$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51f566ba-b5cc-4528-8df7-1206338b802a.roa File: 51f566ba-b5cc-4528-8df7-1206338b802a.roa (raw, json) Hash identifier: zE2jWPZKi1ISJbp+9FtQzyIksjt52pdsa2RQSntZdPI= Subject key identifier: 09:B2:9D:DF:20:5D:F7:EB:6A:81:8D:9B:D7:22:DE:BD:55:36:22:E3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 36977E211135F628FEA829F167889E4246FF4E2D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51f566ba-b5cc-4528-8df7-1206338b802a.roa Signing time: Wed 09 Apr 2025 00:01:05 +0000 ROA not before: Wed 09 Apr 2025 00:01:05 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.92.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:97:7e:21:11:35:f6:28:fe:a8:29:f1:67:88:9e:42:46:ff:4e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:01:05 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: serialNumber=18d8b906f9b979a94210ed64aad1310ab8dc1c137eb78294ffc539d4e46807b0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:66:82:de:a8:a4:78:8f:39:df:05:22:72:e2: 0b:ce:62:1e:90:8d:fb:d4:64:57:30:01:84:c4:b2: 29:c8:e2:7d:b8:ad:ea:98:48:59:9c:2a:c6:41:ff: de:89:38:3b:cc:30:20:d9:ff:b1:73:04:cf:bd:a8: f9:b1:c2:28:7e:33:2c:58:fc:e2:2c:1b:44:15:0d: 72:b8:8d:de:c9:d3:b0:04:f1:72:24:a1:1c:13:ad: e4:f5:91:61:b5:33:f4:e9:a8:4f:71:44:c4:d3:5d: 8a:a1:04:34:62:a3:da:07:e7:2f:f8:9e:da:50:c1: 34:14:51:fb:37:f0:50:bf:26:63:d2:d6:0f:78:24: 69:ff:a3:92:16:e5:7b:bc:c5:b3:de:57:ac:19:f2: f0:d2:55:de:5c:65:fc:61:55:61:3e:10:bf:ad:9f: c5:1a:fc:48:8e:94:df:05:5c:b8:c8:1b:5a:62:d0: f7:54:95:82:12:f6:89:1d:e5:5b:4e:66:9c:63:f1: 74:57:88:f0:b4:71:d0:52:d2:52:60:3d:02:e3:ae: 00:57:65:ab:ca:eb:15:0c:08:1d:4e:8c:be:5d:a5: ad:93:f7:a1:65:f3:a1:dc:0d:8f:ef:de:59:44:32: ba:cc:f0:1c:7e:54:41:bd:f7:4e:64:6e:c7:b4:15: a1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B2:9D:DF:20:5D:F7:EB:6A:81:8D:9B:D7:22:DE:BD:55:36:22:E3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51f566ba-b5cc-4528-8df7-1206338b802a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.92.69.0/24 Signature Algorithm: sha256WithRSAEncryption 25:d1:f8:33:a1:1a:62:c6:7f:01:3e:1e:0f:44:f3:7d:2b:5f: b3:a6:55:28:fa:1d:46:d6:08:c8:1d:88:0e:2c:07:4a:cb:2f: 9a:46:cf:37:e9:8a:a4:e6:e6:d2:61:73:c7:d0:a0:64:a8:97: 8b:80:db:80:7c:04:7d:b1:9d:1c:5b:b4:1b:f1:9c:e9:15:01: 40:81:35:fc:d6:e1:71:8f:5e:d5:8e:6d:1c:52:82:4f:4a:f7: b1:31:b2:f6:b4:97:fb:0e:d7:18:2d:78:3b:01:88:55:63:23: a8:00:32:9b:e5:f4:ac:bb:cf:82:b9:65:0c:b9:f5:22:20:cc: c0:8b:23:c4:46:4a:cc:4a:df:b9:f1:09:67:d8:93:5d:f3:51: a7:85:7a:c2:96:a0:75:02:bb:5a:ad:a4:be:68:ca:0f:aa:5c: 65:42:6e:90:1b:ca:bb:b3:b9:a5:4c:ec:31:5d:35:e1:46:2c: b9:25:22:c3:69:cb:d2:95:60:2c:30:d1:3c:05:79:14:4a:fe: dc:de:6e:51:f0:81:c6:8f:dc:6a:6c:fd:ff:ff:33:c7:6e:95: af:c1:7a:05:89:2a:5b:e7:8b:87:bd:0d:cc:50:47:ee:58:bc: 0c:47:16:5a:a6:2a:bc:4a:5d:6f:81:21:47:7f:3d:66:49:93: d1:fc:34:c8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNpd+IRE19ij+qCnxZ4ieQkb/Ti0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDAwMTA1WhcNMjUwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOGQ4YjkwNmY5Yjk3OWE5NDIxMGVkNjRhYWQxMzEwYWI4 ZGMxYzEzN2ViNzgyOTRmZmM1MzlkNGU0NjgwN2IwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQZoLeqKR4jznfBSJy4gvOYh6QjfvUZFcwAYTEsinI4n24 reqYSFmcKsZB/96JODvMMCDZ/7FzBM+9qPmxwih+MyxY/OIsG0QVDXK4jd7J07AE 8XIkoRwTreT1kWG1M/TpqE9xRMTTXYqhBDRio9oH5y/4ntpQwTQUUfs38FC/JmPS 1g94JGn/o5IW5Xu8xbPeV6wZ8vDSVd5cZfxhVWE+EL+tn8Ua/EiOlN8FXLjIG1pi 0PdUlYIS9okd5VtOZpxj8XRXiPC0cdBS0lJgPQLjrgBXZavK6xUMCB1OjL5dpa2T 96Fl86HcDY/v3llEMrrM8Bx+VEG9905kbse0FaHPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCbKd3yBd9+tqgY2b1yLevVU2IuMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUxZjU2NmJhLWI1Y2MtNDUyOC04ZGY3LTEyMDYzMzhiODAyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADRXEUwDQYJKoZIhvcNAQELBQADggEBACXR+DOhGmLGfwE+Hg9E830rX7Om VSj6HUbWCMgdiA4sB0rLL5pGzzfpiqTm5tJhc8fQoGSol4uA24B8BH2xnRxbtBvx nOkVAUCBNfzW4XGPXtWObRxSgk9K97Exsva0l/sO1xgteDsBiFVjI6gAMpvl9Ky7 z4K5ZQy59SIgzMCLI8RGSsxK37nxCWfYk13zUaeFesKWoHUCu1qtpL5oyg+qXGVC bpAbyruzuaVM7DFdNeFGLLklIsNpy9KVYCww0TwFeRRK/tzeblHwgcaP3Gps/f// M8dula/BegWJKlvni4e9DcxQR+5YvAxHFlqmKrxKXW+BIUd/PWZJk9H8NMg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:24 2025 by rpki-client