$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/037fe84d-df11-46ec-b853-924ed1c2fbd1.roa File: 037fe84d-df11-46ec-b853-924ed1c2fbd1.roa (raw, json) Hash identifier: 92XjgiltYmm/ht98U9kHP1nuZmaoLo56MnvzCoS8434= Subject key identifier: 3C:CB:EC:9C:AE:70:A2:E5:8B:F4:16:71:FA:2C:C3:55:97:CB:32:D8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 37D20D6F8547A39609FA6AF5DFA60DF9189E8239 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/037fe84d-df11-46ec-b853-924ed1c2fbd1.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.33.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d2:0d:6f:85:47:a3:96:09:fa:6a:f5:df:a6:0d:f9:18:9e:82:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2d:e0:3d:f6:70:71:bc:d6:03:70:9f:ba:a3: 4c:05:86:55:90:ad:13:27:78:86:61:60:5e:af:b9: be:b2:eb:37:50:1c:53:2d:30:59:e3:ea:b9:00:ea: 81:7c:ad:e0:0f:9a:4e:b4:8c:4b:6a:c0:73:b3:21: 22:bd:a2:5a:5c:e1:f4:15:28:37:ce:f4:95:ff:6c: c2:df:a5:58:1e:f9:51:61:73:0a:ea:99:57:35:07: f5:2c:6c:80:f6:56:4b:37:a1:51:67:e5:53:6b:1a: 19:d8:65:7e:b2:52:d7:04:29:f0:49:ae:56:54:62: e6:40:f1:e8:74:fa:38:5e:db:af:16:7a:c5:3d:5d: 9a:72:80:6b:f2:37:4c:87:25:4a:6d:92:98:61:7d: 44:5d:93:17:9d:ce:60:74:51:94:96:92:51:15:62: ce:db:a4:d0:01:fb:7b:e6:0e:e9:9e:6f:48:d0:c4: 5b:b1:2c:d1:ea:39:61:18:d1:3f:dd:47:90:41:1a: 45:48:d4:a8:e6:2d:26:86:15:1e:89:88:be:86:d8: 03:0c:d2:4e:2e:8d:86:65:4b:79:b9:ba:89:d4:19: e5:c6:6f:72:4d:b7:f7:a8:c5:07:b5:ef:a1:a4:02: d7:8b:da:c8:e5:e9:1a:86:d6:67:99:1f:f6:6a:34: c2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CB:EC:9C:AE:70:A2:E5:8B:F4:16:71:FA:2C:C3:55:97:CB:32:D8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/037fe84d-df11-46ec-b853-924ed1c2fbd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.33.128.0/21 Signature Algorithm: sha256WithRSAEncryption 9d:38:84:f6:a2:88:01:15:e4:b5:ea:8c:0d:0a:31:ff:41:52: 3e:0a:1a:2f:3a:0c:d4:cd:4a:44:c4:73:59:e9:84:4c:24:2b: 0c:50:d2:60:48:b8:a8:09:f3:34:22:03:6f:90:44:b1:c4:d7: 59:50:30:cc:b3:ba:6b:05:97:37:67:7e:db:f5:45:08:62:b9: 57:94:55:cc:7f:0c:f4:45:52:e4:f7:ad:80:f0:58:b5:c4:50: 48:8f:86:5f:f0:61:33:f6:3a:1c:fa:17:34:d9:57:fe:4a:b9: ac:5e:26:3c:af:b0:3b:56:44:a2:8c:ce:fd:0f:dc:f2:52:59: f5:c1:7c:be:35:df:35:86:2e:ac:b8:c9:3c:02:d4:6c:60:3c: af:b9:b0:16:4e:92:d7:61:10:1b:aa:18:c1:33:94:c9:18:33: d8:74:20:0e:fa:a0:b2:01:ea:e7:71:e6:6a:62:48:6e:85:c7: 2b:d5:7f:34:92:9b:3f:63:5c:76:20:2b:7c:f9:ab:5b:1d:6e: d0:41:dc:8f:ec:71:02:14:65:d4:e8:66:52:8b:c5:af:fd:b3: 25:34:d9:ad:a8:8b:d2:fa:5c:a9:89:ce:54:af:96:ab:9d:27: df:28:3f:dd:15:a9:f7:06:1e:4b:c3:65:d9:32:ec:58:6a:5b: 6b:fa:5b:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN9INb4VHo5YJ+mr136YN+RiegjkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTAyZDE2NGExNjhhZGNiNDg4ZDFhZWZlZTdjOGM3NTQ5 NDRjZTlkNjI4YjI5ZTdhMWY4YjAxMzgxNjA2NWI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0LeA99nBxvNYDcJ+6o0wFhlWQrRMneIZhYF6vub6y6zdQ HFMtMFnj6rkA6oF8reAPmk60jEtqwHOzISK9olpc4fQVKDfO9JX/bMLfpVge+VFh cwrqmVc1B/UsbID2Vks3oVFn5VNrGhnYZX6yUtcEKfBJrlZUYuZA8eh0+jhe268W esU9XZpygGvyN0yHJUptkphhfURdkxedzmB0UZSWklEVYs7bpNAB+3vmDumeb0jQ xFuxLNHqOWEY0T/dR5BBGkVI1KjmLSaGFR6JiL6G2AMM0k4ujYZlS3m5uonUGeXG b3JNt/eoxQe176GkAteL2sjl6RqG1meZH/ZqNMJLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPMvsnK5wouWL9BZx+izDVZfLMtgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzN2ZlODRkLWRmMTEtNDZlYy1iODUzLTkyNGVkMWMyZmJkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMjIYAwDQYJKoZIhvcNAQELBQADggEBAJ04hPaiiAEV5LXqjA0KMf9BUj4K Gi86DNTNSkTEc1nphEwkKwxQ0mBIuKgJ8zQiA2+QRLHE11lQMMyzumsFlzdnftv1 RQhiuVeUVcx/DPRFUuT3rYDwWLXEUEiPhl/wYTP2Ohz6FzTZV/5KuaxeJjyvsDtW RKKMzv0P3PJSWfXBfL413zWGLqy4yTwC1GxgPK+5sBZOktdhEBuqGMEzlMkYM9h0 IA76oLIB6udx5mpiSG6FxyvVfzSSmz9jXHYgK3z5q1sdbtBB3I/scQIUZdToZlKL xa/9syU02a2oi9L6XKmJzlSvlqudJ98oP90VqfcGHkvDZdky7FhqW2v6W6Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:25 2025 by rpki-client