$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9e07de-e076-42d6-a7cb-8400f81babe2.roa File: 9b9e07de-e076-42d6-a7cb-8400f81babe2.roa (raw, json) Hash identifier: ibZTkuDScOmDalWvnbmlznGrhyvkLCeOVbDyXuQK2Tk= Subject key identifier: 01:36:4D:CA:D8:3D:F1:F9:51:73:7F:36:FF:8C:3A:F2:58:29:B4:CC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 51F5146C0FF7496EFAF1587BF74B21B5563B90BF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9e07de-e076-42d6-a7cb-8400f81babe2.roa Signing time: Tue 21 Jan 2025 00:00:00 +0000 ROA not before: Tue 21 Jan 2025 00:00:00 +0000 ROA not after: Tue 25 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 57.91.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f5:14:6c:0f:f7:49:6e:fa:f1:58:7b:f7:4b:21:b5:56:3b:90:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 21 00:00:00 2025 GMT Not After : Feb 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d8:af:46:4d:26:9c:63:41:7f:e9:db:a2:6e: e0:19:01:84:30:22:b2:a1:38:f3:7a:16:cc:d1:fd: f6:06:cb:34:2e:8b:21:d1:d9:7a:b8:c1:5a:b0:ef: ca:f7:ef:c5:1d:30:f0:02:f9:e2:37:a8:85:d9:fa: 82:c2:b9:39:86:58:dd:d8:15:01:1e:01:03:0f:f4: 64:0b:c2:74:58:86:0f:0c:98:79:e0:b6:cf:70:25: 83:31:e6:09:e1:6a:f2:5b:5a:de:1d:ce:b6:2b:9a: f7:e2:82:22:af:fe:02:20:2d:ef:ec:f8:ab:08:72: 83:87:9a:f7:c6:8b:42:f5:94:53:69:fe:1c:66:4e: 54:e9:e4:ca:a6:30:75:76:0c:5d:4d:d9:28:bf:a6: 8d:60:e0:22:35:ef:49:94:d8:ab:48:2a:2d:d7:a3: d6:9b:7e:52:4a:0c:e7:fb:1f:d9:c6:21:a7:6b:7f: 15:38:00:5e:31:be:ae:ce:1a:7d:91:0c:b2:bb:1f: 8e:63:00:6b:1a:f2:e5:de:da:d0:d9:9c:52:af:e2: c6:be:f9:41:30:69:09:7c:80:48:3b:27:b8:f5:91: 14:27:98:e8:51:07:78:6d:4f:f3:7b:9c:6b:dc:55: 49:f6:fa:fa:0b:fe:6c:07:d5:d1:0d:9c:10:f2:42: 4d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:36:4D:CA:D8:3D:F1:F9:51:73:7F:36:FF:8C:3A:F2:58:29:B4:CC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9e07de-e076-42d6-a7cb-8400f81babe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.91.0.0/16 Signature Algorithm: sha256WithRSAEncryption 29:56:c9:5d:88:89:4b:d0:1a:36:38:7c:7d:5e:a3:68:22:73: 41:92:c2:74:ee:12:1b:41:6c:7d:37:3c:b4:18:1e:c2:72:a3: 1c:43:cc:24:15:38:b4:e1:10:8e:bc:79:78:1a:e5:ac:c9:2e: a2:7f:57:f1:2d:5e:a8:d5:38:eb:dc:a7:1d:f9:61:55:d5:d2: a6:b4:14:05:e4:fa:fb:2a:a7:cc:e2:f8:3a:ff:fd:a5:cd:8e: 63:9b:ff:df:dc:c9:e1:11:15:fe:a8:0c:b9:a0:d6:4b:30:97: c6:67:cb:c9:5a:b0:eb:c3:85:72:18:42:fc:20:7b:f7:82:84: 67:2f:6c:af:91:bb:3f:db:a8:63:98:4e:8d:ef:6d:95:f0:80: e5:02:70:d0:0b:70:fb:2d:7f:cb:d2:1f:cc:a8:fb:ed:4a:89: da:06:59:5e:c0:c3:d3:aa:a6:e9:ae:3a:95:5a:ea:8e:73:9e: f0:02:f2:4b:0e:6e:0e:4a:cd:c0:3d:c6:e9:c2:20:94:be:90: 60:82:2e:fc:08:98:6d:fc:a4:9c:a3:0e:d0:84:d1:f8:e8:ab: f4:4d:2a:f2:1c:e5:c5:16:79:ff:6e:69:34:c0:1e:e3:2b:0c: 31:85:1c:da:44:a7:c1:aa:35:81:d8:85:73:2a:56:4d:06:cc: e6:40:70:02 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUfUUbA/3SW768Vh790shtVY7kL8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIxMDAwMDAwWhcNMjUwMjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNGVkYTViNTA0OWNkOGZmNjY5NGFkMjkwZjE0OGUwN2Zi YjQxNGE1NmIzNjJlMjNlZjc0NGI2ZGE5YmI5MGFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCR2K9GTSacY0F/6duibuAZAYQwIrKhOPN6FszR/fYGyzQu iyHR2Xq4wVqw78r378UdMPAC+eI3qIXZ+oLCuTmGWN3YFQEeAQMP9GQLwnRYhg8M mHngts9wJYMx5gnhavJbWt4dzrYrmvfigiKv/gIgLe/s+KsIcoOHmvfGi0L1lFNp /hxmTlTp5MqmMHV2DF1N2Si/po1g4CI170mU2KtIKi3Xo9abflJKDOf7H9nGIadr fxU4AF4xvq7OGn2RDLK7H45jAGsa8uXe2tDZnFKv4sa++UEwaQl8gEg7J7j1kRQn mOhRB3htT/N7nGvcVUn2+voL/mwH1dENnBDyQk1dAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUATZNytg98flRc382/4w68lgptMwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzliOWUwN2RlLWUwNzYtNDJkNi1hN2NiLTg0MDBmODFiYWJlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA5WzANBgkqhkiG9w0BAQsFAAOCAQEAKVbJXYiJS9AaNjh8fV6jaCJzQZLC dO4SG0FsfTc8tBgewnKjHEPMJBU4tOEQjrx5eBrlrMkuon9X8S1eqNU469ynHflh VdXSprQUBeT6+yqnzOL4Ov/9pc2OY5v/39zJ4REV/qgMuaDWSzCXxmfLyVqw68OF chhC/CB794KEZy9sr5G7P9uoY5hOje9tlfCA5QJw0Atw+y1/y9IfzKj77UqJ2gZZ XsDD06qm6a46lVrqjnOe8ALySw5uDkrNwD3G6cIglL6QYIIu/AiYbfyknKMO0ITR +Oir9E0q8hzlxRZ5/25pNMAe4ysMMYUc2kSnwao1gdiFcypWTQbM5kBwAg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:09 2025 by rpki-client