$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/8bae045f-365b-43cf-99fc-12cbcbce5f67.roa File: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (raw, json) Hash identifier: Dv9hURagZrOVYsj6cDCUGn+2JQiPGtdTfEINqBm+zWs= Subject key identifier: 27:4E:A4:12:44:47:B5:5C:84:4F:9F:3E:A7:FF:3A:76:79:87:EB:46 Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 739B455B2ED6729951E0F9F6C7EB9206DF41D287 Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/8bae045f-365b-43cf-99fc-12cbcbce5f67.roa Signing time: Wed 16 Apr 2025 00:10:26 +0000 ROA not before: Wed 16 Apr 2025 00:10:26 +0000 ROA not after: Wed 21 May 2025 23:59:59 +0000 asID: 62785 IP address blocks: 172.96.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:9b:45:5b:2e:d6:72:99:51:e0:f9:f6:c7:eb:92:06:df:41:d2:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Apr 16 00:10:26 2025 GMT Not After : May 21 23:59:59 2025 GMT Subject: serialNumber=f7f24cdd995d41a0a4eecbc299695d32fb53c0b68cb03e05d580c858d38cfaa9, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:cd:15:9b:d9:e8:57:d1:46:d9:d6:01:3c: 51:f5:2c:52:09:b7:a1:ad:84:ae:4d:9c:67:90:43: ab:ee:d5:eb:94:94:50:3c:00:68:24:f1:48:3f:75: 65:74:51:d8:56:66:50:c4:fd:06:ad:79:1d:24:dc: 51:53:5c:31:64:60:5a:8b:19:05:dd:7d:a9:74:07: f7:3f:76:59:c1:5a:c3:70:3d:66:7f:60:9b:45:c4: 0f:71:2e:65:29:dc:9f:a5:88:02:ee:8b:1c:95:68: 9b:93:76:d0:c4:26:3f:bd:a9:ce:b4:67:0e:44:02: 27:77:eb:4c:ad:d6:c8:27:41:97:b4:c9:9f:8f:fd: d8:29:a9:2c:74:a9:91:cd:11:d3:5b:bb:f9:6f:7c: 5d:b7:a5:e1:e7:66:16:7d:fe:b9:4c:9a:f4:f6:60: 89:3d:0b:36:16:d4:61:46:bc:71:98:51:45:ab:37: 71:0c:b8:99:88:27:13:04:d7:a5:b3:ad:8e:27:d0: 92:0b:b8:8f:70:88:5a:0b:71:09:a4:2c:f4:73:48: da:ca:97:ce:59:73:09:66:26:14:16:01:e7:79:15: f2:d3:19:ee:1b:0e:c1:80:a4:5f:4f:cb:29:e0:e0: 4a:ae:6a:88:c2:67:93:26:9c:cb:7f:05:ba:7e:1a: b6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4E:A4:12:44:47:B5:5C:84:4F:9F:3E:A7:FF:3A:76:79:87:EB:46 X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/8bae045f-365b-43cf-99fc-12cbcbce5f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.96.104.0/21 Signature Algorithm: sha256WithRSAEncryption 5e:df:83:dc:f8:9c:2c:5c:33:f8:20:e8:dd:72:d0:41:2d:a4: 22:50:80:08:35:3e:a4:27:86:a6:7f:9a:88:dd:92:77:e7:e7: 7f:c9:a0:4c:ad:7c:b0:4b:8c:dd:76:aa:56:de:c2:e8:4c:2d: de:93:45:bc:c0:50:54:59:9d:72:d9:30:2d:3f:26:81:5a:c9: e0:2b:8f:ae:c5:4d:37:79:14:a9:f9:48:b7:9e:2f:e2:f3:d3: 15:30:e7:19:4d:a0:a8:77:45:5e:01:1d:be:de:8b:7f:7e:de: e3:68:e5:68:01:21:60:5d:59:77:4a:8d:77:d4:47:76:a4:ef: 68:42:40:59:61:c1:b3:93:90:5a:06:55:be:43:c4:30:25:b0: ef:31:94:67:08:39:b8:6d:8d:2a:e2:62:99:13:73:0a:e0:0d: 4f:50:eb:08:94:fe:f7:0a:ca:92:d8:5c:58:66:46:7e:3f:88: 46:e6:ec:a0:66:62:9f:52:f8:62:9b:2b:93:b3:6a:58:1d:8b: 9e:77:58:43:49:be:18:42:fe:6a:dc:05:d8:69:34:78:a8:d2: 5c:78:4f:91:a8:ea:87:ef:6d:f0:ca:9f:c2:c1:e8:7e:58:97: 29:ee:32:9b:2c:c2:19:b5:97:5b:ee:c2:86:ed:be:b1:9c:6e: 02:2c:91:55 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc5tFWy7WcplR4Pn2x+uSBt9B0ocwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjUwNDE2MDAxMDI2WhcNMjUwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmN2YyNGNkZDk5NWQ0MWEwYTRlZWNiYzI5OTY5NWQzMmZi NTNjMGI2OGNiMDNlMDVkNTgwYzg1OGQzOGNmYWE5MS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9280Vm9noV9FG2dYBPFH1LFIJt6GthK5NnGeQQ6vu1euU lFA8AGgk8Ug/dWV0UdhWZlDE/QateR0k3FFTXDFkYFqLGQXdfal0B/c/dlnBWsNw PWZ/YJtFxA9xLmUp3J+liALuixyVaJuTdtDEJj+9qc60Zw5EAid360yt1sgnQZe0 yZ+P/dgpqSx0qZHNEdNbu/lvfF23peHnZhZ9/rlMmvT2YIk9CzYW1GFGvHGYUUWr N3EMuJmIJxME16WzrY4n0JILuI9wiFoLcQmkLPRzSNrKl85ZcwlmJhQWAed5FfLT Ge4bDsGApF9Pyyng4EquaojCZ5MmnMt/Bbp+GrazAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJ06kEkRHtVyET58+p/86dnmH60YwHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzhiYWUwNDVmLTM2NWItNDNjZi05OWZjLTEyY2JjYmNlNWY2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3 LWQwNTJjNTM1Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOsYGgwDQYJKoZIhvcNAQELBQADggEBAF7fg9z4nCxcM/gg6N1y0EEtpCJQ gAg1PqQnhqZ/mojdknfn53/JoEytfLBLjN12qlbewuhMLd6TRbzAUFRZnXLZMC0/ JoFayeArj67FTTd5FKn5SLeeL+Lz0xUw5xlNoKh3RV4BHb7ei39+3uNo5WgBIWBd WXdKjXfUR3ak72hCQFlhwbOTkFoGVb5DxDAlsO8xlGcIObhtjSriYpkTcwrgDU9Q 6wiU/vcKypLYXFhmRn4/iEbm7KBmYp9S+GKbK5Ozalgdi553WENJvhhC/mrcBdhp NHio0lx4T5Go6ofvbfDKn8LB6H5YlynuMpsswhm1l1vuwobtvrGcbgIskVU= -----END CERTIFICATE-----Generated at Sat Apr 26 14:48:49 2025 by rpki-client