$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06632fd0-6abb-437c-aec2-0a661e165739.roa File: 06632fd0-6abb-437c-aec2-0a661e165739.roa (raw, json) Hash identifier: iC3STPDewroR4JhJXdU2FNx7EwutTRoJFtkh74Lejhk= Subject key identifier: 51:4F:2B:D2:CE:55:3C:F2:26:9A:B7:33:15:14:CB:FB:8D:55:F1:70 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 441A003E364EDAEEE5BDEC9936887D3745F3E262 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06632fd0-6abb-437c-aec2-0a661e165739.roa Signing time: Tue 04 Feb 2025 00:00:00 +0000 ROA not before: Tue 04 Feb 2025 00:00:00 +0000 ROA not after: Tue 11 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.83.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:1a:00:3e:36:4e:da:ee:e5:bd:ec:99:36:88:7d:37:45:f3:e2:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 4 00:00:00 2025 GMT Not After : Mar 11 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b1:ba:7e:14:23:77:1d:a1:c0:b8:6a:6b:b5: ef:79:d0:ea:c7:15:6c:56:68:55:b1:d8:eb:31:48: 5f:0e:38:88:fb:48:c0:8c:ee:1c:46:c2:78:00:70: 72:ed:b9:cf:06:36:0d:4e:aa:2f:16:2d:81:6d:e8: 6e:bf:31:d2:29:81:ab:75:d1:6f:38:5e:15:dd:79: 32:b2:ee:c6:ac:3f:cc:64:54:e0:17:2a:97:63:6d: 56:d3:a0:a4:be:70:b9:ab:3d:01:7d:ed:5a:05:93: d8:41:2a:22:e5:0c:9f:fc:80:a1:c5:c4:77:d5:a4: cb:25:10:bd:53:29:2b:e8:24:53:9a:41:17:39:ef: e6:77:21:36:05:6a:c2:14:be:42:2c:f3:59:eb:5c: dd:59:a4:f8:04:aa:11:22:c9:49:32:ed:e3:21:89: aa:fd:00:39:ad:7f:4e:20:9b:a4:5f:dd:91:a6:b8: fe:6b:0d:7a:3e:ec:5d:3d:9e:36:b8:a9:66:64:1e: 8b:4a:7b:f7:26:a8:0d:fe:8c:45:d9:da:ff:96:74: 11:61:82:23:7b:23:80:90:ba:0b:15:31:77:83:85: e1:8a:8f:44:07:42:67:09:3c:83:27:8e:c1:9d:43: 72:81:22:af:e2:47:df:ce:d6:1b:f9:36:33:bc:5a: e5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4F:2B:D2:CE:55:3C:F2:26:9A:B7:33:15:14:CB:FB:8D:55:F1:70 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06632fd0-6abb-437c-aec2-0a661e165739.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.83.128.0/18 Signature Algorithm: sha256WithRSAEncryption 02:cb:99:63:4d:9e:24:e7:5f:8a:46:f2:12:da:68:17:38:e7: 94:22:d5:52:a6:40:97:18:4a:6d:81:76:b5:01:f9:29:fe:21: 24:41:65:00:2a:b6:ee:cc:34:29:25:3a:b1:0c:66:86:3e:f2: ff:bc:f3:4f:fc:0c:63:0e:b5:8e:f0:a1:8e:61:c9:03:49:bd: ab:33:ef:41:db:5f:d1:08:87:60:14:7c:b9:26:1c:0a:38:3e: 2a:77:c7:b2:04:ef:f9:ea:c0:55:bd:3a:4a:c5:f9:e1:90:05: 5c:0f:d3:3b:ef:b4:ae:41:7a:f6:b8:3b:53:58:37:17:f0:30: 63:9c:95:78:47:66:8b:7a:9c:87:7a:bb:ab:b4:cb:c6:c1:c2: 4c:5b:09:e4:56:11:b8:ef:6a:8b:29:3b:1f:44:ad:c0:7a:9d: cc:44:5a:d4:e6:d4:20:c1:cd:cc:ed:0c:41:0d:f4:5a:b0:60: 00:35:86:44:a2:aa:d9:60:6a:3e:ae:5b:48:0e:ee:ed:33:ae: 1b:d2:2e:3d:c7:28:f1:f0:08:42:82:f2:bd:52:ec:e2:02:a4: ac:e3:25:0f:6e:67:20:01:a5:19:5f:ad:19:f7:29:cf:41:89: c9:01:2f:f8:14:75:01:8f:6b:79:f5:db:d1:74:f2:0c:9e:7f: 61:8b:0e:42 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURBoAPjZO2u7lveyZNoh9N0Xz4mIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMjA0MDAwMDAwWhcNMjUwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZWExNDA3NTFkMjkzODJjNWVmZWQ4NjAzNDI4MGM1MTg4 YWY4Mjc5OWRmNGZlOWVmZWRmYzEzZmM0NDQ0ZmZjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVsbp+FCN3HaHAuGprte950OrHFWxWaFWx2OsxSF8OOIj7 SMCM7hxGwngAcHLtuc8GNg1Oqi8WLYFt6G6/MdIpgat10W84XhXdeTKy7sasP8xk VOAXKpdjbVbToKS+cLmrPQF97VoFk9hBKiLlDJ/8gKHFxHfVpMslEL1TKSvoJFOa QRc57+Z3ITYFasIUvkIs81nrXN1ZpPgEqhEiyUky7eMhiar9ADmtf04gm6Rf3ZGm uP5rDXo+7F09nja4qWZkHotKe/cmqA3+jEXZ2v+WdBFhgiN7I4CQugsVMXeDheGK j0QHQmcJPIMnjsGdQ3KBIq/iR9/O1hv5NjO8WuV3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUU8r0s5VPPImmrczFRTL+41V8XAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA2NjMyZmQwLTZhYmItNDM3Yy1hZWMyLTBhNjYxZTE2NTczOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2U4AwDQYJKoZIhvcNAQELBQADggEBAALLmWNNniTnX4pG8hLaaBc455Qi 1VKmQJcYSm2BdrUB+Sn+ISRBZQAqtu7MNCklOrEMZoY+8v+880/8DGMOtY7woY5h yQNJvasz70HbX9EIh2AUfLkmHAo4Pip3x7IE7/nqwFW9OkrF+eGQBVwP0zvvtK5B eva4O1NYNxfwMGOclXhHZot6nId6u6u0y8bBwkxbCeRWEbjvaospOx9ErcB6ncxE WtTm1CDBzcztDEEN9FqwYAA1hkSiqtlgaj6uW0gO7u0zrhvSLj3HKPHwCEKC8r1S 7OICpKzjJQ9uZyABpRlfrRn3Kc9BickBL/gUdQGPa3n129F08gyef2GLDkI= -----END CERTIFICATE-----Generated at Wed Feb 5 10:53:54 2025 by rpki-client