$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a5a0eca-be57-4d66-b22c-1868a61ecbf9.roa File: 3a5a0eca-be57-4d66-b22c-1868a61ecbf9.roa (raw, json) Hash identifier: sIr8hMSYK5mSEGeoyD57TX/wFjzjauHG5vtjDGGog7c= Subject key identifier: 76:51:B7:2F:BC:02:0A:75:AB:D4:8C:D6:CD:41:1B:32:66:C4:35:9C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 57F1CB89E9FC8567B428353B9D7B80A0117F628D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a5a0eca-be57-4d66-b22c-1868a61ecbf9.roa Signing time: Fri 07 Feb 2025 00:00:00 +0000 ROA not before: Fri 07 Feb 2025 00:00:00 +0000 ROA not after: Fri 14 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f1:cb:89:e9:fc:85:67:b4:28:35:3b:9d:7b:80:a0:11:7f:62:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 7 00:00:00 2025 GMT Not After : Mar 14 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1c:f2:40:d1:ea:92:b9:4e:77:a7:45:fb:79: f6:df:13:a9:d6:02:4b:fe:de:5a:6e:90:21:37:d2: bf:03:f5:9f:d9:ea:73:31:97:4a:19:04:6d:a8:1d: 83:e9:fb:66:3a:16:0b:77:79:8a:e7:2c:a2:54:05: 57:0c:5d:63:94:80:a0:32:23:34:d1:26:fd:01:8a: 1a:9e:c1:b5:f2:47:12:c3:b1:60:1d:19:55:db:85: cd:74:80:e1:b0:77:93:1e:7d:f1:1b:12:5e:0e:55: 5c:3b:54:00:bb:4a:43:d8:db:5a:ac:1d:b4:eb:cd: 52:26:5d:f0:10:ec:15:a0:96:b3:cd:08:3f:07:31: 6e:ce:22:3a:c1:11:b4:ed:8b:16:2c:f6:03:d3:d2: 8f:12:ad:9f:b5:15:2c:92:8e:50:c8:d1:d6:df:e6: f5:f6:cd:02:b6:79:00:db:36:5a:a8:46:73:ff:cc: 19:6b:d1:91:b6:08:d3:03:82:1b:21:76:69:5a:5c: 6e:3a:b8:75:d6:26:1f:7b:cc:e8:fd:b0:15:81:36: 83:f5:e0:29:88:02:26:1d:a0:25:08:72:43:dc:22: a0:5c:a8:d9:e5:3e:c2:6c:2d:2b:19:a4:03:0a:20: 6f:c6:47:af:aa:ff:6d:54:0e:24:24:5a:c5:d5:e3: b7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:51:B7:2F:BC:02:0A:75:AB:D4:8C:D6:CD:41:1B:32:66:C4:35:9C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a5a0eca-be57-4d66-b22c-1868a61ecbf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.64.0/18 Signature Algorithm: sha256WithRSAEncryption a1:da:47:e3:da:ee:80:8d:f6:d2:5e:b7:c5:b0:9d:da:e8:73: eb:29:2a:69:71:98:1b:7f:00:55:a8:73:3b:5a:fc:ac:7a:5f: cb:75:3b:8a:9b:5e:9c:69:54:8a:3d:fa:dd:75:84:bd:d7:ad: fc:f6:48:3c:eb:40:eb:3a:d3:a9:d5:6c:a2:c1:fe:45:35:1b: 7e:0c:f2:61:69:8f:93:3c:04:4e:dc:97:d2:b9:48:f8:01:43: b0:47:e1:47:49:1e:4c:4e:d3:40:39:65:24:25:38:2f:a2:8a: 27:6f:42:88:fd:bd:4f:90:cb:89:e0:14:4f:b1:99:5e:e1:6b: 1f:13:03:61:98:e5:bf:36:52:c8:6b:f6:09:b3:75:15:f1:75: 72:e1:89:0c:34:d6:74:ba:6d:46:05:d2:09:6b:e7:61:b3:e1: 68:41:9a:5a:c0:42:04:e8:6e:dd:c5:5b:7e:43:4b:b3:26:c6: 46:31:25:5e:61:0d:51:fe:8f:dd:88:24:4e:22:bf:94:e7:58: 62:ab:65:05:fb:fb:e8:24:87:bf:ab:50:b0:68:0a:04:d8:9a: 7e:ff:e1:8b:dd:f7:e5:c3:0f:a4:88:cb:4f:99:5a:82:61:e7: 91:91:c8:5a:2a:3e:bb:64:96:61:b2:9c:03:ae:77:85:6d:4a: 19:f9:c8:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV/HLien8hWe0KDU7nXuAoBF/Yo0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA3MDAwMDAwWhcNMjUwMzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOWUyYzIyYjRkNjE3YTAyMmJlZGUxOWE3NDRiYjM2YTE0 NWEzZWExN2Q0ZWQwZTQ4NzFjMGViMTZiZDg4NDYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbHPJA0eqSuU53p0X7efbfE6nWAkv+3lpukCE30r8D9Z/Z 6nMxl0oZBG2oHYPp+2Y6Fgt3eYrnLKJUBVcMXWOUgKAyIzTRJv0BihqewbXyRxLD sWAdGVXbhc10gOGwd5MeffEbEl4OVVw7VAC7SkPY21qsHbTrzVImXfAQ7BWglrPN CD8HMW7OIjrBEbTtixYs9gPT0o8SrZ+1FSySjlDI0dbf5vX2zQK2eQDbNlqoRnP/ zBlr0ZG2CNMDghshdmlaXG46uHXWJh97zOj9sBWBNoP14CmIAiYdoCUIckPcIqBc qNnlPsJsLSsZpAMKIG/GR6+q/21UDiQkWsXV47c3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdlG3L7wCCnWr1IzWzUEbMmbENZwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhNWEwZWNhLWJlNTctNGQ2Ni1iMjJjLTE4NjhhNjFlY2JmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaIEkAwDQYJKoZIhvcNAQELBQADggEBAKHaR+Pa7oCN9tJet8Wwndroc+sp KmlxmBt/AFWoczta/Kx6X8t1O4qbXpxpVIo9+t11hL3Xrfz2SDzrQOs606nVbKLB /kU1G34M8mFpj5M8BE7cl9K5SPgBQ7BH4UdJHkxO00A5ZSQlOC+iiidvQoj9vU+Q y4ngFE+xmV7hax8TA2GY5b82Ushr9gmzdRXxdXLhiQw01nS6bUYF0glr52Gz4WhB mlrAQgTobt3FW35DS7MmxkYxJV5hDVH+j92IJE4iv5TnWGKrZQX7++gkh7+rULBo CgTYmn7/4Yvd9+XDD6SIy0+ZWoJh55GRyFoqPrtklmGynAOud4VtShn5yN0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:35 2025 by rpki-client