$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a99f94c-8b10-4779-851f-4ee9c8051796.roa File: 2a99f94c-8b10-4779-851f-4ee9c8051796.roa (raw, json) Hash identifier: k3+1Qu5OnlHjxUrxfX53Xpzk32TCGgF+b8iPTERqrLI= Subject key identifier: DC:5D:7B:E9:DA:22:7A:C1:C3:B8:25:1E:B1:29:2E:82:72:70:06:76 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6F59CF8BC4578BAD06681D4482A35234F749FA72 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a99f94c-8b10-4779-851f-4ee9c8051796.roa Signing time: Mon 10 Feb 2025 00:00:00 +0000 ROA not before: Mon 10 Feb 2025 00:00:00 +0000 ROA not after: Mon 17 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 159.11.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:59:cf:8b:c4:57:8b:ad:06:68:1d:44:82:a3:52:34:f7:49:fa:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 10 00:00:00 2025 GMT Not After : Mar 17 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b2:ac:36:3f:d8:63:f5:b2:65:14:0c:db:48: 69:d3:98:f8:96:6d:ec:6c:c9:d9:55:6d:8e:54:4a: 1c:7e:84:4b:da:b2:2d:50:fd:3d:c7:85:b4:a7:4b: 52:6e:22:f6:58:1f:be:2e:24:62:e7:97:f8:f1:2e: 9e:65:21:2a:b1:ce:d9:67:74:bb:fe:91:24:9c:16: a0:9a:66:9e:66:05:a3:82:fe:e7:41:c7:cd:8f:11: 9a:f1:47:e0:9e:e6:b0:5b:1c:1e:6a:a0:7c:c8:81: 30:f2:43:a9:82:a4:dc:fa:b3:15:59:c2:ae:17:c4: 46:5f:1e:ea:f1:b3:32:52:c5:74:12:04:9c:ea:9d: 7d:0c:55:21:00:69:36:4f:e8:0a:fb:23:60:18:04: ab:83:65:69:36:3d:5c:a9:67:ba:b9:70:9d:b6:60: fd:43:2c:b1:d6:c9:cf:3c:d7:a8:67:dc:ee:d1:04: db:ac:e7:d8:51:22:a4:a2:39:12:bf:2b:98:cc:81: d0:ab:aa:f9:b0:fb:62:85:2b:67:f5:43:06:1e:8a: f4:f2:9d:94:8e:e5:ab:d9:f1:dd:0d:72:6d:c6:d9: cd:94:51:4f:9d:45:02:9a:88:ba:b5:a9:53:20:b0: a2:2c:eb:ba:6e:e9:b0:5a:b8:27:60:68:78:d2:2d: 19:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5D:7B:E9:DA:22:7A:C1:C3:B8:25:1E:B1:29:2E:82:72:70:06:76 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a99f94c-8b10-4779-851f-4ee9c8051796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.11.0.0/16 Signature Algorithm: sha256WithRSAEncryption 36:38:20:78:b5:06:fe:58:e5:13:f4:a5:c3:fe:fe:71:d1:9e: 3e:4d:0d:4b:2a:02:62:f7:f6:04:2e:24:37:22:b4:97:95:f3: ea:1b:7d:85:e5:b9:96:4f:39:ee:92:5c:e8:3a:df:c1:68:a1: 7b:ac:75:c5:ee:7b:8d:b6:c3:fa:ce:58:ff:19:2c:3c:68:b4: 7d:ab:97:57:ec:01:92:56:d9:f4:a4:32:c3:5f:5d:fe:8e:75: e7:6b:c7:65:14:ce:d1:fc:2e:85:a0:8b:67:fd:f7:51:98:53: ee:bf:91:66:70:b1:14:b8:49:e1:67:97:47:c7:3c:64:f5:c3: 49:b7:18:32:a6:8f:f5:a2:b6:b2:b3:5c:05:fb:17:62:4b:81: 11:c0:48:a7:72:e5:22:f5:5e:f6:f2:e5:48:a9:62:86:91:e8: 01:b7:bc:e9:8b:0d:37:83:28:60:af:91:eb:5f:d6:7a:6e:c6: 66:14:66:3a:a7:60:3b:6c:05:39:68:13:cf:40:fe:12:2e:56: ea:e6:49:70:9c:b1:d2:65:7b:0f:a7:04:6a:27:28:14:64:6b: 37:df:83:c7:9c:57:ce:88:4a:39:14:9a:5f:5b:d3:01:c7:b6: 51:f7:6f:64:7e:3a:ea:3a:e2:74:c7:80:e1:9f:90:ee:4f:32: 3b:2f:17:3c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUb1nPi8RXi60GaB1EgqNSNPdJ+nIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjEwMDAwMDAwWhcNMjUwMzE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTViYWNkYzUwOThjYTM3ZGY2MGE3OTMzOGE2YjM0NDI0 MmE3MWUzMjk4ZDc0ZTQ0Yjg2NWQ1ZTA5MjVhMzQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1sqw2P9hj9bJlFAzbSGnTmPiWbexsydlVbY5UShx+hEva si1Q/T3HhbSnS1JuIvZYH74uJGLnl/jxLp5lISqxztlndLv+kSScFqCaZp5mBaOC /udBx82PEZrxR+Ce5rBbHB5qoHzIgTDyQ6mCpNz6sxVZwq4XxEZfHurxszJSxXQS BJzqnX0MVSEAaTZP6Ar7I2AYBKuDZWk2PVypZ7q5cJ22YP1DLLHWyc8816hn3O7R BNus59hRIqSiORK/K5jMgdCrqvmw+2KFK2f1QwYeivTynZSO5avZ8d0Ncm3G2c2U UU+dRQKaiLq1qVMgsKIs67pu6bBauCdgaHjSLRktAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU3F176doiesHDuCUesSkugnJwBnYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhOTlmOTRjLThiMTAtNDc3OS04NTFmLTRlZTljODA1MTc5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCfCzANBgkqhkiG9w0BAQsFAAOCAQEANjggeLUG/ljlE/Slw/7+cdGePk0N SyoCYvf2BC4kNyK0l5Xz6ht9heW5lk857pJc6DrfwWihe6x1xe57jbbD+s5Y/xks PGi0fauXV+wBklbZ9KQyw19d/o5152vHZRTO0fwuhaCLZ/33UZhT7r+RZnCxFLhJ 4WeXR8c8ZPXDSbcYMqaP9aK2srNcBfsXYkuBEcBIp3LlIvVe9vLlSKlihpHoAbe8 6YsNN4MoYK+R61/Wem7GZhRmOqdgO2wFOWgTz0D+Ei5W6uZJcJyx0mV7D6cEaico FGRrN9+Dx5xXzohKORSaX1vTAce2UfdvZH466jridMeA4Z+Q7k8yOy8XPA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:28 2025 by rpki-client