$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca57515a-3058-4353-ab16-a7d94657f8f8.roa File: ca57515a-3058-4353-ab16-a7d94657f8f8.roa (raw, json) Hash identifier: kbD8vKtIq03UnG8xBGLxhQEfjaGoxRlwvag3rHaTwwU= Subject key identifier: CC:FF:9B:B1:FA:F1:53:99:F1:4F:5E:3D:A6:D9:A8:4E:D9:D7:76:04 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65C910D085DD524A771B131FFFAB80C28903C777 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca57515a-3058-4353-ab16-a7d94657f8f8.roa Signing time: Fri 07 Feb 2025 00:00:00 +0000 ROA not before: Fri 07 Feb 2025 00:00:00 +0000 ROA not after: Fri 14 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.252.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c9:10:d0:85:dd:52:4a:77:1b:13:1f:ff:ab:80:c2:89:03:c7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 7 00:00:00 2025 GMT Not After : Mar 14 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:55:bc:94:85:38:bd:d5:65:18:6b:4b:06:3a: fa:5d:29:16:7d:67:5d:80:0e:ac:b7:f3:d0:9f:e1: f1:46:2d:df:1e:1e:4c:9c:82:5c:16:29:62:72:6a: 69:9a:c5:b6:82:51:8b:85:29:30:d5:bd:26:26:11: 34:08:46:a6:dd:1c:cf:e4:40:59:95:a7:3e:fd:44: 65:71:6f:eb:b6:0e:11:f7:e2:51:a3:03:1a:13:23: 05:68:3d:f6:c1:5e:13:b3:a0:c1:95:f5:60:4c:e8: 11:04:61:5c:54:89:f7:53:17:7f:82:36:96:51:38: 4d:bb:7f:05:dd:6d:da:cc:2b:d0:5d:99:62:0a:db: 63:cb:1f:13:aa:7b:1f:61:a3:7a:4d:fb:bf:48:58: 62:63:f6:03:9d:7c:95:80:92:15:2e:a1:c3:0b:1a: f8:02:97:67:2f:ee:0a:c2:2d:d2:b3:ae:fd:79:f7: 87:18:15:0d:1f:0b:5b:e8:87:d8:0b:32:a9:61:f6: 16:b1:19:73:90:af:b0:70:b8:b2:81:ba:c2:11:a5: d2:4c:7d:bb:c2:cb:5d:16:bf:86:8c:0f:3a:2c:9e: 3f:f6:96:f0:fd:dc:d4:e3:8f:67:d7:e2:e3:87:4a: cd:85:d5:4f:a0:53:94:d3:36:be:91:f4:a9:ba:27: af:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FF:9B:B1:FA:F1:53:99:F1:4F:5E:3D:A6:D9:A8:4E:D9:D7:76:04 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca57515a-3058-4353-ab16-a7d94657f8f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.252.0.0/16 Signature Algorithm: sha256WithRSAEncryption 78:c4:62:bb:0d:db:9b:dc:1e:13:79:88:8b:99:b6:c0:70:0d: 56:9d:a5:87:5d:56:b0:f2:e9:45:17:c7:9c:2b:6e:6e:1f:7e: 5a:f2:90:9b:7c:44:f1:ad:c6:26:e3:ba:c0:cc:e0:70:ac:7a: 52:62:8e:bc:58:85:17:a4:d7:a3:2e:12:1c:01:8f:ee:ec:93: e8:8c:19:b8:9f:01:9d:c1:18:93:3f:f0:e6:0c:6e:25:27:41: 0e:5f:32:9c:ec:45:04:7a:e8:31:c1:33:c3:22:fe:e6:71:f2: eb:c5:8c:4f:5f:c2:47:7f:67:da:e6:5c:75:77:0d:27:05:a2: 2d:46:98:bf:ba:c7:42:d3:c4:3e:79:0e:b7:c3:cd:fa:a2:8b: cb:f2:5e:8a:3d:49:80:88:5b:7b:f9:25:96:e4:ea:30:4b:23: a0:85:88:a2:db:29:4e:80:e2:59:6f:66:4d:97:57:39:4a:5f: 1a:3a:98:42:c2:2a:a4:54:23:5e:fa:26:6e:51:c0:83:37:eb: c5:12:49:8e:b3:95:2a:86:b5:3e:fd:62:84:a8:0d:a1:33:c6: f4:6f:ac:cf:9c:71:42:bd:68:bb:e3:a0:48:0f:c5:78:88:56: 01:e0:05:e0:88:48:c5:c9:35:10:93:f7:b4:62:4c:1d:c2:2f: 9e:bd:bb:f2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZckQ0IXdUkp3GxMf/6uAwokDx3cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA3MDAwMDAwWhcNMjUwMzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZGNmZGMxODJlNDlkZGI3YThkMWJkZWJmNTZhOTFmZWVj NmVlOTQ5ZDk5YTRlMWEwMDhiMTU4MWIwYmM0YmM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIVbyUhTi91WUYa0sGOvpdKRZ9Z12ADqy389Cf4fFGLd8e HkycglwWKWJyammaxbaCUYuFKTDVvSYmETQIRqbdHM/kQFmVpz79RGVxb+u2DhH3 4lGjAxoTIwVoPfbBXhOzoMGV9WBM6BEEYVxUifdTF3+CNpZROE27fwXdbdrMK9Bd mWIK22PLHxOqex9ho3pN+79IWGJj9gOdfJWAkhUuocMLGvgCl2cv7grCLdKzrv15 94cYFQ0fC1voh9gLMqlh9haxGXOQr7BwuLKBusIRpdJMfbvCy10Wv4aMDzosnj/2 lvD93NTjj2fX4uOHSs2F1U+gU5TTNr6R9Km6J6+HAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUzP+bsfrxU5nxT149ptmoTtnXdgQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NhNTc1MTVhLTMwNTgtNDM1My1hYjE2LWE3ZDk0NjU3ZjhmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAo/DANBgkqhkiG9w0BAQsFAAOCAQEAeMRiuw3bm9weE3mIi5m2wHANVp2l h11WsPLpRRfHnCtubh9+WvKQm3xE8a3GJuO6wMzgcKx6UmKOvFiFF6TXoy4SHAGP 7uyT6IwZuJ8BncEYkz/w5gxuJSdBDl8ynOxFBHroMcEzwyL+5nHy68WMT1/CR39n 2uZcdXcNJwWiLUaYv7rHQtPEPnkOt8PN+qKLy/Jeij1JgIhbe/klluTqMEsjoIWI otspToDiWW9mTZdXOUpfGjqYQsIqpFQjXvomblHAgzfrxRJJjrOVKoa1Pv1ihKgN oTPG9G+sz5xxQr1ou+OgSA/FeIhWAeAF4IhIxck1EJP3tGJMHcIvnr278g== -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:41 2025 by rpki-client