$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67111c8b-4bd5-4381-9d25-28015780cd00.roa File: 67111c8b-4bd5-4381-9d25-28015780cd00.roa (raw, json) Hash identifier: mE1w0F2wzcsgspfrjQzjPxZHxDVtoImOchr6ClmHcH4= Subject key identifier: 40:B4:E5:53:44:47:9A:51:A5:8F:E6:09:62:CA:93:6C:9B:A2:38:CA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 33D658E007CF1AA2CB1DA36F5611561A4655DB5F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67111c8b-4bd5-4381-9d25-28015780cd00.roa Signing time: Fri 25 Apr 2025 15:11:32 +0000 ROA not before: Fri 25 Apr 2025 15:11:32 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 88.108.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d6:58:e0:07:cf:1a:a2:cb:1d:a3:6f:56:11:56:1a:46:55:db:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 15:11:32 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=2c53c34822bf610ad61118f144b5eecdaf1ec99ecb7b9be8d3908e22d947e66e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:a9:42:eb:a0:59:57:72:ae:a3:05:53:4f: 9e:db:3e:d0:96:0b:ae:23:ea:51:05:36:c4:d1:3e: 31:33:15:b4:87:36:2b:1f:b7:c6:4b:57:fe:ce:26: db:04:d9:19:26:cd:0e:f1:05:5b:d8:8b:dd:de:5b: 62:38:bc:81:6b:31:4b:62:1e:71:dc:e3:74:17:6f: 2a:40:9e:1c:01:6f:a2:83:a5:38:f9:6a:c9:68:63: 3e:80:45:99:25:fa:3b:9c:e8:9f:4d:89:4c:39:d2: a7:13:cf:31:da:1f:e7:42:54:d2:4a:0b:5b:af:c2: 11:cc:0e:44:d8:62:cb:7c:61:0a:72:be:78:98:17: f9:f4:6f:e1:cb:e8:60:d5:b4:89:dc:4d:6d:c0:f7: 01:03:a8:78:13:c7:e9:0f:18:70:4d:ef:f2:fd:33: 45:fa:4f:7b:19:01:5e:a8:a5:97:1c:cf:03:76:ab: b3:fb:ae:fc:04:fb:83:cc:a9:57:b8:1e:36:57:69: 94:62:4b:e2:4d:fe:7f:56:91:0f:20:01:50:be:a6: 3a:38:c5:7d:25:c9:02:7e:81:28:e9:db:e1:1b:cb: 03:c7:fd:39:15:42:ab:7e:d0:80:1a:ea:60:13:dd: e2:92:9a:5c:f4:68:dd:a4:da:47:f1:71:1d:d5:af: d5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B4:E5:53:44:47:9A:51:A5:8F:E6:09:62:CA:93:6C:9B:A2:38:CA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67111c8b-4bd5-4381-9d25-28015780cd00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.108.0.0/14 Signature Algorithm: sha256WithRSAEncryption a7:cb:2c:53:04:79:a8:e5:33:73:0d:31:8f:4c:ca:e6:72:ff: 59:fb:06:3d:bd:70:85:cc:ca:f8:ec:4d:c7:72:02:b2:2a:fd: 5a:5f:d4:a4:27:cb:76:62:16:ae:0f:b8:ec:a5:90:a8:26:6c: ea:df:dc:c4:94:ce:9f:9f:42:c4:e6:ac:98:1f:8a:40:fc:c9: 12:a1:9c:5a:b8:58:f9:7a:22:37:41:38:52:e9:96:f3:0e:1f: 3f:75:91:5d:f5:0a:a7:7c:40:fb:9c:89:7c:14:ca:f0:07:2b: 20:62:1b:67:3c:65:8f:61:f5:b9:c2:da:fc:04:0d:3a:df:c4: 6d:cc:19:0f:7f:c8:c5:4c:d4:fd:dc:cc:17:92:d4:3b:56:35: a9:a5:65:93:94:1e:54:b9:b1:53:2d:d7:db:51:86:a6:77:11: 37:b7:e1:ae:af:de:80:bc:d4:79:bc:b4:4a:71:99:cb:e0:61: c1:2c:14:0f:70:a5:cf:3b:37:50:da:0b:1b:3f:85:62:85:fd: 1e:48:dc:b6:74:b1:d3:24:3e:99:a0:24:88:a6:b7:fe:6d:7e: c3:e9:bf:1c:7a:60:5b:18:e3:68:e4:fc:3e:bf:1d:2e:fc:74: 1e:7c:f8:82:dd:9e:cb:c8:5a:af:28:f2:f3:19:ac:e8:8a:ed: df:9d:bc:e3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUM9ZY4AfPGqLLHaNvVhFWGkZV218wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MTUxMTMyWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYzUzYzM0ODIyYmY2MTBhZDYxMTE4ZjE0NGI1ZWVjZGFm MWVjOTllY2I3YjliZThkMzkwOGUyMmQ5NDdlNjZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+0alC66BZV3KuowVTT57bPtCWC64j6lEFNsTRPjEzFbSH Nisft8ZLV/7OJtsE2RkmzQ7xBVvYi93eW2I4vIFrMUtiHnHc43QXbypAnhwBb6KD pTj5asloYz6ARZkl+juc6J9NiUw50qcTzzHaH+dCVNJKC1uvwhHMDkTYYst8YQpy vniYF/n0b+HL6GDVtIncTW3A9wEDqHgTx+kPGHBN7/L9M0X6T3sZAV6opZcczwN2 q7P7rvwE+4PMqVe4HjZXaZRiS+JN/n9WkQ8gAVC+pjo4xX0lyQJ+gSjp2+EbywPH /TkVQqt+0IAa6mAT3eKSmlz0aN2k2kfxcR3Vr9XPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQLTlU0RHmlGlj+YJYsqTbJuiOMowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3MTExYzhiLTRiZDUtNDM4MS05ZDI1LTI4MDE1NzgwY2QwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwJYbDANBgkqhkiG9w0BAQsFAAOCAQEAp8ssUwR5qOUzcw0xj0zK5nL/WfsG Pb1whczK+OxNx3ICsir9Wl/UpCfLdmIWrg+47KWQqCZs6t/cxJTOn59CxOasmB+K QPzJEqGcWrhY+XoiN0E4UumW8w4fP3WRXfUKp3xA+5yJfBTK8AcrIGIbZzxlj2H1 ucLa/AQNOt/EbcwZD3/IxUzU/dzMF5LUO1Y1qaVlk5QeVLmxUy3X21GGpncRN7fh rq/egLzUeby0SnGZy+BhwSwUD3Clzzs3UNoLGz+FYoX9HkjctnSx0yQ+maAkiKa3 /m1+w+m/HHpgWxjjaOT8Pr8dLvx0Hnz4gt2ey8haryjy8xms6Irt35284w== -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:54 2025 by rpki-client