$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46ffd29f-2469-4e53-b48f-865865efa7e1.roa File: 46ffd29f-2469-4e53-b48f-865865efa7e1.roa (raw, json) Hash identifier: Y92RzXpcWyrGG7vEoAFsfgygLUwssALn2knOflXh/a0= Subject key identifier: F0:25:A9:3F:35:8E:3A:3F:A2:A8:15:1B:96:84:7E:6A:D3:55:E2:98 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7492BC11461ADD8D2F1020FAAB800ABCEA16246F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46ffd29f-2469-4e53-b48f-865865efa7e1.roa Signing time: Fri 02 May 2025 00:00:31 +0000 ROA not before: Fri 02 May 2025 00:00:31 +0000 ROA not after: Fri 06 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.124.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:92:bc:11:46:1a:dd:8d:2f:10:20:fa:ab:80:0a:bc:ea:16:24:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 00:00:31 2025 GMT Not After : Jun 6 23:59:59 2025 GMT Subject: serialNumber=79c27df66f2881f5e5eacab67f993649d5d09703d43a18a3271188025c53808a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0a:71:bd:11:30:ac:b5:a8:18:0b:2f:84:cf: bb:3d:9f:80:e8:14:19:eb:9f:37:3b:56:11:48:b2: d9:ca:0a:f3:09:b6:a5:73:78:1c:fd:a8:98:6d:f6: 71:0a:51:94:36:f0:e8:45:96:08:ec:34:f7:56:b0: f7:0c:49:ef:5f:bf:93:38:85:4e:39:f7:0a:a4:f0: 18:57:00:b1:be:6e:5d:63:35:04:7c:d9:a1:49:77: e3:e8:92:bb:5f:cc:11:df:e3:11:6b:d3:73:2e:55: c5:4d:03:41:1b:95:f6:fc:59:fe:37:19:81:1d:8f: b2:9b:28:6a:53:67:60:67:2a:06:c6:e5:2a:40:21: 09:a1:2b:00:40:a6:6d:0a:4f:58:be:38:3e:ff:b9: 90:31:c3:51:35:81:f3:f1:a7:42:01:13:cf:6e:3c: 93:73:2e:66:05:04:f1:02:1b:c1:a3:62:4c:01:c6: 2b:87:c0:fc:9f:da:df:1b:79:5e:9a:6d:1a:a3:f2: 34:2d:2a:f4:a0:34:8b:35:69:70:0f:bc:f7:ee:e7: 33:53:91:1a:bd:c5:23:a6:b8:37:fd:8c:b5:89:36: be:b3:ca:65:81:d6:e8:e3:66:b8:be:80:13:7f:1d: 00:37:5c:53:94:ed:f3:88:f1:d0:03:0d:ee:b6:87: cb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:25:A9:3F:35:8E:3A:3F:A2:A8:15:1B:96:84:7E:6A:D3:55:E2:98 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46ffd29f-2469-4e53-b48f-865865efa7e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.124.0.0/16 Signature Algorithm: sha256WithRSAEncryption b0:70:b6:38:1f:c4:45:57:27:a1:b2:8e:60:10:cc:53:50:ca: 2c:92:25:ea:89:4e:0b:22:7e:a7:07:87:ab:22:45:39:31:2b: a5:66:97:60:19:3f:fa:77:26:21:94:51:7f:14:03:04:e1:ff: 04:64:90:f8:8e:5a:d9:ac:3c:c6:bd:6b:5e:d9:24:a9:ce:5f: 39:b9:1f:02:3f:80:42:6f:90:e1:c8:dd:0c:4d:5e:8e:73:e0: 76:86:c1:38:19:b6:3e:ad:50:ce:36:04:a9:00:5e:33:38:d7: 96:92:a0:d3:e1:20:9c:90:48:f6:c1:86:42:62:31:06:10:23: 77:4a:9e:b5:0f:6c:33:97:9c:39:23:37:46:03:e9:8f:a7:5c: fe:86:91:66:b5:20:1f:a6:60:7b:c6:6a:c5:15:65:f0:b7:78: 97:24:1a:33:64:56:47:c4:88:7a:40:c2:23:fc:41:73:a7:72: 8b:6d:88:32:7b:5b:9f:cb:33:94:6c:cc:01:3f:a3:1c:a6:f6: 9d:d0:ad:5a:3e:28:4e:49:58:19:b1:fe:bf:55:80:aa:a9:2e: 6c:c9:ca:7d:ec:ad:55:14:28:68:6e:28:69:83:e7:73:e8:b8: 1f:37:ce:45:e2:32:7a:08:69:18:ed:cd:e8:f8:c6:6b:57:ae: 5c:58:74:bb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdJK8EUYa3Y0vECD6q4AKvOoWJG8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAyMDAwMDMxWhcNMjUwNjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OWMyN2RmNjZmMjg4MWY1ZTVlYWNhYjY3Zjk5MzY0OWQ1 ZDA5NzAzZDQzYTE4YTMyNzExODgwMjVjNTM4MDhhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHCnG9ETCstagYCy+Ez7s9n4DoFBnrnzc7VhFIstnKCvMJ tqVzeBz9qJht9nEKUZQ28OhFlgjsNPdWsPcMSe9fv5M4hU459wqk8BhXALG+bl1j NQR82aFJd+PokrtfzBHf4xFr03MuVcVNA0Eblfb8Wf43GYEdj7KbKGpTZ2BnKgbG 5SpAIQmhKwBApm0KT1i+OD7/uZAxw1E1gfPxp0IBE89uPJNzLmYFBPECG8GjYkwB xiuHwPyf2t8beV6abRqj8jQtKvSgNIs1aXAPvPfu5zNTkRq9xSOmuDf9jLWJNr6z ymWB1ujjZri+gBN/HQA3XFOU7fOI8dADDe62h8v/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU8CWpPzWOOj+iqBUbloR+atNV4pgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2ZmZkMjlmLTI0NjktNGU1My1iNDhmLTg2NTg2NWVmYTdlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQfDANBgkqhkiG9w0BAQsFAAOCAQEAsHC2OB/ERVcnobKOYBDMU1DKLJIl 6olOCyJ+pweHqyJFOTErpWaXYBk/+ncmIZRRfxQDBOH/BGSQ+I5a2aw8xr1rXtkk qc5fObkfAj+AQm+Q4cjdDE1ejnPgdobBOBm2Pq1QzjYEqQBeMzjXlpKg0+EgnJBI 9sGGQmIxBhAjd0qetQ9sM5ecOSM3RgPpj6dc/oaRZrUgH6Zge8ZqxRVl8Ld4lyQa M2RWR8SIekDCI/xBc6dyi22IMntbn8szlGzMAT+jHKb2ndCtWj4oTklYGbH+v1WA qqkubMnKfeytVRQoaG4oaYPnc+i4HzfOReIyeghpGO3N6PjGa1euXFh0uw== -----END CERTIFICATE-----Generated at Mon May 5 05:36:20 2025 by rpki-client