDZiMGYwODgxNWVkODVhZGExYjVhMGNjZjI5 YjA3MzkzZjBlMGI0M2I1NmEyODFiZjgwZWJhODQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV+yr/GnpvK4+ffaByu/y/CaFWeoQN40fPCQP9AMGY9WSi wra0oY4Y+5raHBr14LT2A0v31pi0kVxnyIXKEcK+Gd3QaN7o5iGFpomETK1LcGtv dHmcZ3CBKwkHGfH7Hslmag3Uaq60/Hpjotam2eh8mdWO+MvGNx/RHJiFZIrl1XrY PmQ4lQJM5L5gS1kK96vW1VCAVJk8bcV3cKJESY82ZOGJ7vvoH6wSvw5yVJxYKpHS Aj8QY0BxT9UGJWuXdpsFnnwDoDITuODoEfu4qpQWlWyUoOtYHAILjUVsCtIYwwSc x5fF6yUaNMx+iGnfDTCzOorsnPVPr8kU8x2pCNNtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQr/oDYkIPINxBB2DIwgCe5E+K4UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RiNDYzZmU0LTlmNDItNDVmMS05ODU0LTE0YTVjMjA1NzQwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCSpzANBgkqhkiG9w0BAQsFAAOCAQEAuTRd7ikvEDEQcQ5faxv1wlPXdZht YjIRXGPwL2eAXI88r31pn41stVDt8/bxiYLTjfGuuR8tsQGKEX+820WixJA6D9w1 eEd9AscuZ3A4S4YVEI6Tsje96nLq+qiLJ90ONyM6hio/AMddX3HmFICqfRkwQUkV nSO/SGsEAwIefn5RfcibXwi0qv68UDyqplzG7bKRN3QNC9Jwik42RrRBLv5d0Ul3 jxkrc2J3siFepm8iO/xdsGVp5+7XSh59UnpoSFJe8jekxHN8JWM9+TeBvkrRtCWK ak6oQ0Y+mYBjkcBAvCG1aIqXLmTSU1YCTHo8Ogk0B6vZ5f36yzD+miHZcA== -----END CERTIFICATE-----Generated at Thu Mar 13 23:48:53 2025 by rpki-client