$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b07acc46-54c4-479e-b01b-57d338ac8653.roa File: b07acc46-54c4-479e-b01b-57d338ac8653.roa (raw, json) Hash identifier: YsiYJ9Ui203/hR/Ir/7GyEQdgiZ+ywgXRQrFAoj6p/A= Subject key identifier: CA:B0:95:C2:0D:1B:68:DA:8F:7D:6C:DE:99:38:BE:39:6F:22:0A:9B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 78ED1C0A47FA75BED466314DEC5F34C4E76A3A72 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b07acc46-54c4-479e-b01b-57d338ac8653.roa Signing time: Wed 22 Jan 2025 00:00:00 +0000 ROA not before: Wed 22 Jan 2025 00:00:00 +0000 ROA not after: Wed 26 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 108.175.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ed:1c:0a:47:fa:75:be:d4:66:31:4d:ec:5f:34:c4:e7:6a:3a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 22 00:00:00 2025 GMT Not After : Feb 26 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:52:72:cc:18:cc:99:6b:b3:58:48:f1:7e:10: 49:5d:55:93:0b:f7:a1:9d:c2:c1:69:03:19:1a:c0: ab:74:a4:16:b7:4c:b6:29:dd:6f:84:b9:0c:76:8b: 65:21:48:65:1c:5a:9f:5f:0e:83:35:92:08:fc:0d: a1:73:cd:24:64:ec:e2:9f:3a:bd:45:1e:cd:96:4d: 6c:b0:13:b6:a1:c8:db:98:43:9b:8b:54:b2:f5:9c: 72:75:12:9a:6f:f3:46:bb:95:47:c4:d7:bf:28:10: 18:20:64:af:a2:e0:8a:bc:9e:dc:44:c3:e8:1b:ff: ed:a6:18:fd:35:63:31:7d:26:4b:dc:4f:70:dd:97: e9:7b:be:c6:8b:47:85:81:8e:ec:85:47:02:3b:a2: 04:ff:70:14:6c:81:75:12:cd:88:35:5b:f1:c3:38: 01:30:97:4d:ee:51:8f:02:c3:2e:ff:99:3b:c5:32: e2:69:d0:6b:f5:5b:6f:67:ff:b2:9c:72:87:d4:57: 1c:d4:4f:23:ad:67:ce:65:bd:9d:ad:31:da:b9:91: 26:f4:27:5f:21:15:89:54:ff:f6:a5:52:be:fb:65: 16:33:3d:fc:c2:01:e8:ee:f2:61:1d:ce:e3:77:7a: ad:60:53:7e:f4:af:7c:ad:67:80:0d:d9:49:75:bc: 1c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B0:95:C2:0D:1B:68:DA:8F:7D:6C:DE:99:38:BE:39:6F:22:0A:9B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b07acc46-54c4-479e-b01b-57d338ac8653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.175.52.0/22 Signature Algorithm: sha256WithRSAEncryption cf:a4:41:95:55:85:b8:90:5b:1a:02:aa:32:1c:67:66:4e:3e: 15:7c:9e:23:47:16:95:b1:50:f7:e3:8b:7c:33:6f:11:e8:9b: bc:61:f5:16:55:47:24:09:3f:30:99:46:1b:b5:d8:8c:dc:aa: 1f:72:e7:f0:f7:28:5d:b9:d0:a1:d3:a0:1b:71:49:b1:36:1b: a3:cb:2a:77:b9:21:9d:78:7f:37:73:99:51:47:8f:ba:bf:c8: 2d:a2:e8:28:60:05:a1:01:d1:13:a7:bc:e9:f5:83:63:0c:1a: fe:f9:28:2e:7a:65:f7:75:d0:2b:93:da:af:b4:2e:1b:bb:76: bf:23:4d:4a:9f:61:b0:fe:d4:54:a8:88:8f:97:ce:b5:18:29: 80:87:d1:73:8f:b5:24:4c:0e:d6:98:67:10:ca:06:0c:6b:22: e7:8e:55:cd:23:4b:7e:3d:8c:47:24:99:79:bf:e0:8e:04:73: 3c:70:a8:58:ed:77:dc:1a:8e:ad:9c:1a:c7:6a:fa:74:e3:db: cb:af:21:9a:51:4f:05:52:30:18:af:05:54:88:de:fb:ff:90: 57:65:f4:34:ed:b3:bc:7a:7f:4f:38:57:78:98:56:4c:30:a2: 69:1f:c6:a4:86:db:da:95:c2:f2:ff:56:7f:55:58:71:3e:f1: b9:71:31:61 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeO0cCkf6db7UZjFN7F80xOdqOnIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIyMDAwMDAwWhcNMjUwMjI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjQwODE0ZmMzNmU1YTAzNDgyZTgwNjI1M2I1MjBlNmM0 MDFkYTYyNmQ2ZGQ3YTMyYjBlZWUyZDA5OTIyNmJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnUnLMGMyZa7NYSPF+EEldVZML96GdwsFpAxkawKt0pBa3 TLYp3W+EuQx2i2UhSGUcWp9fDoM1kgj8DaFzzSRk7OKfOr1FHs2WTWywE7ahyNuY Q5uLVLL1nHJ1Eppv80a7lUfE178oEBggZK+i4Iq8ntxEw+gb/+2mGP01YzF9Jkvc T3Ddl+l7vsaLR4WBjuyFRwI7ogT/cBRsgXUSzYg1W/HDOAEwl03uUY8Cwy7/mTvF MuJp0Gv1W29n/7KccofUVxzUTyOtZ85lvZ2tMdq5kSb0J18hFYlU//alUr77ZRYz PfzCAeju8mEdzuN3eq1gU370r3ytZ4AN2Ul1vByJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyrCVwg0baNqPfWzemTi+OW8iCpswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IwN2FjYzQ2LTU0YzQtNDc5ZS1iMDFiLTU3ZDMzOGFjODY1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJsrzQwDQYJKoZIhvcNAQELBQADggEBAM+kQZVVhbiQWxoCqjIcZ2ZOPhV8 niNHFpWxUPfji3wzbxHom7xh9RZVRyQJPzCZRhu12Izcqh9y5/D3KF250KHToBtx SbE2G6PLKne5IZ14fzdzmVFHj7q/yC2i6ChgBaEB0ROnvOn1g2MMGv75KC56Zfd1 0CuT2q+0Lhu7dr8jTUqfYbD+1FSoiI+XzrUYKYCH0XOPtSRMDtaYZxDKBgxrIueO Vc0jS349jEckmXm/4I4EczxwqFjtd9wajq2cGsdq+nTj28uvIZpRTwVSMBivBVSI 3vv/kFdl9DTts7x6f084V3iYVkwwomkfxqSG29qVwvL/Vn9VWHE+8blxMWE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:20 2025 by rpki-client