$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3355b984-73cf-41bd-999f-5f870c62652a.roa File: 3355b984-73cf-41bd-999f-5f870c62652a.roa (raw, json) Hash identifier: XBS0xrNsYfVm54PGBmz16UU9gmcGdKbfhh/nac9wXwk= Subject key identifier: 04:69:14:C0:9F:B0:A6:C8:CE:B6:CB:11:DB:21:1D:AB:3C:6A:E8:E1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 038B16CE8E0A2A8C82F5B3A14A7BDCA70D8DD992 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3355b984-73cf-41bd-999f-5f870c62652a.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.244.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8b:16:ce:8e:0a:2a:8c:82:f5:b3:a1:4a:7b:dc:a7:0d:8d:d9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:4f:65:28:d6:7a:71:da:5b:af:44:84:6c: 48:ce:da:07:0b:9b:f8:9d:85:44:f3:a3:6e:b9:3a: 1a:d7:fb:58:bd:7a:89:ff:e5:9f:99:a5:44:b3:b7: 00:8d:c9:0f:d9:1a:23:ef:2e:68:2e:72:e9:17:d8: ab:79:20:82:0d:95:48:08:21:65:41:a7:c7:82:83: 41:74:0f:94:18:6f:03:2e:f3:5c:cc:f6:75:bd:3e: d1:27:9d:ce:56:35:23:57:84:14:3a:5d:d2:4d:43: eb:4b:a3:58:9c:cf:1e:31:2a:10:f9:93:23:c9:d9: ca:61:f0:26:96:3f:01:b3:ce:6e:37:aa:4a:5d:77: 56:c4:f4:3f:98:66:01:0f:ed:72:7e:07:67:96:0b: aa:8a:0f:59:36:b7:0b:1a:49:c9:8f:41:d8:d1:94: c1:51:50:6f:99:9f:7c:95:8a:e2:1e:5d:5f:3a:d3: f9:b6:68:e7:93:e2:7d:12:48:4f:1f:0f:55:0d:e1: eb:bb:fe:0a:e2:31:01:a1:c1:0d:68:76:d1:86:28: 0c:45:89:ad:a3:1f:54:30:09:d9:84:89:bc:06:a6: 78:fa:e4:16:ee:69:13:00:33:f7:44:4c:1b:ab:dd: cc:08:41:02:be:23:79:2c:bf:85:b9:58:ab:a5:24: 3a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:69:14:C0:9F:B0:A6:C8:CE:B6:CB:11:DB:21:1D:AB:3C:6A:E8:E1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3355b984-73cf-41bd-999f-5f870c62652a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.244.122.0/24 Signature Algorithm: sha256WithRSAEncryption 69:03:56:b5:18:ca:a3:d9:71:e7:a0:59:3b:f8:00:49:50:cf: b2:30:4c:f4:94:7f:50:40:21:c7:2f:2d:af:0f:83:29:89:4e: 23:b6:fd:f5:e6:5a:63:d1:77:c8:1c:21:0c:8e:23:bc:87:f4: e1:45:11:db:36:2e:c6:c6:2b:05:e4:b3:ab:0d:5e:60:18:1c: d4:2f:67:b0:a0:04:a9:43:ac:6d:a0:35:a3:29:5f:3b:4c:da: ac:d7:6c:27:77:54:73:e5:c0:ff:3b:a6:d8:c2:d4:1a:dd:d4: a3:2f:e0:7d:93:98:ee:83:36:56:5a:48:19:b5:ab:39:1d:1a: 48:5a:a8:c7:43:c5:07:cf:97:c9:4f:aa:7b:be:a9:42:73:f0: e8:6a:15:1c:0d:9c:0b:86:6d:87:d0:4c:95:56:0c:86:06:4c: 41:80:e8:72:bb:42:ff:d1:38:d0:c5:f2:da:a1:aa:8d:3a:89: 5c:c7:66:b6:a3:2e:26:69:44:ff:cb:ff:b0:96:ff:b1:14:c2: 79:71:2f:0e:27:ec:c5:0f:c0:e6:97:8e:a4:95:64:83:cb:a2: f7:38:4e:92:a0:45:fc:2b:c4:84:c7:95:0b:92:44:40:2d:5e: 4a:66:e9:14:8f:a4:d0:c2:07:b0:2b:df:3b:a9:2e:54:a0:c6: 62:67:fa:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA4sWzo4KKoyC9bOhSnvcpw2N2ZIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OWQ1YjE4M2U5ODdiYmU1MzQ5MTY4MGNhYjlmNjE0Mjk0 YzFlNzU5ZjkwMTMzOGM4M2Y4ODkyYjAyYTE3OGQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1+U9lKNZ6cdpbr0SEbEjO2gcLm/idhUTzo265OhrX+1i9 eon/5Z+ZpUSztwCNyQ/ZGiPvLmgucukX2Kt5IIINlUgIIWVBp8eCg0F0D5QYbwMu 81zM9nW9PtEnnc5WNSNXhBQ6XdJNQ+tLo1iczx4xKhD5kyPJ2cph8CaWPwGzzm43 qkpdd1bE9D+YZgEP7XJ+B2eWC6qKD1k2twsaScmPQdjRlMFRUG+Zn3yViuIeXV86 0/m2aOeT4n0SSE8fD1UN4eu7/griMQGhwQ1odtGGKAxFia2jH1QwCdmEibwGpnj6 5BbuaRMAM/dETBur3cwIQQK+I3ksv4W5WKulJDoVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBGkUwJ+wpsjOtssR2yEdqzxq6OEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMzNTViOTg0LTczY2YtNDFiZC05OTlmLTVmODcwYzYyNjUyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN9HowDQYJKoZIhvcNAQELBQADggEBAGkDVrUYyqPZceegWTv4AElQz7Iw TPSUf1BAIccvLa8PgymJTiO2/fXmWmPRd8gcIQyOI7yH9OFFEds2LsbGKwXks6sN XmAYHNQvZ7CgBKlDrG2gNaMpXztM2qzXbCd3VHPlwP87ptjC1Brd1KMv4H2TmO6D NlZaSBm1qzkdGkhaqMdDxQfPl8lPqnu+qUJz8OhqFRwNnAuGbYfQTJVWDIYGTEGA 6HK7Qv/RONDF8tqhqo06iVzHZrajLiZpRP/L/7CW/7EUwnlxLw4n7MUPwOaXjqSV ZIPLovc4TpKgRfwrxITHlQuSREAtXkpm6RSPpNDCB7Ar3zupLlSgxmJn+jQ= -----END CERTIFICATE-----Generated at Wed Feb 5 10:45:38 2025 by rpki-client