$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c88f27e-36bd-4da7-8797-ef971cd2b167.roa File: 2c88f27e-36bd-4da7-8797-ef971cd2b167.roa (raw, json) Hash identifier: VYe26TNO2gcEdSCeT8Mb8qV9myZtfGZ2YJnehKpnZf0= Subject key identifier: 63:3C:BB:5A:4F:E1:4F:1D:16:7D:B8:C4:FF:74:6B:9A:AE:46:52:B9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 411A4C7A861573B2AA3DAF0B374E3F446F709C0A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c88f27e-36bd-4da7-8797-ef971cd2b167.roa Signing time: Fri 25 Apr 2025 15:10:51 +0000 ROA not before: Fri 25 Apr 2025 15:10:51 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 75.2.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:1a:4c:7a:86:15:73:b2:aa:3d:af:0b:37:4e:3f:44:6f:70:9c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 15:10:51 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=1b0e2b79d7cc8323b1a864a2e1c988ea428e1ed2b0f9879a09e89408809e9a7b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:24:dc:8a:53:c8:37:c1:92:49:e2:cb:66:7c: ca:14:b9:a0:43:d4:80:22:53:a9:dd:a3:b6:85:c5: 73:5c:04:fd:94:70:29:26:ff:6d:b5:c8:31:37:3a: 5f:3e:cc:0b:b0:ed:92:9d:f1:e0:a4:23:52:4c:5c: d1:10:b7:9a:92:e0:ee:53:53:1d:55:e8:8e:57:62: c6:93:f8:5a:c5:b9:48:9a:74:1e:de:29:7f:4c:97: 65:71:53:9c:b6:3f:2f:34:80:c7:7c:5b:5f:9d:b8: 21:d3:02:4d:24:51:3f:50:42:b6:5a:33:5f:46:df: 49:e3:2d:4d:e4:44:5b:16:d8:0e:a5:69:b4:eb:3c: cf:a6:b6:12:14:aa:e0:5d:29:47:de:7b:05:4a:90: 4a:61:c1:a2:75:e1:01:8c:8a:83:14:d8:03:d6:ff: 05:24:8c:6e:11:e7:f8:7f:56:a7:8f:bd:16:3b:6e: 83:0f:c2:2c:ad:18:af:fa:11:b2:09:51:00:b5:fb: e0:b8:cf:d3:71:d8:cc:60:3d:ab:59:73:32:82:2e: e8:73:81:f1:c5:30:16:24:dc:ee:57:30:1b:68:2d: 7b:27:5b:83:d7:6f:50:bd:5c:5c:29:d7:54:ef:9e: 81:bb:f5:68:99:61:8f:01:a6:ab:86:28:68:be:af: 69:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3C:BB:5A:4F:E1:4F:1D:16:7D:B8:C4:FF:74:6B:9A:AE:46:52:B9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c88f27e-36bd-4da7-8797-ef971cd2b167.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 75.2.128.0/19 Signature Algorithm: sha256WithRSAEncryption 89:db:01:3e:b7:4a:e0:05:c1:36:99:51:9d:83:f8:8c:fb:30: c3:a9:9d:34:8e:22:04:9b:5a:e9:1c:ea:c3:b0:23:38:3f:5e: 0d:1c:42:ea:7b:c6:d9:6e:a2:c2:51:04:56:c2:9e:7d:c2:5f: a9:b0:e6:12:39:0d:f6:93:fa:3a:33:7e:1a:7f:91:3c:c0:ca: 6c:11:21:c2:18:92:88:6b:93:57:be:34:b7:5d:15:00:9f:99: 88:f1:1e:4e:2a:94:5c:cc:52:db:e5:36:10:0b:af:d2:6d:99: db:f0:88:bb:e2:94:93:bc:be:7f:6b:73:71:70:29:74:dc:4d: 2b:ab:36:a9:9d:be:25:17:83:47:66:5b:c6:5c:43:0b:7c:ee: 7d:05:a4:88:c1:ba:9b:57:d9:4d:8f:c5:63:8e:d0:c8:93:e0: 1e:e1:c9:06:70:e2:8e:ad:1a:b8:c2:30:0b:33:09:02:68:64: d3:ea:98:07:e6:83:54:0c:5e:c2:e0:cb:19:78:7d:9c:36:12: b8:e0:c8:a7:6b:0d:67:24:7e:2f:a7:29:75:a8:57:ac:67:7e: 32:5d:0a:84:fb:21:7f:00:3c:12:03:c3:00:8d:87:a2:ca:75: 4c:70:6b:3c:b5:03:7e:a1:10:1b:65:82:d2:fa:4b:a0:b1:25: cf:7a:f1:d0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQRpMeoYVc7KqPa8LN04/RG9wnAowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MTUxMDUxWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjBlMmI3OWQ3Y2M4MzIzYjFhODY0YTJlMWM5ODhlYTQy OGUxZWQyYjBmOTg3OWEwOWU4OTQwODgwOWU5YTdiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcJNyKU8g3wZJJ4stmfMoUuaBD1IAiU6ndo7aFxXNcBP2U cCkm/221yDE3Ol8+zAuw7ZKd8eCkI1JMXNEQt5qS4O5TUx1V6I5XYsaT+FrFuUia dB7eKX9Ml2VxU5y2Py80gMd8W1+duCHTAk0kUT9QQrZaM19G30njLU3kRFsW2A6l abTrPM+mthIUquBdKUfeewVKkEphwaJ14QGMioMU2APW/wUkjG4R5/h/VqePvRY7 boMPwiytGK/6EbIJUQC1++C4z9Nx2MxgPatZczKCLuhzgfHFMBYk3O5XMBtoLXsn W4PXb1C9XFwp11TvnoG79WiZYY8BpquGKGi+r2lzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYzy7Wk/hTx0WfbjE/3Rrmq5GUrkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJjODhmMjdlLTM2YmQtNGRhNy04Nzk3LWVmOTcxY2QyYjE2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVLAoAwDQYJKoZIhvcNAQELBQADggEBAInbAT63SuAFwTaZUZ2D+Iz7MMOp nTSOIgSbWukc6sOwIzg/Xg0cQup7xtluosJRBFbCnn3CX6mw5hI5DfaT+jozfhp/ kTzAymwRIcIYkohrk1e+NLddFQCfmYjxHk4qlFzMUtvlNhALr9JtmdvwiLvilJO8 vn9rc3FwKXTcTSurNqmdviUXg0dmW8ZcQwt87n0FpIjBuptX2U2PxWOO0MiT4B7h yQZw4o6tGrjCMAszCQJoZNPqmAfmg1QMXsLgyxl4fZw2ErjgyKdrDWckfi+nKXWo V6xnfjJdCoT7IX8APBIDwwCNh6LKdUxwazy1A36hEBtlgtL6S6CxJc968dA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:20 2025 by rpki-client