$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f01b8ab-5405-43f4-a07d-69da82eacce5.roa File: 2f01b8ab-5405-43f4-a07d-69da82eacce5.roa (raw, json) Hash identifier: f+hmVLpJfGdrA6UjF5e4y5fcUk8qk5CVhVUp2kRp6EQ= Subject key identifier: 27:78:5F:82:0B:21:AD:A2:FA:ED:C3:FF:A8:4A:E8:F3:23:01:C5:9A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 088126A6709B093F455A6DE43E18B1284A022B81 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f01b8ab-5405-43f4-a07d-69da82eacce5.roa Signing time: Wed 12 Feb 2025 00:00:00 +0000 ROA not before: Wed 12 Feb 2025 00:00:00 +0000 ROA not after: Wed 19 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.44.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:81:26:a6:70:9b:09:3f:45:5a:6d:e4:3e:18:b1:28:4a:02:2b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 12 00:00:00 2025 GMT Not After : Mar 19 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1d:d6:d1:9f:d1:77:87:3e:b5:b4:29:f3:9d: c1:77:33:5e:6c:47:1f:75:e7:d7:c1:64:31:c1:2a: be:02:18:3c:66:ec:86:c0:28:e3:c0:9f:8e:2d:ea: 0d:44:34:3a:50:f6:49:3b:27:47:d9:c1:e0:d1:ce: 18:fc:54:8c:8b:db:d7:20:2c:1b:a0:92:ee:f6:9f: 1d:9b:46:60:08:8c:f9:1b:0d:01:38:f6:45:b9:ab: 02:a5:5f:ca:fd:e0:17:e3:30:53:30:d9:8f:84:8f: 29:86:5b:bc:b4:ef:1f:66:5b:3e:6b:5a:e0:fd:2a: 5a:9a:e9:10:c4:0b:e1:55:76:61:8d:12:2d:d6:c8: 63:58:35:dc:80:c1:e9:21:68:d8:bc:8d:cc:97:8e: 0b:70:6b:37:a6:78:04:d5:06:23:a7:9e:63:f5:13: 5a:b8:4d:cb:35:ec:5b:6f:49:b3:43:ce:ff:35:ea: 6b:40:41:41:b1:be:fb:81:1a:33:30:2b:cb:5f:82: 67:bb:53:08:b7:a3:5a:65:db:54:4a:c6:d6:45:d1: c2:19:c8:ff:61:5c:f4:02:bd:e8:53:72:a1:b8:5e: 96:ec:8d:42:8b:60:9f:a7:0c:e4:9b:a9:0e:4d:45: e2:a7:cf:2c:73:15:8b:cd:cc:df:84:bf:d0:8f:c5: 27:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:78:5F:82:0B:21:AD:A2:FA:ED:C3:FF:A8:4A:E8:F3:23:01:C5:9A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f01b8ab-5405-43f4-a07d-69da82eacce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.44.0.0/15 Signature Algorithm: sha256WithRSAEncryption 62:db:bb:9b:b8:cd:a3:c0:d1:33:9e:a0:bc:32:4b:8f:d6:ff: a9:44:5c:68:6f:66:e6:56:fa:c2:b1:28:60:2a:85:07:05:02: a3:d8:64:a0:73:d1:8d:78:4a:b4:5f:76:f2:ca:3d:b1:5f:57: 2b:2a:f7:2e:b8:0e:74:d8:63:e6:d4:ef:6b:ef:17:b2:a0:f0: 64:4c:e2:8d:3b:f2:9d:fd:ae:ab:1c:b0:de:bf:97:39:88:fd: f2:97:0a:6a:c7:70:fc:d2:55:b6:71:64:ac:bd:f8:ad:76:c0: ce:43:59:72:7b:1c:6c:0b:99:0e:b9:cd:42:57:a5:a9:24:78: 12:47:cf:3b:d0:c7:51:4c:53:66:b9:3a:23:e9:d8:a8:4a:0c: 21:02:9a:4f:f8:77:6e:2c:74:3b:71:d2:42:a3:06:6d:1f:72: 86:be:e0:c0:ce:6b:c7:f0:4e:7a:e2:c3:b9:31:93:b7:5e:2a: 19:d1:c0:48:ee:f4:06:f7:41:e4:48:ac:0d:04:bf:55:b3:3a: 1d:8a:11:f5:5e:44:2f:5b:4c:66:97:e4:57:4f:23:2a:04:60: 29:f3:a0:b3:ab:bb:e7:69:f6:fb:d9:ec:f0:74:b1:31:72:c8: 7a:20:80:4a:87:ae:c4:9e:1e:8d:bb:b0:19:39:b3:5f:18:a6: 01:6a:c8:b6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCIEmpnCbCT9FWm3kPhixKEoCK4EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjEyMDAwMDAwWhcNMjUwMzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTAzMDY2NGJmMGMzZmE2MDNmNGFhNzE2NzNmNDM2ZWQz OTNhODFjZmRiZGFhYzcyN2JkZjI0ZDQ0MmI5ODQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqHdbRn9F3hz61tCnzncF3M15sRx9159fBZDHBKr4CGDxm 7IbAKOPAn44t6g1ENDpQ9kk7J0fZweDRzhj8VIyL29cgLBugku72nx2bRmAIjPkb DQE49kW5qwKlX8r94BfjMFMw2Y+EjymGW7y07x9mWz5rWuD9Klqa6RDEC+FVdmGN Ei3WyGNYNdyAwekhaNi8jcyXjgtwazemeATVBiOnnmP1E1q4Tcs17FtvSbNDzv81 6mtAQUGxvvuBGjMwK8tfgme7Uwi3o1pl21RKxtZF0cIZyP9hXPQCvehTcqG4Xpbs jUKLYJ+nDOSbqQ5NReKnzyxzFYvNzN+Ev9CPxSd1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUJ3hfggshraL67cP/qEro8yMBxZowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJmMDFiOGFiLTU0MDUtNDNmNC1hMDdkLTY5ZGE4MmVhY2NlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEjLDANBgkqhkiG9w0BAQsFAAOCAQEAYtu7m7jNo8DRM56gvDJLj9b/qURc aG9m5lb6wrEoYCqFBwUCo9hkoHPRjXhKtF928so9sV9XKyr3LrgOdNhj5tTva+8X sqDwZEzijTvynf2uqxyw3r+XOYj98pcKasdw/NJVtnFkrL34rXbAzkNZcnscbAuZ DrnNQlelqSR4EkfPO9DHUUxTZrk6I+nYqEoMIQKaT/h3bix0O3HSQqMGbR9yhr7g wM5rx/BOeuLDuTGTt14qGdHASO70BvdB5EisDQS/VbM6HYoR9V5EL1tMZpfkV08j KgRgKfOgs6u752n2+9ns8HSxMXLIeiCASoeuxJ4ejbuwGTmzXximAWrItg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:03 2025 by rpki-client