$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1478bf7-fa63-45f0-9446-063288b8821d.roa File: d1478bf7-fa63-45f0-9446-063288b8821d.roa (raw, json) Hash identifier: ofXFngD3VOy+IHHHI4hpMgFJsz3wkyEGzWkZ3tUEQQk= Subject key identifier: 6D:2E:CD:A5:5F:B5:89:BB:7C:68:86:2C:83:E6:A3:DF:12:0D:E0:54 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11D6D2D051713F922A5F4FCCD4E4E5DE83103920 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1478bf7-fa63-45f0-9446-063288b8821d.roa Signing time: Wed 09 Apr 2025 00:32:03 +0000 ROA not before: Wed 09 Apr 2025 00:32:03 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d6:d2:d0:51:71:3f:92:2a:5f:4f:cc:d4:e4:e5:de:83:10:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:32:03 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: serialNumber=1221ba0cc6871403c746ec0729cb957bd3241afbe9d8b028339d0cdafd3d61da, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:71:3b:9b:cb:66:cf:e8:3d:1a:a8:dc:8c:d1: d4:f9:df:1d:ca:a7:aa:97:30:e9:46:2a:34:f5:11: a8:3f:80:81:b9:3d:7b:fe:c2:1c:c3:ce:1f:20:0c: ca:69:16:4d:c5:2a:91:9f:87:3a:17:64:0a:dc:75: 4d:0e:a5:39:02:82:7b:1f:d4:10:85:6f:d4:84:f0: 8d:b4:8d:df:8d:64:6a:47:8c:07:a0:3d:06:e1:2c: 80:06:da:97:aa:5a:b8:56:3f:ea:21:4f:1b:fb:f2: 93:0d:d4:8f:d8:e4:7d:ea:ff:6e:95:f8:97:26:de: b7:9d:63:3b:4d:e2:81:d9:63:29:ae:26:42:6b:2f: 15:c8:33:be:c4:18:66:9f:4b:69:59:92:01:ed:d4: e0:56:b5:07:ba:77:62:a3:24:2a:61:4f:30:59:05: b8:fe:10:31:46:c8:ab:7d:de:98:1a:2e:b8:3e:b6: 33:ba:f7:ac:58:e8:d8:88:69:41:57:9b:f5:17:e7: 59:07:b3:3b:8a:cc:66:94:2e:6f:ee:3a:83:09:26: 51:ef:51:4c:e7:be:fe:98:9c:c6:af:13:cf:c5:d2: 19:dc:9b:cf:5a:12:c1:0a:f9:32:d0:24:74:6c:6a: 4a:f5:01:2f:de:12:1e:04:dd:12:5a:52:10:f9:e6: 73:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2E:CD:A5:5F:B5:89:BB:7C:68:86:2C:83:E6:A3:DF:12:0D:E0:54 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1478bf7-fa63-45f0-9446-063288b8821d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.82.0/24 Signature Algorithm: sha256WithRSAEncryption 16:39:20:34:9d:64:dc:71:a6:36:e6:4a:1c:db:ba:86:2a:a7: 29:ee:ae:bc:22:dd:4e:30:9a:55:44:f1:a0:39:15:2d:5d:1c: 34:4e:d8:af:ff:de:41:43:13:f2:d1:d5:6c:b6:ad:f7:04:8c: ce:d9:0d:5c:3a:34:14:37:5c:16:14:b0:13:66:d3:f2:2d:ca: 0f:d4:9e:ea:4e:c7:b7:c4:ba:e7:27:2b:9f:9d:f2:dc:1b:39: cf:12:41:50:28:b3:88:3e:30:2c:4b:9c:e7:6f:a9:1f:68:43: e6:41:cb:82:e4:af:c8:f2:a5:69:56:2d:05:3c:e4:fe:b3:85: 55:59:79:b4:f3:8e:3d:97:08:8e:d3:b1:f5:f1:2a:c8:99:c9: 95:4e:2e:26:0a:6a:6c:48:4f:71:3b:2f:62:b0:1f:7e:e8:e8: 15:2b:2a:8f:0a:f0:10:4f:ba:61:ad:07:10:78:00:da:f2:3f: c0:99:47:0b:83:c0:e1:48:56:15:23:aa:95:d5:57:d1:1f:a1: 82:09:e6:86:b4:6e:a3:a2:c7:f9:40:ab:a3:66:96:04:cf:d9: 7c:74:53:08:fe:f2:a4:fc:b8:97:d8:76:2a:36:e9:64:8f:03: b5:11:1a:93:b0:36:83:b7:61:8c:ab:5a:33:1f:ff:41:e0:e7: 34:5f:97:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEdbS0FFxP5IqX0/M1OTl3oMQOSAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDAzMjAzWhcNMjUwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjIxYmEwY2M2ODcxNDAzYzc0NmVjMDcyOWNiOTU3YmQz MjQxYWZiZTlkOGIwMjgzMzlkMGNkYWZkM2Q2MWRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrcTuby2bP6D0aqNyM0dT53x3Kp6qXMOlGKjT1Eag/gIG5 PXv+whzDzh8gDMppFk3FKpGfhzoXZArcdU0OpTkCgnsf1BCFb9SE8I20jd+NZGpH jAegPQbhLIAG2peqWrhWP+ohTxv78pMN1I/Y5H3q/26V+Jcm3redYztN4oHZYymu JkJrLxXIM77EGGafS2lZkgHt1OBWtQe6d2KjJCphTzBZBbj+EDFGyKt93pgaLrg+ tjO696xY6NiIaUFXm/UX51kHszuKzGaULm/uOoMJJlHvUUznvv6YnMavE8/F0hnc m89aEsEK+TLQJHRsakr1AS/eEh4E3RJaUhD55nO5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbS7NpV+1ibt8aIYsg+aj3xIN4FQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QxNDc4YmY3LWZhNjMtNDVmMC05NDQ2LTA2MzI4OGI4ODIxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/FIwDQYJKoZIhvcNAQELBQADggEBABY5IDSdZNxxpjbmShzbuoYqpynu rrwi3U4wmlVE8aA5FS1dHDRO2K//3kFDE/LR1Wy2rfcEjM7ZDVw6NBQ3XBYUsBNm 0/Ityg/UnupOx7fEuucnK5+d8twbOc8SQVAos4g+MCxLnOdvqR9oQ+ZBy4Lkr8jy pWlWLQU85P6zhVVZebTzjj2XCI7TsfXxKsiZyZVOLiYKamxIT3E7L2KwH37o6BUr Ko8K8BBPumGtBxB4ANryP8CZRwuDwOFIVhUjqpXVV9EfoYIJ5oa0bqOix/lAq6Nm lgTP2Xx0Uwj+8qT8uJfYdio26WSPA7URGpOwNoO3YYyrWjMf/0Hg5zRfl54= -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:44 2025 by rpki-client