$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/36d19c61-2356-453b-bdde-185259d9b804.roa File: 36d19c61-2356-453b-bdde-185259d9b804.roa (raw, json) Hash identifier: U4Uqj1xQ9J3MVBRTRYuf927+2QKFOZd5N3WaS1aMBJU= Subject key identifier: C2:A3:C9:7E:8B:18:42:2F:18:6A:94:D6:8D:29:52:75:F4:16:F0:16 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5DD9FF628D2215A0474FE38FFD1D0834BA503F41 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/36d19c61-2356-453b-bdde-185259d9b804.roa Signing time: Mon 18 Nov 2024 00:00:00 +0000 ROA not before: Mon 18 Nov 2024 00:00:00 +0000 ROA not after: Mon 23 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d9:ff:62:8d:22:15:a0:47:4f:e3:8f:fd:1d:08:34:ba:50:3f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 18 00:00:00 2024 GMT Not After : Dec 23 23:59:59 2024 GMT Subject: serialNumber=38cc92e9c6b14edbc3e12bca68b0364fbc79ae273f9e3738ce17b43327e12885, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9c:23:72:f7:bc:dd:51:c1:be:c4:8f:56:4f: fe:9d:56:57:b6:04:d1:e4:d3:75:05:49:2b:c4:16: c4:35:df:d1:50:7c:51:9b:c5:91:02:d9:17:08:56: 4c:b6:36:ee:05:3c:ae:9c:34:a6:8c:91:84:b8:3a: 5c:14:46:ff:ae:2c:c8:94:75:e6:0b:cf:38:8d:8b: b2:bb:98:4c:50:fb:df:aa:da:21:d3:be:b0:9f:8d: fa:49:80:64:57:f7:5c:1f:0a:dc:c3:05:4b:9c:b1: 41:92:a0:04:2c:0d:72:f2:ef:08:0f:f3:e6:99:78: 37:e9:75:f9:e6:f1:ce:b2:cd:c7:b2:11:d6:94:5d: 17:e5:b3:99:0d:4c:6a:8b:ec:c1:93:e4:53:a3:2d: 15:f9:f7:d2:f2:36:31:03:02:3f:26:a7:15:06:57: a4:32:d9:de:09:9f:43:0d:fb:99:82:7f:dd:62:26: c9:b7:fa:ce:b4:11:96:11:96:dd:7c:68:1e:a5:05: d8:7e:c1:e3:ec:96:81:d2:ef:01:df:3e:68:b7:e2: 0d:2d:58:98:d5:5b:93:c4:8a:5f:4d:31:2b:85:fc: ba:2d:f5:d1:47:21:64:e1:86:ff:27:12:6f:e3:6e: 10:6a:db:3d:cb:db:95:27:69:e5:63:f3:e7:b4:c4: bc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A3:C9:7E:8B:18:42:2F:18:6A:94:D6:8D:29:52:75:F4:16:F0:16 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/36d19c61-2356-453b-bdde-185259d9b804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.5.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:ae:9f:1c:cb:be:c5:3e:93:ac:3e:36:fd:e0:5e:46:8b:ed: 61:96:b9:f5:10:1c:03:24:d8:87:40:2e:a8:96:46:33:75:55: 68:28:a1:ae:26:90:dc:25:7e:93:02:eb:dd:e0:be:d8:d3:56: 77:e1:22:5d:fe:fe:02:7e:b1:ca:5e:56:ab:c9:93:dc:33:2e: 7f:d0:62:ed:ee:be:fe:0d:8e:74:d4:d4:b1:c9:55:92:32:41: b5:14:35:fb:75:87:e3:7a:dc:dc:bb:90:46:c7:ca:31:8b:5a: 58:dd:1a:ba:2a:99:f2:d3:6d:49:31:ab:d9:23:e2:d8:25:49: 88:ce:78:23:14:91:47:d2:eb:bb:05:f0:c6:1e:d6:c6:fe:6d: 85:2e:a3:23:5d:5e:6b:2a:50:7b:dc:62:ef:e8:89:65:5c:0b: 4a:90:19:3d:c5:6f:ae:32:b1:b9:47:98:da:a9:b8:96:a1:a0: f1:e2:7b:4a:19:5f:c0:68:04:84:15:0c:02:94:e0:db:8e:d5: 60:ba:e7:f3:52:46:df:86:44:d4:ac:29:d5:d5:cb:1a:c7:22: 73:c6:b8:de:c8:e8:9a:1f:32:b6:15:2d:22:5f:a2:ed:5b:b7: e9:f6:a4:cc:82:1c:1f:de:67:b2:17:1e:49:06:d1:ae:41:7c: 66:c1:f2:56 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXdn/Yo0iFaBHT+OP/R0INLpQP0EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQxMTE4MDAwMDAwWhcNMjQxMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzOGNjOTJlOWM2YjE0ZWRiYzNlMTJiY2E2OGIwMzY0ZmJj NzlhZTI3M2Y5ZTM3MzhjZTE3YjQzMzI3ZTEyODg1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjnCNy97zdUcG+xI9WT/6dVle2BNHk03UFSSvEFsQ139FQ fFGbxZEC2RcIVky2Nu4FPK6cNKaMkYS4OlwURv+uLMiUdeYLzziNi7K7mExQ+9+q 2iHTvrCfjfpJgGRX91wfCtzDBUucsUGSoAQsDXLy7wgP8+aZeDfpdfnm8c6yzcey EdaUXRfls5kNTGqL7MGT5FOjLRX599LyNjEDAj8mpxUGV6Qy2d4Jn0MN+5mCf91i Jsm3+s60EZYRlt18aB6lBdh+wePsloHS7wHfPmi34g0tWJjVW5PEil9NMSuF/Lot 9dFHIWThhv8nEm/jbhBq2z3L25UnaeVj8+e0xLxrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwqPJfosYQi8YapTWjSlSdfQW8BYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzM2ZDE5YzYxLTIzNTYtNDUzYi1iZGRlLTE4NTI1OWQ5YjgwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUgUwDQYJKoZIhvcNAQELBQADggEBAE2unxzLvsU+k6w+Nv3gXkaL7WGW ufUQHAMk2IdALqiWRjN1VWgooa4mkNwlfpMC693gvtjTVnfhIl3+/gJ+scpeVqvJ k9wzLn/QYu3uvv4NjnTU1LHJVZIyQbUUNft1h+N63Ny7kEbHyjGLWljdGroqmfLT bUkxq9kj4tglSYjOeCMUkUfS67sF8MYe1sb+bYUuoyNdXmsqUHvcYu/oiWVcC0qQ GT3Fb64ysblHmNqpuJahoPHie0oZX8BoBIQVDAKU4NuO1WC65/NSRt+GRNSsKdXV yxrHInPGuN7I6JofMrYVLSJfou1bt+n2pMyCHB/eZ7IXHkkG0a5BfGbB8lY= -----END CERTIFICATE-----