$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10227daa-70a1-4e17-bf7a-1e2eaa15b1f4.roa File: 10227daa-70a1-4e17-bf7a-1e2eaa15b1f4.roa (raw, json) Hash identifier: lX9f9zCzHcf+7KqyIUzWRQWT7gWj+ZBhytFTVw+GDVA= Subject key identifier: FA:DC:98:6B:70:54:F5:D8:EE:5E:95:A3:5A:80:52:38:B6:11:41:EE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2378E70F33782482344FB33C9BC7CA8AEC12E238 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10227daa-70a1-4e17-bf7a-1e2eaa15b1f4.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.54.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:78:e7:0f:33:78:24:82:34:4f:b3:3c:9b:c7:ca:8a:ec:12:e2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:6b:f2:59:84:1f:e6:9a:ef:6e:03:47:48: 1a:c9:6d:06:9a:6b:d9:68:a2:da:fd:af:03:2d:58: ba:ba:06:17:c8:05:76:a1:27:18:70:7f:d0:8e:7c: 30:8e:58:79:be:05:a3:8c:00:f1:1f:e7:d4:01:d7: ea:5d:8e:a9:a2:90:6a:b7:5a:41:0e:03:c5:d1:9e: 4c:9f:40:ed:e2:78:ad:67:1a:f1:74:25:1d:a9:08: f4:04:76:e0:07:a4:54:b1:81:3a:31:43:b6:85:21: 4c:e3:1a:20:7b:45:43:88:a6:88:0c:b8:ff:97:0e: 63:17:fc:81:c6:a5:94:da:f2:1d:27:83:e3:ad:19: c9:c8:4b:62:32:02:16:62:ae:e8:d3:0e:ae:60:6a: 88:26:36:8d:bc:08:e3:12:24:e1:39:e0:b8:d6:fa: 80:66:90:72:58:0a:94:50:a6:9b:e7:60:49:0b:19: 13:0e:1b:54:e5:27:46:e4:f5:3b:c7:81:42:57:ed: eb:a5:f7:50:04:34:c8:f7:e5:73:de:ba:d5:d5:c0: 0f:a3:ab:e2:25:9a:9f:64:d3:1d:e1:48:9b:32:e2: 31:83:7b:47:51:fa:4f:0b:c1:1b:d1:cd:e5:4c:14: e3:7b:75:14:09:42:68:f3:cc:11:02:65:c4:03:a2: 06:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DC:98:6B:70:54:F5:D8:EE:5E:95:A3:5A:80:52:38:B6:11:41:EE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10227daa-70a1-4e17-bf7a-1e2eaa15b1f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.54.64.0/18 Signature Algorithm: sha256WithRSAEncryption 14:3e:d2:2a:bb:09:54:c0:44:a8:20:af:6b:ef:90:a3:b6:cf: 64:9b:c0:59:28:52:38:f3:33:ac:a7:d9:88:07:5b:c3:5b:fe: 66:1b:50:62:dc:73:53:f5:37:4e:c6:52:9f:1b:d6:f1:e3:ad: 95:05:9c:06:2a:4a:23:07:c1:04:6e:db:96:b3:38:05:22:33: 5c:2f:c4:50:71:70:48:c3:b8:cf:d5:36:d5:ac:82:9a:74:04: c1:1b:58:ee:04:d2:bd:b4:31:cd:9d:68:eb:86:6f:b9:ec:72: 05:e7:c9:8f:6d:be:37:72:70:6d:4f:80:e7:ef:6f:0f:0d:e8: 2d:e8:0e:e1:e7:4e:e9:59:8d:54:6b:79:17:dd:01:f2:fc:02: 7d:92:33:1d:a7:41:94:65:6d:b8:d6:fa:23:70:d4:a1:30:1b: a9:a5:a0:d0:64:07:68:1b:36:5e:14:8a:65:8c:54:dc:b4:f3: 5f:af:c8:e9:29:21:67:c0:0e:51:cf:ae:01:f1:40:d6:fe:77: 96:15:4b:03:8b:63:33:e0:80:2a:f0:da:d9:a7:a6:c6:6f:ad: 47:8a:ef:11:70:61:2a:cd:f4:21:9e:80:eb:fc:19:fc:25:88: ff:67:ab:76:62:01:4a:99:00:4a:11:d8:d2:50:ac:e5:df:45: 44:7e:52:5e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI3jnDzN4JII0T7M8m8fKiuwS4jgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjZhMmRhMWM4Njc2MGMyNjIxNzIyZDgyMjFjYmYwMWU4 NzZjZjM2OGM3OGZlYzY5MmI2OWY2ODBmNjI5NTQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwcWvyWYQf5prvbgNHSBrJbQaaa9lootr9rwMtWLq6BhfI BXahJxhwf9COfDCOWHm+BaOMAPEf59QB1+pdjqmikGq3WkEOA8XRnkyfQO3ieK1n GvF0JR2pCPQEduAHpFSxgToxQ7aFIUzjGiB7RUOIpogMuP+XDmMX/IHGpZTa8h0n g+OtGcnIS2IyAhZirujTDq5gaogmNo28COMSJOE54LjW+oBmkHJYCpRQppvnYEkL GRMOG1TlJ0bk9TvHgUJX7eul91AENMj35XPeutXVwA+jq+Ilmp9k0x3hSJsy4jGD e0dR+k8LwRvRzeVMFON7dRQJQmjzzBECZcQDogbNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+tyYa3BU9djuXpWjWoBSOLYRQe4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEwMjI3ZGFhLTcwYTEtNGUxNy1iZjdhLTFlMmVhYTE1YjFmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYNNkAwDQYJKoZIhvcNAQELBQADggEBABQ+0iq7CVTARKggr2vvkKO2z2Sb wFkoUjjzM6yn2YgHW8Nb/mYbUGLcc1P1N07GUp8b1vHjrZUFnAYqSiMHwQRu25az OAUiM1wvxFBxcEjDuM/VNtWsgpp0BMEbWO4E0r20Mc2daOuGb7nscgXnyY9tvjdy cG1PgOfvbw8N6C3oDuHnTulZjVRreRfdAfL8An2SMx2nQZRlbbjW+iNw1KEwG6ml oNBkB2gbNl4UimWMVNy081+vyOkpIWfADlHPrgHxQNb+d5YVSwOLYzPggCrw2tmn psZvrUeK7xFwYSrN9CGegOv8GfwliP9nq3ZiAUqZAEoR2NJQrOXfRUR+Ul4= -----END CERTIFICATE-----Generated at Wed Feb 5 10:47:12 2025 by rpki-client