$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a649a23c-1e8e-45ad-bd04-c8fa20a62c33.roa File: a649a23c-1e8e-45ad-bd04-c8fa20a62c33.roa (raw, json) Hash identifier: yfnMU3U8XHIUWmKqyvogy5hGAfr9G1TmxmL/cVY3GsY= Subject key identifier: 16:7A:5E:AB:9E:D1:DA:ED:4C:DE:87:C0:57:20:32:2A:B3:A1:0D:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 373D46E08CC43836A54AF524CF0D5F2DB6BA9538 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a649a23c-1e8e-45ad-bd04-c8fa20a62c33.roa Signing time: Mon 14 Apr 2025 15:11:09 +0000 ROA not before: Mon 14 Apr 2025 15:11:09 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 149.98.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:3d:46:e0:8c:c4:38:36:a5:4a:f5:24:cf:0d:5f:2d:b6:ba:95:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 14 15:11:09 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=961725571b8302496dcf513e146a2e13c71cfd52aa2ab0a9afd14fc5d6136742, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2a:24:cf:52:da:94:5c:a2:f4:40:67:97:6a: db:0d:48:94:8b:9c:30:8d:d3:e5:12:4c:4e:1b:94: da:0f:11:b0:ec:09:c3:c2:d6:76:d2:66:db:60:1e: 2f:a2:1c:48:c0:f3:6d:43:ac:76:56:dd:14:a4:e5: 7b:5d:f8:de:fa:d7:bb:cc:10:ff:ba:57:eb:ea:93: 7a:15:6d:1c:89:c6:39:61:76:f4:c0:cc:a8:aa:e3: ea:73:27:4a:76:a8:89:89:ee:01:32:71:11:51:56: be:ec:00:39:24:53:a4:24:e7:7b:b6:b3:70:2e:1b: 0b:4a:af:4c:c5:0f:6c:1f:9f:9b:58:60:b1:c9:c9: 15:32:29:2d:2c:df:5d:67:4c:df:15:23:10:8a:76: af:b7:c0:aa:cd:e7:07:ac:54:ca:0e:7f:57:45:c4: 3f:79:02:e0:52:2c:db:29:cd:9f:0e:e7:83:78:8d: 97:dd:a4:6a:09:66:28:8b:79:c6:52:e1:ba:2a:1c: d1:98:bb:58:bb:72:ab:c4:ac:24:04:b7:f8:ce:15: 70:a3:1b:d9:0a:eb:e3:4f:1d:9a:f5:89:30:1d:e7: e6:9e:9a:4b:9f:b3:af:e2:c8:83:a9:4d:00:3c:f0: 7e:b9:ad:72:4e:94:46:dd:f1:b0:53:b6:9f:02:c7: e1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7A:5E:AB:9E:D1:DA:ED:4C:DE:87:C0:57:20:32:2A:B3:A1:0D:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a649a23c-1e8e-45ad-bd04-c8fa20a62c33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.98.0.0/16 Signature Algorithm: sha256WithRSAEncryption d4:e3:54:1d:6c:ad:02:6a:4f:9b:d8:26:12:d9:e0:43:c1:6d: 7c:13:53:f2:79:99:7f:16:32:ac:5f:54:03:73:7c:b5:de:19: 33:4a:4b:c1:d2:d7:34:d9:f3:64:dd:0f:ce:1a:37:bd:6c:40: a9:3b:cb:ce:14:ec:0e:ac:0b:75:b7:cf:f0:59:cb:a2:2e:f6: fd:4a:43:00:33:b2:e8:54:0c:25:fc:3a:e8:dd:05:c1:43:fa: e4:c0:8d:84:b5:13:77:4e:22:e4:f0:25:bf:43:65:97:11:6c: c4:f6:c9:03:56:a3:d1:09:1a:cf:6f:c4:02:99:92:2e:b3:da: 23:dc:e5:57:a4:5c:30:95:db:83:be:af:d2:5e:c5:c7:d2:58: a7:44:c8:ad:dc:63:ae:e6:77:4a:3d:b3:98:9f:10:b3:03:ce: 06:79:28:ea:c8:5f:67:0d:d3:bd:a2:5a:c1:47:c8:b2:cf:0e: f3:07:5b:53:73:0d:01:90:b2:7c:bf:c1:40:4f:44:f8:ae:b0: 12:c7:19:b6:8b:98:d9:e3:3b:d4:82:3d:e3:93:a0:6b:f9:93: ad:ab:24:47:94:2a:a2:b8:bf:37:32:b8:e5:36:24:97:53:96: 3e:13:0e:ee:9c:0a:84:27:f8:3c:d4:20:c4:40:ab:47:d4:2a: 4b:80:b8:d3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNz1G4IzEODalSvUkzw1fLba6lTgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE0MTUxMTA5WhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjE3MjU1NzFiODMwMjQ5NmRjZjUxM2UxNDZhMmUxM2M3 MWNmZDUyYWEyYWIwYTlhZmQxNGZjNWQ2MTM2NzQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJKiTPUtqUXKL0QGeXatsNSJSLnDCN0+USTE4blNoPEbDs CcPC1nbSZttgHi+iHEjA821DrHZW3RSk5Xtd+N7617vMEP+6V+vqk3oVbRyJxjlh dvTAzKiq4+pzJ0p2qImJ7gEycRFRVr7sADkkU6Qk53u2s3AuGwtKr0zFD2wfn5tY YLHJyRUyKS0s311nTN8VIxCKdq+3wKrN5wesVMoOf1dFxD95AuBSLNspzZ8O54N4 jZfdpGoJZiiLecZS4boqHNGYu1i7cqvErCQEt/jOFXCjG9kK6+NPHZr1iTAd5+ae mkufs6/iyIOpTQA88H65rXJOlEbd8bBTtp8Cx+HTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUFnpeq57R2u1M3ofAVyAyKrOhDZ0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E2NDlhMjNjLTFlOGUtNDVhZC1iZDA0LWM4ZmEyMGE2MmMzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCVYjANBgkqhkiG9w0BAQsFAAOCAQEA1ONUHWytAmpPm9gmEtngQ8FtfBNT 8nmZfxYyrF9UA3N8td4ZM0pLwdLXNNnzZN0Pzho3vWxAqTvLzhTsDqwLdbfP8FnL oi72/UpDADOy6FQMJfw66N0FwUP65MCNhLUTd04i5PAlv0NllxFsxPbJA1aj0Qka z2/EApmSLrPaI9zlV6RcMJXbg76v0l7Fx9JYp0TIrdxjruZ3Sj2zmJ8QswPOBnko 6shfZw3TvaJawUfIss8O8wdbU3MNAZCyfL/BQE9E+K6wEscZtouY2eM71II945Og a/mTraskR5Qqori/NzK45TYkl1OWPhMO7pwKhCf4PNQgxECrR9QqS4C40w== -----END CERTIFICATE-----Generated at Sat Apr 26 15:52:16 2025 by rpki-client