$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e4939d5-bdf6-4674-b927-d463fb918e11.roa File: 0e4939d5-bdf6-4674-b927-d463fb918e11.roa (raw, json) Hash identifier: T/3HvkVnPJBv6QMwPw0Qq5d0NgcdoYgY/dNDD8SyTtw= Subject key identifier: 1D:C5:BA:09:D9:80:E0:3E:EB:80:A2:3B:A0:09:81:91:3A:76:14:7F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 34B980621FC40C8A8412AB7ED021AF6A4EBBB6C2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e4939d5-bdf6-4674-b927-d463fb918e11.roa Signing time: Mon 07 Apr 2025 15:11:45 +0000 ROA not before: Mon 07 Apr 2025 15:11:45 +0000 ROA not after: Mon 12 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 162.85.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b9:80:62:1f:c4:0c:8a:84:12:ab:7e:d0:21:af:6a:4e:bb:b6:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 7 15:11:45 2025 GMT Not After : May 12 23:59:59 2025 GMT Subject: serialNumber=d323871a1e7c046932d8586c7d682764534f7d44dbbc31482118f24d1c0a6636, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:95:f4:e3:71:87:dc:f4:36:f2:b9:80:42:b4: 96:5b:bb:43:68:c2:a2:8a:18:cf:2e:76:e3:28:8a: 52:d7:5c:f6:77:e2:3f:fd:bd:22:cf:74:55:73:48: f0:8f:c1:a1:b7:5a:a1:a1:76:ac:b4:43:94:d7:ed: 75:f2:c5:8e:e6:00:95:76:d1:08:41:e5:8d:d1:cf: 40:f2:5d:8c:b5:1f:9e:f6:74:f4:cb:d7:51:1f:f7: 94:59:04:89:57:56:bc:c4:4a:21:fa:1a:12:ac:89: af:f4:e6:31:2f:60:49:85:41:f0:b7:0f:cb:ea:d0: 71:5a:d0:61:6b:20:98:f0:72:c0:34:06:f5:69:25: de:5f:69:c1:43:67:37:45:3e:c7:65:67:02:c7:5c: 08:67:dc:3a:55:b5:3a:22:84:cf:d5:b0:d1:eb:47: 22:cb:d4:45:64:80:39:12:1a:1d:ea:7a:b2:50:e9: fa:43:ec:dc:c4:84:8f:8b:79:d2:a4:cc:be:2c:72: e9:9c:92:10:75:1c:c7:e5:e7:90:8e:40:81:bc:b1: 2b:cb:33:23:5e:fe:e4:88:0d:48:3a:d4:f9:5d:d3: 32:a9:59:d7:1e:41:0f:30:99:5f:06:1c:ae:d3:f0: a4:1b:ea:f4:d5:c5:f7:87:3f:ca:b4:6b:7f:0e:86: 5f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C5:BA:09:D9:80:E0:3E:EB:80:A2:3B:A0:09:81:91:3A:76:14:7F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e4939d5-bdf6-4674-b927-d463fb918e11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.85.0.0/16 Signature Algorithm: sha256WithRSAEncryption a9:dd:5a:eb:5d:16:65:e7:25:89:65:bb:0d:b3:55:0a:9e:0a: 19:54:b5:12:81:47:af:ce:e9:cd:9b:f3:2e:ce:be:9a:5e:26: 3c:37:1d:52:77:3d:a4:4b:67:15:d3:1d:a6:9a:93:55:c5:bc: 6d:6d:f2:d0:2d:af:05:cc:46:43:90:4b:13:8a:5e:b5:48:a3: 63:ba:a2:fc:42:4d:d9:e4:bc:7a:5f:a2:69:12:70:3b:fa:90: 1b:7d:b8:9f:ff:79:9d:ca:41:f7:da:9a:a1:08:1c:72:f4:2d: 82:6c:55:fb:b1:ce:17:29:29:af:af:55:23:3f:89:ed:3b:32: fd:9d:ac:ad:33:d5:92:17:4a:7b:63:24:8a:d0:f7:74:ca:4f: f5:78:3e:c3:01:0a:a1:05:fd:ea:2d:a3:0c:d1:7d:3a:70:70: a7:ed:62:fe:b2:78:af:6d:4d:68:70:b7:8c:b8:5e:c3:cf:21: ec:97:33:f5:05:9b:c5:c9:38:d7:28:80:88:a1:db:13:cc:c3: 69:f7:cc:b7:d6:5c:30:7f:47:ad:32:fc:f9:9c:95:69:a8:8c: 5f:86:ac:1f:c6:4b:fc:6e:87:6d:ee:f0:7c:1a:b1:6f:4f:f4: b5:7c:56:54:df:88:6f:73:da:4e:80:df:65:3b:fd:50:2e:04: fa:f2:ef:85 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNLmAYh/EDIqEEqt+0CGvak67tsIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA3MTUxMTQ1WhcNMjUwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzIzODcxYTFlN2MwNDY5MzJkODU4NmM3ZDY4Mjc2NDUz NGY3ZDQ0ZGJiYzMxNDgyMTE4ZjI0ZDFjMGE2NjM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGlfTjcYfc9DbyuYBCtJZbu0NowqKKGM8uduMoilLXXPZ3 4j/9vSLPdFVzSPCPwaG3WqGhdqy0Q5TX7XXyxY7mAJV20QhB5Y3Rz0DyXYy1H572 dPTL11Ef95RZBIlXVrzESiH6GhKsia/05jEvYEmFQfC3D8vq0HFa0GFrIJjwcsA0 BvVpJd5facFDZzdFPsdlZwLHXAhn3DpVtToihM/VsNHrRyLL1EVkgDkSGh3qerJQ 6fpD7NzEhI+LedKkzL4scumckhB1HMfl55COQIG8sSvLMyNe/uSIDUg61Pld0zKp WdceQQ8wmV8GHK7T8KQb6vTVxfeHP8q0a38Ohl8JAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUHcW6CdmA4D7rgKI7oAmBkTp2FH8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBlNDkzOWQ1LWJkZjYtNDY3NC1iOTI3LWQ0NjNmYjkxOGUxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCiVTANBgkqhkiG9w0BAQsFAAOCAQEAqd1a610WZecliWW7DbNVCp4KGVS1 EoFHr87pzZvzLs6+ml4mPDcdUnc9pEtnFdMdppqTVcW8bW3y0C2vBcxGQ5BLE4pe tUijY7qi/EJN2eS8el+iaRJwO/qQG324n/95ncpB99qaoQgccvQtgmxV+7HOFykp r69VIz+J7Tsy/Z2srTPVkhdKe2MkitD3dMpP9Xg+wwEKoQX96i2jDNF9OnBwp+1i /rJ4r21NaHC3jLhew88h7Jcz9QWbxck41yiAiKHbE8zDaffMt9ZcMH9HrTL8+ZyV aaiMX4asH8ZL/G6Hbe7wfBqxb0/0tXxWVN+Ib3PaToDfZTv9UC4E+vLvhQ== -----END CERTIFICATE-----Generated at Sat Apr 26 16:30:14 2025 by rpki-client