$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86b3d050-832b-4dba-94ca-f7bfcfc4e0f9.roa File: 86b3d050-832b-4dba-94ca-f7bfcfc4e0f9.roa (raw, json) Hash identifier: dy8tl9seoGjUMeHcSeDN8D09cHR5Dt7i3Va+H0nql0U= Subject key identifier: F8:CA:6A:84:11:D3:1D:8B:CA:26:F5:AC:F2:73:D5:1D:D6:D3:4A:E0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: DE71AA6C10C14D4C6E9EEF261FB4E9E0C63FAA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86b3d050-832b-4dba-94ca-f7bfcfc4e0f9.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.22.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: de:71:aa:6c:10:c1:4d:4c:6e:9e:ef:26:1f:b4:e9:e0:c6:3f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f8:47:8d:dc:d5:e7:fb:8a:6f:65:d4:46:09: f7:92:b4:e9:e3:83:b0:62:26:79:c2:1f:3a:cc:cd: 8e:13:9e:91:15:57:58:5c:30:55:c5:ce:17:32:05: 58:eb:09:39:21:13:c6:8f:10:5a:cb:9d:60:66:9b: 3b:ce:23:0a:5b:ad:40:ad:ea:cb:28:fc:74:f2:02: d0:6d:b9:0f:c3:d5:d1:c3:5f:b0:6e:f3:fb:24:fa: 6c:4b:9c:e3:0a:d2:6e:a5:ab:ae:d2:8e:35:fb:25: b2:31:aa:39:cf:74:7b:0d:9f:8b:b1:80:81:97:27: b3:89:fe:b3:48:fe:c9:77:3b:12:8d:71:3d:14:42: bd:3e:72:13:89:80:6f:e9:9c:a4:0f:d6:bd:5b:56: 95:a8:1d:95:15:f4:cd:96:8f:de:4f:7b:54:46:7e: a1:6e:14:17:3a:e9:dc:65:46:eb:c6:7a:35:13:6c: cb:b6:29:07:13:b3:e8:56:b2:24:6e:90:24:68:4c: 17:e1:3b:d5:40:a6:9b:f8:57:50:7a:24:ce:a4:73: 5c:44:17:42:50:15:b7:87:ac:17:3b:94:26:3e:a9: 23:a9:71:a6:fe:2f:a8:54:69:21:dc:1f:dd:59:b5: 70:d3:7e:72:e5:c6:7b:dd:05:8f:b6:5b:f8:91:b2: 64:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CA:6A:84:11:D3:1D:8B:CA:26:F5:AC:F2:73:D5:1D:D6:D3:4A:E0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86b3d050-832b-4dba-94ca-f7bfcfc4e0f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.22.0.0/17 Signature Algorithm: sha256WithRSAEncryption 98:1f:fb:0d:4f:9c:f1:70:46:83:29:f6:34:06:f7:d9:3c:5c: 18:4a:1a:b6:ba:00:24:43:25:0b:73:81:68:f8:7b:56:2a:2f: 11:19:bf:4a:c1:c5:23:06:c2:c1:77:51:3b:d2:93:a5:f9:a7: 01:9a:dd:42:99:bc:76:9c:93:e3:03:16:ca:f9:7b:d3:2d:3e: e8:0d:cf:b3:9a:a5:8e:1b:a4:3c:d8:7e:45:58:a1:12:95:7b: 30:be:77:77:a3:d3:0b:ae:e1:7d:f8:1e:73:b5:41:14:00:6e: c8:a4:f2:29:de:1f:71:db:22:15:0e:b5:fb:6c:a6:07:59:9c: 35:1f:61:07:57:39:20:87:8a:08:57:2d:82:a5:93:b7:bd:08: 34:46:1a:9a:c3:28:4d:a9:15:e6:a1:40:2e:a8:7a:c0:3a:62: 05:d8:35:b1:df:cb:06:ef:dd:47:35:1f:27:55:1a:76:cf:cc: 25:e6:1a:2b:77:4f:4c:83:b1:76:68:58:d8:9a:c2:81:e7:d3: e4:1c:f9:92:63:63:83:44:c6:99:ec:09:33:06:dc:64:7a:12: 5e:57:f7:ff:7c:64:99:26:00:b1:11:05:6a:b6:0f:30:22:d8: 2d:91:b4:ac:27:50:b9:5e:c9:21:a0:ce:17:a1:f9:ac:2a:07: 3b:17:5b:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAN5xqmwQwU1Mbp7vJh+06eDGP6owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDcyZmMxNzQ2OGQ3NzQ1NzcxYmExM2M0ZWY4NjRmN2Zk NjVhNmNkOWM0Nzc3ODBlNzg2MjE0YjQ2OTQxZDQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCg+EeN3NXn+4pvZdRGCfeStOnjg7BiJnnCHzrMzY4TnpEV V1hcMFXFzhcyBVjrCTkhE8aPEFrLnWBmmzvOIwpbrUCt6sso/HTyAtBtuQ/D1dHD X7Bu8/sk+mxLnOMK0m6lq67SjjX7JbIxqjnPdHsNn4uxgIGXJ7OJ/rNI/sl3OxKN cT0UQr0+chOJgG/pnKQP1r1bVpWoHZUV9M2Wj95Pe1RGfqFuFBc66dxlRuvGejUT bMu2KQcTs+hWsiRukCRoTBfhO9VAppv4V1B6JM6kc1xEF0JQFbeHrBc7lCY+qSOp cab+L6hUaSHcH91ZtXDTfnLlxnvdBY+2W/iRsmSxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+MpqhBHTHYvKJvWs8nPVHdbTSuAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg2YjNkMDUwLTgzMmItNGRiYS05NGNhLWY3YmZjZmM0ZTBmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdrFgAwDQYJKoZIhvcNAQELBQADggEBAJgf+w1PnPFwRoMp9jQG99k8XBhK Gra6ACRDJQtzgWj4e1YqLxEZv0rBxSMGwsF3UTvSk6X5pwGa3UKZvHack+MDFsr5 e9MtPugNz7OapY4bpDzYfkVYoRKVezC+d3ej0wuu4X34HnO1QRQAbsik8ineH3Hb IhUOtftspgdZnDUfYQdXOSCHighXLYKlk7e9CDRGGprDKE2pFeahQC6oesA6YgXY NbHfywbv3Uc1HydVGnbPzCXmGit3T0yDsXZoWNiawoHn0+Qc+ZJjY4NExpnsCTMG 3GR6El5X9/98ZJkmALERBWq2DzAi2C2RtKwnULleySGgzheh+awqBzsXW34= -----END CERTIFICATE-----Generated at Wed Feb 5 09:50:38 2025 by rpki-client