$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b441a4c-67d7-45c3-bf76-426c89ac2cc7.roa File: 1b441a4c-67d7-45c3-bf76-426c89ac2cc7.roa (raw, json) Hash identifier: V4EBFUPq/f6xzTnJ3xkhyqZcDQyFCLCJ0CHj2Vhx1ns= Subject key identifier: F3:A7:0B:F3:0A:DA:8B:99:C6:B0:BE:0E:0F:15:A5:84:2B:6C:E7:1A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 50A7A4FDBF4D1D967171BC3FDA325A82883FF853 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b441a4c-67d7-45c3-bf76-426c89ac2cc7.roa Signing time: Fri 24 Jan 2025 00:00:00 +0000 ROA not before: Fri 24 Jan 2025 00:00:00 +0000 ROA not after: Fri 28 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a7:a4:fd:bf:4d:1d:96:71:71:bc:3f:da:32:5a:82:88:3f:f8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 24 00:00:00 2025 GMT Not After : Feb 28 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:94:ce:55:16:97:54:2b:2f:05:72:d8:0f:73: 0c:4f:51:88:ca:7d:a6:a5:87:9e:2f:81:5a:4a:58: df:e5:4f:90:27:4b:69:78:2b:8b:b6:35:fc:a1:9a: d1:fa:4d:18:13:fb:aa:0f:a3:26:e3:94:99:c6:1a: cd:c2:29:6f:27:ec:97:68:d8:2b:d8:92:63:43:42: 16:87:81:ea:f5:c6:51:cf:bd:cc:bb:a6:d2:ae:3a: 87:ac:9d:05:87:4f:f9:1d:38:44:8b:48:ff:3f:ae: da:8d:5a:31:44:46:d1:56:9c:35:e9:3b:93:15:ed: ce:7d:02:2b:1a:fd:c7:93:e7:60:60:3b:2f:4e:be: 0a:7a:45:31:f2:04:88:1f:b6:d5:8c:18:4c:21:6e: 75:a6:25:cb:df:43:1a:7f:81:40:6a:3c:72:6a:11: e0:5b:37:84:85:e2:08:bb:b1:b6:1c:80:88:ce:dd: 5c:d2:85:56:a3:09:48:c3:97:ed:1f:ae:6d:91:9b: c4:42:82:70:50:41:45:ae:19:cd:75:a4:87:b3:be: 7a:e8:57:71:3f:1c:43:31:70:a7:c2:e4:6c:f3:51: 5d:01:9c:97:7e:01:ad:1a:81:99:55:a2:1a:b6:6d: 5f:79:71:84:22:ec:f2:e6:7a:16:81:d4:5f:37:75: 0c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A7:0B:F3:0A:DA:8B:99:C6:B0:BE:0E:0F:15:A5:84:2B:6C:E7:1A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b441a4c-67d7-45c3-bf76-426c89ac2cc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.139.0/24 Signature Algorithm: sha256WithRSAEncryption cf:11:29:f7:9a:9c:d9:3c:91:40:db:69:5d:08:59:f7:da:01: 5d:cb:1f:c3:ad:d6:a9:78:d2:5a:b9:d2:b7:53:f7:f4:f8:bb: 09:c9:c6:05:03:77:66:e5:0b:2e:5e:c5:22:60:06:06:d1:66: a9:54:a7:66:34:6c:c0:80:78:28:07:59:6e:c4:11:8d:6f:94: 7e:07:46:73:9d:0a:3a:87:5d:68:05:5e:37:6f:56:de:ca:02: 41:72:d3:1a:66:23:d9:ee:f5:57:aa:78:7e:e1:0d:cb:ab:a3: 1e:93:dc:45:11:d4:4b:a7:f2:79:d2:c6:20:12:a2:dd:af:78: b2:0f:ea:88:d8:e1:20:ae:fa:a7:81:45:26:7f:5b:f1:14:61: 7c:64:78:f8:7d:b1:42:36:55:16:c3:29:56:30:7a:f3:8d:a6: f1:6f:a7:81:c4:b4:d0:23:07:2a:27:d9:81:79:59:75:8f:b2: f1:58:d8:e7:75:92:9c:54:96:59:d3:53:11:7f:f8:f4:10:76: 1c:6a:dd:de:32:12:81:cd:51:6f:b1:33:ce:2c:44:16:a9:ca: 45:35:b8:27:d6:dc:61:80:7b:87:2a:98:5b:9b:58:eb:27:4b: e4:c4:86:2b:ec:ae:e3:85:cb:ef:0e:90:93:8d:50:21:b0:0c: 0f:4a:8c:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUKek/b9NHZZxcbw/2jJagog/+FMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTUzYTZiMjM2MGQwOTA5NmM1NTE5ZmFiOTc2MGNjMjRh ODhhN2ExYmNjZWUxYzcxNDU4OWI2MmRjZGNkNzgyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD5lM5VFpdUKy8FctgPcwxPUYjKfaalh54vgVpKWN/lT5An S2l4K4u2NfyhmtH6TRgT+6oPoybjlJnGGs3CKW8n7Jdo2CvYkmNDQhaHger1xlHP vcy7ptKuOoesnQWHT/kdOESLSP8/rtqNWjFERtFWnDXpO5MV7c59Aisa/ceT52Bg Oy9Ovgp6RTHyBIgfttWMGEwhbnWmJcvfQxp/gUBqPHJqEeBbN4SF4gi7sbYcgIjO 3VzShVajCUjDl+0frm2Rm8RCgnBQQUWuGc11pIezvnroV3E/HEMxcKfC5GzzUV0B nJd+Aa0agZlVohq2bV95cYQi7PLmehaB1F83dQw3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU86cL8wrai5nGsL4ODxWlhCts5xowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFiNDQxYTRjLTY3ZDctNDVjMy1iZjc2LTQyNmM4OWFjMmNjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTYswDQYJKoZIhvcNAQELBQADggEBAM8RKfeanNk8kUDbaV0IWffaAV3L H8Ot1ql40lq50rdT9/T4uwnJxgUDd2blCy5exSJgBgbRZqlUp2Y0bMCAeCgHWW7E EY1vlH4HRnOdCjqHXWgFXjdvVt7KAkFy0xpmI9nu9VeqeH7hDcurox6T3EUR1Eun 8nnSxiASot2veLIP6ojY4SCu+qeBRSZ/W/EUYXxkePh9sUI2VRbDKVYwevONpvFv p4HEtNAjByon2YF5WXWPsvFY2Od1kpxUllnTUxF/+PQQdhxq3d4yEoHNUW+xM84s RBapykU1uCfW3GGAe4cqmFubWOsnS+TEhivsruOFy+8OkJONUCGwDA9KjAg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:23 2025 by rpki-client