$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f655dc6-89d0-4748-9c62-d3bc957b920c.roa File: 7f655dc6-89d0-4748-9c62-d3bc957b920c.roa (raw, json) Hash identifier: 3C9GHOM4ze+m9AuwNac4YXviX3/KrCZoFNb2lhlqVUU= Subject key identifier: 7E:F2:56:F5:A8:97:D2:1E:71:30:EF:D9:99:38:42:D5:C6:E2:A5:38 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 59E1A677E6DBA77EDC5C4CC1955ED05C39810BFF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f655dc6-89d0-4748-9c62-d3bc957b920c.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 44.223.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:e1:a6:77:e6:db:a7:7e:dc:5c:4c:c1:95:5e:d0:5c:39:81:0b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3e:15:62:34:ab:a1:18:32:61:c6:3f:28:b3: 82:10:10:6d:46:6a:63:3c:8a:26:a0:78:09:56:3f: 56:f0:4d:b7:45:ec:5d:9e:d1:00:06:0d:54:d9:c0: a2:ed:af:a2:33:d5:15:34:10:bb:fa:9c:d7:e2:c9: 7d:69:6d:ed:d8:97:e9:ec:a1:fc:c3:2c:ee:57:f8: c1:38:4e:c5:6c:15:22:d3:fe:b3:58:20:a6:c8:4d: 74:7a:6e:12:2d:d6:64:d5:b6:49:f4:00:3e:cd:a9: db:59:9e:99:6e:c9:cf:9a:11:d8:a6:27:eb:8e:0b: 7a:1b:4e:f4:22:de:4f:0b:4e:13:fe:69:e6:3a:17: 54:be:b8:43:b8:fd:fd:b1:ad:4b:b9:70:d3:02:a2: 59:3f:c5:80:3d:78:ec:34:32:73:03:94:05:5d:3e: 8e:80:46:5f:38:df:8a:28:46:7b:dd:13:0d:c4:01: 1b:1d:44:92:67:8a:a2:7f:db:da:f3:6e:af:e0:10: 43:61:0d:49:eb:5c:3b:20:46:fd:9e:8d:6a:d8:ab: dc:35:f3:97:da:15:51:c1:b6:c7:59:86:b2:4a:20: fa:cb:3c:f9:c5:bf:1c:b4:ea:79:a6:b6:0b:be:f1: 2f:1e:a2:af:2c:8c:37:69:d9:78:d6:18:15:95:df: d7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F2:56:F5:A8:97:D2:1E:71:30:EF:D9:99:38:42:D5:C6:E2:A5:38 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f655dc6-89d0-4748-9c62-d3bc957b920c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.223.121.0/24 Signature Algorithm: sha256WithRSAEncryption 27:19:7b:b9:39:dc:0e:1c:d4:b8:80:ae:d6:03:4a:39:6a:41: 7e:23:b1:f7:83:c8:e6:ec:bf:9f:6e:0a:b2:00:50:fc:42:5b: 17:3e:b8:ab:4a:bb:c2:2b:13:46:13:78:b0:c0:d7:e2:21:4a: 5a:8a:6a:26:da:60:07:17:2e:23:a8:62:c1:9f:45:6e:73:25: 3a:c1:54:70:02:0a:80:27:77:bd:34:12:76:ca:86:33:22:40: d7:53:88:91:b3:52:2d:1d:c5:48:22:66:7c:da:20:20:b7:08: 61:d4:7d:72:2c:e7:36:9f:ea:59:3d:09:8c:35:5b:e3:c8:8f: 26:b8:8a:5e:e6:b9:2e:04:55:e1:15:70:c8:3d:d7:02:f5:de: 3d:03:0a:fd:19:43:84:75:0a:a5:fa:29:2d:d0:36:ac:1b:bb: 45:aa:8b:7b:80:e4:c7:ce:2e:8b:81:cd:14:0d:96:98:3c:af: 28:fc:31:b1:8d:8d:a7:9b:ef:3a:3c:76:92:72:73:ac:d1:9e: 2e:be:fe:a7:7c:60:4f:b1:c9:dc:56:f3:0b:f8:c0:d4:bc:1e: 0b:d2:5e:8d:11:3c:2c:53:50:68:f6:16:9c:f8:4d:70:ec:38: d6:97:d0:d9:56:a2:ee:ff:62:e2:e6:14:62:82:98:5c:53:e3: 1f:36:a2:b4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWeGmd+bbp37cXEzBlV7QXDmBC/8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZWI5Mzk4MzMwYTQ5MTRhY2NhMDBlNjY2MWE3NGUwZWYx MDk1MzU3NTI4NDdjZTc3NjBkYWVjMjNjN2RlM2YxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOPhViNKuhGDJhxj8os4IQEG1GamM8iiageAlWP1bwTbdF 7F2e0QAGDVTZwKLtr6Iz1RU0ELv6nNfiyX1pbe3Yl+nsofzDLO5X+ME4TsVsFSLT /rNYIKbITXR6bhIt1mTVtkn0AD7NqdtZnpluyc+aEdimJ+uOC3obTvQi3k8LThP+ aeY6F1S+uEO4/f2xrUu5cNMColk/xYA9eOw0MnMDlAVdPo6ARl8434ooRnvdEw3E ARsdRJJniqJ/29rzbq/gEENhDUnrXDsgRv2ejWrYq9w185faFVHBtsdZhrJKIPrL PPnFvxy06nmmtgu+8S8eoq8sjDdp2XjWGBWV39cVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfvJW9aiX0h5xMO/ZmThC1cbipTgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdmNjU1ZGM2LTg5ZDAtNDc0OC05YzYyLWQzYmM5NTdiOTIwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAs33kwDQYJKoZIhvcNAQELBQADggEBACcZe7k53A4c1LiArtYDSjlqQX4j sfeDyObsv59uCrIAUPxCWxc+uKtKu8IrE0YTeLDA1+IhSlqKaibaYAcXLiOoYsGf RW5zJTrBVHACCoAnd700EnbKhjMiQNdTiJGzUi0dxUgiZnzaICC3CGHUfXIs5zaf 6lk9CYw1W+PIjya4il7muS4EVeEVcMg91wL13j0DCv0ZQ4R1CqX6KS3QNqwbu0Wq i3uA5MfOLouBzRQNlpg8ryj8MbGNjaeb7zo8dpJyc6zRni6+/qd8YE+xydxW8wv4 wNS8HgvSXo0RPCxTUGj2Fpz4TXDsONaX0NlWou7/YuLmFGKCmFxT4x82orQ= -----END CERTIFICATE-----Generated at Wed Feb 5 09:55:44 2025 by rpki-client