$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c13c7e5c-c5bb-45ea-824f-6e1264d4c8c7.roa File: c13c7e5c-c5bb-45ea-824f-6e1264d4c8c7.roa (raw, json) Hash identifier: uCinfgqtJqgVUynO10OnsBSSsZlKktgXPa1WHCaxC68= Subject key identifier: 00:18:F1:11:8C:4B:74:DD:2F:10:DE:26:D0:26:E7:B4:43:88:AC:BD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 50060C5CCC9865ACB780EAC3DBB9B2CE61E1CD37 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c13c7e5c-c5bb-45ea-824f-6e1264d4c8c7.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.21.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:06:0c:5c:cc:98:65:ac:b7:80:ea:c3:db:b9:b2:ce:61:e1:cd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:85:86:f9:22:6c:ae:43:71:8f:69:4b:b1:8a: 55:43:b5:19:ed:11:d7:57:b9:3d:ae:5a:7c:c8:64: e4:6a:02:83:06:c8:00:d8:be:04:01:90:c0:3b:fa: c3:1b:3b:1e:56:6f:2e:41:c7:11:90:af:eb:c3:46: 4d:a5:2c:97:9b:d6:81:a3:3b:c3:ed:ff:b8:0f:5e: a8:6f:e7:2a:86:60:46:38:c1:96:10:dc:1b:b1:04: 9f:cd:ed:41:65:74:6c:2c:b4:90:be:c6:c3:73:62: f7:13:5c:1e:46:a2:97:52:e9:bf:f6:d7:d1:50:2e: 24:f5:1a:5c:f4:8f:75:06:9a:a8:a6:24:45:02:36: f6:96:4f:ee:ac:55:53:44:9a:a4:35:71:6c:1b:8f: 82:fe:50:6a:0d:29:15:50:13:17:cd:88:2f:2f:15: 13:ba:2d:6c:0b:5a:40:24:08:2f:7c:0a:e8:81:bb: b2:ba:7e:be:90:37:74:9c:d8:b8:c6:84:04:f8:fd: 12:71:08:e5:c1:e3:e7:52:2f:b7:93:fa:9c:b7:2b: f1:aa:1e:4b:93:9e:eb:6c:e7:f6:26:b9:1a:34:4b: e1:36:c0:d4:05:17:ad:75:40:8f:0c:f1:ce:a8:78: 9c:7a:c1:8c:d1:59:f1:24:01:ca:99:e3:48:b5:6f: d6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:18:F1:11:8C:4B:74:DD:2F:10:DE:26:D0:26:E7:B4:43:88:AC:BD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c13c7e5c-c5bb-45ea-824f-6e1264d4c8c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.88.0/22 Signature Algorithm: sha256WithRSAEncryption c9:c6:52:3f:5b:c2:99:0d:cb:ce:72:a5:d9:23:27:c1:01:39: 59:5b:09:50:c9:4c:bd:f6:1a:36:39:58:a6:9f:08:b0:32:0a: 66:b8:c7:df:42:c7:4e:ef:7d:79:db:1e:67:d5:a4:dd:a0:56: 0a:33:82:99:7b:2e:70:af:12:1a:35:46:26:43:57:12:13:f3: ca:3d:28:32:ac:c4:f9:bc:e1:f3:fa:f3:e8:e1:27:a9:92:38: a2:ce:d4:fb:e0:07:15:c6:7b:d3:0e:e3:ec:6a:c0:5e:35:82: 76:c6:4d:c4:fa:47:62:fe:f1:dd:c6:15:8c:11:94:0b:8d:65: 04:fc:f7:44:b9:0b:f9:a7:d2:2e:33:0d:2b:61:30:c2:e5:9f: 68:67:ff:04:70:ab:54:c1:d2:c1:e1:07:4c:d3:86:c5:b9:57: 17:a2:8d:58:e7:ae:70:1c:fb:13:ae:12:c4:6b:41:78:dc:95: d7:1d:7c:5b:29:46:99:f5:f8:62:1f:df:5f:3a:5f:60:48:0a: 96:44:db:62:6f:67:af:27:0e:89:01:dd:b9:de:1e:ff:b3:34: 6a:83:cb:20:b4:a7:70:75:23:0d:f8:1a:88:d9:ae:bb:09:2e: bb:b0:26:58:93:7c:d4:16:d8:2d:a1:27:7f:1e:93:7f:8e:88: 94:cb:ae:a0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUAYMXMyYZay3gOrD27myzmHhzTcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjI1M2Y5YmE1YjA2N2EzM2VkYTAxMzQ5NjgwOWE0NGI5 OGViOTM3ZGJmMDhkYzk3OTg4OTFiMjljMjU5MDU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4hYb5ImyuQ3GPaUuxilVDtRntEddXuT2uWnzIZORqAoMG yADYvgQBkMA7+sMbOx5Wby5BxxGQr+vDRk2lLJeb1oGjO8Pt/7gPXqhv5yqGYEY4 wZYQ3BuxBJ/N7UFldGwstJC+xsNzYvcTXB5GopdS6b/219FQLiT1Glz0j3UGmqim JEUCNvaWT+6sVVNEmqQ1cWwbj4L+UGoNKRVQExfNiC8vFRO6LWwLWkAkCC98CuiB u7K6fr6QN3Sc2LjGhAT4/RJxCOXB4+dSL7eT+py3K/GqHkuTnuts5/YmuRo0S+E2 wNQFF611QI8M8c6oeJx6wYzRWfEkAcqZ40i1b9YfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUABjxEYxLdN0vEN4m0CbntEOIrL0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MxM2M3ZTVjLWM1YmItNDVlYS04MjRmLTZlMTI2NGQ0YzhjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJrFVgwDQYJKoZIhvcNAQELBQADggEBAMnGUj9bwpkNy85ypdkjJ8EBOVlb CVDJTL32GjY5WKafCLAyCma4x99Cx07vfXnbHmfVpN2gVgozgpl7LnCvEho1RiZD VxIT88o9KDKsxPm84fP68+jhJ6mSOKLO1PvgBxXGe9MO4+xqwF41gnbGTcT6R2L+ 8d3GFYwRlAuNZQT890S5C/mn0i4zDSthMMLln2hn/wRwq1TB0sHhB0zThsW5Vxei jVjnrnAc+xOuEsRrQXjcldcdfFspRpn1+GIf3186X2BICpZE22JvZ68nDokB3bne Hv+zNGqDyyC0p3B1Iw34GojZrrsJLruwJliTfNQW2C2hJ38ek3+OiJTLrqA= -----END CERTIFICATE-----Generated at Wed Feb 5 09:55:37 2025 by rpki-client