$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6791e6e-7c87-4b47-886c-921b0bc60437.roa File: f6791e6e-7c87-4b47-886c-921b0bc60437.roa (raw, json) Hash identifier: EOiRQYXEfjKJncjyscerAyOLfaTWMN5Yta2qkGuo6yI= Subject key identifier: 87:86:B9:40:09:F8:6A:16:0A:35:19:86:B6:D5:11:AF:37:0D:A6:DB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A2C0D6705F726DF8CD8BE19A26E8D40F310DC54 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6791e6e-7c87-4b47-886c-921b0bc60437.roa Signing time: Sat 08 Feb 2025 00:00:00 +0000 ROA not before: Sat 08 Feb 2025 00:00:00 +0000 ROA not after: Sat 15 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 164.195.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:2c:0d:67:05:f7:26:df:8c:d8:be:19:a2:6e:8d:40:f3:10:dc:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 8 00:00:00 2025 GMT Not After : Mar 15 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:c6:b5:fc:dd:45:5b:d8:b0:1a:ab:69:fc: 1e:ed:e4:f0:ff:d2:39:65:42:4b:97:e3:a4:58:26: 04:f8:da:09:d5:30:a6:0d:b7:9b:51:0a:78:3f:47: b6:ae:e6:5f:9e:0c:01:d9:09:55:d1:b4:79:60:fe: e1:4e:a7:3e:02:a0:5a:d4:32:fb:9e:9b:e3:7a:5d: 90:9f:c4:7b:1d:24:e9:37:d2:57:36:13:0d:c6:6d: 55:9e:86:f9:6b:ce:55:34:41:f2:cd:6d:05:e3:c8: 1d:27:ef:6d:b1:8c:f5:0c:2c:79:3d:23:37:b4:da: 5c:8a:bd:48:d4:f1:d0:45:c4:f4:27:b1:f7:10:76: 57:c0:b4:cf:64:97:54:09:5b:8f:c4:de:d3:b7:70: 19:88:2e:4d:e6:bf:f5:0b:35:3d:1d:f1:e1:10:bf: df:2a:75:94:5c:38:c7:a5:cd:64:19:47:11:f1:88: 36:83:f4:9d:fd:06:92:a5:0d:e1:b2:00:aa:e1:07: ba:27:ab:7c:90:9d:18:e6:c1:03:40:1a:7f:4c:43: 4d:9a:a4:cb:c2:4f:b5:e3:d6:03:92:7e:be:0b:e3: f6:8e:14:85:f9:a8:2c:aa:d8:b0:5e:63:03:ac:e8: 9c:1a:b3:34:37:4a:ec:0e:44:77:6d:28:d5:ea:b8: f3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:86:B9:40:09:F8:6A:16:0A:35:19:86:B6:D5:11:AF:37:0D:A6:DB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6791e6e-7c87-4b47-886c-921b0bc60437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.195.0.0/16 Signature Algorithm: sha256WithRSAEncryption c4:87:7a:34:e2:1d:9b:c3:ba:e7:d2:81:2d:13:8b:ba:cd:8d: 73:0c:38:17:80:9f:db:97:cd:d6:ac:a1:0d:08:00:5f:43:6b: 01:6f:cf:12:e0:09:f3:60:12:45:31:df:e7:d0:22:18:50:e6: 95:69:18:84:85:41:7a:dc:36:de:95:34:08:09:dd:21:ff:7f: 88:0c:14:f6:3e:e2:8c:52:34:21:d8:c6:bf:00:bf:ee:17:27: a4:23:fe:b5:70:73:f8:01:94:d2:59:b9:31:b7:a6:e3:82:de: f6:7e:ce:1d:69:97:f3:cb:c4:73:e1:0c:65:b8:f4:66:dc:2f: 65:e1:3a:22:7f:f0:37:b3:87:4e:21:c2:c5:4d:69:3e:0e:3a: 63:51:88:03:7f:d8:91:78:66:dc:95:34:63:f7:cd:6d:a2:f8: bb:28:64:e4:f2:91:35:24:49:40:55:b4:d0:eb:73:8d:16:8d: bd:e0:b8:fc:94:ed:20:09:57:02:aa:97:43:b9:03:c7:9b:06: 6b:0c:08:f8:f1:58:43:c6:9a:d2:42:14:e2:6a:c0:9d:a8:92: 9b:61:a8:a4:63:2c:27:f1:e1:a8:43:2f:d2:58:a9:f9:aa:b4: 09:fc:50:19:8a:55:3a:ae:2d:c8:f9:ea:52:d4:28:32:0f:b5: 30:4b:a9:db -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKiwNZwX3Jt+M2L4Zom6NQPMQ3FQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA4MDAwMDAwWhcNMjUwMzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMWY1ZTlhNzlhMDkzZWU2ZTMzNGMxMzA3YWMwYmYwNDhh ZDdiOTNkNGE5ZjMzY2I5ODU4YWE3Y2Y0ODRlNTBhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEW8a1/N1FW9iwGqtp/B7t5PD/0jllQkuX46RYJgT42gnV MKYNt5tRCng/R7au5l+eDAHZCVXRtHlg/uFOpz4CoFrUMvuem+N6XZCfxHsdJOk3 0lc2Ew3GbVWehvlrzlU0QfLNbQXjyB0n722xjPUMLHk9Ize02lyKvUjU8dBFxPQn sfcQdlfAtM9kl1QJW4/E3tO3cBmILk3mv/ULNT0d8eEQv98qdZRcOMelzWQZRxHx iDaD9J39BpKlDeGyAKrhB7onq3yQnRjmwQNAGn9MQ02apMvCT7Xj1gOSfr4L4/aO FIX5qCyq2LBeYwOs6JwaszQ3SuwORHdtKNXquPNVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUh4a5QAn4ahYKNRmGttURrzcNptswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y2NzkxZTZlLTdjODctNGI0Ny04ODZjLTkyMWIwYmM2MDQzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCkwzANBgkqhkiG9w0BAQsFAAOCAQEAxId6NOIdm8O659KBLROLus2Ncww4 F4Cf25fN1qyhDQgAX0NrAW/PEuAJ82ASRTHf59AiGFDmlWkYhIVBetw23pU0CAnd If9/iAwU9j7ijFI0IdjGvwC/7hcnpCP+tXBz+AGU0lm5Mbem44Le9n7OHWmX88vE c+EMZbj0ZtwvZeE6In/wN7OHTiHCxU1pPg46Y1GIA3/YkXhm3JU0Y/fNbaL4uyhk 5PKRNSRJQFW00OtzjRaNveC4/JTtIAlXAqqXQ7kDx5sGawwI+PFYQ8aa0kIU4mrA naiSm2GopGMsJ/HhqEMv0lip+aq0CfxQGYpVOq4tyPnqUtQoMg+1MEup2w== -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:32 2025 by rpki-client