$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa File: 5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa (raw, json) Hash identifier: ja72XKV9OBsi0XkccrDPtkUZSeeW/7256T5uhdjbOjQ= Subject key identifier: 93:15:CE:5E:79:C8:69:75:47:2D:0E:B0:9A:EE:C2:F9:E4:A5:37:E8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65C04E0D35C5FE4C2785AA8EBEC9D0F0E5BB934C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.20.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c0:4e:0d:35:c5:fe:4c:27:85:aa:8e:be:c9:d0:f0:e5:bb:93:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:66:1f:83:10:cf:39:db:d0:07:05:4f:fa:7f: 7f:24:8c:a1:52:ff:06:18:62:e2:15:7c:b8:5d:6a: ef:68:4c:1b:bd:f7:bb:0e:e5:d9:a2:53:f7:33:a0: 59:3c:9a:05:65:60:80:15:31:01:90:a5:ec:c2:d9: fd:3e:35:1f:22:d0:52:36:bb:b2:e0:d5:2d:f2:6d: 79:81:ca:dc:3a:0d:b3:cd:f4:c5:f6:83:76:93:c2: e7:1f:ba:e6:84:e8:8f:03:eb:88:d5:98:2d:98:77: cb:a8:85:1c:96:27:68:3b:0b:d0:da:84:36:6c:69: 44:47:c3:b5:53:6a:b9:de:27:3f:ce:df:bd:17:b2: 73:74:54:bc:c1:e2:43:06:a2:92:90:fb:9d:4d:7e: 3c:47:0a:11:43:41:85:f3:36:86:0e:29:a2:95:ae: 54:3d:17:cc:19:44:2c:08:07:58:87:cd:dc:16:1b: fc:94:83:fe:89:80:65:9f:18:dc:58:03:bc:1a:46: 13:04:cd:ae:a0:41:fc:c9:1e:2b:de:11:4f:52:27: 18:48:6a:0c:04:1d:54:7b:10:cc:1d:68:a8:3e:7b: 5f:c1:4e:59:10:f0:75:52:ac:1c:75:7f:85:4e:27: b6:4d:8a:56:6e:f0:27:68:4c:75:5e:4c:82:cd:d0: 0c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:15:CE:5E:79:C8:69:75:47:2D:0E:B0:9A:EE:C2:F9:E4:A5:37:E8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea7bb98-fc7b-4544-a88c-2a6d22f92fdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.20.136.0/21 Signature Algorithm: sha256WithRSAEncryption 7f:0b:ec:44:70:01:75:e5:fc:dc:9a:54:32:ca:87:97:b8:9a: 10:1f:61:46:45:cb:72:f8:d4:c0:a9:bb:cc:f9:31:4d:07:2e: 30:2d:06:97:88:40:fd:2c:56:7d:56:6b:c1:ab:1e:05:a8:35: 24:2e:b8:e8:20:a9:82:f0:6b:cc:c7:b5:00:16:78:b3:28:4c: c5:d3:96:8e:25:59:a0:46:fc:e6:a2:ab:21:f8:eb:1d:09:77: 9e:5c:d1:2c:27:49:d3:ff:52:e3:b1:36:71:29:12:2f:5b:bf: c1:79:91:fb:b8:e8:32:8d:c2:4e:74:9e:6f:78:94:4b:48:84: 49:b4:c6:f3:9b:5c:00:2f:4a:d3:f2:c3:20:50:10:e2:8c:ab: d6:e7:d8:a1:fa:71:dd:a5:bf:72:10:ad:35:aa:db:27:66:f0: 41:f6:7a:a4:4f:56:fb:a9:a3:19:24:97:5e:fa:83:c6:ed:cc: fd:0a:ac:0e:c6:57:24:ec:dc:23:0a:e6:ce:d9:ea:66:0e:0c: c4:f0:c8:94:74:07:86:ed:36:b5:26:92:1b:ad:cd:f2:79:6b: 54:0b:89:c3:63:33:9b:13:8f:e8:4d:05:e2:ab:48:ac:8b:3c: 21:b5:74:3d:d4:3c:62:60:17:50:7b:43:24:d3:8b:94:66:c8: 7a:d2:c1:64 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZcBODTXF/kwnhaqOvsnQ8OW7k0wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NmVkNjE0YmYyZTNiZjJkMjRhNDhiYjBjNmQ0NjA0ZjE3 MTkxOWRlMTc1YTNhNmFiMDAwMWVhMDRmMWJiZGJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYZh+DEM8529AHBU/6f38kjKFS/wYYYuIVfLhdau9oTBu9 97sO5dmiU/czoFk8mgVlYIAVMQGQpezC2f0+NR8i0FI2u7Lg1S3ybXmBytw6DbPN 9MX2g3aTwucfuuaE6I8D64jVmC2Yd8uohRyWJ2g7C9DahDZsaURHw7VTarneJz/O 370XsnN0VLzB4kMGopKQ+51NfjxHChFDQYXzNoYOKaKVrlQ9F8wZRCwIB1iHzdwW G/yUg/6JgGWfGNxYA7waRhMEza6gQfzJHiveEU9SJxhIagwEHVR7EMwdaKg+e1/B TlkQ8HVSrBx1f4VOJ7ZNilZu8CdoTHVeTILN0AwhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkxXOXnnIaXVHLQ6wmu7C+eSlN+gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlYTdiYjk4LWZjN2ItNDU0NC1hODhjLTJhNmQyMmY5MmZkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANrFIgwDQYJKoZIhvcNAQELBQADggEBAH8L7ERwAXXl/NyaVDLKh5e4mhAf YUZFy3L41MCpu8z5MU0HLjAtBpeIQP0sVn1Wa8GrHgWoNSQuuOggqYLwa8zHtQAW eLMoTMXTlo4lWaBG/OaiqyH46x0Jd55c0SwnSdP/UuOxNnEpEi9bv8F5kfu46DKN wk50nm94lEtIhEm0xvObXAAvStPywyBQEOKMq9bn2KH6cd2lv3IQrTWq2ydm8EH2 eqRPVvupoxkkl176g8btzP0KrA7GVyTs3CMK5s7Z6mYODMTwyJR0B4btNrUmkhut zfJ5a1QLicNjM5sTj+hNBeKrSKyLPCG1dD3UPGJgF1B7QyTTi5RmyHrSwWQ= -----END CERTIFICATE-----Generated at Wed Feb 5 09:50:30 2025 by rpki-client