$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b1cedc8-8c30-4e76-9b1d-ac7b2e541a7e.roa File: 3b1cedc8-8c30-4e76-9b1d-ac7b2e541a7e.roa (raw, json) Hash identifier: GG9FBtOe0WNJ9LHhkSuL+yp4mG8iRx5/hBaXTuVMCZw= Subject key identifier: B5:6D:E4:D0:D9:69:A7:57:75:77:35:64:0C:13:0B:D5:4A:51:00:60 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 703556F0BB19723676362E944799CAA33FEAF3A7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b1cedc8-8c30-4e76-9b1d-ac7b2e541a7e.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.243.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:35:56:f0:bb:19:72:36:76:36:2e:94:47:99:ca:a3:3f:ea:f3:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:09:90:df:4a:4c:c5:22:8a:b5:b6:21:1a:b6: f9:a7:f2:cd:ac:08:70:94:88:7f:32:fe:74:8d:84: 94:de:a5:50:10:94:6c:8f:b7:84:cb:16:7e:a0:c7: ec:2c:59:94:11:f1:03:a8:58:44:8e:cc:f5:21:3d: 5d:4e:b9:7c:a3:f8:2d:24:7e:e8:9a:36:07:8d:e5: ac:49:71:44:67:96:0f:ef:9e:bc:3f:51:5a:b4:5e: 1b:bb:13:09:ef:fe:11:11:23:f1:0c:1c:04:39:50: 6f:af:58:41:f5:2a:ef:d6:32:8b:4f:d2:5b:5b:a8: 0b:3d:7b:6b:03:af:2c:90:4a:1f:cc:4a:0b:7f:1d: f7:3e:25:7c:50:c9:ca:fe:5e:ab:15:f5:78:7d:45: f5:57:b6:65:a8:84:53:45:7e:83:c8:29:24:a7:9e: 29:89:8f:29:7e:6d:73:ee:f5:ad:65:a0:cc:e0:57: b0:46:a5:06:16:2e:aa:77:e3:82:3c:43:79:17:e3: 68:7b:cd:a2:c0:d5:3f:57:0d:c6:b2:cd:11:66:08: ea:6d:8c:a9:51:56:8c:e4:6a:ab:02:bf:64:c0:f5: ac:b3:0e:bf:91:9a:71:7e:d6:4c:e3:49:91:39:d5: 8d:3c:50:d8:07:35:f1:97:48:00:a0:6c:dd:2a:78: c5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6D:E4:D0:D9:69:A7:57:75:77:35:64:0C:13:0B:D5:4A:51:00:60 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b1cedc8-8c30-4e76-9b1d-ac7b2e541a7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.243.24.0/22 Signature Algorithm: sha256WithRSAEncryption 70:4e:4c:b7:75:25:de:c5:a9:a5:cc:6a:c3:75:eb:aa:57:65: 02:c7:1d:3c:22:63:0c:4a:36:63:b7:36:59:61:e4:81:62:66: 92:56:51:0a:4c:37:e2:dc:70:11:59:d0:99:f9:5f:02:1a:29: 77:d4:f1:41:dd:bd:69:2a:87:bc:55:6d:39:44:16:b1:21:c1: 40:9c:84:2b:d1:17:24:85:d0:aa:83:4e:48:bf:5f:72:78:f9: 08:e9:5d:64:28:7c:e6:93:18:05:b5:3f:3b:ac:7f:3e:36:5b: d9:37:37:52:70:0b:53:00:5b:51:9b:0d:f7:7e:e0:42:ca:5a: 9d:d8:32:38:90:1d:0b:83:09:38:4c:de:24:87:c5:c1:cf:39: 68:e5:e9:79:38:16:b1:2b:f1:51:b0:88:1e:cf:1e:08:ce:02: 38:7d:47:ed:f3:4b:ca:ce:39:d3:3d:f2:ed:be:59:80:48:89: 95:6f:3b:38:60:f2:0a:34:2b:a8:4f:77:9e:a0:b3:0a:61:e4: 87:66:2a:c8:bb:3d:f5:19:cf:c5:af:de:82:82:cd:80:6b:b1: c1:be:9b:05:9b:4e:c0:32:92:32:1a:81:04:9a:14:65:c5:d1: 96:bc:57:26:21:20:b8:d4:a3:78:98:95:8f:a4:52:26:c5:b7: 98:42:f0:81 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcDVW8LsZcjZ2Ni6UR5nKoz/q86cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OWEzNGU2NDYwYTc0ZjNkM2FmMTg0MGZiYzhkZTM1ZTIz ODg3OTA5NGU4NDkxYWM1ZmFhNDY3MDY1ZDU1YWMwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqCZDfSkzFIoq1tiEatvmn8s2sCHCUiH8y/nSNhJTepVAQ lGyPt4TLFn6gx+wsWZQR8QOoWESOzPUhPV1OuXyj+C0kfuiaNgeN5axJcURnlg/v nrw/UVq0Xhu7Ewnv/hERI/EMHAQ5UG+vWEH1Ku/WMotP0ltbqAs9e2sDryyQSh/M Sgt/Hfc+JXxQycr+XqsV9Xh9RfVXtmWohFNFfoPIKSSnnimJjyl+bXPu9a1loMzg V7BGpQYWLqp344I8Q3kX42h7zaLA1T9XDcayzRFmCOptjKlRVozkaqsCv2TA9ayz Dr+RmnF+1kzjSZE51Y08UNgHNfGXSACgbN0qeMXjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtW3k0Nlpp1d1dzVkDBML1UpRAGAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiMWNlZGM4LThjMzAtNGU3Ni05YjFkLWFjN2IyZTU0MWE3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI28xgwDQYJKoZIhvcNAQELBQADggEBAHBOTLd1Jd7FqaXMasN166pXZQLH HTwiYwxKNmO3Nllh5IFiZpJWUQpMN+LccBFZ0Jn5XwIaKXfU8UHdvWkqh7xVbTlE FrEhwUCchCvRFySF0KqDTki/X3J4+QjpXWQofOaTGAW1Pzusfz42W9k3N1JwC1MA W1GbDfd+4ELKWp3YMjiQHQuDCThM3iSHxcHPOWjl6Xk4FrEr8VGwiB7PHgjOAjh9 R+3zS8rOOdM98u2+WYBIiZVvOzhg8go0K6hPd56gswph5IdmKsi7PfUZz8Wv3oKC zYBrscG+mwWbTsAykjIagQSaFGXF0Za8VyYhILjUo3iYlY+kUibFt5hC8IE= -----END CERTIFICATE-----Generated at Wed Feb 5 10:42:50 2025 by rpki-client