$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b328c46-ba48-416d-99ac-6a2f6f35ffd7.roa File: 4b328c46-ba48-416d-99ac-6a2f6f35ffd7.roa (raw, json) Hash identifier: O8a2YbV3WhfpXXvxxYcSOPlKP5oVRWxpU6V53+uXqSc= Subject key identifier: D7:D1:4C:C8:1D:5F:79:4F:8A:82:7E:B9:00:64:A3:54:25:FD:57:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B75F7BB6DBB9D4B313CEC55057B6C4D27851070 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b328c46-ba48-416d-99ac-6a2f6f35ffd7.roa Signing time: Sat 05 Apr 2025 00:10:24 +0000 ROA not before: Sat 05 Apr 2025 00:10:24 +0000 ROA not after: Sat 10 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 75.45.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:75:f7:bb:6d:bb:9d:4b:31:3c:ec:55:05:7b:6c:4d:27:85:10:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 5 00:10:24 2025 GMT Not After : May 10 23:59:59 2025 GMT Subject: serialNumber=7597ecb61ebbb5b94c59c59e9dde00976c0abb722345e9eb4ab9c73a6cfd36f3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:e2:fc:4d:93:12:e6:a9:ab:ee:68:fa:a8: 4e:db:5a:90:9d:38:38:cb:93:6d:c5:66:32:89:28: 0f:29:ca:7c:d5:45:f6:48:ac:a7:61:87:ba:d5:bd: 2f:c9:3a:95:42:55:68:1d:2b:53:06:10:f2:5b:ca: 34:39:bf:3a:ab:21:40:3d:70:46:0f:36:79:62:08: 56:e8:81:cb:ba:15:96:66:25:4f:d1:e6:15:35:10: 69:f2:b7:f7:23:7f:3d:f6:5d:95:62:24:9b:dd:63: ed:91:e3:c7:de:ca:d7:54:0c:01:45:12:ce:25:13: d3:7d:bb:b8:2a:98:bc:c9:6a:68:1f:69:8c:ad:5c: 7c:d5:db:d3:76:19:b9:f8:6c:64:fd:90:0a:d3:7c: 79:ca:c3:57:94:b9:19:45:bf:1e:0a:bb:69:08:c4: 1d:a2:ea:e2:83:62:b2:f2:2a:a0:12:31:8c:03:29: 9a:1e:d2:77:4e:ab:d4:22:10:54:54:81:39:27:7c: 4f:06:c1:56:56:84:26:f5:3c:e6:dd:78:f9:ee:34: 2d:cd:df:a3:e5:1b:92:a2:ca:fb:7a:67:e5:9f:96: ac:1d:5c:8c:ed:47:e7:19:8a:bd:1b:76:30:b7:f7: 79:75:b1:af:4b:1c:88:f4:2e:96:ec:54:ad:72:6b: 53:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D1:4C:C8:1D:5F:79:4F:8A:82:7E:B9:00:64:A3:54:25:FD:57:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b328c46-ba48-416d-99ac-6a2f6f35ffd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 75.45.160.0/19 Signature Algorithm: sha256WithRSAEncryption 56:01:81:e1:58:00:56:a3:f8:c1:fd:d1:6d:14:a3:ba:c4:24: 3a:2c:55:9e:d1:cb:b5:3d:77:82:37:c9:69:5b:ae:db:71:4e: 61:2a:f6:96:0b:46:85:0f:01:20:b2:84:b6:1f:39:fb:5f:a9: 13:44:96:8c:1b:dd:b5:cd:8d:f6:2d:96:aa:8d:58:d3:59:18: 5d:07:ba:77:ad:3d:bd:61:36:d3:bb:64:36:62:27:12:55:8f: 21:6a:9c:aa:ba:59:97:78:bc:ec:34:21:8b:a5:ef:db:71:f2: f9:a7:37:4e:f1:8e:bf:3e:35:b7:0e:9b:d3:33:27:50:c6:ca: b1:8e:68:c4:a1:23:98:a0:77:61:4e:08:38:0a:36:ea:7a:16: c9:e7:40:d7:44:d0:c6:43:36:f7:d8:95:59:ec:5b:74:50:01: 43:4c:4d:c2:ec:3a:ac:cd:e4:9a:b9:9e:ca:2f:bc:c9:c6:bd: 4f:8c:f5:9e:3c:80:01:ad:07:46:4c:01:07:21:ce:aa:46:57: a3:d6:18:08:5a:99:27:6f:81:d0:53:b5:49:0d:41:45:7c:c2: 7b:da:48:39:d7:01:74:e6:19:fd:13:a5:c4:84:17:ad:61:d7: 60:7e:57:57:99:8a:ac:76:08:7c:7f:7c:6b:09:06:7b:2c:a5: 6f:d8:4f:b9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO3X3u227nUsxPOxVBXtsTSeFEHAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA1MDAxMDI0WhcNMjUwNTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTk3ZWNiNjFlYmJiNWI5NGM1OWM1OWU5ZGRlMDA5NzZj MGFiYjcyMjM0NWU5ZWI0YWI5YzczYTZjZmQzNmYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIfuL8TZMS5qmr7mj6qE7bWpCdODjLk23FZjKJKA8pynzV RfZIrKdhh7rVvS/JOpVCVWgdK1MGEPJbyjQ5vzqrIUA9cEYPNnliCFbogcu6FZZm JU/R5hU1EGnyt/cjfz32XZViJJvdY+2R48feytdUDAFFEs4lE9N9u7gqmLzJamgf aYytXHzV29N2Gbn4bGT9kArTfHnKw1eUuRlFvx4Ku2kIxB2i6uKDYrLyKqASMYwD KZoe0ndOq9QiEFRUgTknfE8GwVZWhCb1PObdePnuNC3N36PlG5Kiyvt6Z+Wflqwd XIztR+cZir0bdjC393l1sa9LHIj0LpbsVK1ya1MrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU19FMyB1feU+Kgn65AGSjVCX9V5EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRiMzI4YzQ2LWJhNDgtNDE2ZC05OWFjLTZhMmY2ZjM1ZmZkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVLLaAwDQYJKoZIhvcNAQELBQADggEBAFYBgeFYAFaj+MH90W0Uo7rEJDos VZ7Ry7U9d4I3yWlbrttxTmEq9pYLRoUPASCyhLYfOftfqRNElowb3bXNjfYtlqqN WNNZGF0HunetPb1hNtO7ZDZiJxJVjyFqnKq6WZd4vOw0IYul79tx8vmnN07xjr8+ NbcOm9MzJ1DGyrGOaMShI5igd2FOCDgKNup6FsnnQNdE0MZDNvfYlVnsW3RQAUNM TcLsOqzN5Jq5nsovvMnGvU+M9Z48gAGtB0ZMAQchzqpGV6PWGAhamSdvgdBTtUkN QUV8wnvaSDnXAXTmGf0TpcSEF61h12B+V1eZiqx2CHx/fGsJBnsspW/YT7k= -----END CERTIFICATE-----Generated at Sat Apr 26 16:48:15 2025 by rpki-client