$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d143d47e-4fb9-4aeb-b972-e03062ee3734.roa File: d143d47e-4fb9-4aeb-b972-e03062ee3734.roa (raw, json) Hash identifier: FnvvlpB+xWTaESYNfEkCFwXOYfGrR/GVQWcof816ttY= Subject key identifier: 33:B7:5F:1D:50:DC:19:E5:7B:48:48:0E:45:D4:40:58:98:50:3F:59 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 180ED63CDD67453932EE689C0FF0BF12B65D2F1B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d143d47e-4fb9-4aeb-b972-e03062ee3734.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 44.223.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:0e:d6:3c:dd:67:45:39:32:ee:68:9c:0f:f0:bf:12:b6:5d:2f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:ac:30:cb:09:d3:2c:e4:ff:a1:5b:62:f9: 88:5b:e0:91:ae:04:57:55:9e:08:2a:e7:50:c6:56: 47:ed:8c:c8:ef:fe:7f:bf:a7:15:90:19:f8:b0:16: 9c:c4:d8:4c:81:f2:80:2c:d5:7e:f1:14:81:dc:fe: f6:00:00:3e:32:e7:8d:b1:03:7b:c5:10:5a:fb:45: 5e:68:38:7c:1c:ea:e4:57:fc:1f:86:57:e5:0d:11: 95:12:30:2e:7a:e1:7b:b7:9d:ab:d4:ed:67:d6:af: fb:56:e3:f0:c8:03:81:fd:c9:6e:e3:74:cc:be:f5: 85:21:8e:16:bb:2a:0c:87:30:7c:3a:aa:83:ee:43: 1b:00:a7:77:06:94:2e:6a:bc:74:fb:43:6a:15:65: f5:fd:3f:f7:59:0e:e3:75:14:92:93:06:d1:54:23: e4:89:50:b1:7c:ed:e2:34:9f:64:86:e9:2c:7a:50: c7:cf:8e:52:8c:a4:4e:52:79:9d:dd:8b:41:17:76: 83:57:93:16:90:d1:13:8e:7d:62:0e:3f:83:fb:fb: f8:63:ec:19:9a:13:e6:d0:fc:c2:96:2a:73:83:01: 8d:45:5b:08:2d:d4:1c:c6:54:9b:2d:f1:60:9c:a5: 2f:2c:ba:6b:7b:c6:e9:23:31:58:21:88:0f:d2:79: 08:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B7:5F:1D:50:DC:19:E5:7B:48:48:0E:45:D4:40:58:98:50:3F:59 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d143d47e-4fb9-4aeb-b972-e03062ee3734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.223.122.0/24 Signature Algorithm: sha256WithRSAEncryption 61:af:84:e5:b4:f2:af:90:98:6b:88:03:21:b9:f0:74:e2:c0: 38:05:06:cb:30:81:63:13:8e:93:75:e4:57:58:55:8e:75:e0: b5:97:93:bd:96:f2:b3:ee:e6:d5:f8:ef:3c:69:6e:c0:56:74: 67:87:ee:b9:ac:84:6b:5e:2f:56:b2:70:f2:c3:73:5a:b6:22: 02:2d:eb:1f:a6:2b:26:c3:fb:fb:0d:32:33:9f:4a:72:bc:c7: 31:16:76:e6:ad:37:e5:7f:fb:18:45:0b:aa:7e:32:b7:0b:f7: 35:c8:d1:08:d7:6e:a1:68:15:c4:58:6b:71:68:f8:45:99:48: 0a:7b:3e:f3:47:b4:51:e0:3c:3d:ca:bf:12:3d:74:a3:cb:f6: 18:c6:d9:d9:5b:db:3e:58:13:c7:0a:46:5a:94:ab:a3:f1:45: 36:bd:a2:14:c7:a5:17:13:a1:e9:34:d4:ab:d3:8d:6e:3f:ae: bf:0d:b6:bc:dd:39:77:1d:fc:52:dd:50:22:47:a4:a7:45:09: 37:99:d8:97:9b:b8:c3:f3:3c:97:e8:39:17:b3:c2:fd:e3:72: 43:fb:ee:4c:64:41:a7:bf:6b:bc:ab:30:6e:20:68:6b:38:92: d4:2b:54:d2:5f:15:ad:07:02:a8:86:65:51:19:53:e2:d8:4a: b6:18:56:27 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGA7WPN1nRTky7micD/C/ErZdLxswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMDZhZDg3NDMxYjU3ZGJkYmRkMzk3ZDc3MmVkOGZmMWE4 ZTUwMTFhMjUzMjNjNWU1ZTgzOTQ4NGIwYjY1NmFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzjawwywnTLOT/oVti+Yhb4JGuBFdVnggq51DGVkftjMjv /n+/pxWQGfiwFpzE2EyB8oAs1X7xFIHc/vYAAD4y542xA3vFEFr7RV5oOHwc6uRX /B+GV+UNEZUSMC564Xu3navU7WfWr/tW4/DIA4H9yW7jdMy+9YUhjha7KgyHMHw6 qoPuQxsAp3cGlC5qvHT7Q2oVZfX9P/dZDuN1FJKTBtFUI+SJULF87eI0n2SG6Sx6 UMfPjlKMpE5SeZ3di0EXdoNXkxaQ0ROOfWIOP4P7+/hj7BmaE+bQ/MKWKnODAY1F Wwgt1BzGVJst8WCcpS8sumt7xukjMVghiA/SeQgXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUM7dfHVDcGeV7SEgORdRAWJhQP1kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QxNDNkNDdlLTRmYjktNGFlYi1iOTcyLWUwMzA2MmVlMzczNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAs33owDQYJKoZIhvcNAQELBQADggEBAGGvhOW08q+QmGuIAyG58HTiwDgF BsswgWMTjpN15FdYVY514LWXk72W8rPu5tX47zxpbsBWdGeH7rmshGteL1aycPLD c1q2IgIt6x+mKybD+/sNMjOfSnK8xzEWduatN+V/+xhFC6p+MrcL9zXI0QjXbqFo FcRYa3Fo+EWZSAp7PvNHtFHgPD3KvxI9dKPL9hjG2dlb2z5YE8cKRlqUq6PxRTa9 ohTHpRcToek01KvTjW4/rr8NtrzdOXcd/FLdUCJHpKdFCTeZ2JebuMPzPJfoORez wv3jckP77kxkQae/a7yrMG4gaGs4ktQrVNJfFa0HAqiGZVEZU+LYSrYYVic= -----END CERTIFICATE-----Generated at Wed Feb 5 10:00:01 2025 by rpki-client