$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74077f15-8b8a-41fa-95f9-576975b5f72f.roa File: 74077f15-8b8a-41fa-95f9-576975b5f72f.roa (raw, json) Hash identifier: SY9Mbp1DARd95MHsy8tHEveHjZHdVHFOrD53aS18DO8= Subject key identifier: C9:E3:0D:F2:D5:D3:6C:73:98:AE:9C:57:FC:2C:B3:1B:C3:E8:90:60 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 178FAE25211A537DB5129A85C5D37B342365B3DA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74077f15-8b8a-41fa-95f9-576975b5f72f.roa Signing time: Mon 20 Jan 2025 00:00:00 +0000 ROA not before: Mon 20 Jan 2025 00:00:00 +0000 ROA not after: Mon 24 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 104.153.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:8f:ae:25:21:1a:53:7d:b5:12:9a:85:c5:d3:7b:34:23:65:b3:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 20 00:00:00 2025 GMT Not After : Feb 24 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9b:85:58:d8:e1:73:7b:b7:d2:d2:75:7a:76: b0:f4:0c:91:e9:6a:f3:32:0c:98:8c:5c:81:5d:56: 02:d4:6a:82:6d:84:64:95:1a:1d:64:50:db:13:97: d9:a0:7a:a6:ea:91:55:7c:a8:d1:60:57:a1:3b:6d: 6c:69:e5:3c:ca:0d:4c:2f:67:b7:6f:cd:ff:80:8f: 7d:22:33:7a:f9:73:23:24:7f:c9:fa:3b:a2:17:eb: e0:c3:8f:02:5f:62:48:5d:3b:35:26:e1:cb:a5:96: f5:4c:a6:36:bd:dc:2e:40:aa:7a:92:22:f4:30:eb: 17:a7:e3:4a:98:31:13:8a:bb:71:cf:30:df:d1:7d: 85:c9:2c:71:7a:b0:58:98:6f:1d:09:4c:e1:02:1c: e8:2b:db:6c:5b:6d:01:6f:67:26:96:51:e1:e4:47: 9e:ce:2c:de:ce:57:82:f7:31:9f:83:22:da:2c:0d: 48:55:62:71:37:c0:ef:2d:fb:fc:64:10:06:90:3f: ec:4a:e9:a6:9d:75:19:e1:96:07:9e:d2:e9:de:7f: 77:cf:f5:33:f3:37:ab:6c:f6:18:90:d1:b9:e4:bf: 54:89:2c:d6:93:70:5c:e9:91:52:51:eb:d3:9b:2f: 28:d3:55:ef:bb:e1:9f:87:2f:7c:8f:67:82:32:46: 5e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E3:0D:F2:D5:D3:6C:73:98:AE:9C:57:FC:2C:B3:1B:C3:E8:90:60 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74077f15-8b8a-41fa-95f9-576975b5f72f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.153.112.0/24 Signature Algorithm: sha256WithRSAEncryption 11:f0:97:cc:f7:66:3a:4c:46:10:4b:f3:71:53:82:ca:d9:58: b7:e5:fb:54:ed:61:fe:01:db:7b:e7:a8:47:e8:a4:dd:22:fb: 91:f8:73:41:b8:da:8f:68:30:32:ae:18:6b:67:3b:89:b1:90: d8:c8:3b:aa:2d:2b:ef:67:df:e7:a2:fb:bd:ee:9f:64:b5:f8: e8:e2:21:0a:2f:82:b4:cf:ca:04:ab:df:d6:a0:37:db:3e:9d: 55:28:45:34:1f:cb:56:e5:67:ec:ef:23:db:7f:03:7f:08:2c: 8a:63:4d:a1:a1:af:90:07:db:f0:0c:72:6a:23:b1:6e:78:63: d4:eb:45:84:91:9f:5b:9e:63:01:48:9b:1b:dd:73:1d:da:ab: 85:53:9b:b2:c8:06:37:0f:4a:3a:bb:68:f8:dc:4b:cb:d6:99: e4:1f:9f:c2:a0:8c:31:96:9e:6f:f2:61:98:92:04:78:55:2f: f0:61:bd:3b:39:48:69:b9:63:62:e7:72:fe:06:b9:97:2e:8f: d9:f8:16:eb:cf:77:67:7d:7f:cf:6c:25:b3:dd:55:04:e5:8a: 8c:f6:a7:c4:89:9f:88:60:83:90:e8:66:c0:2f:0a:1d:e9:a6: 9b:3e:50:ca:28:2c:4f:f7:df:49:64:88:28:25:e2:5b:80:c2: 77:7c:1d:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF4+uJSEaU321EpqFxdN7NCNls9owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIwMDAwMDAwWhcNMjUwMjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzE2OGY1ZjRjN2Y5MzQxMTgwYzU1YWQwMWE1NzUxNjli OWQ4ZmVjY2M5ODI5MTdiMDc1MGM0M2MzNGQxNjE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKm4VY2OFze7fS0nV6drD0DJHpavMyDJiMXIFdVgLUaoJt hGSVGh1kUNsTl9mgeqbqkVV8qNFgV6E7bWxp5TzKDUwvZ7dvzf+Aj30iM3r5cyMk f8n6O6IX6+DDjwJfYkhdOzUm4cullvVMpja93C5AqnqSIvQw6xen40qYMROKu3HP MN/RfYXJLHF6sFiYbx0JTOECHOgr22xbbQFvZyaWUeHkR57OLN7OV4L3MZ+DItos DUhVYnE3wO8t+/xkEAaQP+xK6aaddRnhlgee0unef3fP9TPzN6ts9hiQ0bnkv1SJ LNaTcFzpkVJR69ObLyjTVe+74Z+HL3yPZ4IyRl61AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyeMN8tXTbHOYrpxX/CyzG8PokGAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc0MDc3ZjE1LThiOGEtNDFmYS05NWY5LTU3Njk3NWI1ZjcyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABomXAwDQYJKoZIhvcNAQELBQADggEBABHwl8z3ZjpMRhBL83FTgsrZWLfl +1TtYf4B23vnqEfopN0i+5H4c0G42o9oMDKuGGtnO4mxkNjIO6otK+9n3+ei+73u n2S1+OjiIQovgrTPygSr39agN9s+nVUoRTQfy1blZ+zvI9t/A38ILIpjTaGhr5AH 2/AMcmojsW54Y9TrRYSRn1ueYwFImxvdcx3aq4VTm7LIBjcPSjq7aPjcS8vWmeQf n8KgjDGWnm/yYZiSBHhVL/BhvTs5SGm5Y2Lncv4GuZcuj9n4FuvPd2d9f89sJbPd VQTlioz2p8SJn4hgg5DoZsAvCh3ppps+UMooLE/330lkiCgl4luAwnd8Hag= -----END CERTIFICATE-----Generated at Wed Feb 5 09:39:06 2025 by rpki-client