$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8dd3bb1-ba43-44ca-9cd5-560d785c94a5.roa File: d8dd3bb1-ba43-44ca-9cd5-560d785c94a5.roa (raw, json) Hash identifier: LhxE97H/Fkv10+OrRnqiaLJkcInG41yMByiAxA7elwA= Subject key identifier: 44:64:D0:A2:3E:42:E6:75:D4:3C:FE:95:43:68:7F:98:A5:9F:27:C9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 540AE506B3A1C3D530829885EAC1B56960461F8A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8dd3bb1-ba43-44ca-9cd5-560d785c94a5.roa Signing time: Mon 07 Apr 2025 17:07:05 +0000 ROA not before: Mon 07 Apr 2025 17:07:05 +0000 ROA not after: Mon 12 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.254.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:0a:e5:06:b3:a1:c3:d5:30:82:98:85:ea:c1:b5:69:60:46:1f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 7 17:07:05 2025 GMT Not After : May 12 23:59:59 2025 GMT Subject: serialNumber=89b015595e80f57de2f59b4cdd67afc6cb6ca3342a9cef6e7a3cbfb6d439b643, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:46:90:0f:81:04:a3:00:c7:dc:04:64:e1:6d: e4:e7:a4:5d:57:74:9e:10:97:36:0a:bd:f6:ff:77: 3a:54:ed:dc:30:98:8c:11:b4:e7:7c:bb:b7:fa:01: 4a:6e:6a:94:9b:ef:51:e8:bb:41:d1:ad:99:7f:45: f4:47:bf:08:39:0a:3b:03:d6:0d:c9:ef:03:65:c7: 7f:f8:94:ea:03:db:58:14:4f:26:cc:46:66:25:11: 65:e8:32:77:08:ce:ba:7b:2b:b6:b3:be:88:7a:65: 18:cf:84:d6:e1:8d:d5:8d:d7:1f:9d:f2:e0:b2:08: 5e:f0:b4:f9:b0:22:82:0a:39:b6:27:3f:48:1c:31: 36:eb:3d:f8:25:56:bd:3d:9a:af:5f:f7:c2:59:52: 85:4a:ad:0f:66:84:c3:db:66:e5:7a:38:5c:12:16: e1:23:fe:10:cd:9d:6c:9d:61:4c:d8:d3:35:95:de: 1b:2a:12:6c:24:71:fa:6a:7f:73:f3:2e:2f:e2:0a: d9:0f:fe:5c:2f:9a:dd:6f:8c:31:2c:1b:f9:da:7e: 0e:80:25:01:a7:07:c8:c7:30:da:10:fb:f7:89:af: ec:1e:40:37:00:f1:3f:52:e1:34:9b:56:af:0e:58: a0:e6:d3:50:37:aa:fc:ff:04:d7:c5:34:20:c1:be: da:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:64:D0:A2:3E:42:E6:75:D4:3C:FE:95:43:68:7F:98:A5:9F:27:C9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8dd3bb1-ba43-44ca-9cd5-560d785c94a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.254.16.0/22 Signature Algorithm: sha256WithRSAEncryption 57:c0:c9:5c:c3:bc:4c:46:4f:90:55:73:4e:51:fd:76:a9:14: 11:6f:49:c4:08:12:0c:04:df:22:08:2c:59:9b:61:6a:e7:d6: 8a:f1:53:ec:64:5d:2b:dd:1a:c4:f2:28:63:a5:4a:f0:5c:7e: 94:a8:e7:74:38:dc:28:48:ee:85:a8:4a:0f:7e:27:1b:8e:9c: ef:4e:cb:6c:0e:18:41:7c:7e:ff:39:ac:8d:ee:cd:35:ed:fc: 62:bf:05:d7:1d:56:12:67:63:c9:b6:62:37:42:85:e1:05:eb: 41:14:8c:9c:11:08:ba:38:5a:b5:7a:27:75:a1:fd:47:4b:7e: 2a:5a:cb:00:7a:61:5a:b8:b6:37:01:e9:43:ee:5e:da:59:cc: 1a:59:fb:52:b2:0b:f4:4c:44:7d:a2:a4:33:26:f5:45:48:ef: c6:2a:5a:a2:ac:1d:bd:5c:f7:b6:5f:1e:b9:de:70:d1:f2:32: 31:42:2f:99:25:71:c0:0d:7a:89:ce:1a:2b:43:7a:8d:6b:f1: 9b:a0:17:15:71:30:47:31:34:de:b0:62:8c:d2:3f:a8:0b:85: 57:4f:6b:97:0e:55:29:23:d0:ef:d4:4b:ce:24:fd:21:97:2b: 88:4e:ec:d9:db:7b:57:68:54:31:10:2a:64:08:81:27:c8:4d: da:fa:88:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVArlBrOhw9UwgpiF6sG1aWBGH4owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA3MTcwNzA1WhcNMjUwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4OWIwMTU1OTVlODBmNTdkZTJmNTliNGNkZDY3YWZjNmNi NmNhMzM0MmE5Y2VmNmU3YTNjYmZiNmQ0MzliNjQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDURpAPgQSjAMfcBGThbeTnpF1XdJ4QlzYKvfb/dzpU7dww mIwRtOd8u7f6AUpuapSb71Hou0HRrZl/RfRHvwg5CjsD1g3J7wNlx3/4lOoD21gU TybMRmYlEWXoMncIzrp7K7azvoh6ZRjPhNbhjdWN1x+d8uCyCF7wtPmwIoIKObYn P0gcMTbrPfglVr09mq9f98JZUoVKrQ9mhMPbZuV6OFwSFuEj/hDNnWydYUzY0zWV 3hsqEmwkcfpqf3PzLi/iCtkP/lwvmt1vjDEsG/nafg6AJQGnB8jHMNoQ+/eJr+we QDcA8T9S4TSbVq8OWKDm01A3qvz/BNfFNCDBvtqbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURGTQoj5C5nXUPP6VQ2h/mKWfJ8kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4ZGQzYmIxLWJhNDMtNDRjYS05Y2Q1LTU2MGQ3ODVjOTRhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX/hAwDQYJKoZIhvcNAQELBQADggEBAFfAyVzDvExGT5BVc05R/XapFBFv ScQIEgwE3yIILFmbYWrn1orxU+xkXSvdGsTyKGOlSvBcfpSo53Q43ChI7oWoSg9+ JxuOnO9Oy2wOGEF8fv85rI3uzTXt/GK/BdcdVhJnY8m2YjdCheEF60EUjJwRCLo4 WrV6J3Wh/UdLfipaywB6YVq4tjcB6UPuXtpZzBpZ+1KyC/RMRH2ipDMm9UVI78Yq WqKsHb1c97ZfHrnecNHyMjFCL5klccANeonOGitDeo1r8ZugFxVxMEcxNN6wYozS P6gLhVdPa5cOVSkj0O/US84k/SGXK4hO7Nnbe1doVDEQKmQIgSfITdr6iOQ= -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:55 2025 by rpki-client