$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8c0ba403-be97-49fd-9b33-97b86e85863a.roa File: 8c0ba403-be97-49fd-9b33-97b86e85863a.roa (raw, json) Hash identifier: rGkPC6/ImxyfoH9SHk1EOeGJjQ4ddptCxGY1j6Qqrwc= Subject key identifier: 72:60:3D:3C:0B:02:67:02:EB:94:0A:4B:83:F6:E7:61:6D:D3:BF:AA Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 51A231CC95563997E912980EE1F0FDA03892F645 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8c0ba403-be97-49fd-9b33-97b86e85863a.roa Signing time: Mon 31 Mar 2025 18:30:19 +0000 ROA not before: Mon 31 Mar 2025 18:30:19 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a2:31:cc:95:56:39:97:e9:12:98:0e:e1:f0:fd:a0:38:92:f6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Mar 31 18:30:19 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: serialNumber=c3adeadf41734e5f6c842c942684159e63d4d4ca851f75eb2a597c93c8bc36ce, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:59:0a:62:c5:5f:45:aa:87:f4:fc:f6:4e: 6c:70:16:0a:f1:41:0b:0f:78:dc:2d:8a:11:9a:f1: b1:08:7a:35:6e:cb:c5:71:82:87:15:cb:b0:78:5c: 04:da:58:b2:10:08:e3:57:2f:85:19:d9:6e:83:92: 94:31:5e:8b:b7:26:6b:72:d6:9b:64:1e:8e:5b:31: b7:ce:78:12:c8:49:bc:38:99:6e:0c:61:ec:8c:26: 21:21:55:23:3c:59:70:84:44:58:66:ea:e2:73:53: 8a:de:5a:56:92:47:7e:04:86:4b:76:14:5c:b8:ff: 43:61:d7:1e:90:bb:0d:cb:5c:fe:2f:0c:a0:c0:67: b5:e4:20:dc:9b:14:6a:71:4f:53:7d:75:ac:f3:d2: 09:fc:03:da:15:1b:81:71:05:e9:ae:68:31:7b:ce: 2b:5d:81:56:8f:1c:19:f7:f7:ed:48:ec:63:32:39: d8:ed:bb:d7:dd:c4:a0:e9:b9:b0:6f:04:c3:c2:a9: f9:af:8a:0a:c1:9c:85:9c:13:0b:23:f1:ea:2a:2d: 42:16:d2:92:c3:3b:5e:14:fb:cc:55:f7:86:64:fb: eb:84:62:d2:22:b8:1f:9e:8b:d2:3f:e8:91:2b:0c: f4:93:91:b3:70:59:27:82:b9:40:d4:93:1d:01:7a: 4e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:60:3D:3C:0B:02:67:02:EB:94:0A:4B:83:F6:E7:61:6D:D3:BF:AA X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8c0ba403-be97-49fd-9b33-97b86e85863a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.144.0/20 Signature Algorithm: sha256WithRSAEncryption 9f:e7:91:1a:85:e7:13:da:c3:65:fc:1d:1d:a3:c0:63:cc:ea: 7b:f6:22:cc:e4:5e:6d:8c:19:81:3d:f9:c5:f3:58:62:a8:cc: 34:99:cf:69:54:72:dd:7d:c3:e8:75:45:a5:70:55:6a:8c:71: 05:a4:25:4a:9a:5c:ea:e3:67:81:5d:54:9b:7b:73:79:cf:81: 26:c1:57:98:56:ad:c3:f9:0a:68:73:45:14:7e:53:8a:5b:69: 75:1f:15:f6:57:ec:42:8b:81:ac:19:17:4c:49:b9:89:fb:8d: 1b:cc:33:57:6f:58:6f:56:82:0f:ea:7e:ec:e6:54:06:6b:bc: 74:15:d3:2e:94:94:ea:ef:3b:fd:2a:1a:b0:f6:b0:38:02:fe: 33:92:c4:0f:30:f7:f9:4b:dc:36:3d:ac:66:29:8f:81:70:d7: 02:36:ac:1c:51:8d:99:7a:45:3a:0c:d7:22:c1:33:f3:fb:95: 05:ae:76:3b:d7:4f:60:87:6f:b0:4e:e3:98:9c:c6:ef:52:c6: 4e:d6:75:37:63:43:54:89:04:c7:a9:49:fd:af:b4:c8:99:14: 98:78:5b:95:3c:22:47:99:3a:bf:3e:24:94:09:46:56:23:72: 0b:ab:99:63:3a:c8:20:57:ba:d1:58:5f:34:ca:99:fd:f8:7b: cf:a5:f8:37 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUaIxzJVWOZfpEpgO4fD9oDiS9kUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwMzMxMTgzMDE5WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjM2FkZWFkZjQxNzM0ZTVmNmM4NDJjOTQyNjg0MTU5ZTYz ZDRkNGNhODUxZjc1ZWIyYTU5N2M5M2M4YmMzNmNlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC88FkKYsVfRaqH9Pz2TmxwFgrxQQsPeNwtihGa8bEIejVu y8VxgocVy7B4XATaWLIQCONXL4UZ2W6DkpQxXou3Jmty1ptkHo5bMbfOeBLISbw4 mW4MYeyMJiEhVSM8WXCERFhm6uJzU4reWlaSR34Ehkt2FFy4/0Nh1x6Quw3LXP4v DKDAZ7XkINybFGpxT1N9dazz0gn8A9oVG4FxBemuaDF7zitdgVaPHBn39+1I7GMy Odjtu9fdxKDpubBvBMPCqfmvigrBnIWcEwsj8eoqLUIW0pLDO14U+8xV94Zk++uE YtIiuB+ei9I/6JErDPSTkbNwWSeCuUDUkx0Bek4pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcmA9PAsCZwLrlApLg/bnYW3Tv6owHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzhjMGJhNDAzLWJlOTctNDlmZC05YjMzLTk3Yjg2ZTg1ODYzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYJAwDQYJKoZIhvcNAQELBQADggEBAJ/nkRqF5xPaw2X8HR2jwGPM6nv2 IszkXm2MGYE9+cXzWGKozDSZz2lUct19w+h1RaVwVWqMcQWkJUqaXOrjZ4FdVJt7 c3nPgSbBV5hWrcP5CmhzRRR+U4pbaXUfFfZX7EKLgawZF0xJuYn7jRvMM1dvWG9W gg/qfuzmVAZrvHQV0y6UlOrvO/0qGrD2sDgC/jOSxA8w9/lL3DY9rGYpj4Fw1wI2 rBxRjZl6RToM1yLBM/P7lQWudjvXT2CHb7BO45icxu9Sxk7WdTdjQ1SJBMepSf2v tMiZFJh4W5U8IkeZOr8+JJQJRlYjcgurmWM6yCBXutFYXzTKmf34e8+l+Dc= -----END CERTIFICATE-----Generated at Tue Apr 15 13:02:23 2025 by rpki-client