$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc44a6b9-c610-4249-8a29-67ea18637229.roa File: cc44a6b9-c610-4249-8a29-67ea18637229.roa (raw, json) Hash identifier: xL3PM7dhA/ab0KCS7SYAhLMrvrggYgQmOH8fOnULL48= Subject key identifier: 9F:86:7A:11:4F:24:D2:16:0B:F9:EF:C9:3F:00:17:AB:A4:A5:AB:C1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B733DF83D218177F6CB82298799979BAF23A38C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc44a6b9-c610-4249-8a29-67ea18637229.roa Signing time: Tue 21 Jan 2025 00:00:00 +0000 ROA not before: Tue 21 Jan 2025 00:00:00 +0000 ROA not after: Tue 25 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.109.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:73:3d:f8:3d:21:81:77:f6:cb:82:29:87:99:97:9b:af:23:a3:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 21 00:00:00 2025 GMT Not After : Feb 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e2:5c:f0:29:0c:ba:23:c2:7e:fb:81:89:77: a3:c0:b8:1e:65:85:05:58:e2:4e:0f:54:67:5c:56: 31:98:54:60:6a:38:42:33:31:fb:6e:73:4f:96:78: c1:d9:61:5d:e9:06:6d:ed:0b:17:65:31:a7:0d:f8: 74:33:bf:71:e4:34:f3:0c:58:3a:fd:9e:15:c4:a7: 0c:d2:90:90:e7:f0:3d:57:36:76:9b:c9:3a:eb:9e: ae:8d:b5:2f:8a:6e:9d:e4:20:7c:1f:e9:6a:39:6a: cb:cc:8e:79:16:b6:32:df:64:06:3a:9b:6e:cc:2f: 3e:bc:98:ac:4d:50:ba:5e:68:4c:70:16:44:b6:38: 21:fc:f8:12:82:88:31:44:c1:70:02:8e:89:62:75: 33:f4:35:57:f2:61:21:f0:26:05:e5:b8:f3:5f:f0: 6e:46:76:3c:96:02:2c:b8:fe:24:a5:8d:89:86:95: 5a:00:da:c4:2d:fa:1f:db:52:3c:b5:ab:c0:2c:f9: a3:4c:56:19:a3:de:ca:c8:cc:94:b1:f1:63:af:62: e0:35:18:13:be:12:6b:d5:57:00:60:e3:cb:61:7a: 00:11:a9:dc:89:44:ac:21:a3:5f:6a:bc:4b:67:a8: 8d:57:50:15:59:25:a7:1b:bb:b8:f4:ad:01:79:9c: 7a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:86:7A:11:4F:24:D2:16:0B:F9:EF:C9:3F:00:17:AB:A4:A5:AB:C1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc44a6b9-c610-4249-8a29-67ea18637229.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.109.48.0/20 Signature Algorithm: sha256WithRSAEncryption d6:f3:b0:e0:01:79:b7:d3:d4:68:e2:e7:36:6d:ef:9e:46:76: 14:fd:69:21:34:85:14:ce:c5:f1:f1:0b:a0:ec:88:42:40:41: ce:0f:2a:0e:02:4c:2f:4c:8a:2f:ad:35:4e:1c:22:d0:e0:05: d4:75:d7:75:b5:fd:ab:f4:c6:5f:8f:3e:d6:04:4a:9a:c3:7d: 04:37:83:c9:b4:7a:b5:70:fb:c7:6c:8b:fb:ae:83:72:ca:4e: 12:79:18:f1:c5:fe:03:1c:77:47:78:c0:ae:49:34:8b:1a:0d: 4d:8e:26:dd:79:b9:3c:5e:10:79:7f:1b:f8:f3:e1:f4:59:21: 6e:e2:fa:cf:09:fd:cb:e3:4d:51:3e:50:7c:b8:26:c1:43:71: fe:c5:76:51:65:96:7e:85:93:09:72:33:cb:c6:3b:f0:90:7d: d2:b6:48:cb:a2:47:91:a6:07:93:2a:cc:f9:da:dd:b9:1a:08: 11:30:72:05:6d:d4:d5:47:c7:64:cf:5f:b2:9e:f1:b3:bc:f5: 27:1c:3e:21:77:29:01:ef:8d:d9:e3:38:1f:36:25:92:d0:e4: 2a:5b:30:3a:a5:75:98:e3:e0:75:d2:70:b2:90:97:60:3d:43: 46:d1:dc:5d:a6:9e:2a:45:f1:f9:ce:f3:d6:13:a4:75:40:04: f4:15:78:97 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG3M9+D0hgXf2y4Iph5mXm68jo4wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIxMDAwMDAwWhcNMjUwMjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOGNlN2FmMzQzZWY2MDBkNjExOGMxOTM5NzRjMTU1MzI0 OTEzMWI2MGJhMmEyZDkyN2VmZmQ5OTVlNThkNDhmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCN4lzwKQy6I8J++4GJd6PAuB5lhQVY4k4PVGdcVjGYVGBq OEIzMftuc0+WeMHZYV3pBm3tCxdlMacN+HQzv3HkNPMMWDr9nhXEpwzSkJDn8D1X NnabyTrrnq6NtS+Kbp3kIHwf6Wo5asvMjnkWtjLfZAY6m27MLz68mKxNULpeaExw FkS2OCH8+BKCiDFEwXACjolidTP0NVfyYSHwJgXluPNf8G5GdjyWAiy4/iSljYmG lVoA2sQt+h/bUjy1q8As+aNMVhmj3srIzJSx8WOvYuA1GBO+EmvVVwBg48thegAR qdyJRKwho19qvEtnqI1XUBVZJacbu7j0rQF5nHpVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUn4Z6EU8k0hYL+e/JPwAXq6Slq8EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NjNDRhNmI5LWM2MTAtNDI0OS04YTI5LTY3ZWExODYzNzIyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATRbTAwDQYJKoZIhvcNAQELBQADggEBANbzsOABebfT1Gji5zZt755GdhT9 aSE0hRTOxfHxC6DsiEJAQc4PKg4CTC9Mii+tNU4cItDgBdR113W1/av0xl+PPtYE SprDfQQ3g8m0erVw+8dsi/uug3LKThJ5GPHF/gMcd0d4wK5JNIsaDU2OJt15uTxe EHl/G/jz4fRZIW7i+s8J/cvjTVE+UHy4JsFDcf7FdlFlln6FkwlyM8vGO/CQfdK2 SMuiR5GmB5MqzPna3bkaCBEwcgVt1NVHx2TPX7Ke8bO89SccPiF3KQHvjdnjOB82 JZLQ5CpbMDqldZjj4HXScLKQl2A9Q0bR3F2mnipF8fnO89YTpHVABPQVeJc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:02 2025 by rpki-client