$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67513ede-733b-4d8d-92a1-496d530299e4.roa File: 67513ede-733b-4d8d-92a1-496d530299e4.roa (raw, json) Hash identifier: errqhA+anqbbSCgU6ohw2RPzZX9AJsee3xcvQSM8mIQ= Subject key identifier: 31:35:E7:40:FD:BD:AB:6B:63:B2:96:95:9C:63:FF:66:89:5B:46:55 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5940372C71A0B3CC00EC8CA3C00E493A497643CA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67513ede-733b-4d8d-92a1-496d530299e4.roa Signing time: Sat 26 Apr 2025 00:00:13 +0000 ROA not before: Sat 26 Apr 2025 00:00:13 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 192.157.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:40:37:2c:71:a0:b3:cc:00:ec:8c:a3:c0:0e:49:3a:49:76:43:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 26 00:00:13 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=b57789eda8af515dd5977fecc914589dffce22dccdd4e7840ccba428481ff98b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fc:05:4c:e9:da:1a:1d:5d:92:86:90:94:49: a9:bf:37:4a:a6:89:79:6f:66:ed:84:f4:1b:98:af: d7:33:d2:0d:b7:30:96:1d:b9:04:c8:88:92:75:f3: 36:b1:92:ac:a1:5f:dc:e2:f6:88:1b:3f:f4:69:19: e8:e2:8f:08:17:09:0c:41:95:aa:6d:b6:17:85:a9: cc:72:f4:78:15:c1:54:51:0a:11:15:1d:89:77:6b: 54:30:40:4f:63:37:a2:26:22:51:5f:b0:e9:4b:78: 90:00:89:6e:ef:a8:82:80:1b:19:15:88:73:0c:e5: 08:f4:8c:1b:83:f9:c3:dc:6b:6a:45:84:11:7c:78: 7e:ae:51:26:9a:22:86:19:6b:74:11:bc:cd:fd:00: 54:b2:ca:2b:23:94:ff:e8:42:da:2f:db:f1:f3:de: 2d:d2:65:5b:de:89:9d:e4:35:56:90:df:92:82:75: 39:49:9a:7c:9b:23:97:5a:4d:39:ae:7c:ed:50:40: 61:e7:9b:d4:6b:dc:07:93:a8:93:ab:49:91:10:84: 53:fa:c4:9b:cf:30:52:72:f6:81:8e:a9:a4:8e:05: 93:a6:72:f0:45:49:0e:01:f8:1a:08:5a:57:4b:14: 41:e2:e5:08:d7:53:ff:63:6f:da:f4:64:ec:f4:43: 1e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:35:E7:40:FD:BD:AB:6B:63:B2:96:95:9C:63:FF:66:89:5B:46:55 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67513ede-733b-4d8d-92a1-496d530299e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.157.64.0/21 Signature Algorithm: sha256WithRSAEncryption cf:6e:45:11:73:6c:87:d1:5e:f7:f0:cd:45:8e:18:e7:2a:77: 4a:4c:9e:14:8e:cf:25:3b:a2:e0:d2:35:41:f5:9e:a6:42:59: 78:e9:da:af:b6:4b:3c:79:be:85:f9:a6:50:eb:52:bf:c4:72: 88:21:72:0f:f3:f4:d9:43:61:c6:8e:cb:52:4f:1b:f7:eb:09: ac:49:01:94:1a:69:09:88:8b:61:a0:17:bc:06:b3:98:b7:3a: 41:82:71:39:c1:fc:d5:76:df:ff:60:30:f7:50:a2:7f:60:68: 7f:e3:b5:5d:12:6f:59:53:7d:0a:cd:26:b9:a9:cb:84:53:71: 3a:7b:19:ce:d4:91:c0:a5:b9:bd:a5:d6:3f:3f:05:a1:2e:fd: 5b:76:f5:c5:dd:8d:67:25:29:db:92:49:80:bb:33:40:7a:78: f7:76:12:2f:25:01:8a:bf:ec:56:35:12:24:97:8e:e7:66:5d: 07:78:0f:36:44:71:cf:93:b3:0e:04:55:c4:e0:dc:f1:cf:58: 2f:64:31:dc:a8:ff:cc:2f:96:49:f4:40:74:9a:f7:09:bd:56: 01:ff:e6:de:c6:15:1a:cd:f6:39:c3:24:8b:bd:be:eb:6f:f5: d9:31:68:52:93:37:14:e8:59:15:9a:e7:b2:ff:db:1f:46:c6: 6e:d7:63:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWUA3LHGgs8wA7IyjwA5JOkl2Q8owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI2MDAwMDEzWhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTc3ODllZGE4YWY1MTVkZDU5NzdmZWNjOTE0NTg5ZGZm Y2UyMmRjY2RkNGU3ODQwY2NiYTQyODQ4MWZmOThiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDs/AVM6doaHV2ShpCUSam/N0qmiXlvZu2E9BuYr9cz0g23 MJYduQTIiJJ18zaxkqyhX9zi9ogbP/RpGejijwgXCQxBlapttheFqcxy9HgVwVRR ChEVHYl3a1QwQE9jN6ImIlFfsOlLeJAAiW7vqIKAGxkViHMM5Qj0jBuD+cPca2pF hBF8eH6uUSaaIoYZa3QRvM39AFSyyisjlP/oQtov2/Hz3i3SZVveiZ3kNVaQ35KC dTlJmnybI5daTTmufO1QQGHnm9Rr3AeTqJOrSZEQhFP6xJvPMFJy9oGOqaSOBZOm cvBFSQ4B+BoIWldLFEHi5QjXU/9jb9r0ZOz0Qx4VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMTXnQP29q2tjspaVnGP/ZolbRlUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3NTEzZWRlLTczM2ItNGQ4ZC05MmExLTQ5NmQ1MzAyOTllNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPAnUAwDQYJKoZIhvcNAQELBQADggEBAM9uRRFzbIfRXvfwzUWOGOcqd0pM nhSOzyU7ouDSNUH1nqZCWXjp2q+2Szx5voX5plDrUr/Ecoghcg/z9NlDYcaOy1JP G/frCaxJAZQaaQmIi2GgF7wGs5i3OkGCcTnB/NV23/9gMPdQon9gaH/jtV0Sb1lT fQrNJrmpy4RTcTp7Gc7UkcClub2l1j8/BaEu/Vt29cXdjWclKduSSYC7M0B6ePd2 Ei8lAYq/7FY1EiSXjudmXQd4DzZEcc+Tsw4EVcTg3PHPWC9kMdyo/8wvlkn0QHSa 9wm9VgH/5t7GFRrN9jnDJIu9vutv9dkxaFKTNxToWRWa57L/2x9Gxm7XY6g= -----END CERTIFICATE-----Generated at Sat Apr 26 17:03:21 2025 by rpki-client