$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92b458a2-d204-4a0e-8f7d-f24851619bef.roa File: 92b458a2-d204-4a0e-8f7d-f24851619bef.roa (raw, json) Hash identifier: t2IZJ9EscicMakxTUQAu0f9eSeYuMj9RfVZHPdMyVKQ= Subject key identifier: C9:A1:F9:50:DE:E5:6A:36:25:84:91:73:79:CA:BD:41:69:D1:C3:D0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 47F2ECE2EFBAFD27FA4630F8391C875E01B5CCA1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92b458a2-d204-4a0e-8f7d-f24851619bef.roa Signing time: Tue 28 Jan 2025 00:00:00 +0000 ROA not before: Tue 28 Jan 2025 00:00:00 +0000 ROA not after: Tue 04 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 184.72.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f2:ec:e2:ef:ba:fd:27:fa:46:30:f8:39:1c:87:5e:01:b5:cc:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 28 00:00:00 2025 GMT Not After : Mar 4 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:1b:8a:31:67:73:46:34:0a:ab:45:64:83: e6:11:fa:7e:e9:9a:21:e4:2d:9e:e6:5d:43:da:21: 9e:3a:36:66:5d:84:7f:bc:24:38:e1:0c:f5:b2:c5: 72:fd:26:e6:30:00:f9:78:28:dd:6c:02:52:14:55: 0f:e4:ce:ce:f2:a9:22:fa:89:6e:f3:79:0a:63:96: 44:1b:86:9d:98:af:c6:bb:30:50:d4:e3:fa:cb:7a: 52:f3:63:3e:7d:70:98:b0:2d:6f:ef:65:46:75:83: 87:44:93:58:00:50:8d:05:8a:d0:9d:d0:c2:f9:7c: 16:f9:48:1b:94:ff:ca:c5:c4:be:26:08:c9:82:1a: b6:09:c4:61:53:6b:e1:02:75:73:e1:86:f9:de:df: 38:0d:ed:28:10:69:f7:34:c3:da:19:56:b2:0a:12: 8d:f2:6a:86:7b:78:5c:ed:03:47:6e:a3:dc:a5:6b: 85:01:60:6d:a6:86:05:df:b4:fa:f2:da:02:ea:50: 83:bf:ff:4a:80:9c:9b:95:8a:91:81:40:6b:26:a2: 4d:da:0f:89:51:09:83:26:f2:58:91:79:24:bf:30: e4:59:2f:47:1f:9e:2c:32:46:7a:cb:f7:f4:74:9a: 8f:43:df:21:f8:bb:12:17:e6:ac:26:75:fb:bc:ab: 85:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A1:F9:50:DE:E5:6A:36:25:84:91:73:79:CA:BD:41:69:D1:C3:D0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92b458a2-d204-4a0e-8f7d-f24851619bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.208.0/21 Signature Algorithm: sha256WithRSAEncryption 54:99:ff:5b:56:d7:60:fc:ec:23:b2:38:0d:7e:c6:f8:47:97: 18:e3:bb:80:7c:07:02:fd:b1:8a:99:5b:9d:ee:d4:37:6b:f7: 74:f8:a2:09:e6:6c:ab:ca:70:e4:e3:d4:e9:d3:f1:cd:d3:70: 01:25:4c:73:c5:51:2a:3f:e9:c2:d7:58:ae:20:fd:95:e7:12: fd:03:43:2f:4b:7a:82:e7:0d:e0:e8:ea:63:fe:0a:3e:3d:e0: a2:97:d3:9a:8c:8e:9a:f9:32:85:cb:c3:16:09:dc:18:ae:0f: 57:0b:eb:d1:bd:3f:0b:0a:ab:a3:a0:02:f8:ba:4a:5a:bd:63: 44:b2:f1:39:07:c9:38:04:90:e5:ca:ab:8d:f4:4b:1c:3d:3a: aa:1d:a8:75:17:fb:ad:4e:c5:e5:52:01:da:1c:3f:40:66:16: a7:77:3f:ee:84:f6:9c:61:6f:78:79:b7:4f:e8:7e:a4:54:f9: eb:5e:90:72:7d:d9:d3:40:7d:26:ad:a1:52:b2:94:47:f2:74: 33:4f:92:97:ba:d0:2b:b8:a1:cf:55:47:f1:98:cc:f1:80:11: 8e:0e:e6:2c:24:9b:77:35:74:12:da:4b:98:ef:05:e5:ed:ee: a3:53:ec:d6:c0:5e:3f:1d:41:3c:bd:86:59:d4:58:97:ad:ac: b7:ac:ef:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR/Ls4u+6/Sf6RjD4ORyHXgG1zKEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI4MDAwMDAwWhcNMjUwMzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTc1Y2M2YTFhZTUzOTNiNGRlNDg2NjU2Zjk1M2I4NzY5 NmFiNjdjNTU4NDVkMWZlMmRhYTE3YzA1ZDA5NzYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz6xuKMWdzRjQKq0Vkg+YR+n7pmiHkLZ7mXUPaIZ46NmZd hH+8JDjhDPWyxXL9JuYwAPl4KN1sAlIUVQ/kzs7yqSL6iW7zeQpjlkQbhp2Yr8a7 MFDU4/rLelLzYz59cJiwLW/vZUZ1g4dEk1gAUI0FitCd0ML5fBb5SBuU/8rFxL4m CMmCGrYJxGFTa+ECdXPhhvne3zgN7SgQafc0w9oZVrIKEo3yaoZ7eFztA0duo9yl a4UBYG2mhgXftPry2gLqUIO//0qAnJuVipGBQGsmok3aD4lRCYMm8liReSS/MORZ L0cfniwyRnrL9/R0mo9D3yH4uxIX5qwmdfu8q4XZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyaH5UN7lajYlhJFzecq9QWnRw9AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkyYjQ1OGEyLWQyMDQtNGEwZS04ZjdkLWYyNDg1MTYxOWJlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO4SNAwDQYJKoZIhvcNAQELBQADggEBAFSZ/1tW12D87COyOA1+xvhHlxjj u4B8BwL9sYqZW53u1Ddr93T4ognmbKvKcOTj1OnT8c3TcAElTHPFUSo/6cLXWK4g /ZXnEv0DQy9LeoLnDeDo6mP+Cj494KKX05qMjpr5MoXLwxYJ3BiuD1cL69G9PwsK q6OgAvi6Slq9Y0Sy8TkHyTgEkOXKq430Sxw9OqodqHUX+61OxeVSAdocP0BmFqd3 P+6E9pxhb3h5t0/ofqRU+etekHJ92dNAfSatoVKylEfydDNPkpe60Cu4oc9VR/GY zPGAEY4O5iwkm3c1dBLaS5jvBeXt7qNT7NbAXj8dQTy9hlnUWJetrLes798= -----END CERTIFICATE-----Generated at Wed Feb 5 09:56:26 2025 by rpki-client