$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f188b8ee-3a4b-4868-9d1b-037431b45053.roa File: f188b8ee-3a4b-4868-9d1b-037431b45053.roa (raw, json) Hash identifier: hQWGGWNREXv2EpfEEItAkH1nobnpdcCeBZi31WrQzJY= Subject key identifier: 76:34:BA:FC:11:C2:0B:FD:49:C3:50:4E:D5:CD:0B:A3:4A:93:0C:5E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2B84FA3CE473478E8699A667334EFBF7360C0953 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f188b8ee-3a4b-4868-9d1b-037431b45053.roa Signing time: Wed 05 Mar 2025 00:31:06 +0000 ROA not before: Wed 05 Mar 2025 00:31:06 +0000 ROA not after: Wed 09 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.16.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:84:fa:3c:e4:73:47:8e:86:99:a6:67:33:4e:fb:f7:36:0c:09:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 5 00:31:06 2025 GMT Not After : Apr 9 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5e:94:d1:55:18:0d:71:ae:50:2a:67:d4:68: a9:50:57:96:d8:e0:3b:8e:ce:83:5c:ca:d8:74:d1: 48:db:2e:8e:b0:a1:ed:2d:07:5a:c9:ec:51:9e:51: 84:31:fd:10:87:64:d4:df:cb:98:ff:be:ea:62:b6: ab:a4:68:46:81:06:b6:27:22:d9:56:c1:bf:d7:20: b3:86:6b:92:aa:d1:bf:8b:55:65:d5:38:7c:2c:8c: 59:37:17:6b:70:99:cc:7d:59:c2:88:0d:7a:69:5e: 20:21:1c:fe:16:ec:3d:6d:92:8d:7e:5f:a9:9e:f1: 0b:7d:81:8e:c0:67:f2:30:47:5d:92:c7:5e:57:ad: c5:df:57:1c:75:38:65:b1:e1:2d:98:8c:1f:17:ff: c8:91:c2:59:de:15:7d:ff:b5:b5:fa:4d:be:b8:72: 49:0a:d1:09:fc:8e:f2:05:18:03:b2:0c:83:2e:48: b5:87:1a:13:15:8d:ad:d3:13:35:ec:63:70:8d:22: 43:2b:ed:e6:47:11:24:2f:10:0e:16:5d:e7:1a:56: 25:60:87:d7:51:b4:ce:3a:ec:2e:8f:75:fd:e6:1c: e0:3f:6c:0f:d4:0c:1a:ad:a9:c3:62:32:1d:e0:ae: 6c:c4:80:37:54:18:96:d9:95:33:3f:f7:59:1b:18: 87:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:34:BA:FC:11:C2:0B:FD:49:C3:50:4E:D5:CD:0B:A3:4A:93:0C:5E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f188b8ee-3a4b-4868-9d1b-037431b45053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6b:8b:2f:ff:08:25:4b:d9:f4:9e:3a:4d:40:de:35:3f:70:74: df:ed:b5:82:45:dc:bc:ba:39:7f:c2:fd:78:aa:20:b5:4f:08: d4:c7:fe:b9:2e:a4:7b:7a:e7:2d:7f:6c:f4:1e:68:32:1e:28: 30:20:90:92:b0:75:eb:c2:08:66:16:d5:2a:bc:07:56:9c:42: 8b:d1:23:aa:83:37:dd:86:fa:c8:82:1b:48:c3:5a:ed:25:24: a2:98:67:d1:aa:69:e1:7f:5c:f8:9c:f2:e0:c9:0c:12:63:8d: ec:a5:9c:76:6e:11:23:5a:cb:57:9c:6d:5d:3c:5b:c6:c1:af: 14:f0:12:cd:5d:01:fc:22:41:66:c2:00:91:10:c2:e8:f3:cd: 42:79:92:9c:50:70:71:4b:31:27:17:7f:fa:d4:dc:73:b5:04: 18:ba:ab:d1:a4:65:10:56:d0:c2:73:77:19:1a:e7:fc:0b:84: c2:b0:5a:f2:66:18:87:d0:23:4a:b5:2a:5c:ed:c2:ab:9f:b6: 4d:e3:23:1e:82:88:a4:6b:1b:46:b3:8a:65:59:88:6c:0a:29: 15:15:31:2e:64:c6:11:20:f9:f1:64:55:3d:e5:c8:3d:6f:b4: db:7f:44:04:3a:00:fa:e1:59:3b:3e:e6:d6:ca:e6:61:42:5c: 11:69:ac:ad -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUK4T6PORzR46GmaZnM0779zYMCVMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzA1MDAzMTA2WhcNMjUwNDA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjBlNzk3N2JjZjY0M2FmNmVlMDRhMzNjNzRlMmVkOWI1 YjdjZjEwMzUwNjJhMzlmYmI3MDk2ZTFmMTFjNGI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuXpTRVRgNca5QKmfUaKlQV5bY4DuOzoNcyth00UjbLo6w oe0tB1rJ7FGeUYQx/RCHZNTfy5j/vupitqukaEaBBrYnItlWwb/XILOGa5Kq0b+L VWXVOHwsjFk3F2twmcx9WcKIDXppXiAhHP4W7D1tko1+X6me8Qt9gY7AZ/IwR12S x15XrcXfVxx1OGWx4S2YjB8X/8iRwlneFX3/tbX6Tb64ckkK0Qn8jvIFGAOyDIMu SLWHGhMVja3TEzXsY3CNIkMr7eZHESQvEA4WXecaViVgh9dRtM467C6Pdf3mHOA/ bA/UDBqtqcNiMh3grmzEgDdUGJbZlTM/91kbGIdjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUdjS6/BHCC/1Jw1BO1c0Lo0qTDF4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YxODhiOGVlLTNhNGItNDg2OC05ZDFiLTAzNzQzMWI0NTA1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4EDANBgkqhkiG9w0BAQsFAAOCAQEAa4sv/wglS9n0njpNQN41P3B03+21 gkXcvLo5f8L9eKogtU8I1Mf+uS6ke3rnLX9s9B5oMh4oMCCQkrB168IIZhbVKrwH VpxCi9EjqoM33Yb6yIIbSMNa7SUkophn0app4X9c+Jzy4MkMEmON7KWcdm4RI1rL V5xtXTxbxsGvFPASzV0B/CJBZsIAkRDC6PPNQnmSnFBwcUsxJxd/+tTcc7UEGLqr 0aRlEFbQwnN3GRrn/AuEwrBa8mYYh9AjSrUqXO3Cq5+2TeMjHoKIpGsbRrOKZVmI bAopFRUxLmTGESD58WRVPeXIPW+0239EBDoA+uFZOz7m1srmYUJcEWmsrQ== -----END CERTIFICATE-----Generated at Thu Mar 13 23:34:40 2025 by rpki-client