$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/102caa67-f908-4605-9862-ab28b2ff2cd5.roa File: 102caa67-f908-4605-9862-ab28b2ff2cd5.roa (raw, json) Hash identifier: 9CJiw0D2aMCl5HUADxNpG9fmKKcSOwwIcDLQrcPVqSY= Subject key identifier: 00:BA:C4:9B:44:EB:70:D1:80:20:53:54:55:2C:62:28:D4:C8:D7:0D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 56B027293CB64A22FD689C0122C6628E13C0797C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/102caa67-f908-4605-9862-ab28b2ff2cd5.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:b0:27:29:3c:b6:4a:22:fd:68:9c:01:22:c6:62:8e:13:c0:79:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:41:7a:88:42:98:8d:77:7e:6a:0e:32:77:23: e1:81:a1:d3:89:35:7b:f4:10:e4:ca:87:d4:ee:94: fa:8e:51:7a:66:96:fa:70:53:00:40:12:7d:04:87: bd:9c:3a:7e:75:44:6f:6a:c0:72:81:47:5d:58:f2: e6:e9:ff:a2:89:8b:3e:32:1f:16:23:8e:63:7b:59: 48:33:4a:d5:15:90:44:cf:26:52:a0:1c:ab:9f:fc: 65:ae:dd:69:d0:8a:ae:a4:1d:cd:44:eb:75:7f:5a: 3c:d6:c3:51:d0:74:9c:66:75:35:46:56:75:1c:47: 17:e1:88:30:4e:d6:dd:80:e8:54:9b:92:e6:ea:24: c3:b1:ce:e0:c5:1e:d1:88:89:4d:87:d2:ec:17:2b: 28:7d:7a:e4:0a:27:f4:30:ab:ec:40:e9:db:12:e8: c2:d3:cc:af:b2:7a:f0:02:31:33:ee:2f:ac:f8:4d: fc:ba:9c:df:96:ef:b5:81:54:1a:7c:d2:56:e5:88: 6e:e3:5d:49:d3:88:70:9e:d1:45:a5:9d:b1:a3:95: a0:55:b1:6c:85:be:d5:38:3f:ef:e8:52:88:05:98: 42:8e:78:02:f0:d7:57:e9:38:6b:93:ca:14:0c:35: e7:dc:db:b5:de:f4:e9:5f:9b:8b:7a:75:74:be:86: e5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BA:C4:9B:44:EB:70:D1:80:20:53:54:55:2C:62:28:D4:C8:D7:0D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/102caa67-f908-4605-9862-ab28b2ff2cd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.0.0/21 Signature Algorithm: sha256WithRSAEncryption 30:27:b7:81:75:49:58:88:3d:01:4a:34:21:5d:eb:dd:6a:47: 50:1e:ea:df:fb:e9:e2:4d:06:71:76:19:6f:44:40:73:7d:d2: d3:06:76:db:33:64:39:75:31:d0:59:b0:44:2c:10:85:48:95: d9:d6:3e:f3:d8:2c:d7:ee:03:21:70:cb:15:5c:e2:53:0a:a1: f5:13:b0:91:8d:75:60:2a:de:11:39:f7:bf:5a:58:53:3a:6f: 47:74:2c:cc:7b:23:88:50:ef:ac:04:28:0a:02:dd:ff:87:72: 0f:a5:c8:5c:69:26:1b:69:97:bf:1a:dc:e8:53:82:c4:87:ff: e7:1d:1f:d9:cf:97:85:70:ef:56:e1:ff:13:80:8b:61:ca:a7: f4:c2:8d:72:38:7c:e4:9d:7a:8e:84:c6:0a:ad:5e:bb:48:78: c3:39:77:1a:58:29:18:ae:86:d1:00:43:5f:99:40:61:8c:37: ce:de:db:dd:ef:f6:b7:fc:30:e3:f3:eb:13:45:3a:9e:0e:48: 62:9d:68:5f:2b:ad:26:25:98:e4:14:14:14:fb:ef:ff:0f:cc: a5:ef:3b:f8:cf:09:da:51:2a:fd:f0:5f:c7:81:82:0e:22:e0: f7:17:76:13:59:68:4b:3a:83:4e:85:75:86:30:01:13:15:c7: b2:17:ff:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVrAnKTy2SiL9aJwBIsZijhPAeXwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MmMyYTdiMDQ1MGYyMTFlOWZkZDU4Njg0MTdkNDA3ZWMw YTZhMzJiOWY5Mzg1OWUzY2RlZTgzM2FhMzFmNTk3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHQXqIQpiNd35qDjJ3I+GBodOJNXv0EOTKh9TulPqOUXpm lvpwUwBAEn0Eh72cOn51RG9qwHKBR11Y8ubp/6KJiz4yHxYjjmN7WUgzStUVkETP JlKgHKuf/GWu3WnQiq6kHc1E63V/WjzWw1HQdJxmdTVGVnUcRxfhiDBO1t2A6FSb kubqJMOxzuDFHtGIiU2H0uwXKyh9euQKJ/Qwq+xA6dsS6MLTzK+yevACMTPuL6z4 Tfy6nN+W77WBVBp80lbliG7jXUnTiHCe0UWlnbGjlaBVsWyFvtU4P+/oUogFmEKO eALw11fpOGuTyhQMNefc27Xe9Olfm4t6dXS+huVLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUALrEm0TrcNGAIFNUVSxiKNTI1w0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEwMmNhYTY3LWY5MDgtNDYwNS05ODYyLWFiMjhiMmZmMmNkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM28AAwDQYJKoZIhvcNAQELBQADggEBADAnt4F1SViIPQFKNCFd691qR1Ae 6t/76eJNBnF2GW9EQHN90tMGdtszZDl1MdBZsEQsEIVIldnWPvPYLNfuAyFwyxVc 4lMKofUTsJGNdWAq3hE5979aWFM6b0d0LMx7I4hQ76wEKAoC3f+Hcg+lyFxpJhtp l78a3OhTgsSH/+cdH9nPl4Vw71bh/xOAi2HKp/TCjXI4fOSdeo6ExgqtXrtIeMM5 dxpYKRiuhtEAQ1+ZQGGMN87e293v9rf8MOPz6xNFOp4OSGKdaF8rrSYlmOQUFBT7 7/8PzKXvO/jPCdpRKv3wX8eBgg4i4PcXdhNZaEs6g06FdYYwARMVx7IX/wo= -----END CERTIFICATE-----Generated at Wed Feb 5 10:50:03 2025 by rpki-client