$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e636b9a6-8c3a-4152-a2ee-bedae8e5b813.roa File: e636b9a6-8c3a-4152-a2ee-bedae8e5b813.roa (raw, json) Hash identifier: BWivQ909TsNtByX1BvfKda67hvpB+yMDMlZvVG1Ght4= Subject key identifier: 40:B1:3D:2B:38:CB:FA:62:A0:02:6B:D1:0B:D7:F1:64:F2:3D:62:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 07E9B9B605814D1670D4AD8542423FADD63CB30E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e636b9a6-8c3a-4152-a2ee-bedae8e5b813.roa Signing time: Tue 25 Mar 2025 16:50:29 +0000 ROA not before: Tue 25 Mar 2025 16:50:29 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 8987 IP address blocks: 136.18.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e9:b9:b6:05:81:4d:16:70:d4:ad:85:42:42:3f:ad:d6:3c:b3:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 25 16:50:29 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=a2900f9bcf66b8953544401c9954c93ddafc334aca66e6e3725cc1825b80c6c7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:67:51:1f:b4:f9:ae:87:f7:6b:41:bf:3f:c4: 2f:b3:ba:67:6a:7c:84:ef:a8:b5:62:2b:a9:cf:2b: c4:c4:9f:a3:8c:bc:93:c5:87:b4:1b:a4:d7:9e:f7: cc:27:29:b5:84:88:df:fe:02:72:97:cd:d4:db:7d: 68:47:ae:74:00:8b:71:0d:ce:94:01:ab:b0:ef:c0: 61:2a:ff:18:4b:27:5f:88:3f:22:0e:62:58:c2:88: c2:8b:2a:f6:1c:d5:df:af:cc:5e:52:99:6c:49:bd: b4:16:a7:67:c1:50:c9:08:da:dc:a1:f8:7b:13:0e: 59:c5:26:7f:d3:22:67:cf:aa:c5:68:44:e2:49:ab: dc:30:57:49:88:7a:53:9e:01:db:2e:f2:a6:93:1d: 07:52:62:a0:b5:5c:72:86:03:48:5d:44:41:03:e7: c6:09:24:94:f5:1c:27:98:a8:35:4f:72:a8:c1:c2: f4:ea:66:5a:45:6f:83:40:f4:1c:a9:24:94:03:13: 20:65:b0:b1:c4:ed:ef:aa:f4:08:25:e3:16:da:14: 64:d5:c8:52:82:d6:57:cb:1b:44:29:e8:77:3b:55: 9c:db:a7:d3:30:1a:a6:47:d9:f2:77:1c:34:eb:47: 1e:94:7c:a2:ec:07:4c:58:63:62:28:4c:bf:ab:aa: fc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B1:3D:2B:38:CB:FA:62:A0:02:6B:D1:0B:D7:F1:64:F2:3D:62:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e636b9a6-8c3a-4152-a2ee-bedae8e5b813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.0.0/24 Signature Algorithm: sha256WithRSAEncryption b3:fa:75:22:e8:1b:8f:0d:75:d3:cb:d8:6b:c9:8e:f8:34:4a: c0:3c:a2:5b:13:42:dd:c8:ff:a6:b2:3d:fc:8c:a5:54:6b:c0: f7:48:0f:c5:af:ce:fc:81:56:cb:07:56:96:21:26:19:61:4e: bb:a0:fb:38:e9:cb:02:f1:c2:d9:bf:a7:f8:91:c4:c4:c8:09: a8:48:97:2e:df:63:8a:f5:6a:17:9c:f2:d4:c0:7a:88:f1:9d: f5:07:09:e9:c8:3b:85:f7:5b:b1:fb:b8:f6:ef:a7:09:d1:52: a3:cc:de:d9:1e:36:04:a3:0c:34:e9:c4:f1:a2:82:99:ab:54: 3a:e9:95:d7:5f:b0:9c:05:74:52:6e:82:21:11:02:b5:34:f3: d6:72:ec:e2:54:5c:6a:8e:3d:a2:f7:d7:cb:ef:bb:3c:94:ef: 4c:3d:3d:40:53:f6:aa:57:b9:c2:05:41:f2:fa:55:28:24:f8: 7d:75:7a:6f:bb:26:8a:6c:c6:ef:62:ae:66:e6:c5:6d:11:76: fb:72:d7:91:de:c2:55:95:f0:cc:98:15:64:84:fa:b5:1f:4e: f8:f0:11:e7:41:cf:62:55:41:cc:e2:fa:38:f1:06:32:2e:52: a4:bb:f1:3d:3b:3c:f8:16:89:18:24:eb:73:f0:32:d9:d2:26: f2:10:82:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB+m5tgWBTRZw1K2FQkI/rdY8sw4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI1MTY1MDI5WhcNMjUwNDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjkwMGY5YmNmNjZiODk1MzU0NDQwMWM5OTU0YzkzZGRh ZmMzMzRhY2E2NmU2ZTM3MjVjYzE4MjViODBjNmM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXZ1EftPmuh/drQb8/xC+zumdqfITvqLViK6nPK8TEn6OM vJPFh7QbpNee98wnKbWEiN/+AnKXzdTbfWhHrnQAi3ENzpQBq7DvwGEq/xhLJ1+I PyIOYljCiMKLKvYc1d+vzF5SmWxJvbQWp2fBUMkI2tyh+HsTDlnFJn/TImfPqsVo ROJJq9wwV0mIelOeAdsu8qaTHQdSYqC1XHKGA0hdREED58YJJJT1HCeYqDVPcqjB wvTqZlpFb4NA9BypJJQDEyBlsLHE7e+q9Agl4xbaFGTVyFKC1lfLG0Qp6Hc7VZzb p9MwGqZH2fJ3HDTrRx6UfKLsB0xYY2IoTL+rqvzTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQLE9KzjL+mKgAmvRC9fxZPI9YrYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U2MzZiOWE2LThjM2EtNDE1Mi1hMmVlLWJlZGFlOGU1YjgxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEgAwDQYJKoZIhvcNAQELBQADggEBALP6dSLoG48NddPL2GvJjvg0SsA8 olsTQt3I/6ayPfyMpVRrwPdID8WvzvyBVssHVpYhJhlhTrug+zjpywLxwtm/p/iR xMTICahIly7fY4r1ahec8tTAeojxnfUHCenIO4X3W7H7uPbvpwnRUqPM3tkeNgSj DDTpxPGigpmrVDrplddfsJwFdFJugiERArU089Zy7OJUXGqOPaL318vvuzyU70w9 PUBT9qpXucIFQfL6VSgk+H11em+7Jopsxu9irmbmxW0Rdvty15HewlWV8MyYFWSE +rUfTvjwEedBz2JVQczi+jjxBjIuUqS78T07PPgWiRgk63PwMtnSJvIQgks= -----END CERTIFICATE-----Generated at Wed Apr 16 16:52:18 2025 by rpki-client