$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c8cadeb-865b-42fe-884c-4bbbea22939c.roa File: 0c8cadeb-865b-42fe-884c-4bbbea22939c.roa (raw, json) Hash identifier: 9xLe+C5cGDVRZCuU/RG+rggz+SUKpdSmFMx9b4AzKwo= Subject key identifier: 40:26:81:D9:14:D0:67:70:C8:96:21:DA:4B:12:79:7A:E0:8F:6C:CB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0A74E03A547C92EBC051F0F3104F39CF5886993F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c8cadeb-865b-42fe-884c-4bbbea22939c.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 15.230.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:74:e0:3a:54:7c:92:eb:c0:51:f0:f3:10:4f:39:cf:58:86:99:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:e1:bb:21:0a:44:b7:26:bc:24:cd:e6:8d: af:74:cd:42:34:4a:8d:f3:2f:8b:0b:1f:82:81:8d: bb:3e:f1:9a:b6:6a:f4:7f:b9:8a:5a:ab:81:c9:0e: 2d:47:27:da:93:67:35:f7:ee:ef:a6:f0:24:71:83: 0b:f5:2b:e1:a1:cb:9b:a0:e7:50:14:23:01:6e:5b: 27:a5:53:5c:8a:a2:1e:26:b0:7d:aa:c0:38:08:33: 70:f4:45:fa:be:cb:4b:69:b8:9e:7f:c8:f8:66:09: d1:7b:6e:0e:72:ce:c9:5e:9b:29:6b:7c:24:85:7a: a9:a1:1e:0c:59:ce:f2:e9:3d:34:d7:ec:9e:75:2a: a2:dd:66:30:ab:55:9e:88:7e:63:2a:1a:54:cc:7d: bb:48:27:76:39:e7:5c:ec:cb:f9:9b:d1:9a:90:1c: de:81:b9:0f:07:68:a4:2e:3f:ad:9d:79:0b:e0:15: 3d:50:b9:bf:19:42:43:95:3b:92:f5:85:78:3c:32: c3:b8:fc:43:be:27:b7:e4:f0:10:4d:ca:c2:78:d9: 60:28:ca:73:b2:bd:a4:06:36:ff:47:2a:f6:21:ad: b6:08:f4:7a:fe:48:14:a6:0c:9f:34:e7:7c:74:95: 98:07:73:35:16:01:0c:9d:6c:fc:67:cd:56:09:56: af:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:26:81:D9:14:D0:67:70:C8:96:21:DA:4B:12:79:7A:E0:8F:6C:CB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c8cadeb-865b-42fe-884c-4bbbea22939c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.230.57.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:57:cb:ba:38:f8:2b:2a:df:1d:e1:97:08:0c:b6:fb:82:08: 1d:a7:9d:72:e8:41:9e:33:22:cf:31:74:14:25:3d:ae:ea:ca: 1b:e4:96:97:61:e1:82:2d:e4:9a:21:6f:63:72:66:b7:03:84: 4b:72:05:50:2b:18:fb:61:2c:e5:81:d3:6b:ae:62:d4:57:27: 4d:f2:d0:3b:00:db:a0:5e:aa:d9:5f:0d:6d:5d:2e:29:76:d5: fc:9a:a1:34:9c:b1:f1:b9:2c:08:27:c0:45:14:c8:b4:84:bb: be:ad:4f:00:31:a0:ed:21:8c:18:4e:6f:1c:d0:72:f3:d8:59: 67:f1:b9:15:cf:f7:9b:f4:85:eb:9c:c1:dd:b3:53:05:45:5b: f5:3a:c6:d1:91:79:c3:be:4b:7d:c1:d4:74:19:28:0c:4c:3c: c2:b7:6d:49:6f:ee:03:af:e7:9f:29:b3:d5:4c:ef:a7:00:48: bf:57:aa:17:db:12:9e:d6:00:72:b1:00:e3:c9:7a:5c:33:cb: cb:5d:f5:d3:6c:7c:6a:1f:e3:e1:8e:c7:b6:fe:64:e1:15:36: c5:8d:ae:ae:e4:96:eb:f2:83:b1:e4:83:d6:b3:3d:32:73:7d: a1:16:ab:80:0f:47:80:df:5c:09:66:60:d6:c5:80:55:a2:1c: d9:e7:01:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCnTgOlR8kuvAUfDzEE85z1iGmT8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjg0ZDA3NmViZmZlNzZiYzBmNjRiZmVmMWFkNzkzNjIx NDg2NDA1ODRmZjIzNTljOTI0NmZkNjhiMWJlMDIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC56OG7IQpEtya8JM3mja90zUI0So3zL4sLH4KBjbs+8Zq2 avR/uYpaq4HJDi1HJ9qTZzX37u+m8CRxgwv1K+Ghy5ug51AUIwFuWyelU1yKoh4m sH2qwDgIM3D0Rfq+y0tpuJ5/yPhmCdF7bg5yzslemylrfCSFeqmhHgxZzvLpPTTX 7J51KqLdZjCrVZ6IfmMqGlTMfbtIJ3Y551zsy/mb0ZqQHN6BuQ8HaKQuP62deQvg FT1Qub8ZQkOVO5L1hXg8MsO4/EO+J7fk8BBNysJ42WAoynOyvaQGNv9HKvYhrbYI 9Hr+SBSmDJ8053x0lZgHczUWAQydbPxnzVYJVq8PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQCaB2RTQZ3DIliHaSxJ5euCPbMswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBjOGNhZGViLTg2NWItNDJmZS04ODRjLTRiYmJlYTIyOTM5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP5jkwDQYJKoZIhvcNAQELBQADggEBAJ9Xy7o4+Csq3x3hlwgMtvuCCB2n nXLoQZ4zIs8xdBQlPa7qyhvklpdh4YIt5Johb2NyZrcDhEtyBVArGPthLOWB02uu YtRXJ03y0DsA26BeqtlfDW1dLil21fyaoTScsfG5LAgnwEUUyLSEu76tTwAxoO0h jBhObxzQcvPYWWfxuRXP95v0heucwd2zUwVFW/U6xtGRecO+S33B1HQZKAxMPMK3 bUlv7gOv558ps9VM76cASL9XqhfbEp7WAHKxAOPJelwzy8td9dNsfGof4+GOx7b+ ZOEVNsWNrq7kluvyg7Hkg9azPTJzfaEWq4APR4DfXAlmYNbFgFWiHNnnAX8= -----END CERTIFICATE-----Generated at Wed Feb 5 09:48:03 2025 by rpki-client