$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7154b655-2eb9-4fb7-bbc3-c275f8499135.roa File: 7154b655-2eb9-4fb7-bbc3-c275f8499135.roa (raw, json) Hash identifier: 0YkZgH5i/+K1+9IHh7/1oKL1kWgimWkzEG3+JN9Wdbg= Subject key identifier: BD:B4:98:9B:D9:DA:4F:93:5E:D2:98:7D:F8:4F:82:0E:90:EB:1C:C5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 757F9E8942B72613C030E04E988207158049312E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7154b655-2eb9-4fb7-bbc3-c275f8499135.roa Signing time: Tue 21 Jan 2025 00:00:00 +0000 ROA not before: Tue 21 Jan 2025 00:00:00 +0000 ROA not after: Tue 25 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 70.232.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:7f:9e:89:42:b7:26:13:c0:30:e0:4e:98:82:07:15:80:49:31:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 21 00:00:00 2025 GMT Not After : Feb 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e1:e7:a2:c9:80:25:fe:1a:8c:a3:ea:70:79: ae:fd:77:46:c8:35:58:f9:ee:07:a2:ed:0b:01:19: 6e:d3:c2:e5:ca:fd:5a:cb:da:35:8d:41:52:ad:f5: 05:0e:4b:e5:44:fd:47:2f:6c:ea:8e:36:e4:34:4e: 69:85:70:38:e2:35:6d:1f:08:cc:bc:bf:f5:3b:9a: 44:bf:bf:97:d8:e7:d5:e3:3a:1e:ab:93:6a:c3:9b: b4:da:81:1f:b6:f7:28:0f:77:fb:1d:6d:d8:dc:80: 3b:61:2e:9f:8e:ca:51:ad:05:98:39:fc:ce:7a:eb: e8:d3:7e:4d:50:d7:fe:7d:ef:6d:cc:d7:b6:6f:8b: af:0d:85:7e:a6:ff:b7:24:a1:4f:ab:9c:6a:19:35: 68:09:55:0e:c9:c0:11:ab:4c:c3:b5:89:9e:ac:89: 1e:bf:92:f0:d7:eb:f2:5e:09:d8:3b:af:b0:93:44: 0b:b5:3b:39:50:37:90:d1:ee:ae:3b:54:f0:56:e2: a2:27:e0:93:c7:fe:0d:e6:f7:b5:03:0d:78:fc:7b: 3d:d4:00:33:9e:5e:8a:ab:bc:25:a1:08:29:8b:a1: 68:83:2d:88:ff:1f:1f:11:a6:fd:e5:ac:18:93:15: 32:3a:53:64:fd:97:29:46:41:9e:7c:6f:59:ac:6f: 6b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B4:98:9B:D9:DA:4F:93:5E:D2:98:7D:F8:4F:82:0E:90:EB:1C:C5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7154b655-2eb9-4fb7-bbc3-c275f8499135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.232.64.0/20 Signature Algorithm: sha256WithRSAEncryption 0c:de:ef:56:96:5d:34:8c:21:7e:c5:4d:d0:c5:ec:21:c2:5e: 20:4a:01:1b:08:e4:c2:93:08:43:74:47:e8:9a:37:04:86:9b: e7:61:b1:29:50:cf:a2:73:3d:8d:3a:6d:0b:96:8e:59:ce:79: 33:40:ee:2d:f2:45:ef:3f:1a:73:97:70:b9:24:44:5d:f6:f7: ac:6c:fa:c9:bb:e6:cf:2a:7b:2c:de:67:d0:34:04:09:c4:70: cc:a5:4b:2a:5a:34:f5:14:72:8d:1e:2e:b9:d1:a6:26:dd:8a: 3c:a2:e0:5f:7c:cf:4c:16:57:9f:9c:db:34:79:db:a9:07:9b: 38:09:df:83:fe:85:ec:fc:f4:e9:53:86:0c:c7:40:07:73:cf: 50:ee:e8:52:80:08:a6:0f:8b:99:85:0a:1d:08:f9:3e:e8:85: 66:21:31:ea:27:c0:cc:60:b6:ab:cb:71:4b:72:ec:06:34:6f: 5d:43:1f:06:3a:f7:22:ed:f1:b0:d6:16:df:9f:ac:ed:c1:37: 15:f7:18:e7:a3:65:a3:65:c3:91:85:50:fa:c9:5e:4e:dc:e0: 16:28:45:93:48:3a:fd:d0:1c:18:71:e8:c1:be:38:83:ea:26: 56:8a:b2:be:2f:ad:2c:be:07:6a:cf:5a:fc:e5:dc:bf:ef:ee: ec:2e:2b:14 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdX+eiUK3JhPAMOBOmIIHFYBJMS4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIxMDAwMDAwWhcNMjUwMjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmZjYzJiMGU1MDBlZGIyYTdlMTdhNDg4YTc2OTgxODVl MmFhZjY5NjA2ODdmZDBjMzkxZWFhYjdjOWU3OTllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDL4eeiyYAl/hqMo+pwea79d0bINVj57gei7QsBGW7TwuXK /VrL2jWNQVKt9QUOS+VE/UcvbOqONuQ0TmmFcDjiNW0fCMy8v/U7mkS/v5fY59Xj Oh6rk2rDm7TagR+29ygPd/sdbdjcgDthLp+OylGtBZg5/M566+jTfk1Q1/59723M 17Zvi68NhX6m/7ckoU+rnGoZNWgJVQ7JwBGrTMO1iZ6siR6/kvDX6/JeCdg7r7CT RAu1OzlQN5DR7q47VPBW4qIn4JPH/g3m97UDDXj8ez3UADOeXoqrvCWhCCmLoWiD LYj/Hx8Rpv3lrBiTFTI6U2T9lylGQZ58b1msb2sDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvbSYm9naT5Ne0ph9+E+CDpDrHMUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcxNTRiNjU1LTJlYjktNGZiNy1iYmMzLWMyNzVmODQ5OTEzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARG6EAwDQYJKoZIhvcNAQELBQADggEBAAze71aWXTSMIX7FTdDF7CHCXiBK ARsI5MKTCEN0R+iaNwSGm+dhsSlQz6JzPY06bQuWjlnOeTNA7i3yRe8/GnOXcLkk RF3296xs+sm75s8qeyzeZ9A0BAnEcMylSypaNPUUco0eLrnRpibdijyi4F98z0wW V5+c2zR526kHmzgJ34P+hez89OlThgzHQAdzz1Du6FKACKYPi5mFCh0I+T7ohWYh MeonwMxgtqvLcUty7AY0b11DHwY69yLt8bDWFt+frO3BNxX3GOejZaNlw5GFUPrJ Xk7c4BYoRZNIOv3QHBhx6MG+OIPqJlaKsr4vrSy+B2rPWvzl3L/v7uwuKxQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:08 2025 by rpki-client