$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00bc79cf-a629-49f6-9113-cdb8600f7418.roa File: 00bc79cf-a629-49f6-9113-cdb8600f7418.roa (raw, json) Hash identifier: xCvA8qnAt3DWt0OueGmF0PX1cJF7dxnAO0Cjr62v8G4= Subject key identifier: 7F:67:75:40:04:1C:40:1C:4C:99:9D:95:7B:F2:5B:8E:8D:31:EE:BE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 042192044A452AD8CB9B6779BFCF2234E970D79F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00bc79cf-a629-49f6-9113-cdb8600f7418.roa Signing time: Tue 28 Jan 2025 00:00:00 +0000 ROA not before: Tue 28 Jan 2025 00:00:00 +0000 ROA not after: Tue 04 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 184.72.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:21:92:04:4a:45:2a:d8:cb:9b:67:79:bf:cf:22:34:e9:70:d7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 28 00:00:00 2025 GMT Not After : Mar 4 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:80:5d:6d:37:02:6f:66:e6:d6:a7:27:1a: 17:8b:c6:ff:8f:6b:10:ac:f4:2d:53:93:0e:15:86: 48:51:c4:bf:f4:51:34:ba:0d:e1:e1:b2:b4:54:f0: 28:4f:e3:e3:e8:88:0c:8a:16:ba:25:57:10:c3:ce: 30:d0:a6:a3:f9:dd:ec:80:59:8f:d4:b2:f2:da:bf: 23:09:80:18:ee:fa:e3:c3:42:2a:f4:3b:b5:df:d9: 3c:80:55:8b:4a:61:09:37:ed:34:25:3c:80:01:c3: 53:0a:fd:fc:7a:28:b0:bf:1e:bf:bf:97:8a:99:77: 20:69:1f:6e:39:7d:90:a2:a0:69:40:7c:24:f1:6e: 2c:6d:45:13:cb:9a:22:e9:30:53:00:45:dd:85:05: 08:79:9b:c6:4a:4b:fc:02:c6:17:ff:5d:27:fb:58: df:6c:c7:af:93:da:8b:25:ea:1b:e6:c1:69:ff:1f: e9:bf:dc:4b:52:1f:fe:be:24:1c:e7:8d:78:41:15: ba:68:23:23:98:1b:6e:32:2e:89:2f:a7:a3:65:99: 99:bc:2a:0d:26:1a:09:1b:8a:89:16:5b:e4:8b:12: 9f:69:16:1e:4e:e5:a2:5e:60:70:75:a6:2e:cc:71: 9b:e7:4c:37:e9:6d:f0:44:7e:ab:6f:1e:ac:0a:dd: 08:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:67:75:40:04:1C:40:1C:4C:99:9D:95:7B:F2:5B:8E:8D:31:EE:BE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00bc79cf-a629-49f6-9113-cdb8600f7418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.88.0/22 Signature Algorithm: sha256WithRSAEncryption a5:6c:c0:dc:d4:1d:0e:c4:ed:64:79:55:fb:9d:55:11:e2:35: fe:36:44:3d:8a:8c:69:41:d5:97:48:6d:24:3b:60:2f:94:eb: bd:81:e1:09:a2:8d:f3:96:25:5f:78:6e:a6:47:4c:fd:53:94: f0:ea:fe:9d:9d:b3:86:61:58:0f:1a:42:66:c1:f6:f9:82:01: fa:d9:ae:60:03:df:f4:ca:0a:3f:7c:a7:64:b0:28:f4:94:1a: 66:bc:a6:4d:7b:18:55:1c:73:53:fc:ed:0f:7b:6e:41:97:7c: 25:7e:e4:89:0f:a1:0c:3c:0d:88:51:f7:1c:55:93:25:8e:01: 00:93:2e:34:40:b6:62:39:5c:9a:bf:ae:96:54:0d:3d:88:b3: 38:ae:ec:7f:02:b1:40:91:f4:df:95:bb:c1:26:e4:64:2d:71: 61:90:0e:a5:17:7f:4d:4f:29:22:5c:6c:0d:0b:65:30:d7:ac: a8:1d:e3:e5:0c:55:1a:a4:1a:56:9d:79:88:7e:4c:49:b1:8e: b6:de:ea:81:d2:d6:8f:df:08:16:02:00:63:d7:e5:07:b3:cb: 39:3b:63:f4:ce:93:c7:d3:08:67:e6:38:fb:6b:11:c2:d0:ed: 6e:fb:44:a9:aa:fa:ac:99:cf:86:48:cb:23:03:a5:0e:6e:78: 74:e6:73:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBCGSBEpFKtjLm2d5v88iNOlw158wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI4MDAwMDAwWhcNMjUwMzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMGE1Nzg3MTIyYTA0NjIxYmM0OTA0MGFmNWVlNmFhMDEz NGM3ZDk2YzkwMTVjOTliZTM0ZDFkNzJjYTkxOGMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCszIBdbTcCb2bm1qcnGheLxv+PaxCs9C1Tkw4VhkhRxL/0 UTS6DeHhsrRU8ChP4+PoiAyKFrolVxDDzjDQpqP53eyAWY/UsvLavyMJgBju+uPD Qir0O7Xf2TyAVYtKYQk37TQlPIABw1MK/fx6KLC/Hr+/l4qZdyBpH245fZCioGlA fCTxbixtRRPLmiLpMFMARd2FBQh5m8ZKS/wCxhf/XSf7WN9sx6+T2osl6hvmwWn/ H+m/3EtSH/6+JBznjXhBFbpoIyOYG24yLokvp6NlmZm8Kg0mGgkbiokWW+SLEp9p Fh5O5aJeYHB1pi7McZvnTDfpbfBEfqtvHqwK3QiTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUf2d1QAQcQBxMmZ2Ve/Jbjo0x7r4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAwYmM3OWNmLWE2MjktNDlmNi05MTEzLWNkYjg2MDBmNzQxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAK4SFgwDQYJKoZIhvcNAQELBQADggEBAKVswNzUHQ7E7WR5VfudVRHiNf42 RD2KjGlB1ZdIbSQ7YC+U672B4QmijfOWJV94bqZHTP1TlPDq/p2ds4ZhWA8aQmbB 9vmCAfrZrmAD3/TKCj98p2SwKPSUGma8pk17GFUcc1P87Q97bkGXfCV+5IkPoQw8 DYhR9xxVkyWOAQCTLjRAtmI5XJq/rpZUDT2Isziu7H8CsUCR9N+Vu8Em5GQtcWGQ DqUXf01PKSJcbA0LZTDXrKgd4+UMVRqkGladeYh+TEmxjrbe6oHS1o/fCBYCAGPX 5Qezyzk7Y/TOk8fTCGfmOPtrEcLQ7W77RKmq+qyZz4ZIyyMDpQ5ueHTmc1I= -----END CERTIFICATE-----Generated at Wed Feb 5 09:58:12 2025 by rpki-client