$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/171a8b54-dde7-4dd4-8e61-d987c2870176.roa File: 171a8b54-dde7-4dd4-8e61-d987c2870176.roa (raw, json) Hash identifier: QNVJ/rGByfgDKeZQUD0Zw9Px/iKgtNJZk6kGV4tZ8ao= Subject key identifier: 2B:1D:87:22:D2:75:EC:C0:56:5C:C9:B8:7A:2C:4B:24:7A:43:F4:59 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 35520DBA9C801E9B9D5708939A00F01DC6E18E65 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/171a8b54-dde7-4dd4-8e61-d987c2870176.roa Signing time: Fri 18 Apr 2025 00:50:24 +0000 ROA not before: Fri 18 Apr 2025 00:50:24 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.0.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:52:0d:ba:9c:80:1e:9b:9d:57:08:93:9a:00:f0:1d:c6:e1:8e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:50:24 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=85868a134e729e40eb7eb84e314fb6ba77c447c88e10318397dc96e724dc5902, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:5c:a8:8c:10:f0:22:f1:fe:07:b5:38:85:9a: 0f:19:ec:ca:a9:fd:30:db:64:ef:2f:28:25:ec:aa: 3c:ea:70:29:b5:94:c7:00:22:a3:90:b6:dc:1b:66: 20:6e:de:51:51:de:59:0a:a9:d6:21:80:23:6d:07: c4:09:6a:02:fd:50:04:53:8f:af:64:0e:5a:e5:38: 07:f7:92:4d:b2:86:d9:0e:07:b9:db:00:cc:f4:ae: a3:25:2d:ce:25:8d:6d:42:58:0b:4c:68:e2:65:f4: 4c:3d:a5:c2:19:89:d7:20:eb:fc:36:fe:8b:34:78: e9:19:4e:13:d8:1f:67:fc:97:c3:86:97:7f:32:90: cc:1d:6b:07:9b:b1:3e:a1:c6:25:1f:04:f3:ea:b3: 7d:ff:96:d8:54:18:ea:76:67:d7:a7:8d:d1:d8:85: 47:3f:e1:48:d0:16:89:c6:98:30:c8:f4:e9:d1:e2: c9:93:03:01:7c:c5:c7:b2:77:3f:3e:80:92:43:25: c9:6c:16:46:5b:8e:11:c5:79:52:6f:83:99:81:11: 90:ac:6d:08:cd:2d:14:1b:d5:99:8b:51:91:cd:18: fb:f6:01:99:56:73:19:5b:22:4b:fd:36:a8:35:b1: 85:bf:3c:5a:b2:b3:f0:9b:d2:c3:34:44:ce:3f:68: f0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1D:87:22:D2:75:EC:C0:56:5C:C9:B8:7A:2C:4B:24:7A:43:F4:59 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/171a8b54-dde7-4dd4-8e61-d987c2870176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.0.224.0/20 Signature Algorithm: sha256WithRSAEncryption 86:73:7f:23:13:51:75:4e:41:6c:f1:72:75:a7:07:2a:ae:93: f3:c2:44:19:f0:35:f9:76:85:e3:06:c5:ee:fe:58:e1:40:bb: 40:b7:8e:d5:74:cc:df:07:3a:02:85:e3:02:1d:97:b6:b3:50: 35:6b:bc:25:64:29:10:fe:ab:cc:30:59:fd:09:21:ac:7c:58: 6c:a0:94:32:f4:f4:d6:b7:cd:be:a0:9c:85:ba:af:43:08:3a: 9f:e4:19:1f:d0:21:1b:e7:04:05:2a:19:b0:25:1c:fd:76:9a: ea:d9:69:4f:2a:0d:53:d8:b1:bf:fa:1e:6e:13:70:b3:96:bb: 29:cc:cb:16:cc:b2:ac:d3:2e:7c:3d:93:64:c7:1b:ad:f5:2f: 57:f6:36:68:64:21:13:b3:db:d0:39:08:f3:da:59:9c:4e:6d: 25:dd:b0:ad:2b:7f:cb:6a:aa:a8:ae:2a:2c:74:77:ae:12:ed: b8:5d:83:36:2d:e1:00:f8:5b:89:c2:2e:68:80:f3:61:2e:9a: 81:d6:54:f0:be:50:1a:13:44:5a:4c:40:f8:e4:8a:37:90:65: fb:7e:0e:04:83:ce:83:a9:fb:ae:88:1c:02:28:63:b2:0b:08: 0b:d3:a5:24:6f:5e:bf:ac:ff:9d:e5:97:04:3f:86:64:7b:33: 0f:e0:6a:19 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNVINupyAHpudVwiTmgDwHcbhjmUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE4MDA1MDI0WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NTg2OGExMzRlNzI5ZTQwZWI3ZWI4NGUzMTRmYjZiYTc3 YzQ0N2M4OGUxMDMxODM5N2RjOTZlNzI0ZGM1OTAyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD/XKiMEPAi8f4HtTiFmg8Z7Mqp/TDbZO8vKCXsqjzqcCm1 lMcAIqOQttwbZiBu3lFR3lkKqdYhgCNtB8QJagL9UARTj69kDlrlOAf3kk2yhtkO B7nbAMz0rqMlLc4ljW1CWAtMaOJl9Ew9pcIZidcg6/w2/os0eOkZThPYH2f8l8OG l38ykMwdawebsT6hxiUfBPPqs33/lthUGOp2Z9enjdHYhUc/4UjQFonGmDDI9OnR 4smTAwF8xceydz8+gJJDJclsFkZbjhHFeVJvg5mBEZCsbQjNLRQb1ZmLUZHNGPv2 AZlWcxlbIkv9Nqg1sYW/PFqys/Cb0sM0RM4/aPCZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKx2HItJ17MBWXMm4eixLJHpD9FkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE3MWE4YjU0LWRkZTctNGRkNC04ZTYxLWQ5ODdjMjg3MDE3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARFAOAwDQYJKoZIhvcNAQELBQADggEBAIZzfyMTUXVOQWzxcnWnByquk/PC RBnwNfl2heMGxe7+WOFAu0C3jtV0zN8HOgKF4wIdl7azUDVrvCVkKRD+q8wwWf0J Iax8WGyglDL09Na3zb6gnIW6r0MIOp/kGR/QIRvnBAUqGbAlHP12murZaU8qDVPY sb/6Hm4TcLOWuynMyxbMsqzTLnw9k2THG631L1f2NmhkIROz29A5CPPaWZxObSXd sK0rf8tqqqiuKix0d64S7bhdgzYt4QD4W4nCLmiA82EumoHWVPC+UBoTRFpMQPjk ijeQZft+DgSDzoOp+66IHAIoY7ILCAvTpSRvXr+s/53llwQ/hmR7Mw/gahk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:18 2025 by rpki-client