$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7247667-78f2-433e-a9d4-4a2073e18b85.roa File: b7247667-78f2-433e-a9d4-4a2073e18b85.roa (raw, json) Hash identifier: YAP5AAvK+nc6zUBhnLDpdjtDeQ2P+H56/29orzXKptU= Subject key identifier: 26:E4:D3:10:82:C0:57:F6:E7:77:0B:91:DD:BE:E7:FD:1F:B3:98:25 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1A457B48EC4E89ACD448A652406A22E4002065EA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7247667-78f2-433e-a9d4-4a2073e18b85.roa Signing time: Tue 21 Jan 2025 00:00:00 +0000 ROA not before: Tue 21 Jan 2025 00:00:00 +0000 ROA not after: Tue 25 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.82.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:45:7b:48:ec:4e:89:ac:d4:48:a6:52:40:6a:22:e4:00:20:65:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 21 00:00:00 2025 GMT Not After : Feb 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:2f:92:ec:e3:9d:ab:7e:56:a3:85:2c:69: a7:fa:c1:b7:bd:51:4f:05:84:45:bb:b0:89:bf:d0: 1a:29:55:63:f7:0a:3a:8d:0a:e1:ee:7b:9f:35:0e: 40:e0:d6:c5:c0:d6:02:13:a3:0b:dc:45:7b:ed:6e: 6d:c4:b8:f3:01:c7:10:a0:c3:c9:4b:4d:96:53:9e: ce:95:2c:94:21:3d:05:07:3c:b7:e7:52:c3:e7:31: 80:78:80:18:1f:1c:08:df:cd:96:06:14:42:ce:c2: c9:2b:87:c0:7a:50:59:b3:f8:87:38:35:82:90:33: 73:c9:47:17:15:c3:74:b4:e7:cf:99:0e:88:62:d9: 35:d2:e2:73:d8:76:1e:5c:0b:a9:8f:bf:15:a3:c7: f9:e9:28:0f:a9:ab:01:32:20:37:97:9f:79:74:95: 90:cb:c3:dc:2b:e6:0b:fc:a2:16:3b:bc:a8:92:cf: 77:d2:4a:1d:1f:e3:11:1d:1a:42:75:0a:69:c7:a2: 1e:7b:e8:4c:09:c9:44:8a:89:5b:08:ff:cd:72:ae: 8b:bd:cd:aa:ce:38:55:57:25:4e:92:eb:07:05:b1: 35:04:22:43:68:96:88:f6:dd:8f:ff:77:cc:28:ed: 2b:4d:d0:c2:8b:a3:b0:4b:47:2d:6f:6f:b5:20:a8: 8e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E4:D3:10:82:C0:57:F6:E7:77:0B:91:DD:BE:E7:FD:1F:B3:98:25 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7247667-78f2-433e-a9d4-4a2073e18b85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.82.165.0/24 Signature Algorithm: sha256WithRSAEncryption cc:ac:c1:da:3e:7b:b3:d3:bb:b8:38:b7:21:9a:cf:de:23:ed: a3:05:51:c6:3d:e8:02:16:6c:39:69:c8:61:f6:71:ba:38:dd: c3:c0:a9:ed:c1:87:d8:05:f9:82:96:eb:1e:bd:f8:6e:0b:3b: db:ec:f3:f4:16:68:e7:6f:6b:0f:84:a1:c8:5a:0f:db:a4:83: ee:f5:42:94:f5:cd:b3:08:a6:88:34:fa:1f:39:aa:bc:c6:31: 8e:f2:d6:36:33:db:57:eb:eb:fb:f5:a0:fc:a2:6b:ec:d5:40: 30:18:09:29:38:c8:59:da:c9:da:79:59:fc:87:c2:b3:1c:38: 50:58:50:dc:04:70:d6:21:05:93:74:5f:a1:32:db:21:51:ab: 16:d9:72:8f:99:ec:a2:48:45:ad:c6:f3:3d:e2:87:40:16:94: 94:f8:56:41:43:9b:8c:20:fd:68:7b:fe:0b:85:f0:e9:1c:36: 8c:8a:7d:16:e2:99:c7:01:26:90:fc:c3:10:fb:24:9d:26:fa: 6f:51:9a:0a:f0:ec:d2:39:f1:64:cb:9c:ef:a3:7e:f0:86:81: d0:c1:6e:df:65:dd:6f:c7:e6:70:bf:a6:5f:a2:de:e2:ff:3a: b7:6f:31:9a:79:b5:f2:2b:49:01:90:f5:d6:8e:49:a5:1e:99: c2:ce:de:88 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGkV7SOxOiazUSKZSQGoi5AAgZeowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIxMDAwMDAwWhcNMjUwMjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTEyMzNhOWE0MDM4ZDQ0NzE3ODZkN2NhOTNhNTkxZjhj ZDI1NjczMGNiZTY4ODg5ZTI0ZjQ4ZTgyMzViZWQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3iy+S7OOdq35Wo4Usaaf6wbe9UU8FhEW7sIm/0BopVWP3 CjqNCuHue581DkDg1sXA1gITowvcRXvtbm3EuPMBxxCgw8lLTZZTns6VLJQhPQUH PLfnUsPnMYB4gBgfHAjfzZYGFELOwskrh8B6UFmz+Ic4NYKQM3PJRxcVw3S058+Z Dohi2TXS4nPYdh5cC6mPvxWjx/npKA+pqwEyIDeXn3l0lZDLw9wr5gv8ohY7vKiS z3fSSh0f4xEdGkJ1CmnHoh576EwJyUSKiVsI/81yrou9zarOOFVXJU6S6wcFsTUE IkNoloj23Y//d8wo7StN0MKLo7BLRy1vb7UgqI5PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJuTTEILAV/bndwuR3b7n/R+zmCUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I3MjQ3NjY3LTc4ZjItNDMzZS1hOWQ0LTRhMjA3M2UxOGI4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjUqUwDQYJKoZIhvcNAQELBQADggEBAMyswdo+e7PTu7g4tyGaz94j7aMF UcY96AIWbDlpyGH2cbo43cPAqe3Bh9gF+YKW6x69+G4LO9vs8/QWaOdvaw+Eocha D9ukg+71QpT1zbMIpog0+h85qrzGMY7y1jYz21fr6/v1oPyia+zVQDAYCSk4yFna ydp5WfyHwrMcOFBYUNwEcNYhBZN0X6Ey2yFRqxbZco+Z7KJIRa3G8z3ih0AWlJT4 VkFDm4wg/Wh7/guF8OkcNoyKfRbimccBJpD8wxD7JJ0m+m9Rmgrw7NI58WTLnO+j fvCGgdDBbt9l3W/H5nC/pl+i3uL/OrdvMZp5tfIrSQGQ9daOSaUemcLO3og= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:12 2025 by rpki-client