$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01ff9c8f-8da9-44ae-9b64-115add0db1f6.roa File: 01ff9c8f-8da9-44ae-9b64-115add0db1f6.roa (raw, json) Hash identifier: MNycWWdEM5EAG8whWHtcZjgSSowmZjjduSmXtOFo6bU= Subject key identifier: F2:F6:E8:12:63:AF:AC:AA:00:4C:AC:05:E6:D6:2B:DF:33:4C:4D:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E0F41019141F66E220F369FF3A115444E22F323 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01ff9c8f-8da9-44ae-9b64-115add0db1f6.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 204.236.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0f:41:01:91:41:f6:6e:22:0f:36:9f:f3:a1:15:44:4e:22:f3:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:99:ec:6b:8d:33:7e:7b:d2:99:ad:9c:48:35: 38:c4:7b:fd:84:bf:1e:f7:d8:93:6c:c9:78:8d:07: b7:30:45:48:8c:30:54:3d:6c:38:a2:8f:79:e9:99: ed:e6:e3:c3:a2:e9:17:23:97:47:01:26:9b:d4:95: e6:64:4b:97:7e:e5:c7:01:37:c3:95:88:79:3b:0b: 40:0f:d3:51:84:b9:bb:06:78:64:97:3d:d3:a5:62: c2:95:03:71:8e:f8:88:6d:29:7a:fb:16:ea:05:b2: 4f:95:1b:ad:dc:96:16:bd:47:a9:c3:d2:29:c7:18: 13:61:a6:da:f1:f1:1e:f2:74:cf:3c:5d:55:32:df: d5:72:1a:d3:42:ff:32:48:54:bc:20:b5:b4:ca:d6: 10:ac:fb:87:fa:1c:e0:8c:4a:b5:3a:e7:5a:dd:3d: af:b6:81:02:a7:85:32:40:7d:1a:99:61:b7:72:29: 7d:5b:3c:bb:ae:2a:0a:23:54:ae:8d:a2:f9:25:d7: ff:eb:e6:21:c0:ce:d7:77:d8:f8:c8:44:28:fc:b6: d8:ea:bd:d9:24:8f:21:d3:70:03:48:49:65:1e:5c: 2b:75:c5:30:a1:a0:b9:33:d6:e8:e3:54:52:c4:cc: d9:d3:8d:88:b9:cd:e2:5f:ee:a6:7a:51:a2:e4:d1: 3a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F6:E8:12:63:AF:AC:AA:00:4C:AC:05:E6:D6:2B:DF:33:4C:4D:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01ff9c8f-8da9-44ae-9b64-115add0db1f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.192.0/18 Signature Algorithm: sha256WithRSAEncryption 96:64:0d:b7:57:4b:37:29:e6:46:4e:1f:ed:c2:5c:4f:9f:8b: 6c:97:91:d4:a1:07:6c:6e:f3:02:01:f3:50:42:7b:4f:08:bd: e9:fd:b5:27:43:43:d8:fe:e1:4e:cc:66:0c:76:ba:0f:e8:aa: 6c:c9:e7:f1:64:43:9d:e2:36:27:71:82:62:06:b1:37:b4:23: 41:59:e4:11:9c:06:9f:c2:fb:41:d9:f6:c7:80:61:ec:5c:07: 41:12:7f:ea:91:c6:ce:e5:01:04:ef:d7:47:f7:82:60:67:3e: fd:e4:6b:a0:7b:16:b9:32:0d:7c:dd:bc:35:6c:ff:9a:2f:44: 7b:de:d2:8f:04:34:3d:29:c3:14:f6:7e:e8:d3:2e:88:cb:67: 4c:00:69:1d:10:51:64:bf:94:ee:9f:88:89:8d:81:fe:3e:83: 23:4c:65:e4:6f:21:12:04:da:ed:73:3c:6b:c9:ce:df:81:a7: eb:ca:55:44:f0:a6:4f:e2:04:e4:41:7a:78:af:a6:7b:bd:09: af:03:e1:34:65:6d:4f:d1:43:9a:34:9c:27:cf:c2:24:eb:3f: f8:8f:51:9d:5a:1e:31:c1:51:cc:72:51:dd:8d:ac:3a:3b:0d: 80:e2:64:3a:80:5e:a3:81:92:02:f3:2c:bc:38:0a:70:e8:b8: 0b:2f:34:c9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXg9BAZFB9m4iDzaf86EVRE4i8yMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMDY1OTc0MGU3OTI4NDIwZDM1ZTFjYTEyN2RkOTcwMmY2 YjcwYWY3NGQxMWI2OTZhMTdiYWY2ZDk0YzMyZWU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFmexrjTN+e9KZrZxINTjEe/2Evx732JNsyXiNB7cwRUiM MFQ9bDiij3npme3m48Oi6Rcjl0cBJpvUleZkS5d+5ccBN8OViHk7C0AP01GEubsG eGSXPdOlYsKVA3GO+IhtKXr7FuoFsk+VG63clha9R6nD0inHGBNhptrx8R7ydM88 XVUy39VyGtNC/zJIVLwgtbTK1hCs+4f6HOCMSrU651rdPa+2gQKnhTJAfRqZYbdy KX1bPLuuKgojVK6Novkl1//r5iHAztd32PjIRCj8ttjqvdkkjyHTcANISWUeXCt1 xTChoLkz1ujjVFLEzNnTjYi5zeJf7qZ6UaLk0Tq1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8vboEmOvrKoATKwF5tYr3zNMTQ4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAxZmY5YzhmLThkYTktNDRhZS05YjY0LTExNWFkZDBkYjFmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbM7MAwDQYJKoZIhvcNAQELBQADggEBAJZkDbdXSzcp5kZOH+3CXE+fi2yX kdShB2xu8wIB81BCe08Iven9tSdDQ9j+4U7MZgx2ug/oqmzJ5/FkQ53iNidxgmIG sTe0I0FZ5BGcBp/C+0HZ9seAYexcB0ESf+qRxs7lAQTv10f3gmBnPv3ka6B7Frky DXzdvDVs/5ovRHve0o8END0pwxT2fujTLojLZ0wAaR0QUWS/lO6fiImNgf4+gyNM ZeRvIRIE2u1zPGvJzt+Bp+vKVUTwpk/iBORBenivpnu9Ca8D4TRlbU/RQ5o0nCfP wiTrP/iPUZ1aHjHBUcxyUd2NrDo7DYDiZDqAXqOBkgLzLLw4CnDouAsvNMk= -----END CERTIFICATE-----Generated at Wed Feb 5 09:49:56 2025 by rpki-client