$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d320e18-80dd-458b-8f6d-e32930215df8.roa File: 5d320e18-80dd-458b-8f6d-e32930215df8.roa (raw, json) Hash identifier: /NxTPipKhHp/8cSdm0nlVFWR1siIcITWsJOWEjfI4kE= Subject key identifier: 5B:9B:54:74:0C:97:B7:47:FC:F5:DE:95:D7:AB:85:43:85:1E:A7:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 78CB1F0F4B20ADCA9069FCC9B6D3F4CD25E7A5DD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d320e18-80dd-458b-8f6d-e32930215df8.roa Signing time: Wed 05 Feb 2025 00:00:00 +0000 ROA not before: Wed 05 Feb 2025 00:00:00 +0000 ROA not after: Wed 12 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.197.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:cb:1f:0f:4b:20:ad:ca:90:69:fc:c9:b6:d3:f4:cd:25:e7:a5:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 5 00:00:00 2025 GMT Not After : Mar 12 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:69:e3:21:ce:22:a4:81:17:e9:66:3f:06:94: 3b:8d:53:47:28:77:80:0a:50:07:3f:b0:e2:ee:e9: 55:ea:e8:69:a7:92:d3:3d:1b:f1:8c:3e:15:7b:c9: 8d:d9:f5:c3:b3:ed:4e:4f:55:9f:f7:fb:a6:fc:94: 02:e6:0f:3c:36:12:c4:fc:dd:b1:25:ad:a1:ef:49: 01:bc:60:f5:44:74:89:5b:3d:94:91:a9:83:98:55: e2:e2:ff:a0:e8:61:e9:4a:45:29:ac:ed:23:81:18: f3:c9:df:3a:01:92:ae:3d:17:5d:9d:1c:a7:cd:9f: 54:a7:27:79:e6:b4:e9:59:86:9d:d6:bf:ec:ec:96: 98:81:c0:97:5d:ba:76:eb:3c:01:09:6f:f7:e7:4c: 61:29:d4:07:28:be:29:48:f4:47:1e:23:1a:f9:38: 78:af:56:20:c3:b1:96:22:15:a9:6a:ef:46:1a:0c: d9:c6:35:a7:7e:f3:22:2b:01:7c:90:5c:47:00:27: 6e:18:42:4d:4e:d2:8b:a9:af:4f:64:a8:03:6f:e6: 74:94:8d:dc:c9:7b:f4:92:33:37:a1:6e:ac:2e:e0: e6:c2:b0:df:a2:09:6b:1f:1d:1c:5f:80:da:34:87: 83:ad:79:43:b9:d9:3a:ca:7c:16:0e:69:3f:f6:e5: f8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9B:54:74:0C:97:B7:47:FC:F5:DE:95:D7:AB:85:43:85:1E:A7:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d320e18-80dd-458b-8f6d-e32930215df8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.197.0.0/16 Signature Algorithm: sha256WithRSAEncryption 40:37:a7:04:48:84:85:6e:ba:91:53:73:94:07:53:4f:a9:3d: 37:66:a8:cc:f6:ab:29:ff:83:ce:d7:6f:40:44:92:e9:58:e7: c8:82:3d:c5:bb:23:69:d5:ff:3b:68:18:b4:b2:45:8f:a4:f6: 95:3a:06:16:b0:ad:ca:42:6c:4d:f8:a9:fc:dc:30:3f:5a:16: 96:30:9d:74:9b:1d:63:48:1b:77:12:22:f7:64:50:f0:7b:ec: ee:62:43:e5:94:bd:a7:eb:d5:78:10:06:bb:c9:1d:a4:c0:dc: 0b:de:74:46:fe:df:a2:93:88:4c:81:5c:c7:a5:41:57:7a:d9: b5:8f:f9:00:31:f2:aa:4d:f0:3c:c0:68:9f:8e:7e:e4:9b:ce: 68:c1:70:39:8f:53:fa:73:1f:75:40:52:ad:19:60:f6:d9:9f: 1f:0b:86:8d:d2:8f:bd:09:ed:93:52:ac:0c:4f:2e:10:b6:5c: 62:17:ee:73:85:cb:13:e7:a4:f2:4a:fe:a2:47:08:12:66:0c: f0:a1:e7:eb:db:ca:44:b4:2a:43:76:91:35:ed:f3:35:97:84: 8a:e0:40:c6:57:5d:4d:dd:f8:41:14:a1:b2:e2:ef:df:24:b2: e5:87:33:6c:57:c0:91:57:49:bf:f6:40:b3:30:45:62:9d:ca: 94:59:24:54 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUeMsfD0sgrcqQafzJttP0zSXnpd0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA1MDAwMDAwWhcNMjUwMzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZjU0NDgwYzg2ZWUwYWU4ZmNjYWVhODhmMGVhZmJjYWFm M2M5OTY0NDlmYmRlYWM3ZTEyMjk2YWNkMWMxMTgyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZaeMhziKkgRfpZj8GlDuNU0cod4AKUAc/sOLu6VXq6Gmn ktM9G/GMPhV7yY3Z9cOz7U5PVZ/3+6b8lALmDzw2EsT83bElraHvSQG8YPVEdIlb PZSRqYOYVeLi/6DoYelKRSms7SOBGPPJ3zoBkq49F12dHKfNn1SnJ3nmtOlZhp3W v+zslpiBwJddunbrPAEJb/fnTGEp1AcovilI9EceIxr5OHivViDDsZYiFalq70Ya DNnGNad+8yIrAXyQXEcAJ24YQk1O0oupr09kqANv5nSUjdzJe/SSMzehbqwu4ObC sN+iCWsfHRxfgNo0h4OteUO52TrKfBYOaT/25fgjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUW5tUdAyXt0f89d6V16uFQ4Uep90wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVkMzIwZTE4LTgwZGQtNDU4Yi04ZjZkLWUzMjkzMDIxNWRmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQxTANBgkqhkiG9w0BAQsFAAOCAQEAQDenBEiEhW66kVNzlAdTT6k9N2ao zParKf+DztdvQESS6VjnyII9xbsjadX/O2gYtLJFj6T2lToGFrCtykJsTfip/Nww P1oWljCddJsdY0gbdxIi92RQ8Hvs7mJD5ZS9p+vVeBAGu8kdpMDcC950Rv7fopOI TIFcx6VBV3rZtY/5ADHyqk3wPMBon45+5JvOaMFwOY9T+nMfdUBSrRlg9tmfHwuG jdKPvQntk1KsDE8uELZcYhfuc4XLE+ek8kr+okcIEmYM8KHn69vKRLQqQ3aRNe3z NZeEiuBAxlddTd34QRShsuLv3ySy5YczbFfAkVdJv/ZAszBFYp3KlFkkVA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:21 2025 by rpki-client