$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60f85a40-3034-46e1-a52b-6569867c71a0.roa File: 60f85a40-3034-46e1-a52b-6569867c71a0.roa (raw, json) Hash identifier: 1RLScOFGfLXtSTAhKzOVTxWSeufV+vh5j/6Q4oXbpI0= Subject key identifier: 98:40:2A:B6:B3:BA:5C:F9:F8:F9:16:08:9C:3C:91:61:65:01:CB:1A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 67AC72647F66ED8E056B9307BC4155C0991BA9D6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60f85a40-3034-46e1-a52b-6569867c71a0.roa Signing time: Mon 21 Apr 2025 17:11:08 +0000 ROA not before: Mon 21 Apr 2025 17:11:08 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 147.108.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ac:72:64:7f:66:ed:8e:05:6b:93:07:bc:41:55:c0:99:1b:a9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 17:11:08 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=286270c0b715df0070ec57198c8f101d1c65031de2277f6359c103e6f611e948, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:3d:ed:85:e9:90:d6:bb:11:25:27:b4:17: 95:7c:b9:b6:01:86:68:cf:52:18:31:7c:71:c1:12: 7b:1e:9c:84:db:80:27:5a:ed:40:39:3d:8d:a4:29: 0d:b9:eb:1f:ed:b3:bd:30:cf:e8:b6:7d:aa:cc:ee: 6f:43:6e:f5:4d:67:74:08:93:ac:ee:10:19:2e:68: 5c:3b:73:e5:47:8e:23:9b:bd:d0:eb:13:b7:e4:6d: 17:e7:d1:7c:47:be:70:c5:8b:c8:78:d0:97:95:a8: 4c:80:b4:18:e1:44:8e:c2:d8:97:2c:36:80:86:8a: 01:d3:f5:c9:9b:30:c0:96:20:3b:f7:21:84:24:7d: fa:85:dd:76:23:98:a4:59:14:01:41:81:8a:07:9b: fb:35:26:f5:21:97:07:2f:46:b0:88:4f:55:c5:16: 8d:e2:8e:03:30:0e:c1:6c:96:8b:67:ca:e2:a7:f9: 23:d6:04:3c:09:9d:d5:b1:af:76:53:8d:09:9f:ee: de:47:f4:21:7d:04:8a:5e:ab:fa:4a:1e:71:2d:6c: d1:3a:03:0b:f9:e2:5a:14:b5:e6:a4:05:1a:93:50: 8a:c7:03:0d:51:73:82:48:bf:06:32:9e:1c:28:7f: 31:90:5c:71:71:ed:3b:30:2b:cc:b5:bd:0b:60:50: 1d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:40:2A:B6:B3:BA:5C:F9:F8:F9:16:08:9C:3C:91:61:65:01:CB:1A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60f85a40-3034-46e1-a52b-6569867c71a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.108.0.0/16 Signature Algorithm: sha256WithRSAEncryption 33:31:6a:dd:ae:36:d2:46:d5:2c:8f:2c:98:ce:ba:8c:51:31: 85:e1:87:f4:ab:8f:52:23:a9:e5:01:87:5f:7c:b0:75:64:fd: bf:d4:3b:08:b1:00:14:84:84:25:c7:96:97:b1:19:08:96:bb: d6:08:c7:a9:71:99:17:d9:37:11:f5:39:d5:10:59:15:88:09: ef:0f:29:a2:b2:16:63:f2:91:e3:52:41:45:84:57:66:72:cd: ad:f8:61:ba:bd:c0:b0:e4:f3:4a:a4:d1:aa:64:ac:7b:22:c6: b3:6e:9f:14:1e:9a:1d:ed:d6:83:5f:e3:2c:25:eb:0b:4d:14: 7d:e5:a4:96:98:4f:9b:47:60:51:f8:a3:d5:5a:dc:74:cf:58: 48:1a:70:a2:aa:e1:ee:97:86:1d:f3:cd:76:50:5e:72:96:4a: 65:c8:75:ff:1b:64:74:a6:34:6c:25:55:8b:ef:7e:66:3a:3e: e8:cc:29:3f:ac:a9:0b:b2:68:f8:81:e3:a2:1c:07:95:17:bc: cd:17:97:c8:cb:97:9a:15:25:6b:c4:a7:47:54:98:eb:32:97: a4:71:34:d7:8c:90:5d:52:47:8b:24:09:ba:48:f3:bb:88:d1: 38:05:b3:c9:a2:3a:73:c5:64:52:01:dd:99:aa:a7:76:f2:2f: 64:c7:93:a3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZ6xyZH9m7Y4Fa5MHvEFVwJkbqdYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTcxMTA4WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyODYyNzBjMGI3MTVkZjAwNzBlYzU3MTk4YzhmMTAxZDFj NjUwMzFkZTIyNzdmNjM1OWMxMDNlNmY2MTFlOTQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKMz3themQ1rsRJSe0F5V8ubYBhmjPUhgxfHHBEnsenITb gCda7UA5PY2kKQ256x/ts70wz+i2farM7m9DbvVNZ3QIk6zuEBkuaFw7c+VHjiOb vdDrE7fkbRfn0XxHvnDFi8h40JeVqEyAtBjhRI7C2JcsNoCGigHT9cmbMMCWIDv3 IYQkffqF3XYjmKRZFAFBgYoHm/s1JvUhlwcvRrCIT1XFFo3ijgMwDsFslotnyuKn +SPWBDwJndWxr3ZTjQmf7t5H9CF9BIpeq/pKHnEtbNE6Awv54loUteakBRqTUIrH Aw1Rc4JIvwYynhwofzGQXHFx7TswK8y1vQtgUB2ZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUmEAqtrO6XPn4+RYInDyRYWUByxowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYwZjg1YTQwLTMwMzQtNDZlMS1hNTJiLTY1Njk4NjdjNzFhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCTbDANBgkqhkiG9w0BAQsFAAOCAQEAMzFq3a420kbVLI8smM66jFExheGH 9KuPUiOp5QGHX3ywdWT9v9Q7CLEAFISEJceWl7EZCJa71gjHqXGZF9k3EfU51RBZ FYgJ7w8porIWY/KR41JBRYRXZnLNrfhhur3AsOTzSqTRqmSseyLGs26fFB6aHe3W g1/jLCXrC00UfeWklphPm0dgUfij1VrcdM9YSBpwoqrh7peGHfPNdlBecpZKZch1 /xtkdKY0bCVVi+9+Zjo+6MwpP6ypC7Jo+IHjohwHlRe8zReXyMuXmhUla8SnR1SY 6zKXpHE014yQXVJHiyQJukjzu4jROAWzyaI6c8VkUgHdmaqndvIvZMeTow== -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:01 2025 by rpki-client