$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c892754a-62b6-4554-aef5-f62fabca2d48.roa File: c892754a-62b6-4554-aef5-f62fabca2d48.roa (raw, json) Hash identifier: lTs677ZFU5kQBvv0v5lxT94ir4JkzWLgOolgr1Xlr/E= Subject key identifier: AA:72:D5:34:9C:8F:2A:DE:23:EC:AF:FF:39:07:B7:11:96:B3:F6:9C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A3988657F5487405067DCF508C2BFE1D5242854 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c892754a-62b6-4554-aef5-f62fabca2d48.roa Signing time: Sat 26 Apr 2025 00:00:15 +0000 ROA not before: Sat 26 Apr 2025 00:00:15 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 192.251.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:39:88:65:7f:54:87:40:50:67:dc:f5:08:c2:bf:e1:d5:24:28:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 26 00:00:15 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=759d9136734ab57ef99b81ebd939a0969fb93c773a7bdeaefc40ec3405586d7f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:37:bc:bb:8a:35:cb:ef:f7:c3:24:c4:e2:ff: 68:04:0d:90:00:4d:af:60:22:52:34:60:c4:9a:8d: bd:09:79:a9:51:ae:d1:12:29:d7:cb:b7:87:e0:27: 9d:b1:2e:b9:aa:8c:79:57:90:08:f4:40:92:77:57: 97:10:59:e5:47:68:f5:b5:0e:88:4a:e1:bc:e7:10: 5a:70:98:ce:d1:7e:3b:69:3d:2a:6d:14:34:ce:00: ea:33:9a:43:a2:97:c6:97:3c:a6:b1:ea:40:bc:52: 56:5f:2d:e4:43:d1:bc:71:f7:be:ad:b9:7f:55:6c: 89:0d:0a:22:91:2e:56:e4:db:bf:cd:35:ad:ef:cd: 53:db:61:fe:c2:34:1a:8d:5c:72:0e:00:62:f3:b9: 69:29:1a:d6:2b:cb:38:34:9e:82:42:04:53:1b:29: bf:f5:cb:3a:df:a6:9d:cd:f8:6b:d7:b8:0a:2c:40: 03:23:c6:fc:57:8b:22:c9:c0:d1:c6:b4:44:e0:13: 47:a8:79:64:5a:8e:27:3e:12:52:ac:04:6e:64:fe: 0f:2d:f7:43:1c:06:7a:13:96:33:df:d2:36:1f:d9: e6:25:a6:45:18:a9:47:52:47:3b:3d:9a:bc:f3:20: e9:98:b8:7d:9e:02:88:85:cd:34:cc:a5:11:85:48: da:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:72:D5:34:9C:8F:2A:DE:23:EC:AF:FF:39:07:B7:11:96:B3:F6:9C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c892754a-62b6-4554-aef5-f62fabca2d48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.251.142.0/24 Signature Algorithm: sha256WithRSAEncryption 45:df:15:86:fb:cb:a4:da:ae:44:79:13:c4:9e:43:ca:8c:4c: 9d:2e:e2:0f:2e:d9:2a:dc:95:40:85:40:f3:b4:2b:bc:ef:cd: fc:0d:12:8c:ef:56:08:57:1b:11:7c:e0:2d:1c:5e:6f:b7:78: 48:b7:76:5a:81:c4:b9:a9:23:11:4d:ba:a7:ba:59:f1:e8:6d: c0:76:b6:3f:c0:2d:a4:d4:1c:87:0a:98:41:71:31:ed:1a:36: 4f:a0:a0:e5:6b:35:d1:33:dd:79:a2:74:9e:25:b5:b3:db:a2: 52:9b:67:54:3d:fc:8d:eb:ad:9b:f3:3c:fc:d9:5c:2f:58:66: da:e0:58:d0:b9:a9:75:ed:cc:46:9a:80:3c:2b:5d:a6:2d:40: fe:5c:52:77:8d:50:fe:e7:5a:cf:64:22:e0:09:86:02:56:d9: 8c:05:6e:60:dc:8f:cc:e5:ba:1a:21:cc:40:4d:7b:25:ef:02: 9e:9d:69:4c:d8:6a:00:51:68:b5:a0:c2:39:18:b9:90:65:67: 56:0a:a6:60:5f:40:30:43:cc:fc:c9:62:1c:4b:55:ac:37:fd: 50:77:7d:ef:da:e7:e2:7e:2c:2f:07:c9:e5:b1:7e:07:a6:26: 2d:7a:06:fa:14:7f:45:3c:7b:0c:c2:03:1f:b2:dc:26:ee:cc: 55:0c:e8:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKjmIZX9Uh0BQZ9z1CMK/4dUkKFQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI2MDAwMDE1WhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTlkOTEzNjczNGFiNTdlZjk5YjgxZWJkOTM5YTA5Njlm YjkzYzc3M2E3YmRlYWVmYzQwZWMzNDA1NTg2ZDdmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjN7y7ijXL7/fDJMTi/2gEDZAATa9gIlI0YMSajb0JealR rtESKdfLt4fgJ52xLrmqjHlXkAj0QJJ3V5cQWeVHaPW1DohK4bznEFpwmM7Rfjtp PSptFDTOAOozmkOil8aXPKax6kC8UlZfLeRD0bxx976tuX9VbIkNCiKRLlbk27/N Na3vzVPbYf7CNBqNXHIOAGLzuWkpGtYryzg0noJCBFMbKb/1yzrfpp3N+GvXuAos QAMjxvxXiyLJwNHGtETgE0eoeWRajic+ElKsBG5k/g8t90McBnoTljPf0jYf2eYl pkUYqUdSRzs9mrzzIOmYuH2eAoiFzTTMpRGFSNoNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqnLVNJyPKt4j7K//OQe3EZaz9pwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4OTI3NTRhLTYyYjYtNDU1NC1hZWY1LWY2MmZhYmNhMmQ0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADA+44wDQYJKoZIhvcNAQELBQADggEBAEXfFYb7y6TarkR5E8SeQ8qMTJ0u 4g8u2SrclUCFQPO0K7zvzfwNEozvVghXGxF84C0cXm+3eEi3dlqBxLmpIxFNuqe6 WfHobcB2tj/ALaTUHIcKmEFxMe0aNk+goOVrNdEz3XmidJ4ltbPbolKbZ1Q9/I3r rZvzPPzZXC9YZtrgWNC5qXXtzEaagDwrXaYtQP5cUneNUP7nWs9kIuAJhgJW2YwF bmDcj8zluhohzEBNeyXvAp6daUzYagBRaLWgwjkYuZBlZ1YKpmBfQDBDzPzJYhxL Vaw3/VB3fe/a5+J+LC8HyeWxfgemJi16BvoUf0U8ewzCAx+y3CbuzFUM6A4= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:33 2025 by rpki-client