$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba694444-566a-4643-ab64-491712a1b999.roa File: ba694444-566a-4643-ab64-491712a1b999.roa (raw, json) Hash identifier: rMQqt1Djeg7yRmQ0///ypkBRo2Mxdcavs0DJsMiRHBs= Subject key identifier: DD:4F:A7:CA:9D:49:2E:EB:BF:AF:EA:06:26:7B:E9:3B:1C:E9:6A:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5FE68965A2CE5CF219C683883E670208163C3901 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba694444-566a-4643-ab64-491712a1b999.roa Signing time: Fri 07 Feb 2025 00:00:00 +0000 ROA not before: Fri 07 Feb 2025 00:00:00 +0000 ROA not after: Fri 14 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.39.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e6:89:65:a2:ce:5c:f2:19:c6:83:88:3e:67:02:08:16:3c:39:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 7 00:00:00 2025 GMT Not After : Mar 14 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:34:0c:45:cd:c8:b6:22:4d:01:23:09:25:b1: 55:cb:19:dd:54:8e:c5:8c:bd:f0:09:22:63:0a:58: 4a:2d:76:29:91:dd:2a:d8:44:0f:d4:4a:4b:3f:22: 5c:31:18:c5:2c:ae:63:f3:11:fb:da:6b:7e:f2:bc: 0c:ff:4a:9a:5a:6d:8a:62:af:b8:8b:23:c9:d7:a5: 2d:b4:b4:ff:1a:1e:79:9f:21:d8:fd:22:2f:64:25: 31:b0:be:ee:85:9b:56:4c:52:03:6b:a7:ca:38:1a: f9:45:6f:96:c3:8e:da:82:42:8b:e7:4a:8b:5a:0c: cd:12:e2:5b:c5:b5:74:03:8b:ca:53:42:f3:c3:d7: c2:8c:02:ba:95:bf:a5:83:5a:38:32:26:4f:11:dd: 92:47:a5:e0:9a:22:7c:1f:e9:cd:49:6a:43:0c:7c: c2:d0:8d:dd:ce:e8:30:57:4c:f6:76:56:e2:50:95: 42:4d:ff:41:50:32:a6:2c:1a:60:f5:30:c8:f5:89: 9d:5e:2f:62:6a:d6:39:ff:48:d5:c9:a3:33:4e:6e: 6e:81:fd:5f:47:ad:be:c4:9e:f7:3b:23:4a:b4:d2: f3:59:3f:5e:14:c2:7c:71:5e:6f:32:99:50:ba:9c: 2c:3a:f2:3c:27:d9:9b:25:f4:9f:02:1d:8b:18:35: f9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4F:A7:CA:9D:49:2E:EB:BF:AF:EA:06:26:7B:E9:3B:1C:E9:6A:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba694444-566a-4643-ab64-491712a1b999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.39.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0c:04:13:af:ca:f1:63:1d:c7:93:e0:6d:34:ca:7b:95:c0:69: c4:9a:1e:dd:21:f2:31:df:50:b7:ae:fd:0d:44:1f:fd:18:0b: a5:cf:e6:77:ee:e8:27:63:27:51:87:2c:51:d4:db:ae:71:27: 3b:2c:db:d9:35:e9:1d:9e:af:26:9a:ed:6c:4a:a8:a9:b3:39: cc:74:06:05:65:5f:d6:f8:ed:fd:31:02:e4:75:16:d1:31:94: 1c:31:3a:13:a2:5c:9a:38:97:12:d1:4c:c4:69:21:22:61:dd: f0:43:3d:54:0a:34:57:f9:c6:b3:df:24:3c:ed:33:96:4b:65: d6:cd:e7:b7:a1:59:08:64:94:ef:75:7f:42:5e:c8:d0:f6:78: e3:1a:67:d9:7f:5f:b7:8d:9f:ab:b5:f0:e4:a2:dd:21:13:3d: 87:e7:b9:25:84:82:b9:85:c3:61:cf:37:db:1b:18:d0:5f:f8: 43:8e:a1:ec:31:4d:84:f8:49:67:59:37:24:45:83:17:63:1e: e7:4f:cf:b3:70:bc:e7:3c:7d:32:e1:ef:d3:35:1f:d0:f2:51: 75:bc:45:7c:f3:1c:f8:23:a6:0b:f4:25:f5:1b:16:ce:c8:e4: ae:98:82:a8:23:58:d0:5c:25:19:34:83:a5:01:c0:19:d4:15: d1:8c:a7:45 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUX+aJZaLOXPIZxoOIPmcCCBY8OQEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA3MDAwMDAwWhcNMjUwMzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTI0MmY2NzA4MGJkOWIyZjZmZDgyNjdiZTk0MjFkZTUx MDI3ZGNlNjQzOTJkN2U0NzdhZmI2YWU1MWIxZTY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhNAxFzci2Ik0BIwklsVXLGd1UjsWMvfAJImMKWEotdimR 3SrYRA/USks/IlwxGMUsrmPzEfvaa37yvAz/SppabYpir7iLI8nXpS20tP8aHnmf Idj9Ii9kJTGwvu6Fm1ZMUgNrp8o4GvlFb5bDjtqCQovnSotaDM0S4lvFtXQDi8pT QvPD18KMArqVv6WDWjgyJk8R3ZJHpeCaInwf6c1JakMMfMLQjd3O6DBXTPZ2VuJQ lUJN/0FQMqYsGmD1MMj1iZ1eL2Jq1jn/SNXJozNObm6B/V9Hrb7Envc7I0q00vNZ P14UwnxxXm8ymVC6nCw68jwn2Zsl9J8CHYsYNfkjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU3U+nyp1JLuu/r+oGJnvpOxzpalgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhNjk0NDQ0LTU2NmEtNDY0My1hYjY0LTQ5MTcxMmExYjk5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAoJzANBgkqhkiG9w0BAQsFAAOCAQEADAQTr8rxYx3Hk+BtNMp7lcBpxJoe 3SHyMd9Qt679DUQf/RgLpc/md+7oJ2MnUYcsUdTbrnEnOyzb2TXpHZ6vJprtbEqo qbM5zHQGBWVf1vjt/TEC5HUW0TGUHDE6E6JcmjiXEtFMxGkhImHd8EM9VAo0V/nG s98kPO0zlktl1s3nt6FZCGSU73V/Ql7I0PZ44xpn2X9ft42fq7Xw5KLdIRM9h+e5 JYSCuYXDYc832xsY0F/4Q46h7DFNhPhJZ1k3JEWDF2Me50/Ps3C85zx9MuHv0zUf 0PJRdbxFfPMc+COmC/Ql9RsWzsjkrpiCqCNY0FwlGTSDpQHAGdQV0YynRQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:17 2025 by rpki-client