$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a189bf7a-855d-4706-a4a7-0aed688db0ba.roa File: a189bf7a-855d-4706-a4a7-0aed688db0ba.roa (raw, json) Hash identifier: 8c5KgS+1OJRC0cjygsqhCTvlv9JCtX1v4d8F1JN+01I= Subject key identifier: B2:E3:B1:6B:43:5B:DA:35:9F:3F:3C:07:80:61:F6:76:62:C3:CA:2E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E078FD673803F5198448A30AFE3AF88B18143EC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a189bf7a-855d-4706-a4a7-0aed688db0ba.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 44.215.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:07:8f:d6:73:80:3f:51:98:44:8a:30:af:e3:af:88:b1:81:43:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:62:e3:5d:e3:39:8f:52:a9:e2:64:f0:09:e0: ad:88:35:b6:64:2b:33:ab:6f:84:92:fa:cf:76:b1: 0c:f3:a1:35:cd:29:4b:47:0b:01:dc:a8:25:37:72: 78:6c:2b:ae:04:a4:33:8f:b6:15:df:bb:68:0e:50: 9f:f8:5e:32:ac:7d:e9:84:d8:1e:6b:7a:d3:0a:b3: 45:c7:69:63:ce:55:5e:72:d1:72:af:f1:94:84:21: 31:88:03:03:95:79:81:96:e3:49:12:78:bf:84:f3: da:70:63:2f:3d:12:74:5b:f3:17:72:ba:8c:cf:c6: 27:cd:ef:06:45:e5:87:ba:ed:c4:27:cf:52:69:00: 4a:85:36:67:2f:94:b2:81:21:89:c1:5e:7b:df:5b: 67:f5:92:27:b6:9f:41:19:4f:1b:56:e0:0b:da:87: 7a:47:45:1f:0e:52:5d:55:3b:02:5f:9e:cb:3b:b4: fd:be:31:51:80:0b:0d:e6:a5:2f:00:67:76:17:a1: 59:97:03:69:75:7f:7f:57:4b:cf:f1:71:ae:cc:a5: 39:cc:45:7e:5d:78:47:dd:05:cb:09:68:92:91:f8: a6:4a:9a:8f:e0:41:e7:cd:5c:37:48:32:14:95:97: 55:a3:2b:97:e0:b3:7e:c6:5e:5e:6e:67:72:04:35: cf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E3:B1:6B:43:5B:DA:35:9F:3F:3C:07:80:61:F6:76:62:C3:CA:2E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a189bf7a-855d-4706-a4a7-0aed688db0ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.215.132.0/22 Signature Algorithm: sha256WithRSAEncryption 59:ae:72:ad:e6:88:c7:67:90:8b:4a:6e:58:1b:4f:79:61:32: 34:33:de:a3:23:ea:d9:c2:1d:05:a3:24:8c:a6:e5:27:d3:ec: 62:39:2b:db:fa:cf:61:21:3a:df:09:ad:20:be:63:18:af:5e: fd:51:62:79:9f:80:20:4a:66:b4:4b:13:31:cc:37:ba:ad:24: 52:38:1b:74:54:b5:98:8d:85:14:5f:da:3e:e5:6c:14:4c:22: 28:44:e8:94:13:45:9d:bf:41:b0:6a:04:ef:0f:02:ae:94:68: 1c:23:d1:06:6a:6b:3b:d8:75:fb:22:3c:35:31:e6:61:3c:c4: 29:97:a4:41:21:6d:b4:43:0e:c2:dc:8e:2f:90:6e:b7:0c:43: b2:f6:47:87:79:67:b0:d1:50:cc:79:27:26:64:20:ec:dd:78: db:fe:e3:08:56:77:03:98:6f:e8:ce:ba:36:17:57:38:9c:70: 50:93:2a:a1:86:67:56:97:1a:73:23:61:38:e6:a5:4b:08:d8: 98:34:59:f6:4f:8c:bb:55:15:04:45:19:58:da:c3:df:0e:95: 85:2b:f0:14:f4:23:7b:27:ab:e0:83:2c:ed:03:ea:d9:ae:b0: b6:9d:57:b5:f2:ea:76:ff:31:18:40:cb:81:02:fe:84:69:fb: 3b:1d:ca:67 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXgeP1nOAP1GYRIowr+OviLGBQ+wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjFlNmU0NDRjNzgzNDVhYzFmMzRiNTRjOWU2MDlkM2M3 NGUzOWM4OTRjYzA1Njc2MzEzZThiZGYyMjU1ZGY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAYuNd4zmPUqniZPAJ4K2INbZkKzOrb4SS+s92sQzzoTXN KUtHCwHcqCU3cnhsK64EpDOPthXfu2gOUJ/4XjKsfemE2B5retMKs0XHaWPOVV5y 0XKv8ZSEITGIAwOVeYGW40kSeL+E89pwYy89EnRb8xdyuozPxifN7wZF5Ye67cQn z1JpAEqFNmcvlLKBIYnBXnvfW2f1kie2n0EZTxtW4Avah3pHRR8OUl1VOwJfnss7 tP2+MVGACw3mpS8AZ3YXoVmXA2l1f39XS8/xca7MpTnMRX5deEfdBcsJaJKR+KZK mo/gQefNXDdIMhSVl1WjK5fgs37GXl5uZ3IENc+1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsuOxa0Nb2jWfPzwHgGH2dmLDyi4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ExODliZjdhLTg1NWQtNDcwNi1hNGE3LTBhZWQ2ODhkYjBiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIs14QwDQYJKoZIhvcNAQELBQADggEBAFmucq3miMdnkItKblgbT3lhMjQz 3qMj6tnCHQWjJIym5SfT7GI5K9v6z2EhOt8JrSC+YxivXv1RYnmfgCBKZrRLEzHM N7qtJFI4G3RUtZiNhRRf2j7lbBRMIihE6JQTRZ2/QbBqBO8PAq6UaBwj0QZqazvY dfsiPDUx5mE8xCmXpEEhbbRDDsLcji+QbrcMQ7L2R4d5Z7DRUMx5JyZkIOzdeNv+ 4whWdwOYb+jOujYXVziccFCTKqGGZ1aXGnMjYTjmpUsI2Jg0WfZPjLtVFQRFGVja w98OlYUr8BT0I3snq+CDLO0D6tmusLadV7Xy6nb/MRhAy4EC/oRp+zsdymc= -----END CERTIFICATE-----Generated at Wed Feb 5 09:50:16 2025 by rpki-client