$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8aeeaedd-4c6d-4b20-8120-5c2625d44860.roa File: 8aeeaedd-4c6d-4b20-8120-5c2625d44860.roa (raw, json) Hash identifier: akE5HNhiWvotof+KNuaMoLt1KARdrnxcrtdViM6bYyQ= Subject key identifier: 99:E0:F6:D9:C2:2C:11:3B:03:F9:40:B5:3A:67:F6:0A:D3:AB:3A:0F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 676D1F8B9333715E881BE023EC38F0048B4C3E5C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8aeeaedd-4c6d-4b20-8120-5c2625d44860.roa Signing time: Fri 14 Feb 2025 00:10:25 +0000 ROA not before: Fri 14 Feb 2025 00:10:25 +0000 ROA not after: Fri 21 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 139.56.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:6d:1f:8b:93:33:71:5e:88:1b:e0:23:ec:38:f0:04:8b:4c:3e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 14 00:10:25 2025 GMT Not After : Mar 21 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a0:73:d2:ab:03:2c:e5:0f:b0:3f:ff:e2:d0: 4c:29:84:a9:35:14:0f:d0:8e:c7:a4:fa:73:c5:ef: a8:36:ec:03:7e:e7:70:ce:1e:09:c2:72:e8:7a:43: c1:0e:ae:23:25:72:56:bb:f1:e8:0d:b9:ab:95:f7: fd:26:e1:47:f7:96:db:64:ac:d0:48:a1:07:fd:91: 84:2c:d0:7b:24:b4:a9:2a:c6:7f:e9:8f:20:fe:d6: 4e:d6:20:fb:8a:f1:ce:a9:9f:29:da:27:4d:68:e2: dc:7e:96:75:4d:52:8c:6b:15:5f:b7:15:b3:40:2e: 99:27:c2:9f:2a:a7:c1:b4:b0:26:80:16:56:8b:ca: 33:37:67:34:10:36:01:82:2f:02:5d:ef:a0:58:46: 35:23:58:d8:d3:6a:a9:7a:3e:4a:76:98:82:5e:7b: 8d:c0:7c:13:bc:d0:f6:96:54:71:97:e6:ce:75:76: 04:ad:71:27:f5:48:0e:ab:ac:fd:cc:38:03:15:36: 9d:84:e4:05:eb:e9:6b:29:1e:f3:5d:00:85:e6:ef: 57:04:86:a1:8c:46:8e:d9:e9:22:2c:f8:25:c7:bb: 24:ea:61:5d:c6:d8:47:bc:a6:d0:5a:ef:95:a4:ae: b8:99:86:e3:01:a3:4c:e9:03:36:2d:93:5a:03:bc: da:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E0:F6:D9:C2:2C:11:3B:03:F9:40:B5:3A:67:F6:0A:D3:AB:3A:0F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8aeeaedd-4c6d-4b20-8120-5c2625d44860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.56.1.0/24 Signature Algorithm: sha256WithRSAEncryption d6:bc:42:74:86:c8:e6:12:ec:f3:36:99:0f:8d:ab:87:b4:cf: b8:0f:f0:87:b8:c6:2d:27:50:f0:63:27:ae:20:0e:17:c0:22: c0:03:e9:29:d7:c1:42:7d:5f:e5:fa:00:d5:31:aa:60:a0:bb: 86:23:e8:de:fa:93:cf:2a:27:d2:f7:8e:f8:95:3d:27:c5:67: 18:10:e8:49:e6:4f:cd:2f:c5:90:74:1d:4c:30:13:83:70:ee: c7:5f:1a:98:1e:a3:49:79:d2:a0:f0:96:01:2d:dc:62:6d:79: 38:31:d2:35:73:15:f6:89:5c:84:44:0e:4d:6a:c8:39:e0:b3: 65:11:96:fc:d9:50:a7:12:ec:92:33:f4:32:82:5e:71:ae:62: 7c:f3:1a:e3:5e:b2:d6:74:02:68:79:be:9e:ca:ae:4f:09:ba: 49:dc:2b:d3:19:aa:83:12:eb:c7:5a:e6:4c:f9:5b:38:8e:51: 24:cd:16:8e:5f:2d:f1:14:9f:57:61:15:a5:cc:d2:e6:89:68: a5:62:aa:f7:d2:03:98:e9:d0:e1:55:ea:45:2a:17:11:c1:4e: bf:7b:02:b2:02:07:38:d1:71:c9:11:32:4c:46:70:4e:d7:9c: 19:09:85:bd:60:59:f6:ff:47:3f:ee:0d:31:ab:98:0d:18:85: 28:d3:f9:55 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ20fi5MzcV6IG+Aj7DjwBItMPlwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjE0MDAxMDI1WhcNMjUwMzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzODc5MTdkOGQyNDgyMmFhZjQxNTkzZTgyMWVhOWFhODg1 NmYzNGQ1NTkzYmE5ZWJkYzQwNjQ4MWRjMDdlZmFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4oHPSqwMs5Q+wP//i0EwphKk1FA/Qjsek+nPF76g27AN+ 53DOHgnCcuh6Q8EOriMlcla78egNuauV9/0m4Uf3lttkrNBIoQf9kYQs0HsktKkq xn/pjyD+1k7WIPuK8c6pnynaJ01o4tx+lnVNUoxrFV+3FbNALpknwp8qp8G0sCaA FlaLyjM3ZzQQNgGCLwJd76BYRjUjWNjTaql6Pkp2mIJee43AfBO80PaWVHGX5s51 dgStcSf1SA6rrP3MOAMVNp2E5AXr6WspHvNdAIXm71cEhqGMRo7Z6SIs+CXHuyTq YV3G2Ee8ptBa75WkrriZhuMBo0zpAzYtk1oDvNrxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmeD22cIsETsD+UC1Omf2CtOrOg8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhhZWVhZWRkLTRjNmQtNGIyMC04MTIwLTVjMjYyNWQ0NDg2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACLOAEwDQYJKoZIhvcNAQELBQADggEBANa8QnSGyOYS7PM2mQ+Nq4e0z7gP 8Ie4xi0nUPBjJ64gDhfAIsAD6SnXwUJ9X+X6ANUxqmCgu4Yj6N76k88qJ9L3jviV PSfFZxgQ6EnmT80vxZB0HUwwE4Nw7sdfGpgeo0l50qDwlgEt3GJteTgx0jVzFfaJ XIREDk1qyDngs2URlvzZUKcS7JIz9DKCXnGuYnzzGuNestZ0Amh5vp7Krk8Juknc K9MZqoMS68da5kz5WziOUSTNFo5fLfEUn1dhFaXM0uaJaKViqvfSA5jp0OFV6kUq FxHBTr97ArICBzjRcckRMkxGcE7XnBkJhb1gWfb/Rz/uDTGrmA0YhSjT+VU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:58 2025 by rpki-client