$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffe12830-146b-4ace-aa76-00c674bbaa36.roa File: ffe12830-146b-4ace-aa76-00c674bbaa36.roa (raw, json) Hash identifier: IPILKWAZAyXWUy8KL5E7DjAtx0ZbkGWOfWNTpJLvINY= Subject key identifier: 5D:74:B8:93:74:BF:E2:B9:66:A5:6A:95:A3:B0:74:6D:F8:42:9B:7F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 57B244BA2D32C0F61F5CEBDB4700A29900701FD5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffe12830-146b-4ace-aa76-00c674bbaa36.roa Signing time: Mon 10 Mar 2025 15:11:14 +0000 ROA not before: Mon 10 Mar 2025 15:11:14 +0000 ROA not after: Mon 14 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 45.72.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b2:44:ba:2d:32:c0:f6:1f:5c:eb:db:47:00:a2:99:00:70:1f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 10 15:11:14 2025 GMT Not After : Apr 14 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ed:51:64:a3:1d:9d:68:c2:88:28:45:bd:f6: 68:ae:3d:5d:ef:54:43:d9:79:d9:9e:75:f0:60:fa: c4:c3:ed:f5:c8:50:0f:36:e2:fa:ab:f5:d8:bf:63: ed:9b:e5:d8:b9:9c:9c:1d:d5:5b:91:a9:92:2c:b9: 74:e7:0c:2e:41:e0:4b:2b:e0:0c:b0:9c:59:6b:50: 75:ba:1b:6e:f4:57:40:8a:02:10:0e:6b:39:0d:e0: e1:f0:ba:58:2c:c4:82:0b:af:ed:b6:44:8c:c6:ff: 77:25:fe:a6:9f:4e:ff:2f:34:88:96:70:27:17:30: 87:41:9d:3a:47:0f:53:1e:b1:0f:db:b4:f6:8b:00: 44:95:6b:95:ac:4a:85:7a:4d:58:7e:fa:03:c1:02: 32:76:15:58:0d:c4:29:e0:f8:1d:5e:bd:67:2a:7f: 28:42:76:51:ca:4f:d6:53:04:f0:ca:2c:f8:fc:35: 8d:35:7e:22:e8:a4:ca:86:da:35:22:3a:77:69:aa: 7d:18:21:8a:02:cd:bf:06:74:c1:51:29:f7:01:65: 37:cb:84:87:e2:e4:84:e8:d4:40:e5:1b:81:bb:a4: 71:15:41:84:a8:e0:c2:13:2a:20:32:65:41:9e:2d: b0:3e:14:4f:b7:31:5b:0d:bd:8b:a9:4c:9c:a1:07: 50:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:74:B8:93:74:BF:E2:B9:66:A5:6A:95:A3:B0:74:6D:F8:42:9B:7F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffe12830-146b-4ace-aa76-00c674bbaa36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.72.0.0/17 Signature Algorithm: sha256WithRSAEncryption 17:83:2b:89:47:5e:bd:66:9d:a2:5a:d5:03:86:61:4b:b0:88: 8f:14:ad:40:1f:6e:11:b4:e1:d8:32:49:5a:fa:15:55:e5:9b: 8d:66:77:3f:b6:8f:aa:1e:6b:2b:62:26:1d:98:85:71:51:a2: 49:e4:ff:90:71:a5:57:59:6e:49:f9:55:35:92:1c:67:1b:71: bb:8a:b4:63:08:9c:5b:67:e7:25:26:af:a8:1f:3f:a9:4a:91: d0:6f:e3:f2:e4:ed:6c:db:fb:6d:2c:72:89:16:2e:bd:3d:1d: ae:57:58:e1:16:89:63:c1:14:46:09:df:3c:90:18:d2:da:18: a4:63:dc:ee:b5:a5:e9:7c:8b:05:48:9e:4c:c9:31:0b:d5:38: 42:23:12:cb:b3:b5:1a:4d:a0:d2:d1:b2:47:81:d1:51:78:3c: 80:86:a6:c7:bd:63:03:f5:3c:4d:67:46:a1:2b:99:1f:6a:76: 8d:f1:25:63:55:52:55:4f:6c:ad:9b:0f:ff:b4:97:c0:0e:7d: 7d:bc:bd:81:e8:58:09:df:06:ea:49:b3:95:e4:11:ed:4f:33: e2:d4:b6:f1:be:18:7f:1d:18:e3:77:c0:0c:5e:5a:90:4f:80: 5b:75:be:3a:a9:3f:be:18:59:47:0d:0e:a6:0d:30:7f:6b:7b: b8:25:10:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV7JEui0ywPYfXOvbRwCimQBwH9UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzEwMTUxMTE0WhcNMjUwNDE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODczM2I5YWFhYjk1YzIwYTJmYjFjODdjYjQxOTAwOGU1 NTJmZjlhNzMyYjhkZGE2NmQxMzI2YjBmOTk1MTQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCY7VFkox2daMKIKEW99miuPV3vVEPZedmedfBg+sTD7fXI UA824vqr9di/Y+2b5di5nJwd1VuRqZIsuXTnDC5B4Esr4AywnFlrUHW6G270V0CK AhAOazkN4OHwulgsxIILr+22RIzG/3cl/qafTv8vNIiWcCcXMIdBnTpHD1MesQ/b tPaLAESVa5WsSoV6TVh++gPBAjJ2FVgNxCng+B1evWcqfyhCdlHKT9ZTBPDKLPj8 NY01fiLopMqG2jUiOndpqn0YIYoCzb8GdMFRKfcBZTfLhIfi5ITo1EDlG4G7pHEV QYSo4MITKiAyZUGeLbA+FE+3MVsNvYupTJyhB1BDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXXS4k3S/4rlmpWqVo7B0bfhCm38wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZmZTEyODMwLTE0NmItNGFjZS1hYTc2LTAwYzY3NGJiYWEzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBActSAAwDQYJKoZIhvcNAQELBQADggEBABeDK4lHXr1mnaJa1QOGYUuwiI8U rUAfbhG04dgySVr6FVXlm41mdz+2j6oeaytiJh2YhXFRoknk/5BxpVdZbkn5VTWS HGcbcbuKtGMInFtn5yUmr6gfP6lKkdBv4/Lk7Wzb+20scokWLr09Ha5XWOEWiWPB FEYJ3zyQGNLaGKRj3O61pel8iwVInkzJMQvVOEIjEsuztRpNoNLRskeB0VF4PICG pse9YwP1PE1nRqErmR9qdo3xJWNVUlVPbK2bD/+0l8AOfX28vYHoWAnfBupJs5Xk Ee1PM+LUtvG+GH8dGON3wAxeWpBPgFt1vjqpP74YWUcNDqYNMH9re7glEKM= -----END CERTIFICATE-----Generated at Thu Mar 13 23:31:46 2025 by rpki-client