$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ec0e3b70-66be-4cb5-bc14-953f4d2f5fc5.roa File: ec0e3b70-66be-4cb5-bc14-953f4d2f5fc5.roa (raw, json) Hash identifier: 2GwjoO6SQS9JRzCWOIaZz5uxNa8BVtIzhnOSFIvI6bA= Subject key identifier: BC:53:0F:D2:40:92:3A:8A:EA:AD:96:F1:96:8F:CE:B5:CE:C8:18:88 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 0C1AA3D79A3B17BB208A625707F3F352B7D37278 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ec0e3b70-66be-4cb5-bc14-953f4d2f5fc5.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:1a:a3:d7:9a:3b:17:bb:20:8a:62:57:07:f3:f3:52:b7:d3:72:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8c:54:c4:59:ec:5c:ff:b7:73:84:86:48:45: b0:1f:13:71:37:64:29:eb:d2:0a:7e:c7:56:c4:50: 37:f1:9e:ae:f3:c6:1e:c7:97:27:ca:e7:fa:6e:16: cc:d6:cd:9b:4b:d5:85:f3:a6:91:f2:f6:39:4f:bd: e3:fc:5b:04:d1:2a:a2:85:47:e3:7d:5b:54:72:06: 9f:4a:dd:c2:6e:64:29:79:ca:28:a4:5c:86:de:c9: 8c:55:2d:35:0a:7e:e6:50:4f:66:71:e9:a0:98:ee: 64:08:95:37:28:2d:17:ac:1c:c8:47:45:c5:19:1f: ca:78:07:2c:d9:98:6d:9f:50:89:b6:5f:71:a8:d8: 98:1b:02:77:c3:94:75:18:76:9d:79:0e:8f:2e:65: 33:af:73:3f:88:3f:ba:24:5a:55:a1:a9:69:1e:37: 00:fd:cc:d3:12:32:74:0e:ab:05:8b:57:e4:5e:03: d0:35:b3:8b:b0:2b:75:ce:73:08:7b:2b:2e:5a:0b: a1:eb:ee:f5:5f:ea:58:96:ce:9c:6c:0f:27:3b:d8: d6:e8:8a:16:da:89:35:ff:8c:03:00:bf:06:d0:e6: ec:7c:63:7e:76:2f:94:b8:28:df:a0:78:40:71:35: 4d:d1:4d:bf:dd:78:92:a6:8e:55:b9:d4:bc:2d:0b: 8e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:53:0F:D2:40:92:3A:8A:EA:AD:96:F1:96:8F:CE:B5:CE:C8:18:88 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ec0e3b70-66be-4cb5-bc14-953f4d2f5fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.0.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:e8:f3:1b:76:20:d9:f4:33:4e:3a:d7:64:8a:44:bb:42:40: ec:d2:ea:9a:b9:38:70:09:52:a5:df:63:cb:d6:d3:24:ba:c7: 46:cf:0b:69:72:40:a6:c5:43:b4:13:08:1c:e4:2d:00:7c:a1: 97:03:06:e2:82:b4:40:5b:81:3d:10:9f:5d:3f:bd:25:60:b9: 06:38:ee:c1:0e:e7:78:57:04:02:f7:55:4e:31:68:71:26:84: 3c:ed:4f:df:af:d2:2d:55:d4:ee:d4:a8:d8:bc:0f:81:1b:fe: 22:14:c5:3e:31:e3:c1:0a:9a:fb:7f:74:a8:a6:16:be:21:e1: aa:e4:9b:8f:dc:40:0b:d3:7e:bf:6a:ac:5a:ad:81:e4:42:cb: 0c:d8:09:15:59:a0:72:f5:d5:79:09:ac:af:d0:67:a1:a1:ed: c8:93:df:c4:ce:93:0f:04:e6:df:a6:68:f6:be:70:b3:c4:85: 39:50:28:3b:78:5a:19:e3:ab:b5:80:98:04:69:01:b8:20:8f: a5:9c:6e:88:52:ac:94:b4:44:f1:67:71:f7:a0:e8:4d:0c:be: 08:3d:24:a4:fc:bc:e4:ca:de:c1:fc:23:6d:e7:ae:1b:d4:01: 42:69:b3:9f:b5:7e:a0:c7:38:69:a4:63:30:cd:b4:a7:1c:e9: 8e:a0:6e:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDBqj15o7F7sgimJXB/PzUrfTcngwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxODE0ZDcyYTI5ZGU2M2VhNDQxMjliYTQyZTdkMzlkOTc1 YTY1YTM4MmFhMTZjZmM1NmI5MzdkZmM5YzE0OGU4MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpjFTEWexc/7dzhIZIRbAfE3E3ZCnr0gp+x1bEUDfxnq7z xh7HlyfK5/puFszWzZtL1YXzppHy9jlPveP8WwTRKqKFR+N9W1RyBp9K3cJuZCl5 yiikXIbeyYxVLTUKfuZQT2Zx6aCY7mQIlTcoLResHMhHRcUZH8p4ByzZmG2fUIm2 X3Go2JgbAnfDlHUYdp15Do8uZTOvcz+IP7okWlWhqWkeNwD9zNMSMnQOqwWLV+Re A9A1s4uwK3XOcwh7Ky5aC6Hr7vVf6liWzpxsDyc72NboihbaiTX/jAMAvwbQ5ux8 Y352L5S4KN+geEBxNU3RTb/deJKmjlW51LwtC45DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvFMP0kCSOorqrZbxlo/Otc7IGIgwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2VjMGUzYjcwLTY2YmUtNGNiNS1iYzE0LTk1M2Y0ZDJmNWZjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABgfwAwDQYJKoZIhvcNAQELBQADggEBAEro8xt2INn0M04612SKRLtCQOzS 6pq5OHAJUqXfY8vW0yS6x0bPC2lyQKbFQ7QTCBzkLQB8oZcDBuKCtEBbgT0Qn10/ vSVguQY47sEO53hXBAL3VU4xaHEmhDztT9+v0i1V1O7UqNi8D4Eb/iIUxT4x48EK mvt/dKimFr4h4arkm4/cQAvTfr9qrFqtgeRCywzYCRVZoHL11XkJrK/QZ6Gh7ciT 38TOkw8E5t+maPa+cLPEhTlQKDt4Whnjq7WAmARpAbggj6WcbohSrJS0RPFncfeg 6E0Mvgg9JKT8vOTK3sH8I23nrhvUAUJps5+1fqDHOGmkYzDNtKcc6Y6gbv0= -----END CERTIFICATE-----Generated at Wed Feb 5 15:59:00 2025 by rpki-client