$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2da37142-c709-4fc4-b747-c41e4435825f.roa File: 2da37142-c709-4fc4-b747-c41e4435825f.roa (raw, json) Hash identifier: Bitlkk08WPc03g1pSioL+trptdMZYDApuCg73OA14A8= Subject key identifier: 37:44:47:D7:D6:18:0E:A1:9C:21:94:A1:74:8B:0E:3D:37:09:35:DB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3FA0D1EB63928ADEF44892B9974A6BD734A91F1C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2da37142-c709-4fc4-b747-c41e4435825f.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.206.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a0:d1:eb:63:92:8a:de:f4:48:92:b9:97:4a:6b:d7:34:a9:1f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:99:46:e6:8b:83:81:57:f5:90:d4:ef:97:96: 96:83:33:38:05:97:d5:07:3a:1c:75:b3:55:3b:dc: cb:c1:a0:25:b0:6f:73:29:40:e4:b6:15:9e:d1:a5: 63:d5:74:61:f8:97:10:8f:c1:ca:5f:e1:41:dd:f7: a2:0f:fa:53:41:ac:41:b7:00:90:3b:df:79:4e:20: 9d:e4:11:21:33:08:fd:cf:d6:6a:85:4a:8f:35:3a: 82:d5:94:6f:af:ef:de:b5:b2:47:e2:7e:f6:b1:6a: 51:e9:e1:b0:a8:10:3a:ef:bc:02:b2:0f:fa:d1:4b: da:fd:c9:0f:29:4c:4d:eb:b8:d6:3a:9c:0e:d1:82: 62:64:bd:7c:28:31:a3:25:48:92:98:74:88:6b:3a: 21:30:2b:bb:6b:b9:56:29:45:49:d6:a4:b7:73:eb: 39:7d:90:16:2d:38:b4:dd:7b:66:07:a3:ca:9a:77: 40:90:82:8b:76:d3:d3:4a:96:e2:05:0c:8e:08:45: 72:96:e9:79:d3:fa:fe:20:1f:89:37:d5:e3:5d:b5: 00:c0:d9:44:43:52:19:7f:e7:17:95:36:37:ef:6f: 53:8d:5d:cb:e8:01:25:f8:73:48:a0:86:45:f9:51: 3b:37:dc:be:e4:ec:d8:5f:92:a2:f9:b6:67:15:5a: 31:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:44:47:D7:D6:18:0E:A1:9C:21:94:A1:74:8B:0E:3D:37:09:35:DB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2da37142-c709-4fc4-b747-c41e4435825f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.206.192.0/19 Signature Algorithm: sha256WithRSAEncryption 8e:6c:4e:cc:fe:a7:d8:31:ce:a1:83:8e:ba:6d:cd:f5:ef:c5: 55:38:f1:6b:ed:21:69:79:c5:cc:44:1d:bd:44:1c:93:ff:88: 20:8a:6e:a3:c6:6c:67:b1:98:78:b3:28:35:fe:29:8a:b5:8d: 4e:10:8e:7c:8e:98:1d:33:2f:2c:c3:e6:da:cc:a6:ce:7c:f6: 51:66:78:96:20:42:3b:f3:e9:1b:f8:28:81:55:19:e0:32:0b: ef:8f:10:cb:6b:17:4d:a6:65:c5:51:78:f3:f1:b2:eb:2c:16: 4c:c0:c0:b8:be:06:28:05:70:12:e4:0b:7c:34:ed:1b:40:89: 41:e7:61:51:c7:97:d8:da:e4:6c:b0:d8:f8:97:2f:8e:99:96: 65:fa:f3:17:62:0d:09:fa:63:f2:c2:32:33:58:f5:22:d7:7c: 18:c6:2e:b8:a5:e3:24:9f:ec:c4:99:87:bb:d9:38:52:82:a2: e8:90:e1:89:0f:b1:86:dd:89:b9:58:c4:fe:d9:a7:e5:bf:73: 91:1d:c1:b8:53:8c:1c:78:84:26:de:2b:b7:20:49:fa:9a:ce: cc:f5:5c:48:1f:2e:1b:55:d3:8b:b9:35:0f:c2:3b:81:aa:47: 77:4b:f5:5f:69:2a:a5:d2:d5:d1:36:5c:da:36:ab:7b:a2:bb: 98:54:4d:ce -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP6DR62OSit70SJK5l0pr1zSpHxwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YWFkZWNjODM5MjM5YzQ0NTlhNWU3MTIyYzI2YTI3N2Ey MjRjM2JkYjI0NTZkN2IzMjVhY2NiMTMyOTU2NzRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4mUbmi4OBV/WQ1O+XlpaDMzgFl9UHOhx1s1U73MvBoCWw b3MpQOS2FZ7RpWPVdGH4lxCPwcpf4UHd96IP+lNBrEG3AJA733lOIJ3kESEzCP3P 1mqFSo81OoLVlG+v7961skfifvaxalHp4bCoEDrvvAKyD/rRS9r9yQ8pTE3ruNY6 nA7RgmJkvXwoMaMlSJKYdIhrOiEwK7truVYpRUnWpLdz6zl9kBYtOLTde2YHo8qa d0CQgot209NKluIFDI4IRXKW6XnT+v4gH4k31eNdtQDA2URDUhl/5xeVNjfvb1ON XcvoASX4c0ighkX5UTs33L7k7NhfkqL5tmcVWjHRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUN0RH19YYDqGcIZShdIsOPTcJNdswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJkYTM3MTQyLWM3MDktNGZjNC1iNzQ3LWM0MWU0NDM1ODI1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU2zsAwDQYJKoZIhvcNAQELBQADggEBAI5sTsz+p9gxzqGDjrptzfXvxVU4 8WvtIWl5xcxEHb1EHJP/iCCKbqPGbGexmHizKDX+KYq1jU4QjnyOmB0zLyzD5trM ps589lFmeJYgQjvz6Rv4KIFVGeAyC++PEMtrF02mZcVRePPxsussFkzAwLi+BigF cBLkC3w07RtAiUHnYVHHl9ja5Gyw2PiXL46ZlmX68xdiDQn6Y/LCMjNY9SLXfBjG Lril4ySf7MSZh7vZOFKCouiQ4YkPsYbdiblYxP7Zp+W/c5EdwbhTjBx4hCbeK7cg Sfqazsz1XEgfLhtV04u5NQ/CO4GqR3dL9V9pKqXS1dE2XNo2q3uiu5hUTc4= -----END CERTIFICATE-----Generated at Wed Feb 5 10:48:56 2025 by rpki-client