$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dde98764-ed59-4372-8084-926e73624f31.roa File: dde98764-ed59-4372-8084-926e73624f31.roa (raw, json) Hash identifier: ujxiPvwt5A6vus/p0gYVjg8wbU7rZQT3cKw8E1I99UI= Subject key identifier: F3:44:03:26:B6:16:D1:D1:B1:80:7E:7F:0B:38:3C:A0:4E:75:ED:38 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D66A6A0D10AADAE4EFA064955069386C8CDA03A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dde98764-ed59-4372-8084-926e73624f31.roa Signing time: Wed 22 Jan 2025 00:00:00 +0000 ROA not before: Wed 22 Jan 2025 00:00:00 +0000 ROA not after: Wed 26 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.106.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:66:a6:a0:d1:0a:ad:ae:4e:fa:06:49:55:06:93:86:c8:cd:a0:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 22 00:00:00 2025 GMT Not After : Feb 26 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:75:56:87:d3:04:ba:0c:1f:ad:16:bf:79:cf: 0c:6c:c3:f7:1b:08:3e:9f:72:7c:ac:f7:39:fc:f7: b4:be:0c:45:af:d7:e9:0f:5e:c3:b4:23:cb:46:66: 45:94:11:ae:f5:a1:6c:26:f6:e2:19:54:ab:33:54: 3e:59:94:d2:e9:0d:50:cf:52:da:cb:67:0e:39:8b: 51:e6:a5:9a:71:41:38:4a:81:79:11:fd:99:aa:59: 35:e2:04:d4:5e:f3:ff:04:1d:00:61:52:d1:43:46: 5d:ef:ec:6a:14:ff:ac:47:7e:de:00:7e:78:44:ae: fd:a2:05:a9:55:9d:94:1c:c7:15:29:a4:5e:08:49: 32:66:0c:16:4d:cd:6f:86:bb:c3:f3:0a:15:ac:00: 2b:bd:12:bc:24:44:3e:c3:c9:4d:7d:83:44:57:42: 74:9e:98:0e:f1:56:4d:5a:8a:e3:eb:af:52:45:3c: 73:6b:ba:82:39:07:eb:6a:e2:dc:97:76:b8:0d:7d: a3:e8:0c:20:2c:8a:cf:d1:7a:6d:25:60:bd:aa:fa: 4c:7e:8e:42:19:8b:6c:5d:c9:77:d2:5d:5a:8b:e5: 4d:87:53:56:82:dd:70:79:5c:5f:16:e1:a6:a7:ca: 05:fd:1d:3e:b7:3b:f3:e2:7f:ce:34:f0:2d:f8:51: 4d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:44:03:26:B6:16:D1:D1:B1:80:7E:7F:0B:38:3C:A0:4E:75:ED:38 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dde98764-ed59-4372-8084-926e73624f31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.106.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7a:80:c3:5a:08:a9:53:aa:3e:ca:8c:71:2b:ea:8b:a9:c6:4f: 8e:54:1a:59:1e:09:57:c9:0b:a0:d5:fc:59:16:a9:8a:99:c4: 5f:e6:6f:7b:4b:8c:5e:3c:e1:d0:71:f4:8a:60:73:e9:58:d9: 76:f3:56:81:f2:65:6d:a5:7f:24:88:7a:02:27:fb:4d:91:2d: 99:ab:ce:dd:65:72:9e:ba:1d:9c:fe:51:c3:ad:9a:64:a8:2a: ce:8a:e0:82:42:47:55:84:c3:a4:b1:5b:9f:75:da:b3:f1:93: fa:75:67:9d:31:01:8c:79:3a:ab:8a:da:12:38:a8:38:86:b2: e6:12:d0:d9:8c:07:7f:60:cf:fc:4a:db:3f:31:bb:d4:3e:d1: 35:ab:29:c3:79:0a:91:46:40:6c:16:49:f0:4e:4c:18:91:59: f5:cb:f7:bc:4b:1d:40:fd:bb:60:a4:fc:fb:c9:3a:79:03:61: 11:1c:12:b0:fb:9a:4f:61:35:b2:a0:b8:9f:a5:6d:df:9a:40: 51:af:04:18:14:8f:b8:be:75:61:bc:d5:79:bf:36:b8:aa:7a: da:7e:1e:65:fa:25:77:62:09:3e:02:d1:7f:44:fa:db:b7:94: 5f:4c:71:ea:f5:9d:26:09:d3:53:ee:85:47:15:ce:6c:d7:03: aa:47:48:6f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbWamoNEKra5O+gZJVQaThsjNoDowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIyMDAwMDAwWhcNMjUwMjI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyN2Q0MGY4NzFlMTY0MmI1MzI1ZTZlNTg5MDE0YmFjN2Qw YzE3ZjliODhmMjA2YzljZWYwMjU5NzdlOTQwOTg2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7dVaH0wS6DB+tFr95zwxsw/cbCD6fcnys9zn897S+DEWv 1+kPXsO0I8tGZkWUEa71oWwm9uIZVKszVD5ZlNLpDVDPUtrLZw45i1HmpZpxQThK gXkR/ZmqWTXiBNRe8/8EHQBhUtFDRl3v7GoU/6xHft4AfnhErv2iBalVnZQcxxUp pF4ISTJmDBZNzW+Gu8PzChWsACu9ErwkRD7DyU19g0RXQnSemA7xVk1aiuPrr1JF PHNruoI5B+tq4tyXdrgNfaPoDCAsis/Rem0lYL2q+kx+jkIZi2xdyXfSXVqL5U2H U1aC3XB5XF8W4aanygX9HT63O/Pif8408C34UU35AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU80QDJrYW0dGxgH5/Czg8oE517TgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RkZTk4NzY0LWVkNTktNDM3Mi04MDg0LTkyNmU3MzYyNGYzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQajANBgkqhkiG9w0BAQsFAAOCAQEAeoDDWgipU6o+yoxxK+qLqcZPjlQa WR4JV8kLoNX8WRapipnEX+Zve0uMXjzh0HH0imBz6VjZdvNWgfJlbaV/JIh6Aif7 TZEtmavO3WVynrodnP5Rw62aZKgqzorggkJHVYTDpLFbn3Xas/GT+nVnnTEBjHk6 q4raEjioOIay5hLQ2YwHf2DP/ErbPzG71D7RNaspw3kKkUZAbBZJ8E5MGJFZ9cv3 vEsdQP27YKT8+8k6eQNhERwSsPuaT2E1sqC4n6Vt35pAUa8EGBSPuL51YbzVeb82 uKp62n4eZfold2IJPgLRf0T627eUX0xx6vWdJgnTU+6FRxXObNcDqkdIbw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:56 2025 by rpki-client