$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89063f4b-2eef-4634-94ad-28e141c8095a.roa File: 89063f4b-2eef-4634-94ad-28e141c8095a.roa (raw, json) Hash identifier: wh5eH0AZpBDI7ICE8RBPcyVjwlzG5xh2A14aNcf1XW8= Subject key identifier: 87:9B:AF:89:AD:7A:73:E1:32:9A:D6:A8:3E:BC:73:B3:46:B0:00:76 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 07438B862FC653EB732972400A981B1F55EA1215 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89063f4b-2eef-4634-94ad-28e141c8095a.roa Signing time: Wed 07 May 2025 00:00:33 +0000 ROA not before: Wed 07 May 2025 00:00:33 +0000 ROA not after: Wed 11 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 206.72.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:43:8b:86:2f:c6:53:eb:73:29:72:40:0a:98:1b:1f:55:ea:12:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:00:33 2025 GMT Not After : Jun 11 23:59:59 2025 GMT Subject: serialNumber=6ce039f6b1526c7374d80c2fb9b9fff786eaad3ed9fc1fe80d6d4a5e77b080b4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:34:e1:3f:57:02:ab:d3:2e:a6:48:cc:15:00: 3b:5e:4f:20:42:af:8e:7b:ce:94:81:b3:91:04:3f: 48:33:28:9a:ef:21:5b:51:5b:39:c8:6d:f3:2e:fd: 65:c5:a5:5a:81:c8:2b:24:6c:29:75:9e:70:be:c0: 5e:8c:5d:b0:18:a5:c6:0e:97:42:aa:ba:90:62:62: 0a:1e:ab:be:4c:35:cd:f8:e2:25:a3:b0:a5:06:a9: 6c:2f:99:99:28:9c:ac:9b:ab:61:49:36:1b:68:7e: af:2b:ff:8c:cd:93:54:be:79:97:90:97:9c:a4:77: c0:e1:c5:a4:50:c1:b9:86:d5:c9:2b:45:26:b0:75: 90:90:69:43:a8:9a:82:76:4a:5f:d4:26:29:a1:de: bf:0d:d8:33:71:4e:0e:8f:00:d1:f6:32:42:19:e3: cf:ee:3c:f6:e1:2b:5e:bb:6f:6d:34:84:71:b1:84: d8:e6:26:93:01:d6:65:d1:6a:56:33:ed:81:b1:7a: 9f:9a:03:2f:cd:23:5d:60:c9:ae:20:f7:24:9c:9d: dd:71:85:20:b8:a8:c1:ef:09:81:fa:ed:a0:8f:3a: a1:8b:98:e1:63:4f:d1:27:42:b1:6a:31:f7:80:d4: 4a:14:e8:5a:21:aa:97:af:d0:78:37:d7:57:99:08: fd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9B:AF:89:AD:7A:73:E1:32:9A:D6:A8:3E:BC:73:B3:46:B0:00:76 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89063f4b-2eef-4634-94ad-28e141c8095a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.72.209.0/24 Signature Algorithm: sha256WithRSAEncryption b3:24:a6:7c:a9:e2:fa:98:f4:62:ae:eb:28:98:4d:90:fc:e0: bd:6c:e2:2f:81:61:62:8b:df:87:4b:33:68:1e:2c:fa:67:be: e1:59:52:ea:1c:ab:3f:82:da:41:32:5e:4f:fd:97:3b:d4:e7: 31:88:47:49:91:28:fa:ba:dc:8d:4c:42:f5:2a:45:38:ad:62: a6:7c:60:fa:1b:05:b7:41:01:97:ae:cd:bb:dc:43:4b:48:f4: 74:a5:6e:b8:53:21:12:94:4d:1d:2f:07:d3:9a:b3:3a:8f:20: ea:20:45:fa:c8:b6:fb:cf:35:65:0f:9c:21:cd:f1:9f:9b:ee: 7d:92:71:e5:83:12:1f:07:55:d4:40:91:e8:3e:82:ff:b9:9a: 23:2f:10:fe:3e:89:87:48:df:03:15:cd:ca:88:ed:ba:9a:aa: 06:4b:47:92:38:94:bb:cd:1f:c6:0c:e7:9a:24:c6:20:de:39: 64:6c:a3:b9:cb:0b:a4:d4:7e:23:93:0a:46:06:02:fe:62:26: c3:50:ff:e9:1a:69:c6:46:e1:43:53:0d:50:c5:1b:7a:4b:4a: 13:fd:0d:12:38:d0:52:c0:23:4d:ec:05:9b:44:ec:5b:39:19: 0b:ec:68:d5:4f:81:84:4e:f1:df:d7:42:da:a9:4b:1b:65:7e: 2f:db:05:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB0OLhi/GU+tzKXJACpgbH1XqEhUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA3MDAwMDMzWhcNMjUwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0A2Y2UwMzlmNmIxNTI2YzczNzRkODBjMmZiOWI5ZmZmNzg2 ZWFhZDNlZDlmYzFmZTgwZDZkNGE1ZTc3YjA4MGI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUNOE/VwKr0y6mSMwVADteTyBCr457zpSBs5EEP0gzKJrv IVtRWznIbfMu/WXFpVqByCskbCl1nnC+wF6MXbAYpcYOl0KqupBiYgoeq75MNc34 4iWjsKUGqWwvmZkonKybq2FJNhtofq8r/4zNk1S+eZeQl5ykd8DhxaRQwbmG1ckr RSawdZCQaUOomoJ2Sl/UJimh3r8N2DNxTg6PANH2MkIZ48/uPPbhK167b200hHGx hNjmJpMB1mXRalYz7YGxep+aAy/NI11gya4g9yScnd1xhSC4qMHvCYH67aCPOqGL mOFjT9EnQrFqMfeA1EoU6Fohqpev0Hg311eZCP2FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUh5uvia16c+EymtaoPrxzs0awAHYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5MDYzZjRiLTJlZWYtNDYzNC05NGFkLTI4ZTE0MWM4MDk1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADOSNEwDQYJKoZIhvcNAQELBQADggEBALMkpnyp4vqY9GKu6yiYTZD84L1s 4i+BYWKL34dLM2geLPpnvuFZUuocqz+C2kEyXk/9lzvU5zGIR0mRKPq63I1MQvUq RTitYqZ8YPobBbdBAZeuzbvcQ0tI9HSlbrhTIRKUTR0vB9OaszqPIOogRfrItvvP NWUPnCHN8Z+b7n2SceWDEh8HVdRAkeg+gv+5miMvEP4+iYdI3wMVzcqI7bqaqgZL R5I4lLvNH8YM55okxiDeOWRso7nLC6TUfiOTCkYGAv5iJsNQ/+kaacZG4UNTDVDF G3pLShP9DRI40FLAI03sBZtE7Fs5GQvsaNVPgYRO8d/XQtqpSxtlfi/bBY0= -----END CERTIFICATE-----Generated at Tue May 13 04:59:23 2025 by rpki-client