$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffb6038f-b139-4708-b914-4c688fc3609a.roa File: ffb6038f-b139-4708-b914-4c688fc3609a.roa (raw, json) Hash identifier: tXqLffjWNbdeCVNU/gs+H8c/XM72usYd+gfUg8WxsNw= Subject key identifier: CF:C3:22:DA:26:E3:62:07:96:5C:42:EB:20:99:01:C9:5E:F1:F2:38 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 166CFBF072CE3C55D6B89DF079DCC66FAC34402D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffb6038f-b139-4708-b914-4c688fc3609a.roa Signing time: Wed 23 Apr 2025 00:40:50 +0000 ROA not before: Wed 23 Apr 2025 00:40:50 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 160.214.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:6c:fb:f0:72:ce:3c:55:d6:b8:9d:f0:79:dc:c6:6f:ac:34:40:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:40:50 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=5d7ed3ecd6ac91fed5df80141ea9efdbe1050afd1ae6600648fc2b3a24e864ac, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a5:b2:32:43:6b:21:0d:45:45:b7:59:91:6e: a0:a3:27:35:03:94:82:77:17:59:b0:5c:bc:21:1d: c4:08:85:ad:8d:15:92:99:c0:94:e1:0d:e1:b2:4c: 37:be:1a:20:67:52:d3:83:aa:71:70:b0:44:10:16: 11:0b:60:04:c3:40:09:32:76:8b:a4:d9:ec:ac:ce: 13:f9:87:d6:2c:55:f9:01:ad:f0:8b:19:ca:d4:d6: cc:f9:d4:22:ef:fd:e2:68:65:ea:a6:9b:52:20:9d: fb:7c:8d:72:33:70:fa:39:dd:7c:75:6a:b3:dd:3b: 8f:35:4d:14:b1:43:39:1d:1e:67:50:ce:2e:03:58: a2:fe:5e:2c:a8:3c:12:74:5d:88:19:76:50:eb:7b: 0f:ef:9c:5e:e2:18:c5:78:cb:34:ab:7a:4a:c9:cb: 6f:b1:6a:c7:3a:26:18:2d:5b:2b:16:30:5a:35:77: 00:d6:50:82:f8:1b:22:b6:98:c0:e3:33:2c:52:b6: 8a:2f:b0:eb:bd:88:5c:2c:60:3f:90:f6:35:28:23: 16:c0:68:e1:1a:19:49:33:43:86:87:b1:44:17:51: 68:8e:52:10:d7:fe:a4:20:e6:da:fb:99:76:f0:96: 9e:f0:7c:1d:fd:6b:f8:90:50:99:3d:fc:29:9d:b6: 3a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C3:22:DA:26:E3:62:07:96:5C:42:EB:20:99:01:C9:5E:F1:F2:38 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffb6038f-b139-4708-b914-4c688fc3609a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.214.0.0/16 Signature Algorithm: sha256WithRSAEncryption 90:eb:46:cc:c8:72:2b:78:a8:98:52:42:13:c8:f1:ca:23:d2: ff:1a:57:9b:ac:0e:59:2b:08:95:3a:0c:f2:fa:cf:cf:09:51: 02:ed:6f:f5:97:98:65:dd:08:8e:60:26:bb:50:49:74:2b:ce: 2d:21:f2:3a:32:74:5d:3b:b4:48:43:c0:e4:95:2d:6f:81:c3: 20:0d:9d:38:bc:46:17:71:89:b1:82:41:10:89:ee:1b:15:14: 05:e9:55:d7:bb:d6:53:5c:51:f5:9d:1c:3f:fa:c6:1b:0c:17: 98:b8:77:20:74:28:51:2e:93:29:6c:26:80:bd:c7:22:8c:30: 10:d5:76:df:ac:ad:29:93:ee:3b:57:c9:21:91:96:1f:50:fc: 44:75:55:57:4e:01:69:df:c7:00:a5:8b:3c:cb:fe:39:42:a7: 12:db:dc:cb:6f:a3:32:6e:ab:8e:ea:8e:27:22:58:0f:3e:6a: d4:d4:19:4b:a3:94:69:56:1a:74:87:9a:c1:6b:39:2f:50:04: fd:75:b0:c3:22:66:43:ca:f3:88:5c:30:b7:05:b3:80:f2:8d: 84:f2:f1:46:b2:1a:95:f1:e0:f2:00:bb:9a:18:b1:7f:ba:95: 9e:db:63:25:8e:63:cd:14:98:4c:03:24:0c:57:4c:f7:00:3c: 0a:ed:98:76 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFmz78HLOPFXWuJ3wedzGb6w0QC0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDA0MDUwWhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDdlZDNlY2Q2YWM5MWZlZDVkZjgwMTQxZWE5ZWZkYmUx MDUwYWZkMWFlNjYwMDY0OGZjMmIzYTI0ZTg2NGFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRpbIyQ2shDUVFt1mRbqCjJzUDlIJ3F1mwXLwhHcQIha2N FZKZwJThDeGyTDe+GiBnUtODqnFwsEQQFhELYATDQAkydouk2eyszhP5h9YsVfkB rfCLGcrU1sz51CLv/eJoZeqmm1Ignft8jXIzcPo53Xx1arPdO481TRSxQzkdHmdQ zi4DWKL+XiyoPBJ0XYgZdlDrew/vnF7iGMV4yzSrekrJy2+xasc6JhgtWysWMFo1 dwDWUIL4GyK2mMDjMyxStoovsOu9iFwsYD+Q9jUoIxbAaOEaGUkzQ4aHsUQXUWiO UhDX/qQg5tr7mXbwlp7wfB39a/iQUJk9/CmdtjrfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUz8Mi2ibjYgeWXELrIJkByV7x8jgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZmYjYwMzhmLWIxMzktNDcwOC1iOTE0LTRjNjg4ZmMzNjA5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCg1jANBgkqhkiG9w0BAQsFAAOCAQEAkOtGzMhyK3iomFJCE8jxyiPS/xpX m6wOWSsIlToM8vrPzwlRAu1v9ZeYZd0IjmAmu1BJdCvOLSHyOjJ0XTu0SEPA5JUt b4HDIA2dOLxGF3GJsYJBEInuGxUUBelV17vWU1xR9Z0cP/rGGwwXmLh3IHQoUS6T KWwmgL3HIowwENV236ytKZPuO1fJIZGWH1D8RHVVV04Bad/HAKWLPMv+OUKnEtvc y2+jMm6rjuqOJyJYDz5q1NQZS6OUaVYadIeawWs5L1AE/XWwwyJmQ8rziFwwtwWz gPKNhPLxRrIalfHg8gC7mhixf7qVnttjJY5jzRSYTAMkDFdM9wA8Cu2Ydg== -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:19 2025 by rpki-client