$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/077f59a6-be05-4dd8-a514-122ed50e1722.roa File: 077f59a6-be05-4dd8-a514-122ed50e1722.roa (raw, json) Hash identifier: TZF/IdoeZNucH5cS1yESW/M9sEG6vfkEkCKV4Aa2zQI= Subject key identifier: 6F:96:DD:B7:38:33:39:28:6B:21:BF:CA:A2:CB:34:91:8B:19:F4:29 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 281DFEDD448A4CC3A44A9914610A5B5A4BE735DA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/077f59a6-be05-4dd8-a514-122ed50e1722.roa Signing time: Wed 30 Apr 2025 00:00:46 +0000 ROA not before: Wed 30 Apr 2025 00:00:46 +0000 ROA not after: Wed 04 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 149.177.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1d:fe:dd:44:8a:4c:c3:a4:4a:99:14:61:0a:5b:5a:4b:e7:35:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 30 00:00:46 2025 GMT Not After : Jun 4 23:59:59 2025 GMT Subject: serialNumber=b473f3a87a5a7992f2b52fca446df99e3bcd2afab499895998f507511315aeec, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:07:ac:f7:b2:4e:32:89:9d:19:66:56:71:57: 95:03:9d:a5:e5:2c:59:91:cc:11:f7:70:21:7d:a8: 95:8c:5b:ab:1b:cb:1a:04:de:fb:b2:64:80:2e:76: ae:9b:47:78:fa:6b:9b:58:4f:ca:17:15:d7:21:13: b5:ae:70:36:32:aa:66:32:81:31:c3:e2:51:8d:d3: 36:4a:0a:47:7a:5c:19:06:72:00:d4:40:2a:92:13: ac:2c:e6:78:eb:4f:94:fb:bb:69:58:f8:60:0a:9c: 4d:56:be:d1:c1:fb:95:8e:7e:b9:c1:31:ff:dc:04: 13:2a:b0:e8:af:ff:91:56:37:3e:4c:f9:3a:a1:ab: a3:02:e0:81:cb:e0:95:36:41:cc:28:bd:6c:c8:04: 4d:da:a2:de:1f:75:9c:56:45:04:49:71:83:aa:33: 96:63:c4:52:c1:0c:6a:90:98:9d:29:be:7b:66:9a: af:20:80:bd:16:6d:7f:fd:9a:2c:3c:bb:cd:b1:e7: 18:da:91:cc:2f:94:87:5a:4e:28:f3:70:d3:9d:1f: fd:ec:da:8e:7e:8f:53:08:bb:7b:ab:2a:9d:60:e4: 7f:45:02:81:0b:98:2a:df:ce:94:dd:aa:2c:7c:7a: ed:07:4a:76:5d:01:be:35:b2:90:d6:61:4f:0e:1b: cd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:96:DD:B7:38:33:39:28:6B:21:BF:CA:A2:CB:34:91:8B:19:F4:29 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/077f59a6-be05-4dd8-a514-122ed50e1722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.177.0.0/17 Signature Algorithm: sha256WithRSAEncryption 99:8a:32:25:29:18:99:59:07:e7:2a:93:65:1e:6c:a1:9f:59: cf:14:e8:36:75:d8:4c:eb:8b:90:72:64:5d:4f:3d:c0:4b:3b: 17:8d:b5:22:2e:80:a3:0c:dd:03:94:e2:30:74:cb:4a:df:76: 8e:cf:df:ff:ad:3a:60:ff:f0:22:4e:33:4b:47:36:33:90:32: 2c:4a:16:95:3a:55:cb:b1:96:73:45:03:1e:03:d3:3b:3c:77: 3a:19:18:76:38:d6:17:87:c0:ce:e2:07:3b:e4:b9:2b:2f:6b: 48:8b:c8:6f:fd:e3:ba:b3:df:6b:97:50:a5:00:5b:12:d9:55: ac:1f:16:5e:29:7c:2e:7e:4a:c8:f9:42:fa:2a:27:96:59:2c: 73:07:cb:f3:a3:7b:3a:07:69:4a:95:2b:1a:52:32:70:32:ba: 69:03:82:68:6b:ac:9c:01:11:31:84:a5:00:04:7c:cd:55:20: a0:b8:22:90:cb:88:4b:56:12:7a:c6:20:aa:a5:09:93:89:eb: 3f:42:ac:04:9b:07:92:2e:56:fd:65:99:55:71:db:e8:21:80: 57:d4:18:66:5e:0b:13:d4:a6:44:4b:eb:2b:d6:f5:b5:e7:34: cd:3c:4f:4c:a7:81:b0:79:98:a9:78:10:16:c4:c7:30:01:7e: db:92:45:c8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKB3+3USKTMOkSpkUYQpbWkvnNdowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDMwMDAwMDQ2WhcNMjUwNjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDczZjNhODdhNWE3OTkyZjJiNTJmY2E0NDZkZjk5ZTNi Y2QyYWZhYjQ5OTg5NTk5OGY1MDc1MTEzMTVhZWVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxB6z3sk4yiZ0ZZlZxV5UDnaXlLFmRzBH3cCF9qJWMW6sb yxoE3vuyZIAudq6bR3j6a5tYT8oXFdchE7WucDYyqmYygTHD4lGN0zZKCkd6XBkG cgDUQCqSE6ws5njrT5T7u2lY+GAKnE1WvtHB+5WOfrnBMf/cBBMqsOiv/5FWNz5M +Tqhq6MC4IHL4JU2QcwovWzIBE3aot4fdZxWRQRJcYOqM5ZjxFLBDGqQmJ0pvntm mq8ggL0WbX/9miw8u82x5xjakcwvlIdaTijzcNOdH/3s2o5+j1MIu3urKp1g5H9F AoELmCrfzpTdqix8eu0HSnZdAb41spDWYU8OG807AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUb5bdtzgzOShrIb/Koss0kYsZ9CkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA3N2Y1OWE2LWJlMDUtNGRkOC1hNTE0LTEyMmVkNTBlMTcyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeVsQAwDQYJKoZIhvcNAQELBQADggEBAJmKMiUpGJlZB+cqk2UebKGfWc8U 6DZ12Ezri5ByZF1PPcBLOxeNtSIugKMM3QOU4jB0y0rfdo7P3/+tOmD/8CJOM0tH NjOQMixKFpU6VcuxlnNFAx4D0zs8dzoZGHY41heHwM7iBzvkuSsva0iLyG/947qz 32uXUKUAWxLZVawfFl4pfC5+Ssj5QvoqJ5ZZLHMHy/OjezoHaUqVKxpSMnAyumkD gmhrrJwBETGEpQAEfM1VIKC4IpDLiEtWEnrGIKqlCZOJ6z9CrASbB5IuVv1lmVVx 2+ghgFfUGGZeCxPUpkRL6yvW9bXnNM08T0yngbB5mKl4EBbExzABftuSRcg= -----END CERTIFICATE-----Generated at Mon May 5 20:48:52 2025 by rpki-client