$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04458f53-1b58-4ea6-b808-1d18094e2918.roa File: 04458f53-1b58-4ea6-b808-1d18094e2918.roa (raw, json) Hash identifier: etGPCtDfgEjDUDR8xxa9Zy1I88PVD+TC/S3zNKws5HA= Subject key identifier: E6:A4:74:17:3A:C4:C0:6F:FA:1A:19:B6:46:61:CD:09:82:EA:F6:A6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7AB24D8B76C5558730ADF2B4D76D9A9769152E7E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04458f53-1b58-4ea6-b808-1d18094e2918.roa Signing time: Fri 25 Apr 2025 00:21:44 +0000 ROA not before: Fri 25 Apr 2025 00:21:44 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.182.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b2:4d:8b:76:c5:55:87:30:ad:f2:b4:d7:6d:9a:97:69:15:2e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 00:21:44 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=c4e6de470b05da628c959a5f6bd08895a872de7dedf497e1e5eca3be09622f38, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e0:6e:46:0c:eb:54:fa:1a:45:60:ab:8d:5a: 78:e7:f8:c4:08:39:82:ec:5a:57:a7:ff:c8:fe:ab: 4d:35:85:12:be:69:48:66:a7:e4:b0:cc:bd:3f:a1: 78:85:4b:49:16:ac:7c:5d:f1:d7:0d:7e:b6:80:ab: 03:19:6b:11:c8:4f:e8:6c:e0:f4:d4:93:1b:b8:33: 1f:a8:41:96:3a:ca:b0:38:2b:30:3d:68:49:4e:df: 49:72:80:51:7d:70:70:6f:55:cd:16:6b:3c:82:6e: a2:11:35:36:6b:4f:b7:45:55:68:cf:46:ca:d7:de: 32:79:8b:58:89:8c:40:62:01:be:9c:77:57:27:12: 6c:99:2d:9d:38:64:55:9a:cc:b9:b9:18:3a:bd:fb: 47:af:06:d0:3b:02:4b:eb:4d:a2:38:04:02:00:02: c7:5c:a2:58:e2:27:13:61:52:a7:a3:00:2b:55:59: e3:2b:58:02:3b:4b:3f:c1:d4:25:8b:2f:ed:ec:b5: 9c:ae:6d:ed:ad:28:99:5f:ba:71:d1:29:56:31:09: 62:1f:a5:ba:60:2e:03:c8:da:23:9d:b9:4b:49:f5: fc:80:fa:d6:48:4b:e9:59:8f:9f:f0:ef:1f:7e:42: 97:c9:b7:71:15:cf:5b:31:8b:3f:8e:bd:eb:8d:58: 4e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A4:74:17:3A:C4:C0:6F:FA:1A:19:B6:46:61:CD:09:82:EA:F6:A6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04458f53-1b58-4ea6-b808-1d18094e2918.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.182.224.0/21 Signature Algorithm: sha256WithRSAEncryption 1a:61:7b:c6:df:1d:10:07:80:36:52:da:32:9f:37:91:4e:ba: 5f:14:cf:8f:26:d6:c6:ba:f5:60:ef:7a:52:bc:98:87:37:65: 34:52:6a:07:8a:5d:78:e9:e0:e8:ba:13:a6:82:bd:a0:8b:c6: dc:a3:5e:a9:10:bb:56:c7:c2:01:ec:bb:5e:f4:0e:00:1a:51: 24:d0:bb:1b:ed:2c:f1:69:b2:bf:f8:6e:d5:62:0c:09:6d:c5: 82:b5:4f:5d:84:6e:22:83:d6:45:fa:f0:c6:9b:40:00:fd:4f: de:87:a1:d3:19:97:41:4e:c4:e7:52:1c:4c:49:d1:99:4b:19: 0c:71:8c:fd:40:fb:2a:e7:2b:ba:cb:31:98:3f:9f:c5:18:d3: 8e:2f:a5:78:e2:76:ec:ba:34:b8:eb:bf:91:59:d3:0f:3b:57: 87:e1:5c:71:ae:79:36:55:4f:62:3d:fb:19:9f:6b:5e:38:3c: 8b:1f:35:bd:5b:1b:61:19:52:12:07:73:bd:b8:a2:3f:ac:2c: 6e:b4:8e:ea:af:ac:ee:71:0c:89:91:bd:b1:5f:9f:01:a7:69: 74:82:1e:ad:5b:e8:64:a4:83:47:c2:0c:1f:76:8a:3e:17:16: c6:f0:b8:c0:f0:89:dc:a0:5d:00:ff:7d:b2:ad:dc:ff:24:b9: 51:5e:2a:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUerJNi3bFVYcwrfK0122al2kVLn4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MDAyMTQ0WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNGU2ZGU0NzBiMDVkYTYyOGM5NTlhNWY2YmQwODg5NWE4 NzJkZTdkZWRmNDk3ZTFlNWVjYTNiZTA5NjIyZjM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCR4G5GDOtU+hpFYKuNWnjn+MQIOYLsWlen/8j+q001hRK+ aUhmp+SwzL0/oXiFS0kWrHxd8dcNfraAqwMZaxHIT+hs4PTUkxu4Mx+oQZY6yrA4 KzA9aElO30lygFF9cHBvVc0WazyCbqIRNTZrT7dFVWjPRsrX3jJ5i1iJjEBiAb6c d1cnEmyZLZ04ZFWazLm5GDq9+0evBtA7AkvrTaI4BAIAAsdcoljiJxNhUqejACtV WeMrWAI7Sz/B1CWLL+3stZyube2tKJlfunHRKVYxCWIfpbpgLgPI2iOduUtJ9fyA +tZIS+lZj5/w7x9+QpfJt3EVz1sxiz+OveuNWE6FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5qR0FzrEwG/6Ghm2RmHNCYLq9qYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA0NDU4ZjUzLTFiNTgtNGVhNi1iODA4LTFkMTgwOTRlMjkxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPYtuAwDQYJKoZIhvcNAQELBQADggEBABphe8bfHRAHgDZS2jKfN5FOul8U z48m1sa69WDvelK8mIc3ZTRSageKXXjp4Oi6E6aCvaCLxtyjXqkQu1bHwgHsu170 DgAaUSTQuxvtLPFpsr/4btViDAltxYK1T12EbiKD1kX68MabQAD9T96HodMZl0FO xOdSHExJ0ZlLGQxxjP1A+yrnK7rLMZg/n8UY044vpXjiduy6NLjrv5FZ0w87V4fh XHGueTZVT2I9+xmfa144PIsfNb1bG2EZUhIHc724oj+sLG60juqvrO5xDImRvbFf nwGnaXSCHq1b6GSkg0fCDB92ij4XFsbwuMDwidygXQD/fbKt3P8kuVFeKo0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:32:48 2025 by rpki-client