$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98dabde8-c510-4c80-abcd-864ef2bfbbf9.roa File: 98dabde8-c510-4c80-abcd-864ef2bfbbf9.roa (raw, json) Hash identifier: 618OjdL1P8RaJJSdETRBBDZpWKSzhf0SK0T5jo8cIwg= Subject key identifier: BF:05:9A:2E:23:64:89:4B:53:03:E8:A9:D3:ED:D9:12:DE:51:A7:E4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 44DC28C880A324290C8521E53A99EF65F9E367DB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98dabde8-c510-4c80-abcd-864ef2bfbbf9.roa Signing time: Fri 25 Apr 2025 15:10:49 +0000 ROA not before: Fri 25 Apr 2025 15:10:49 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 75.101.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:dc:28:c8:80:a3:24:29:0c:85:21:e5:3a:99:ef:65:f9:e3:67:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 15:10:49 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=98b7366e1e254ca5b86e6b370daed4f876b2147e4f29b4eaf393d1727f40355b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9b:a3:52:89:de:c4:23:77:59:fe:c9:5d:fc: a1:02:4e:d0:76:3e:6a:bc:b4:66:aa:03:58:05:ac: 91:a1:90:0c:e9:55:30:69:26:df:88:46:0a:9a:fe: 51:de:e7:f9:f0:da:8b:52:19:32:db:b7:46:49:88: 5c:5e:75:57:2d:92:9f:3c:b8:ed:4b:a7:d6:b7:9b: 3c:31:35:74:ac:41:05:a1:96:3f:45:e1:44:01:84: 3b:ba:05:4f:f7:0b:0f:1a:ba:f3:f6:0c:a4:d2:b4: 4f:19:6f:c6:d9:dd:ac:82:e7:0b:2c:18:56:d6:6b: ac:d1:92:05:f5:87:df:a9:df:57:12:ba:02:78:da: 01:2e:bf:33:23:35:7a:95:10:66:ce:4d:14:b4:2b: 1b:11:c9:2d:38:56:5b:da:dc:ff:e9:27:0e:9f:11: 4c:22:a1:be:5b:98:c0:3f:5d:3f:77:f6:2a:59:9a: f4:fe:7b:53:e6:6c:0c:84:f1:07:45:12:74:a4:24: 37:8b:ad:9e:4c:fc:5f:aa:de:31:37:d9:d9:e9:d4: 63:4c:1a:6c:7c:89:f6:e5:87:d8:d1:37:39:c1:04: 95:1f:29:ba:7f:39:b1:35:c4:99:0f:65:a6:3d:9f: 85:41:7b:f4:12:e9:7b:6a:eb:bb:7f:d5:df:a5:5c: 66:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:05:9A:2E:23:64:89:4B:53:03:E8:A9:D3:ED:D9:12:DE:51:A7:E4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98dabde8-c510-4c80-abcd-864ef2bfbbf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 75.101.192.0/18 Signature Algorithm: sha256WithRSAEncryption 3a:69:fb:8e:ae:d6:9b:53:b6:44:58:63:05:f6:5c:80:3d:3a: 4f:78:2a:a4:3b:0d:63:3a:79:44:5e:75:d4:4d:ea:0e:1b:05: 12:7c:50:98:63:ab:a3:78:61:a4:a0:50:0c:60:4d:d1:49:cf: b4:95:a9:ac:86:c5:eb:e2:ee:9c:34:6e:cc:ed:e0:05:61:9b: 23:9a:86:b9:60:77:a5:18:d2:c1:87:02:f6:91:85:fe:ee:ae: f9:47:2e:80:37:a1:0d:32:a5:3e:0d:d0:73:da:7b:ec:6d:68: 4c:17:9e:dd:54:d3:16:ad:9b:e8:92:21:20:e5:a9:b2:b9:86: bc:4b:5d:62:82:2c:26:5d:f4:17:7a:68:b7:1e:be:98:59:71: 25:1c:05:39:43:62:d8:96:c2:3d:6d:ed:3c:0a:5e:15:6f:ce: f7:66:a2:87:e1:42:7f:ba:1a:e0:91:b9:bd:af:8f:a0:c8:09: a8:54:29:65:94:aa:31:f2:19:fa:ca:13:93:cd:5c:59:37:69: de:f6:60:b3:1a:e6:cc:3d:5e:d7:f1:c0:93:fd:24:46:01:09: 08:62:6b:94:33:50:5f:dc:d7:d1:e7:4f:69:a8:36:47:76:ed: c4:33:95:4c:d0:21:16:31:19:dc:6c:5f:a7:0a:d5:dd:07:27: 56:0f:c0:c0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURNwoyICjJCkMhSHlOpnvZfnjZ9swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MTUxMDQ5WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5OGI3MzY2ZTFlMjU0Y2E1Yjg2ZTZiMzcwZGFlZDRmODc2 YjIxNDdlNGYyOWI0ZWFmMzkzZDE3MjdmNDAzNTViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJm6NSid7EI3dZ/sld/KECTtB2Pmq8tGaqA1gFrJGhkAzp VTBpJt+IRgqa/lHe5/nw2otSGTLbt0ZJiFxedVctkp88uO1Lp9a3mzwxNXSsQQWh lj9F4UQBhDu6BU/3Cw8auvP2DKTStE8Zb8bZ3ayC5wssGFbWa6zRkgX1h9+p31cS ugJ42gEuvzMjNXqVEGbOTRS0KxsRyS04Vlva3P/pJw6fEUwiob5bmMA/XT939ipZ mvT+e1PmbAyE8QdFEnSkJDeLrZ5M/F+q3jE32dnp1GNMGmx8ifblh9jRNznBBJUf Kbp/ObE1xJkPZaY9n4VBe/QS6Xtq67t/1d+lXGapAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvwWaLiNkiUtTA+ip0+3ZEt5Rp+QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4ZGFiZGU4LWM1MTAtNGM4MC1hYmNkLTg2NGVmMmJmYmJmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZLZcAwDQYJKoZIhvcNAQELBQADggEBADpp+46u1ptTtkRYYwX2XIA9Ok94 KqQ7DWM6eUReddRN6g4bBRJ8UJhjq6N4YaSgUAxgTdFJz7SVqayGxevi7pw0bszt 4AVhmyOahrlgd6UY0sGHAvaRhf7urvlHLoA3oQ0ypT4N0HPae+xtaEwXnt1U0xat m+iSISDlqbK5hrxLXWKCLCZd9Bd6aLcevphZcSUcBTlDYtiWwj1t7TwKXhVvzvdm oofhQn+6GuCRub2vj6DICahUKWWUqjHyGfrKE5PNXFk3ad72YLMa5sw9XtfxwJP9 JEYBCQhia5QzUF/c19HnT2moNkd27cQzlUzQIRYxGdxsX6cK1d0HJ1YPwMA= -----END CERTIFICATE-----Generated at Mon May 12 15:07:11 2025 by rpki-client