$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99e391b3-1064-47bc-9cab-3c4d2e04870b.roa File: 99e391b3-1064-47bc-9cab-3c4d2e04870b.roa (raw, json) Hash identifier: 6VSJx7/qdoMY1fsgfYiWIJbneHx3StIX6d4QfiGkELE= Subject key identifier: 4A:49:DA:41:34:FD:0A:62:8C:E4:5B:C4:63:33:AF:66:84:6D:58:46 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 346A89324FDDB3BA83C834E6D4702EEB288797B1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99e391b3-1064-47bc-9cab-3c4d2e04870b.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 16.56.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:6a:89:32:4f:dd:b3:ba:83:c8:34:e6:d4:70:2e:eb:28:87:97:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:57:1f:47:24:d9:46:ca:0f:e5:1f:d1:ee: 97:41:c2:e9:11:27:46:22:78:dd:83:bb:93:2b:0a: 01:60:86:48:8f:8b:20:03:f4:50:33:8d:1b:d3:32: 6d:34:f4:af:67:06:ac:dc:5a:4f:42:c6:29:0f:c4: 00:75:5c:3f:be:65:23:de:d0:8f:cd:9a:81:88:d0: d4:3a:9c:f3:36:8a:46:9b:7a:aa:43:a3:85:ed:96: 84:54:6b:93:76:11:29:9b:28:f9:0a:7d:d4:9d:38: 0a:25:d4:70:ab:6d:0e:de:46:0a:af:83:97:86:c0: b1:19:ed:22:37:4d:3f:39:b0:26:bd:d0:c3:ff:59: 88:df:22:54:08:8d:9b:70:8d:92:5f:c1:76:b8:27: 7d:14:46:9b:19:75:c4:ca:82:a4:df:31:6d:9d:23: 53:29:74:47:2f:53:b2:45:4a:57:b7:99:a3:58:d0: af:c3:d8:23:6c:74:d8:92:8d:bf:5a:5a:b8:05:4a: 2f:3a:7e:03:0f:c8:bb:cf:fa:59:6f:c9:ea:58:32: aa:13:0d:f6:95:6b:79:72:fd:32:4e:35:55:33:d7: d5:19:ae:a3:a3:42:63:82:5e:e7:52:11:83:9a:81: 68:7a:2f:93:da:18:62:1e:96:e3:fb:8a:de:ab:48: 67:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:49:DA:41:34:FD:0A:62:8C:E4:5B:C4:63:33:AF:66:84:6D:58:46 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99e391b3-1064-47bc-9cab-3c4d2e04870b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.56.128.0/19 Signature Algorithm: sha256WithRSAEncryption a1:e7:b7:9b:a3:c0:af:06:94:6c:c7:a6:13:0b:2e:40:d8:5c: 3f:34:aa:8f:ec:f8:74:a5:f4:b3:e0:b4:5c:1b:59:cc:bc:cb: 95:95:05:ea:f7:cf:f3:a9:42:d9:a5:5b:5d:8b:db:2d:0e:8a: ea:c7:9e:20:68:ea:e6:9c:63:ad:7a:1e:4b:af:da:89:60:e6: 45:d1:a0:9f:b6:89:09:ce:da:5c:49:ae:eb:65:47:a6:94:17: 28:05:cf:e0:f2:6c:5b:20:ca:9d:13:c6:9f:f6:53:96:07:9a: 77:0f:8b:72:d8:64:82:d9:9b:83:20:77:c0:68:7b:21:45:d1: 5b:79:ad:0b:ea:0b:72:45:10:65:6a:68:f6:c1:e8:88:85:cb: 1f:52:d7:d9:59:3d:c9:1a:3c:77:d4:e5:c3:56:9f:25:72:7b: f8:68:36:9a:8e:76:be:43:a4:6c:eb:e1:57:2e:2e:2f:50:4b: f8:ac:f7:8c:7e:f8:46:01:87:83:2f:25:61:be:8a:3b:55:18: f2:c1:1c:3a:5d:af:cc:5d:86:18:a0:1c:10:e7:93:1f:c0:41: 81:3f:70:ae:5a:88:1b:21:d9:6e:a9:5c:70:1e:40:41:de:49: 26:24:fa:0c:f7:31:88:72:97:9d:cd:61:df:65:d0:b5:53:99: 34:dd:55:f9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNGqJMk/ds7qDyDTm1HAu6yiHl7EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYWQ0NTllY2IwZTc0NjNiZTJhMjEyODkyNmY0OTFiOTU2 YjJjZWQ5YjhmMmU1MWQzZTg1N2MwZjdjYzMzNTUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1PFcfRyTZRsoP5R/R7pdBwukRJ0YieN2Du5MrCgFghkiP iyAD9FAzjRvTMm009K9nBqzcWk9CxikPxAB1XD++ZSPe0I/NmoGI0NQ6nPM2ikab eqpDo4XtloRUa5N2ESmbKPkKfdSdOAol1HCrbQ7eRgqvg5eGwLEZ7SI3TT85sCa9 0MP/WYjfIlQIjZtwjZJfwXa4J30URpsZdcTKgqTfMW2dI1MpdEcvU7JFSle3maNY 0K/D2CNsdNiSjb9aWrgFSi86fgMPyLvP+llvyepYMqoTDfaVa3ly/TJONVUz19UZ rqOjQmOCXudSEYOagWh6L5PaGGIeluP7it6rSGdNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSknaQTT9CmKM5FvEYzOvZoRtWEYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk5ZTM5MWIzLTEwNjQtNDdiYy05Y2FiLTNjNGQyZTA0ODcwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUQOIAwDQYJKoZIhvcNAQELBQADggEBAKHnt5ujwK8GlGzHphMLLkDYXD80 qo/s+HSl9LPgtFwbWcy8y5WVBer3z/OpQtmlW12L2y0OiurHniBo6uacY616Hkuv 2olg5kXRoJ+2iQnO2lxJrutlR6aUFygFz+DybFsgyp0Txp/2U5YHmncPi3LYZILZ m4Mgd8BoeyFF0Vt5rQvqC3JFEGVqaPbB6IiFyx9S19lZPckaPHfU5cNWnyVye/ho NpqOdr5DpGzr4VcuLi9QS/is94x++EYBh4MvJWG+ijtVGPLBHDpdr8xdhhigHBDn kx/AQYE/cK5aiBsh2W6pXHAeQEHeSSYk+gz3MYhyl53NYd9l0LVTmTTdVfk= -----END CERTIFICATE-----Generated at Wed Feb 5 09:48:54 2025 by rpki-client