$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7eff8448-121e-4d53-91a5-ae9c96443ba5.roa File: 7eff8448-121e-4d53-91a5-ae9c96443ba5.roa (raw, json) Hash identifier: 2PkdoMOiN5U5s+YFHXK3BA36dM5tdxHuNL/WSrbpO14= Subject key identifier: 6B:A2:A4:C7:C5:42:82:8E:84:2E:B7:C1:71:21:F7:33:C5:53:5F:21 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 70FAC1D2B13C7EE8DBC801644835DA98B8FA9E7B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7eff8448-121e-4d53-91a5-ae9c96443ba5.roa Signing time: Tue 14 Jan 2025 00:00:00 +0000 ROA not before: Tue 14 Jan 2025 00:00:00 +0000 ROA not after: Tue 18 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 173.82.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:fa:c1:d2:b1:3c:7e:e8:db:c8:01:64:48:35:da:98:b8:fa:9e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jan 14 00:00:00 2025 GMT Not After : Feb 18 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:28:d9:8f:18:31:54:e6:4c:22:d8:f7:77:20: c5:bc:58:03:45:b2:d5:19:d3:ff:20:f3:2a:1e:87: d3:e0:c2:95:9f:f6:d3:85:d7:0b:df:46:bb:7e:06: a1:25:39:49:ea:5b:b7:fb:2c:b6:18:4e:05:f6:c4: 4b:b2:9f:2f:0e:4a:cb:08:70:bb:bb:af:2c:fb:5a: 60:c3:ef:b3:70:55:54:b9:2e:5e:f2:69:3c:3e:b9: 78:d8:91:8a:2a:64:33:35:f7:cd:25:ae:a9:b8:91: 14:a2:59:48:38:67:af:5d:12:b4:50:cc:11:2e:cc: 52:4b:71:55:9f:4b:5b:e7:f7:c3:bd:48:fd:89:9e: cd:5d:fe:2b:1f:6d:21:e8:c2:54:01:17:a5:43:e3: be:1d:7f:e4:5d:cb:c4:43:02:e5:96:16:ae:18:7e: 9d:fc:95:52:b3:39:80:61:07:5f:f7:55:ea:52:45: 87:c5:55:86:e5:eb:5d:59:e0:6f:c0:02:1b:2e:c9: 29:bc:77:30:06:52:24:f0:64:02:d0:1b:4e:00:a0: e3:32:b8:d8:cf:5b:b2:7a:46:26:a1:8d:b5:c3:ea: 7e:47:7e:9d:83:d9:cd:2f:ae:c9:9c:d9:cb:b4:b9: 7d:d9:c3:6b:71:0e:39:1a:ef:c3:bc:aa:8d:95:d7: 59:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A2:A4:C7:C5:42:82:8E:84:2E:B7:C1:71:21:F7:33:C5:53:5F:21 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7eff8448-121e-4d53-91a5-ae9c96443ba5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.71.0/24 Signature Algorithm: sha256WithRSAEncryption 23:4d:3e:84:78:00:a6:42:48:1d:8d:ac:34:59:48:dc:e7:5a: dd:20:52:b5:86:86:6d:8b:ed:b9:6b:2e:6f:68:91:44:58:98: ec:51:ab:bd:b2:97:d9:eb:11:ce:78:ca:ce:26:e1:68:78:f6: c8:12:0b:ba:6d:f8:6c:e9:4c:74:ee:30:04:20:b5:6e:4a:c1: b2:53:94:fc:9c:11:ab:77:17:57:34:11:18:91:52:ef:2e:18: ad:c7:8b:f5:fd:95:93:41:ed:7d:3f:b8:da:19:eb:cf:57:74: 81:9d:99:73:bc:f5:8f:a7:19:77:37:2e:2a:74:8c:91:5f:2e: 1c:ce:32:79:38:c5:c3:61:1e:e6:3b:e1:5c:ca:3b:34:80:3f: 77:d9:51:86:7c:8c:8d:10:cf:e9:96:2e:5e:e9:ca:e9:84:f3: 80:ce:00:04:e2:36:05:e7:da:21:39:e8:54:d1:37:bd:b6:4e: 3b:fa:7b:39:dc:55:69:85:7a:93:5e:95:35:05:e0:df:c6:d3: 81:72:4c:a2:d4:73:76:cc:b7:42:62:2e:52:05:a6:13:84:dd: e9:bb:bb:b7:7b:9b:35:ca:c3:21:5c:c0:6a:17:bf:5a:dc:79: e6:a4:82:b2:fa:f0:fd:27:4b:a5:f2:1f:bc:1c:93:6b:c8:fe: 8f:29:a4:68 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcPrB0rE8fujbyAFkSDXamLj6nnswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YmNkYmIyMmIwNDhlYTk4ZjlhZDM2ZDkxZTE0NTg5ODc5 YTAxOGE0MDY0NDdjZTQ2YjliOWExYWVjMGVjZjhlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaKNmPGDFU5kwi2Pd3IMW8WANFstUZ0/8g8yoeh9PgwpWf 9tOF1wvfRrt+BqElOUnqW7f7LLYYTgX2xEuyny8OSssIcLu7ryz7WmDD77NwVVS5 Ll7yaTw+uXjYkYoqZDM1980lrqm4kRSiWUg4Z69dErRQzBEuzFJLcVWfS1vn98O9 SP2Jns1d/isfbSHowlQBF6VD474df+Rdy8RDAuWWFq4Yfp38lVKzOYBhB1/3VepS RYfFVYbl611Z4G/AAhsuySm8dzAGUiTwZALQG04AoOMyuNjPW7J6RiahjbXD6n5H fp2D2c0vrsmc2cu0uX3Zw2txDjka78O8qo2V11kFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUa6Kkx8VCgo6ELrfBcSH3M8VTXyEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzdlZmY4NDQ4LTEyMWUtNGQ1My05MWE1LWFlOWM5NjQ0M2JhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUkcwDQYJKoZIhvcNAQELBQADggEBACNNPoR4AKZCSB2NrDRZSNznWt0g UrWGhm2L7blrLm9okURYmOxRq72yl9nrEc54ys4m4Wh49sgSC7pt+GzpTHTuMAQg tW5KwbJTlPycEat3F1c0ERiRUu8uGK3Hi/X9lZNB7X0/uNoZ689XdIGdmXO89Y+n GXc3Lip0jJFfLhzOMnk4xcNhHuY74VzKOzSAP3fZUYZ8jI0Qz+mWLl7pyumE84DO AATiNgXn2iE56FTRN722Tjv6ezncVWmFepNelTUF4N/G04FyTKLUc3bMt0JiLlIF phOE3em7u7d7mzXKwyFcwGoXv1rceeakgrL68P0nS6XyH7wck2vI/o8ppGg= -----END CERTIFICATE-----Generated at Wed Feb 5 09:48:02 2025 by rpki-client