$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34c1c8bd-1bca-454e-a751-21737abd6aee.roa File: 34c1c8bd-1bca-454e-a751-21737abd6aee.roa (raw, json) Hash identifier: OZxmjOnrQCwVx78zs+SGXYwmBOvZ0buIF6W04illVMY= Subject key identifier: 60:4A:40:66:9C:C9:85:62:24:B7:A3:29:2A:9F:87:17:D8:97:2E:51 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 79CCF9D33D39A165D09C4FFAB5D5B1007218530A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34c1c8bd-1bca-454e-a751-21737abd6aee.roa Signing time: Tue 04 Feb 2025 00:00:00 +0000 ROA not before: Tue 04 Feb 2025 00:00:00 +0000 ROA not after: Tue 11 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.82.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:cc:f9:d3:3d:39:a1:65:d0:9c:4f:fa:b5:d5:b1:00:72:18:53:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 4 00:00:00 2025 GMT Not After : Mar 11 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:af:b9:13:71:b6:b6:b1:ea:3a:72:c0:8c:a5: 0c:15:31:b7:ed:53:16:65:cc:36:5c:5d:bc:ad:e3: c0:34:81:97:0f:5f:72:bc:32:19:b5:82:82:88:a4: 53:99:65:83:cf:0f:4d:b8:24:b2:ba:64:ef:7c:32: 8a:81:24:c9:05:34:d1:b4:f2:e8:7a:7d:3c:f4:10: c5:18:f8:40:c4:7f:87:7c:01:66:5e:e2:13:c1:17: bc:3c:3f:be:9e:de:a5:37:87:12:32:3f:34:0c:ff: 86:51:f6:83:cc:57:06:7c:55:39:00:53:89:c2:8f: 45:65:dc:74:87:b9:c4:ad:df:0b:1d:15:35:de:49: a3:53:1f:d9:85:a6:2e:3d:d6:63:d0:8f:39:19:fb: 71:67:b9:e0:4b:6b:70:24:ec:91:89:a7:36:3b:ef: 46:35:58:a5:82:93:8a:02:5c:74:fa:8d:ff:77:52: a5:c1:b7:17:4d:f0:75:96:aa:b6:d1:21:6c:78:a6: 2a:96:62:ef:97:6f:12:d9:0b:3b:cd:ee:0f:96:2a: 62:e9:96:b9:f5:82:e1:bf:42:17:88:55:01:c1:e3: ab:f9:9c:1c:92:12:80:b3:4c:88:26:08:0a:57:61: 2d:a9:b8:ba:de:77:a0:db:ef:c0:70:f0:a3:61:89: 85:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4A:40:66:9C:C9:85:62:24:B7:A3:29:2A:9F:87:17:D8:97:2E:51 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34c1c8bd-1bca-454e-a751-21737abd6aee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.82.0.0/17 Signature Algorithm: sha256WithRSAEncryption 22:f4:7a:e8:06:8c:ed:66:7b:cb:30:d3:4e:72:fd:ce:26:21: 64:b6:7f:0e:50:99:5b:4f:47:f3:de:46:c3:d8:2e:07:cb:f1: ed:76:24:b8:04:96:69:cf:52:3a:fb:29:f9:e5:f3:61:71:7b: 23:9a:8d:6c:f0:e6:e6:1d:76:e7:2d:67:b8:22:45:2c:92:2f: 0d:ae:6a:db:76:21:74:6e:ae:98:88:f4:6a:27:96:89:fb:98: 00:35:3b:26:10:0c:25:8f:11:00:b7:ae:1c:48:22:13:7e:fb: 98:8d:65:42:3b:e0:35:e5:16:26:0e:d9:35:39:99:21:e1:38: 7c:cc:8f:f1:dc:2d:b1:76:91:3e:67:9a:2e:8f:b2:83:01:31: 9e:e8:d1:b0:e5:27:43:c8:53:59:9f:4a:ce:5a:4f:d1:0b:69: db:0b:f7:2a:21:ce:c8:79:10:bf:f0:10:a6:8b:eb:f5:51:17: 70:f5:c8:fd:95:5a:4e:3b:c2:ce:a4:13:d6:d4:ea:af:38:73: 29:7e:c3:89:2f:48:9c:f3:9a:43:f1:03:71:c7:cd:eb:0f:ab: 3c:ba:b5:96:e3:5d:f3:55:c4:29:d3:17:74:a0:7d:48:81:e9: 15:49:d8:ea:0a:1c:ca:28:7d:e1:77:09:2c:97:f7:1c:50:eb: 75:0b:4c:27 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUecz50z05oWXQnE/6tdWxAHIYUwowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMjA0MDAwMDAwWhcNMjUwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0BmODdlZmVlZTdmZjFlMTgxN2ViMzkyY2NhMDEzNmZjMTE4 ZjdkMTZlZWVlM2QyNTlkMGUzM2MxNjFmNTYzN2IzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkr7kTcba2seo6csCMpQwVMbftUxZlzDZcXbyt48A0gZcP X3K8Mhm1goKIpFOZZYPPD024JLK6ZO98MoqBJMkFNNG08uh6fTz0EMUY+EDEf4d8 AWZe4hPBF7w8P76e3qU3hxIyPzQM/4ZR9oPMVwZ8VTkAU4nCj0Vl3HSHucSt3wsd FTXeSaNTH9mFpi491mPQjzkZ+3FnueBLa3Ak7JGJpzY770Y1WKWCk4oCXHT6jf93 UqXBtxdN8HWWqrbRIWx4piqWYu+XbxLZCzvN7g+WKmLplrn1guG/QheIVQHB46v5 nBySEoCzTIgmCApXYS2puLred6Db78Bw8KNhiYXbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYEpAZpzJhWIkt6MpKp+HF9iXLlEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM0YzFjOGJkLTFiY2EtNDU0ZS1hNzUxLTIxNzM3YWJkNmFlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2UgAwDQYJKoZIhvcNAQELBQADggEBACL0eugGjO1me8sw005y/c4mIWS2 fw5QmVtPR/PeRsPYLgfL8e12JLgElmnPUjr7Kfnl82FxeyOajWzw5uYdductZ7gi RSySLw2uatt2IXRurpiI9Gonlon7mAA1OyYQDCWPEQC3rhxIIhN++5iNZUI74DXl FiYO2TU5mSHhOHzMj/HcLbF2kT5nmi6PsoMBMZ7o0bDlJ0PIU1mfSs5aT9ELadsL 9yohzsh5EL/wEKaL6/VRF3D1yP2VWk47ws6kE9bU6q84cyl+w4kvSJzzmkPxA3HH zesPqzy6tZbjXfNVxCnTF3SgfUiB6RVJ2OoKHMoofeF3CSyX9xxQ63ULTCc= -----END CERTIFICATE-----Generated at Wed Feb 5 10:39:52 2025 by rpki-client