$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4773b746-c511-41ce-a8da-8491af8ea281.roa File: 4773b746-c511-41ce-a8da-8491af8ea281.roa (raw, json) Hash identifier: 22nJTpfpEirTS8RJeU+G4W/9rh6FyhPrQ4PM9Ih3lqY= Subject key identifier: 07:AA:D9:8E:3A:A3:2F:FE:78:DB:85:0D:07:A9:EC:4F:AE:48:09:DF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0548FC029E9F84E4F884BEC44DC1C966116E83DD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4773b746-c511-41ce-a8da-8491af8ea281.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 161.178.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:48:fc:02:9e:9f:84:e4:f8:84:be:c4:4d:c1:c9:66:11:6e:83:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:36:55:a8:f1:5c:a1:56:51:a6:1d:09:c5: a9:63:a3:25:26:fa:65:b1:08:1e:6d:02:09:d7:5f: 65:b6:ee:46:4f:4b:4d:da:75:66:89:24:d1:a1:cb: ed:af:e1:d8:72:7f:d5:8b:9e:47:dc:a4:fb:c3:62: 0a:d4:e8:5d:d7:f3:5f:66:11:e3:ee:81:67:84:d4: e8:9c:9c:7b:76:15:eb:dc:ec:09:97:5b:5a:b5:2d: 02:4c:5f:c6:b9:f6:ab:b9:7f:33:48:24:8f:64:17: b3:0b:e0:e8:73:56:d5:fb:48:97:ad:47:cd:b5:26: d9:1f:38:11:db:e9:87:36:62:72:d7:00:17:07:1f: c3:30:79:92:4b:49:6a:07:84:07:94:73:4e:f9:6f: df:16:af:56:a2:68:33:91:2e:ff:9c:f8:fb:e1:2d: 0b:3b:42:4f:82:a1:54:40:6d:72:4b:43:c4:6b:c3: 6f:22:64:9d:67:e1:c1:43:18:a3:33:9e:4d:87:1d: c3:82:17:a6:40:7a:20:a0:ba:8f:33:db:10:67:34: a2:36:0e:d0:bf:56:23:68:61:40:6c:7f:4b:65:6a: a0:26:ed:a0:e9:78:5a:8f:27:48:49:4d:f7:2b:06: 50:51:bf:70:69:2e:34:5a:6a:1f:7c:d2:fd:8e:44: bd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AA:D9:8E:3A:A3:2F:FE:78:DB:85:0D:07:A9:EC:4F:AE:48:09:DF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4773b746-c511-41ce-a8da-8491af8ea281.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.178.160.0/19 Signature Algorithm: sha256WithRSAEncryption 26:3e:b4:12:d6:92:5c:be:78:41:04:29:e7:4e:1a:23:ba:0e: 83:da:46:62:c3:bf:96:76:d7:6d:e6:f9:65:32:db:ed:37:4d: e3:a8:f0:24:a0:df:36:6f:c8:fb:6f:69:64:21:8a:ce:39:0d: 41:55:22:ed:0c:03:19:0e:2e:e7:34:39:f2:26:1c:b7:e1:f2: 91:39:92:0d:72:75:d2:c9:e4:3c:42:f2:89:43:2d:b8:45:5f: bc:a2:c2:36:22:41:1c:08:5e:81:5f:79:5e:0e:d2:04:17:54: 7f:91:a2:4f:03:2f:07:3d:df:60:d2:5c:c6:d1:a6:a2:0b:e0: 4b:8c:39:7f:50:50:d1:8a:d5:e3:78:d7:61:30:2a:2f:12:3f: b9:c2:80:ba:74:ff:58:18:ed:d5:46:cf:90:19:07:06:28:1e: d5:71:6c:d4:e1:66:75:2c:e5:42:8c:ce:08:42:8f:68:b8:83: 24:53:56:f4:95:95:74:22:0b:13:27:43:70:26:71:8d:d8:20: 5a:4a:02:fc:5f:9a:12:e3:d9:46:c0:d6:bc:00:0c:64:6e:16: 1f:f9:c1:33:8f:e6:fd:e6:88:5e:e5:88:0a:fa:46:d7:0e:39: 66:be:75:86:48:b5:a2:71:a8:b1:0f:f3:cc:fe:1f:f0:9f:07: 89:b4:93:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBUj8Ap6fhOT4hL7ETcHJZhFug90wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzJjOWY1YjQ0ZjliMzAyZjY1ODllMjgzMTllYTk5ZWU5 NWRlNTEyMmZkMTkyNWY3ODdiNzg1YjllMDM3OTUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDajZVqPFcoVZRph0JxaljoyUm+mWxCB5tAgnXX2W27kZP S03adWaJJNGhy+2v4dhyf9WLnkfcpPvDYgrU6F3X819mEePugWeE1OicnHt2Fevc 7AmXW1q1LQJMX8a59qu5fzNIJI9kF7ML4OhzVtX7SJetR821JtkfOBHb6Yc2YnLX ABcHH8MweZJLSWoHhAeUc075b98Wr1aiaDORLv+c+PvhLQs7Qk+CoVRAbXJLQ8Rr w28iZJ1n4cFDGKMznk2HHcOCF6ZAeiCguo8z2xBnNKI2DtC/ViNoYUBsf0tlaqAm 7aDpeFqPJ0hJTfcrBlBRv3BpLjRaah980v2ORL3xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUB6rZjjqjL/5424UNB6nsT65ICd8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ3NzNiNzQ2LWM1MTEtNDFjZS1hOGRhLTg0OTFhZjhlYTI4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWhsqAwDQYJKoZIhvcNAQELBQADggEBACY+tBLWkly+eEEEKedOGiO6DoPa RmLDv5Z2123m+WUy2+03TeOo8CSg3zZvyPtvaWQhis45DUFVIu0MAxkOLuc0OfIm HLfh8pE5kg1yddLJ5DxC8olDLbhFX7yiwjYiQRwIXoFfeV4O0gQXVH+Rok8DLwc9 32DSXMbRpqIL4EuMOX9QUNGK1eN412EwKi8SP7nCgLp0/1gY7dVGz5AZBwYoHtVx bNThZnUs5UKMzghCj2i4gyRTVvSVlXQiCxMnQ3AmcY3YIFpKAvxfmhLj2UbA1rwA DGRuFh/5wTOP5v3miF7liAr6RtcOOWa+dYZItaJxqLEP88z+H/CfB4m0ky4= -----END CERTIFICATE-----Generated at Wed Feb 5 09:45:16 2025 by rpki-client