$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b34caa71-c6ab-4e9b-8369-3dcaf916702b.roa File: b34caa71-c6ab-4e9b-8369-3dcaf916702b.roa (raw, json) Hash identifier: JuwKbmY8o0aQQmIGcsVFf7DCez+2cyDdfhwmHhXeyeQ= Subject key identifier: 31:3B:B3:89:80:5F:24:F5:93:26:4C:0C:55:C4:CE:6F:9C:E4:B2:73 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0736916DE00097027BEFB1BF7CD6C16BE4044104 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b34caa71-c6ab-4e9b-8369-3dcaf916702b.roa Signing time: Fri 07 Feb 2025 00:00:00 +0000 ROA not before: Fri 07 Feb 2025 00:00:00 +0000 ROA not after: Fri 14 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.26.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:36:91:6d:e0:00:97:02:7b:ef:b1:bf:7c:d6:c1:6b:e4:04:41:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 7 00:00:00 2025 GMT Not After : Mar 14 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2d:a4:c7:76:70:34:ca:8a:28:01:09:a6:84: ba:1a:3f:46:fb:ec:6b:d0:bb:69:99:d7:9c:f2:9c: c5:2c:2d:f7:ad:af:8b:6d:0b:06:01:88:9b:80:a4: c0:0b:90:4a:5a:d2:e3:9e:9f:a3:5b:ad:f5:4b:f9: bf:6b:df:57:85:6d:28:58:6d:f6:33:57:4a:19:c7: a2:4f:da:7d:37:96:0c:e4:d2:b6:ad:64:d8:59:19: fb:1e:04:72:d7:57:2e:21:45:01:e5:e7:c2:8f:38: 35:99:cb:4e:ca:c6:d3:76:cb:a8:76:b0:52:56:c0: f4:da:c3:0b:71:a5:31:69:3b:90:9d:be:dc:d4:12: b4:c2:f2:a1:9c:b4:16:cb:cd:8d:92:c7:7f:4c:a7: e4:2c:da:46:c2:e7:ec:02:12:e9:f3:7c:1b:b6:27: 2f:82:53:da:09:86:a3:46:d9:d5:28:0b:e8:4b:e0: 88:3e:fa:ff:c2:ff:59:56:db:32:43:cb:1b:b8:0c: 14:c7:1e:42:a7:2d:0e:25:cb:f8:a4:de:b8:5f:dc: 93:c6:c1:41:14:05:47:88:a1:0f:6e:29:b9:51:7d: 79:04:58:9b:7a:67:9a:6a:8b:1d:7c:95:f5:74:f6: 85:7f:60:66:3d:5a:b7:26:f2:e9:18:44:c9:a1:7f: 69:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3B:B3:89:80:5F:24:F5:93:26:4C:0C:55:C4:CE:6F:9C:E4:B2:73 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b34caa71-c6ab-4e9b-8369-3dcaf916702b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.26.166.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:d8:57:2a:81:43:09:c8:46:fc:e0:f0:00:aa:19:dc:24:b1: bf:25:f0:11:96:33:20:8f:2e:d6:f6:e9:4a:c1:c6:4b:d1:cb: f9:54:9c:fa:10:fe:ca:80:2b:23:df:02:2f:ed:13:ff:84:b4: 3a:55:77:9a:cb:36:51:63:ab:93:37:8e:56:7d:91:c5:6d:c2: 17:77:53:6f:69:da:8e:be:d3:d4:75:5b:be:4d:4e:35:75:60: 8f:77:53:71:8a:32:96:d9:2a:74:b2:cd:7a:9b:ba:ae:39:ac: d2:c1:ae:4f:b7:a3:8e:66:99:8e:c9:45:44:8e:09:e4:5e:79: f8:c6:48:4e:f4:cb:e9:fa:70:dd:09:15:d7:33:e6:a2:2c:20: fd:ce:11:bb:df:76:4b:70:9e:d6:08:53:16:e1:4a:c9:63:55: 1a:a2:c3:25:c3:db:e2:cc:69:1e:3f:34:2b:31:e0:99:af:6d: 24:ee:8f:e1:fc:13:04:04:0e:c9:12:36:89:44:c1:87:bf:fe: 2f:78:76:3b:9d:1d:4f:39:74:11:04:1f:0d:54:4a:0e:98:43: e9:04:ba:aa:3c:3a:47:16:de:e2:cf:46:a6:c4:3d:eb:38:e3: ba:d7:22:ea:df:df:eb:ed:9a:66:9c:60:a4:5f:32:fe:e3:5b: 05:03:2a:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBzaRbeAAlwJ777G/fNbBa+QEQQQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA3MDAwMDAwWhcNMjUwMzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNDAzYzljOTE1ZmFkNWVkNGUxYzIyZmNiYzMzNDUzMGJl MzIyYzJiNGYyY2MxYzZkNjgyZTliZDJhMjdjMTY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNLaTHdnA0yoooAQmmhLoaP0b77GvQu2mZ15zynMUsLfet r4ttCwYBiJuApMALkEpa0uOen6NbrfVL+b9r31eFbShYbfYzV0oZx6JP2n03lgzk 0ratZNhZGfseBHLXVy4hRQHl58KPODWZy07KxtN2y6h2sFJWwPTawwtxpTFpO5Cd vtzUErTC8qGctBbLzY2Sx39Mp+Qs2kbC5+wCEunzfBu2Jy+CU9oJhqNG2dUoC+hL 4Ig++v/C/1lW2zJDyxu4DBTHHkKnLQ4ly/ik3rhf3JPGwUEUBUeIoQ9uKblRfXkE WJt6Z5pqix18lfV09oV/YGY9Wrcm8ukYRMmhf2nBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMTuziYBfJPWTJkwMVcTOb5zksnMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzNGNhYTcxLWM2YWItNGU5Yi04MzY5LTNkY2FmOTE2NzAyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2GqYwDQYJKoZIhvcNAQELBQADggEBAI/YVyqBQwnIRvzg8ACqGdwksb8l 8BGWMyCPLtb26UrBxkvRy/lUnPoQ/sqAKyPfAi/tE/+EtDpVd5rLNlFjq5M3jlZ9 kcVtwhd3U29p2o6+09R1W75NTjV1YI93U3GKMpbZKnSyzXqbuq45rNLBrk+3o45m mY7JRUSOCeReefjGSE70y+n6cN0JFdcz5qIsIP3OEbvfdktwntYIUxbhSsljVRqi wyXD2+LMaR4/NCsx4JmvbSTuj+H8EwQEDskSNolEwYe//i94djudHU85dBEEHw1U Sg6YQ+kEuqo8OkcW3uLPRqbEPes447rXIurf3+vtmmacYKRfMv7jWwUDKhY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:21 2025 by rpki-client