$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa File: 2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa (raw, json) Hash identifier: sO8SMf9sdWRGzerixP2noHXgeYSFq+JKzr3Y71EF0W4= Subject key identifier: CA:95:D1:6A:62:05:39:B9:9B:F4:7B:64:9C:CE:CB:DA:22:C8:24:5F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3AC079BEF71C9A89F5E5A60FD6EA95F642EB2C82 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa Signing time: Tue 15 Apr 2025 00:20:12 +0000 ROA not before: Tue 15 Apr 2025 00:20:12 +0000 ROA not after: Tue 20 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.113.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c0:79:be:f7:1c:9a:89:f5:e5:a6:0f:d6:ea:95:f6:42:eb:2c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:20:12 2025 GMT Not After : May 20 23:59:59 2025 GMT Subject: serialNumber=2a60e02ed08d5209d0e56bdcb222311cdc819eb49f364d19c24faa6474d441ac, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:93:27:7b:c0:5d:91:53:8f:82:4c:e9:90:ec: 7a:63:b9:4f:ad:b6:65:f4:65:e1:f6:63:c1:b0:28: 73:ee:34:2a:48:03:86:f2:95:6a:c5:51:bd:a4:c5: b3:f3:da:92:75:5d:ff:2d:75:28:75:f0:51:e3:6f: 02:72:73:c0:22:db:b4:ce:d9:44:39:48:9a:d4:d2: db:e9:dd:df:8d:8e:eb:61:d8:2f:c5:80:9d:54:32: 26:62:5c:95:63:5a:a1:2c:cd:8f:dd:45:2c:e7:3b: 48:90:64:70:0e:21:95:03:e3:9e:db:2c:91:e0:e1: 6e:94:d6:25:97:17:29:73:a1:fc:d3:0e:fe:7b:29: d2:5e:25:a0:ff:3a:66:2b:86:b4:cb:52:72:6e:6e: 70:8c:81:a0:b0:a8:9d:97:9b:08:a0:8a:00:b4:36: dc:c9:1f:3e:59:49:95:b6:04:e9:18:4a:b6:ef:e0: c8:88:fc:75:0a:7e:1c:29:43:99:36:eb:6d:09:21: 18:3c:07:15:c5:bc:86:6d:11:bb:b2:c9:68:d3:09: 69:01:df:fa:91:9a:e8:85:8a:91:c5:b4:49:89:00: 2f:57:9e:65:0c:f5:fd:0a:60:42:6b:e9:1e:ab:65: 4e:b7:d6:68:cb:5e:49:e5:2d:05:b3:cb:17:09:e6: cd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:95:D1:6A:62:05:39:B9:9B:F4:7B:64:9C:CE:CB:DA:22:C8:24:5F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.113.192.0/19 Signature Algorithm: sha256WithRSAEncryption d1:a1:9d:b2:67:5c:41:7a:b0:90:ff:56:7c:9e:9c:e6:dd:69: d7:9c:5f:59:96:1c:f3:6e:c6:87:13:a7:e1:4d:bf:f0:77:35: 5d:40:b1:6a:84:a2:6e:16:37:12:ba:a9:3a:f6:e6:d9:28:5d: 20:a5:7c:5f:18:10:8a:99:96:b8:82:a9:13:17:70:3d:46:f9: 04:d5:6a:bc:6b:3d:31:1d:7e:7b:f6:af:93:77:80:8f:f7:c0: 0f:7f:62:ce:13:44:69:2b:21:52:77:b3:16:92:2b:13:ff:56: b1:49:95:8a:6a:03:1b:52:a7:be:a8:97:7d:9a:cc:4d:ec:13: 7d:a2:a2:67:7d:89:99:25:90:d6:28:6e:f6:a4:90:b2:70:9a: 82:f8:b3:7f:c1:6b:55:da:bf:38:bf:35:61:a9:7e:52:ba:44: 68:bf:76:f4:98:7f:86:f6:86:8e:18:41:67:f7:49:0a:46:e3: d7:ab:5f:fc:63:a4:3d:65:5a:40:2b:13:cc:d1:d4:f1:6a:d2: 61:e5:0b:e7:52:cd:4f:0c:9c:a0:f4:41:be:48:00:70:7d:49: 95:22:6b:33:68:92:cd:6d:5f:7c:f3:a7:e4:2b:ef:ed:2f:89: 56:9d:62:c6:9d:d3:8d:5e:7e:39:2f:4a:43:b9:ab:f1:e4:56: 59:b7:32:8b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOsB5vvccmon15aYP1uqV9kLrLIIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE1MDAyMDEyWhcNMjUwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTYwZTAyZWQwOGQ1MjA5ZDBlNTZiZGNiMjIyMzExY2Rj ODE5ZWI0OWYzNjRkMTljMjRmYWE2NDc0ZDQ0MWFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChkyd7wF2RU4+CTOmQ7HpjuU+ttmX0ZeH2Y8GwKHPuNCpI A4bylWrFUb2kxbPz2pJ1Xf8tdSh18FHjbwJyc8Ai27TO2UQ5SJrU0tvp3d+Njuth 2C/FgJ1UMiZiXJVjWqEszY/dRSznO0iQZHAOIZUD457bLJHg4W6U1iWXFylzofzT Dv57KdJeJaD/OmYrhrTLUnJubnCMgaCwqJ2XmwigigC0NtzJHz5ZSZW2BOkYSrbv 4MiI/HUKfhwpQ5k2620JIRg8BxXFvIZtEbuyyWjTCWkB3/qRmuiFipHFtEmJAC9X nmUM9f0KYEJr6R6rZU631mjLXknlLQWzyxcJ5s05AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUypXRamIFObmb9HtknM7L2iLIJF8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJkOWQ3YmQzLTFkZGItNDhmMC1iNDQ1LTdjM2Q0NGZhMDlhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVAccAwDQYJKoZIhvcNAQELBQADggEBANGhnbJnXEF6sJD/VnyenObdadec X1mWHPNuxocTp+FNv/B3NV1AsWqEom4WNxK6qTr25tkoXSClfF8YEIqZlriCqRMX cD1G+QTVarxrPTEdfnv2r5N3gI/3wA9/Ys4TRGkrIVJ3sxaSKxP/VrFJlYpqAxtS p76ol32azE3sE32iomd9iZklkNYobvakkLJwmoL4s3/Ba1Xavzi/NWGpflK6RGi/ dvSYf4b2ho4YQWf3SQpG49erX/xjpD1lWkArE8zR1PFq0mHlC+dSzU8MnKD0Qb5I AHB9SZUiazNoks1tX3zzp+Qr7+0viVadYsad041efjkvSkO5q/HkVlm3Mos= -----END CERTIFICATE-----Generated at Sat Apr 26 14:52:10 2025 by rpki-client