$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45bf16e8-0583-468a-810c-c396eee57aeb.roa File: 45bf16e8-0583-468a-810c-c396eee57aeb.roa (raw, json) Hash identifier: nKH3v4957btOFZAfEpjRTqrZ6p+L/mp5TkOiK1r1Z0A= Subject key identifier: 71:C3:51:03:8E:81:9C:83:9D:3E:ED:55:81:83:0C:6E:2C:33:58:AE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 29B533E929B7AFFE67C4B97B2D611D58813D2D08 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45bf16e8-0583-468a-810c-c396eee57aeb.roa Signing time: Wed 22 Jan 2025 00:00:00 +0000 ROA not before: Wed 22 Jan 2025 00:00:00 +0000 ROA not after: Wed 26 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.209.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b5:33:e9:29:b7:af:fe:67:c4:b9:7b:2d:61:1d:58:81:3d:2d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 22 00:00:00 2025 GMT Not After : Feb 26 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a2:cb:c2:22:6e:0b:ac:f2:37:e0:08:2d:93: 9e:fd:9b:6e:ec:88:59:73:3c:68:a2:86:45:2f:56: 87:25:1f:6d:e0:7e:e1:f1:b2:d2:54:3b:8d:9b:ae: 87:13:46:f7:42:d5:c4:39:3f:05:49:b2:c3:e1:d5: e6:0c:db:ef:cc:34:e2:dd:34:d3:ab:4c:32:4d:b7: af:82:07:f5:fa:30:80:19:fc:de:1f:eb:7e:1e:41: 1d:66:51:b6:09:12:89:0b:c0:be:74:2b:b9:de:99: bd:b7:ae:0f:65:7d:b1:55:65:8c:84:53:f9:c4:92: 0b:9b:06:d4:a9:53:24:d8:95:ec:af:8a:7b:22:f1: 17:8a:7c:33:96:7e:a9:d8:cb:34:49:d2:4b:4a:e5: c3:4a:0a:10:18:be:33:ee:b2:50:30:2f:7d:98:76: cf:08:0f:ce:6c:5a:37:6d:e8:5f:36:e6:39:43:1d: 9d:04:77:3a:5b:83:8b:1a:4b:62:6e:e5:4c:51:18: 56:31:ef:01:53:22:75:7b:6a:5e:3d:c2:f8:ef:a9: d7:92:e0:0f:b0:75:ee:5a:fc:bb:cc:d1:48:0a:3b: 98:5b:ee:d0:b6:9b:50:e4:01:9c:81:6d:64:37:c0: b4:c6:4c:3f:c1:0c:08:58:4c:46:58:ac:73:1f:98: 35:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C3:51:03:8E:81:9C:83:9D:3E:ED:55:81:83:0C:6E:2C:33:58:AE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45bf16e8-0583-468a-810c-c396eee57aeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.209.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1c:04:5d:45:46:a6:2c:b7:f7:ae:17:99:dc:c1:ef:21:a2:a6: 53:fe:fb:09:d4:c5:d2:71:93:7f:95:39:90:9d:04:e2:7e:90: 6d:9a:75:c7:d5:3e:1e:a1:35:74:1c:f4:e9:c8:95:24:01:d4: de:3f:ce:fa:44:5f:87:28:e4:55:73:ca:14:2c:a9:f8:03:53: 5b:8d:b6:02:fe:e5:66:8d:2f:c3:ea:1e:7f:99:5a:c4:ad:6f: aa:5d:4d:35:d0:4f:0b:5b:13:8d:e6:ac:25:ae:c3:ca:ab:a4: 03:e4:75:2e:44:0f:c0:0a:29:8f:82:70:92:8b:ef:68:be:88: e9:ba:55:e2:ec:c5:d6:10:0b:2a:18:19:0c:59:b6:6e:63:94: 9a:d4:cb:03:b8:a9:6a:f4:f6:e3:e0:fb:90:3c:28:fc:44:a0: c4:ec:cb:d9:4f:93:63:40:ca:8c:20:a4:a3:68:1b:5a:50:21: 97:9b:eb:45:02:e7:f9:cb:b8:b4:24:24:b7:c9:0b:7c:e9:46: d4:fb:b9:12:c7:97:65:b1:a8:aa:cd:00:11:cf:38:a1:89:53: 39:ad:50:4d:39:56:84:43:30:fd:24:bb:eb:7b:dc:f4:3e:fd: 99:55:ad:85:18:2b:3f:27:de:4c:78:1e:73:48:c4:48:b1:fb: d8:32:20:8b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKbUz6Sm3r/5nxLl7LWEdWIE9LQgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIyMDAwMDAwWhcNMjUwMjI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNzNjZjQzNDgwOTBkMzM1OWFmY2U1YWQ2ZTI4NzAyYTFh YWJjMThhN2NkMWVhMjNhNDRhZjdkMGU2MjA0YmZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeosvCIm4LrPI34Agtk579m27siFlzPGiihkUvVoclH23g fuHxstJUO42brocTRvdC1cQ5PwVJssPh1eYM2+/MNOLdNNOrTDJNt6+CB/X6MIAZ /N4f634eQR1mUbYJEokLwL50K7nemb23rg9lfbFVZYyEU/nEkgubBtSpUyTYleyv insi8ReKfDOWfqnYyzRJ0ktK5cNKChAYvjPuslAwL32Yds8ID85sWjdt6F825jlD HZ0Edzpbg4saS2Ju5UxRGFYx7wFTInV7al49wvjvqdeS4A+wde5a/LvM0UgKO5hb 7tC2m1DkAZyBbWQ3wLTGTD/BDAhYTEZYrHMfmDVDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUccNRA46BnIOdPu1VgYMMbiwzWK4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1YmYxNmU4LTA1ODMtNDY4YS04MTBjLWMzOTZlZWU1N2FlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQ0TANBgkqhkiG9w0BAQsFAAOCAQEAHARdRUamLLf3rheZ3MHvIaKmU/77 CdTF0nGTf5U5kJ0E4n6QbZp1x9U+HqE1dBz06ciVJAHU3j/O+kRfhyjkVXPKFCyp +ANTW422Av7lZo0vw+oef5laxK1vql1NNdBPC1sTjeasJa7DyqukA+R1LkQPwAop j4JwkovvaL6I6bpV4uzF1hALKhgZDFm2bmOUmtTLA7ipavT24+D7kDwo/ESgxOzL 2U+TY0DKjCCko2gbWlAhl5vrRQLn+cu4tCQkt8kLfOlG1Pu5EseXZbGoqs0AEc84 oYlTOa1QTTlWhEMw/SS763vc9D79mVWthRgrPyfeTHgec0jESLH72DIgiw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:31 2025 by rpki-client