$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9544df28-c3ca-47ba-851e-1178b9c685ec.roa File: 9544df28-c3ca-47ba-851e-1178b9c685ec.roa (raw, json) Hash identifier: 1bWH3Ei8zidcAdYo80M7u6GTh5hnyiJYgVTOhIkKW5E= Subject key identifier: 7B:55:6A:6F:FB:F9:8C:5F:F8:87:53:31:08:2D:40:CD:BB:D5:75:8A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48F9B294BE286018C4F36C0138E5F67C8159E839 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9544df28-c3ca-47ba-851e-1178b9c685ec.roa Signing time: Tue 21 Jan 2025 00:00:00 +0000 ROA not before: Tue 21 Jan 2025 00:00:00 +0000 ROA not after: Tue 25 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 96.0.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f9:b2:94:be:28:60:18:c4:f3:6c:01:38:e5:f6:7c:81:59:e8:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 21 00:00:00 2025 GMT Not After : Feb 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:bf:15:ae:6c:1f:7d:c7:e2:48:d7:83:98: 39:45:a0:fa:49:52:45:ba:bd:b5:ff:32:55:f0:f5: 5b:10:23:f8:be:d6:af:f8:14:4b:df:9e:93:68:56: d2:d1:2a:aa:5c:7f:78:0c:93:3e:7c:26:4d:6d:28: 11:65:1a:6e:20:6d:7f:cd:d6:7e:fd:57:0e:cd:ec: 69:7a:c3:fc:14:3b:a1:89:ba:36:fe:6b:c2:0d:2a: c6:58:3d:6e:34:a0:1f:30:87:5b:c9:8c:7a:2a:ec: ac:f9:a4:ca:9f:21:ab:f2:d4:de:68:95:61:3e:58: 9f:06:66:0a:67:10:af:14:04:7f:36:aa:b7:49:72: 6e:a2:cb:8f:e6:72:64:8e:0b:83:47:81:bd:f8:ec: 36:35:1e:fc:b2:ac:c3:c8:b9:0d:6b:78:74:e2:b6: 5b:70:55:3e:cc:89:a4:15:f0:10:ed:1e:6d:db:a8: d0:fd:7f:76:0c:fb:dd:92:7d:5c:44:e0:1b:a7:ac: 45:2f:fa:60:68:0d:ae:28:dc:13:1c:c5:79:95:63: 71:a1:18:e9:c1:e9:df:a6:6b:65:8c:ac:79:f8:b8: 60:3c:35:66:ad:f3:1c:6d:d5:83:b9:be:65:4f:d3: 68:43:c4:2f:73:d5:3a:dc:cb:9b:91:38:c8:8c:33: ee:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:55:6A:6F:FB:F9:8C:5F:F8:87:53:31:08:2D:40:CD:BB:D5:75:8A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9544df28-c3ca-47ba-851e-1178b9c685ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.48.0/21 Signature Algorithm: sha256WithRSAEncryption 42:b0:20:60:88:31:79:41:23:cf:32:1b:c3:e9:11:85:88:13: cf:a5:20:59:c9:05:a3:49:46:fc:7b:23:97:ff:fc:56:7a:7f: 95:e5:28:92:fd:4b:18:0c:88:9e:2c:c4:49:fc:92:e3:08:4b: 38:c2:c7:16:4e:e8:e9:40:81:7e:55:0a:76:92:3f:ad:53:fc: b4:e3:3f:aa:c4:01:24:cd:6f:3f:98:bd:19:12:a1:66:94:f3: 73:84:10:e9:22:1c:13:04:be:21:39:c0:48:09:42:f4:7d:a0: b3:e6:6f:57:a0:b7:a9:6f:0a:bd:9c:25:18:9c:ff:1d:9f:e2: 45:59:38:7d:2d:fb:a6:68:c9:8f:cd:04:4f:8b:70:e6:d6:6a: 23:2d:9c:23:d6:7c:45:d1:6d:9e:5f:fe:85:cd:6f:82:ad:68: 79:33:0e:ea:29:27:a4:53:64:c6:dc:a7:8e:e0:a1:a6:a9:6b: 50:89:39:7c:d0:32:10:12:cc:19:eb:96:68:d7:06:a2:f2:45: 87:e8:19:dd:4c:65:c4:d6:06:4f:69:64:5d:5e:4c:08:f8:0f: 04:78:86:57:16:85:43:73:9b:ee:87:82:d7:3e:7c:24:e7:7a: 2e:4e:48:70:2f:ec:48:21:a7:03:35:d6:59:ea:70:9e:d3:d0: 24:ca:73:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSPmylL4oYBjE82wBOOX2fIFZ6DkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIxMDAwMDAwWhcNMjUwMjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOTdlYjNlMTg3MGFlMmYzYjA5ZGEzZTQ1ZjBiN2U0ZDNj NTgwMjA2OWRiMDE2MzU4Y2U5YTliNjU4MmUzYWMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6bb8VrmwffcfiSNeDmDlFoPpJUkW6vbX/MlXw9VsQI/i+ 1q/4FEvfnpNoVtLRKqpcf3gMkz58Jk1tKBFlGm4gbX/N1n79Vw7N7Gl6w/wUO6GJ ujb+a8INKsZYPW40oB8wh1vJjHoq7Kz5pMqfIavy1N5olWE+WJ8GZgpnEK8UBH82 qrdJcm6iy4/mcmSOC4NHgb347DY1HvyyrMPIuQ1reHTitltwVT7MiaQV8BDtHm3b qND9f3YM+92SfVxE4BunrEUv+mBoDa4o3BMcxXmVY3GhGOnB6d+ma2WMrHn4uGA8 NWat8xxt1YO5vmVP02hDxC9z1Trcy5uROMiMM+5PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUe1Vqb/v5jF/4h1MxCC1AzbvVdYowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk1NDRkZjI4LWMzY2EtNDdiYS04NTFlLTExNzhiOWM2ODVlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANgADAwDQYJKoZIhvcNAQELBQADggEBAEKwIGCIMXlBI88yG8PpEYWIE8+l IFnJBaNJRvx7I5f//FZ6f5XlKJL9SxgMiJ4sxEn8kuMISzjCxxZO6OlAgX5VCnaS P61T/LTjP6rEASTNbz+YvRkSoWaU83OEEOkiHBMEviE5wEgJQvR9oLPmb1egt6lv Cr2cJRic/x2f4kVZOH0t+6ZoyY/NBE+LcObWaiMtnCPWfEXRbZ5f/oXNb4KtaHkz DuopJ6RTZMbcp47goaapa1CJOXzQMhASzBnrlmjXBqLyRYfoGd1MZcTWBk9pZF1e TAj4DwR4hlcWhUNzm+6Hgtc+fCTnei5OSHAv7EghpwM11lnqcJ7T0CTKcyo= -----END CERTIFICATE-----Generated at Wed Feb 5 09:54:52 2025 by rpki-client