$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1233a82-d306-4782-9e84-409e483c4522.roa File: b1233a82-d306-4782-9e84-409e483c4522.roa (raw, json) Hash identifier: ixIVSSs6GBV/5G9O63gXJZofRwWJrYxpQioYLHfA5uA= Subject key identifier: 1A:CB:43:8D:C9:94:25:3A:BF:6A:30:25:14:31:59:2E:71:38:86:18 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4DE701C8A10D55F9FCB7F4D6FCF972A9CBDCD207 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1233a82-d306-4782-9e84-409e483c4522.roa Signing time: Tue 28 Jan 2025 00:00:00 +0000 ROA not before: Tue 28 Jan 2025 00:00:00 +0000 ROA not after: Tue 04 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 184.72.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e7:01:c8:a1:0d:55:f9:fc:b7:f4:d6:fc:f9:72:a9:cb:dc:d2:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 28 00:00:00 2025 GMT Not After : Mar 4 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:89:79:d0:5c:1a:09:ff:0e:22:24:2f:bc:54: fc:57:de:36:3a:d9:64:1e:4c:2d:6a:8e:72:2f:71: 19:66:31:91:aa:81:d6:f5:bc:73:d7:29:f4:d6:b0: f9:6f:7d:e5:80:c3:85:1f:34:4f:23:da:da:05:1b: ef:cc:6f:12:7d:18:f7:68:6f:29:78:dc:49:81:8f: 1e:0d:0e:ee:67:6d:70:24:f1:18:a2:86:d5:41:9b: 56:6c:50:12:46:fd:cc:fc:e3:2f:5a:db:dc:51:87: 35:50:51:21:7d:fb:4f:7a:b7:ce:4b:18:80:d0:4f: be:98:bc:91:b8:6a:98:ee:12:9a:2e:b8:ab:33:db: 54:76:cb:8c:51:d3:08:8d:99:d6:ae:ae:0e:a0:4d: 44:24:5e:b8:61:b3:fb:f4:f5:2e:50:42:e3:bd:73: f9:ca:65:8b:fe:67:4e:57:f9:7b:2f:1a:49:15:e9: ef:fa:d1:79:4d:a3:0d:0f:cf:80:d9:e1:75:49:51: 9f:39:15:ed:fc:8e:22:16:eb:ea:c6:69:4b:86:f9: 99:82:f5:a4:11:2a:1e:1a:95:5d:4e:a6:6f:27:08: d1:4f:1a:0d:8e:18:0e:0e:e4:1d:20:cc:2c:37:bc: cc:51:b4:0a:5c:94:13:40:3c:f3:53:17:5a:03:57: da:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CB:43:8D:C9:94:25:3A:BF:6A:30:25:14:31:59:2E:71:38:86:18 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1233a82-d306-4782-9e84-409e483c4522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.128.0/18 Signature Algorithm: sha256WithRSAEncryption 2c:2b:96:45:94:65:dd:81:81:9f:49:73:d0:54:6b:31:6c:ed: df:4e:00:50:b5:d1:23:b6:45:ca:b8:81:0e:7f:0c:27:ed:38: 13:a7:3a:88:b7:e5:21:c2:71:9c:d0:18:22:1f:ad:de:33:99: d4:1d:82:99:b9:32:41:71:65:12:3c:e6:bf:9a:8c:b9:82:b0: 0b:6a:f0:71:e8:76:6f:11:bb:59:6d:2b:5a:e7:2e:0e:e3:8b: cd:26:61:f3:5e:36:d4:43:c9:a9:d9:cf:0c:68:2d:75:e6:f8: 2f:c4:df:8e:79:52:38:a2:37:cc:29:8a:61:3e:25:ea:89:11: 4e:08:89:cb:5e:98:d1:86:d9:2c:83:c0:11:a5:5c:f1:ce:81: f1:93:b2:18:31:17:71:33:e8:f7:00:39:47:41:63:85:ff:38: 41:82:d1:72:c5:a2:d7:64:1b:f3:76:1b:72:c6:d5:05:fa:a2: d5:df:a9:e1:37:59:fd:5f:79:e3:9b:29:74:02:2e:73:71:ea: bf:d5:dd:e6:62:98:ef:ad:62:85:95:04:aa:9d:27:54:72:b5: 70:0a:8e:51:e3:56:6d:b5:70:d7:15:70:21:25:15:53:08:7a: 2f:66:5d:88:56:1c:62:76:5b:69:b9:f0:2b:e1:96:03:55:77: 80:78:ae:c9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTecByKENVfn8t/TW/Plyqcvc0gcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI4MDAwMDAwWhcNMjUwMzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTFlZjViMTFhMTgyYzZhNWU3Zjg3Yjg0ZmY2ZWRmYWRm NTJlZDA1M2VhYzc4YmVkMTcxMWU1Yjc2NjMwZmFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyiXnQXBoJ/w4iJC+8VPxX3jY62WQeTC1qjnIvcRlmMZGq gdb1vHPXKfTWsPlvfeWAw4UfNE8j2toFG+/MbxJ9GPdobyl43EmBjx4NDu5nbXAk 8RiihtVBm1ZsUBJG/cz84y9a29xRhzVQUSF9+096t85LGIDQT76YvJG4apjuEpou uKsz21R2y4xR0wiNmdaurg6gTUQkXrhhs/v09S5QQuO9c/nKZYv+Z05X+XsvGkkV 6e/60XlNow0Pz4DZ4XVJUZ85Fe38jiIW6+rGaUuG+ZmC9aQRKh4alV1Opm8nCNFP Gg2OGA4O5B0gzCw3vMxRtApclBNAPPNTF1oDV9q/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGstDjcmUJTq/ajAlFDFZLnE4hhgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IxMjMzYTgyLWQzMDYtNDc4Mi05ZTg0LTQwOWU0ODNjNDUyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAa4SIAwDQYJKoZIhvcNAQELBQADggEBACwrlkWUZd2BgZ9Jc9BUazFs7d9O AFC10SO2Rcq4gQ5/DCftOBOnOoi35SHCcZzQGCIfrd4zmdQdgpm5MkFxZRI85r+a jLmCsAtq8HHodm8Ru1ltK1rnLg7ji80mYfNeNtRDyanZzwxoLXXm+C/E3455Ujii N8wpimE+JeqJEU4IictemNGG2SyDwBGlXPHOgfGTshgxF3Ez6PcAOUdBY4X/OEGC 0XLFotdkG/N2G3LG1QX6otXfqeE3Wf1feeObKXQCLnNx6r/V3eZimO+tYoWVBKqd J1RytXAKjlHjVm21cNcVcCElFVMIei9mXYhWHGJ2W2m58CvhlgNVd4B4rsk= -----END CERTIFICATE-----Generated at Wed Feb 5 10:00:19 2025 by rpki-client