$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3736fb83-358c-4ea5-a82f-fa5a7eea0836.roa File: 3736fb83-358c-4ea5-a82f-fa5a7eea0836.roa (raw, json) Hash identifier: 5H5OqCBEa2U+qlxWxo+MLSQOifM+D1bZ02NghRVD5mQ= Subject key identifier: 3D:F5:31:5D:95:FA:46:5A:47:81:CD:1B:E6:38:49:7E:37:42:9F:28 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6826FC4B35FB00EE7065702C4518E0D83BA1AC46 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3736fb83-358c-4ea5-a82f-fa5a7eea0836.roa Signing time: Fri 24 Jan 2025 00:00:00 +0000 ROA not before: Fri 24 Jan 2025 00:00:00 +0000 ROA not after: Fri 28 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 76.223.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:26:fc:4b:35:fb:00:ee:70:65:70:2c:45:18:e0:d8:3b:a1:ac:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 24 00:00:00 2025 GMT Not After : Feb 28 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ea:f9:cc:07:fb:12:88:a9:8a:35:af:b6:8d: 1f:de:15:53:5b:8c:91:48:1b:24:22:5a:5a:46:8f: 33:35:6a:3a:af:fc:6d:6b:b2:bb:ff:4f:ba:69:97: 58:fd:5e:45:12:13:39:69:cd:43:40:5f:f1:67:00: 44:93:25:5d:af:48:53:2f:00:9d:c0:19:dc:9f:90: 36:af:b9:6f:65:6e:59:a0:29:1b:5c:6d:5b:02:bc: b9:dd:bf:67:8a:b3:61:9a:70:a3:e7:41:a6:a5:33: 98:56:36:49:f7:13:f0:1c:4d:bf:a9:46:10:fc:7d: f0:7f:48:b5:4f:8b:de:66:b3:ea:14:97:b4:91:ea: 35:40:f9:ca:a9:f0:9e:a1:11:69:e1:df:cb:2f:cd: 42:2a:d3:a4:88:88:e3:44:ea:07:79:96:cb:7e:f8: 8e:62:fb:9d:3a:c4:0a:c5:16:37:ae:93:35:72:49: a8:3e:7d:37:7f:05:59:94:a6:d1:51:b7:ee:14:4a: e7:4d:8b:cf:c1:ec:42:63:33:19:4a:13:16:51:1b: 6d:78:05:8e:3e:6c:f3:4a:5e:b7:4c:bd:81:d5:61: f2:05:2e:98:78:94:4d:2c:9a:e2:66:31:b4:06:51: 77:dc:ba:7e:eb:62:4c:38:a0:b7:80:53:27:47:1e: 1d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F5:31:5D:95:FA:46:5A:47:81:CD:1B:E6:38:49:7E:37:42:9F:28 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3736fb83-358c-4ea5-a82f-fa5a7eea0836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.172.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:ab:4c:43:44:f0:07:bc:32:91:2f:d1:03:21:94:72:ae:b5: d9:cc:8c:f4:f5:9a:e0:1b:37:20:aa:2b:ad:b1:a6:cb:50:5d: 00:d5:f5:c4:d1:a2:b5:69:ac:9d:88:c2:2b:fd:20:e7:d0:24: 8d:3b:e2:bf:fd:fd:a5:df:f6:81:6f:53:15:02:5f:c2:3a:5b: d3:f4:84:d5:6b:7f:94:d2:8d:0b:44:41:4f:75:a5:84:0c:c3: 23:ef:ce:e3:5b:f0:b3:09:1e:f9:bc:93:14:f5:fb:4e:a5:b9: 2f:27:35:e2:8d:0a:9e:4d:d3:1f:72:8b:71:ff:bd:b2:6e:9f: a3:da:7f:5d:2e:f3:d6:ef:9b:52:de:f7:b6:b9:ae:59:e2:94: ee:12:35:c5:8f:78:fe:c6:f8:16:c9:98:36:b8:46:56:85:61: ae:18:03:13:f8:99:6e:0e:99:0c:c2:94:4b:61:1e:56:a2:94: 1e:27:a8:a6:d3:29:6c:a6:68:f0:8d:93:4b:ad:72:ef:03:fd: 3f:16:d1:40:62:a8:ea:52:6f:b5:01:e3:38:f2:87:1c:bf:82: 46:b8:f0:65:a5:38:27:a8:a9:d1:94:6e:8f:cc:74:82:65:b3: f6:73:92:45:4d:61:28:57:a0:a9:bc:37:66:b6:54:34:df:7f: 04:a7:0b:f6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaCb8SzX7AO5wZXAsRRjg2DuhrEYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNjE3YmUxM2YwMTQwMTZjNzVjOTQ2NDMyY2VlMTc4OThm YmZjYzRjNWM2MDc0Yzk0NjVkNTkzZGVkZWM5NWY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDv6vnMB/sSiKmKNa+2jR/eFVNbjJFIGyQiWlpGjzM1ajqv /G1rsrv/T7ppl1j9XkUSEzlpzUNAX/FnAESTJV2vSFMvAJ3AGdyfkDavuW9lblmg KRtcbVsCvLndv2eKs2GacKPnQaalM5hWNkn3E/AcTb+pRhD8ffB/SLVPi95ms+oU l7SR6jVA+cqp8J6hEWnh38svzUIq06SIiONE6gd5lst++I5i+506xArFFjeukzVy Sag+fTd/BVmUptFRt+4USudNi8/B7EJjMxlKExZRG214BY4+bPNKXrdMvYHVYfIF Lph4lE0smuJmMbQGUXfcun7rYkw4oLeAUydHHh19AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPfUxXZX6RlpHgc0b5jhJfjdCnygwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM3MzZmYjgzLTM1OGMtNGVhNS1hODJmLWZhNWE3ZWVhMDgzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJM36wwDQYJKoZIhvcNAQELBQADggEBAEqrTENE8Ae8MpEv0QMhlHKutdnM jPT1muAbNyCqK62xpstQXQDV9cTRorVprJ2Iwiv9IOfQJI074r/9/aXf9oFvUxUC X8I6W9P0hNVrf5TSjQtEQU91pYQMwyPvzuNb8LMJHvm8kxT1+06luS8nNeKNCp5N 0x9yi3H/vbJun6Paf10u89bvm1Le97a5rlnilO4SNcWPeP7G+BbJmDa4RlaFYa4Y AxP4mW4OmQzClEthHlailB4nqKbTKWymaPCNk0utcu8D/T8W0UBiqOpSb7UB4zjy hxy/gka48GWlOCeoqdGUbo/MdIJls/ZzkkVNYShXoKm8N2a2VDTffwSnC/Y= -----END CERTIFICATE-----Generated at Wed Feb 5 09:48:28 2025 by rpki-client