$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b4402af-9b1f-4f7d-9afb-8eb195729363.roa File: 3b4402af-9b1f-4f7d-9afb-8eb195729363.roa (raw, json) Hash identifier: QE+LfYdZiDi6VvrwgT2p1/OGXIfLebqA9qda+gpzgJw= Subject key identifier: 9D:59:5F:BD:90:35:A4:5B:48:37:7D:33:20:95:47:4F:98:BF:1E:B4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 26831351F88467E488035ABE51AA6C624E144788 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b4402af-9b1f-4f7d-9afb-8eb195729363.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 18.89.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:83:13:51:f8:84:67:e4:88:03:5a:be:51:aa:6c:62:4e:14:47:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4d:a6:2c:ba:4c:a5:0c:e4:fd:b4:a6:7e:8a: 0b:00:71:43:98:f9:34:9e:1b:98:ca:71:51:9f:17: 39:ab:fe:d6:ac:1b:9d:2a:78:8f:f3:31:69:9c:7a: ed:89:38:3c:cc:4b:b5:2b:54:8c:e1:96:50:d7:d0: bf:53:3d:55:17:4f:ee:a6:bc:49:35:bb:b8:68:ad: a9:48:ee:09:25:fb:89:05:3d:d1:30:56:e5:c5:c2: ff:4e:5e:75:27:62:a9:c5:c6:dd:29:8b:2d:4c:9e: f9:8d:2a:95:cf:e5:d6:bb:41:fd:e6:e3:fd:79:70: 06:43:ab:41:38:d3:fe:79:e2:87:27:2f:05:08:78: 66:72:21:11:45:9b:20:43:07:81:11:9e:8c:7e:46: e4:30:7c:c6:10:71:ab:16:c2:64:f1:c3:33:88:97: f2:72:0b:ee:ad:4f:af:19:2f:13:d6:dd:90:a4:ca: c5:8d:ba:0b:36:5c:2e:fa:5e:cd:36:b0:4b:6b:b4: 4f:0b:48:61:59:fb:24:e0:dd:bd:33:a9:ed:c0:66: c5:a6:c5:07:1a:e2:fb:62:ea:f6:ee:1b:af:34:90: 6e:ec:f2:a1:70:73:54:5a:91:18:96:fe:54:5c:28: 2d:b4:c8:f8:ff:e4:b9:61:12:a5:af:51:bb:f7:69: 92:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:59:5F:BD:90:35:A4:5B:48:37:7D:33:20:95:47:4F:98:BF:1E:B4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b4402af-9b1f-4f7d-9afb-8eb195729363.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.89.128.0/19 Signature Algorithm: sha256WithRSAEncryption b5:0b:80:34:92:e6:a9:ed:17:df:df:05:45:bb:8a:0b:ad:47: 1f:cf:75:90:c5:05:13:3b:53:00:2b:42:9d:3d:45:fe:1c:81: d6:54:10:1c:92:87:d6:eb:7f:a9:38:38:7d:c9:0a:f9:5a:d2: 4a:1d:32:53:66:0b:5c:38:6d:05:4b:19:ab:54:c0:43:db:f5: 7d:68:71:c7:fb:22:8c:c2:7f:e4:bd:a7:bc:2c:5d:0d:3b:8e: 86:d4:01:75:91:6e:a8:d2:49:bc:0a:ec:f7:f0:cf:59:c1:78: c6:98:c4:54:5d:44:2b:b2:83:ed:03:1e:d9:2d:fb:6b:75:d1: 4e:8f:55:68:1a:8d:5b:3e:74:25:4f:1e:bd:14:fb:5c:3e:9d: 72:c8:7c:f8:22:55:b1:fa:7e:c9:94:e7:f4:02:92:45:34:34: 41:7f:07:9f:a6:34:70:33:0c:05:57:81:3b:72:e0:10:4c:9b: 0c:1d:89:bb:cb:a9:61:e8:30:b5:13:f8:51:1b:d0:c2:eb:ff: ab:cc:fc:92:59:4a:7c:17:cf:16:93:eb:eb:41:b3:c0:ab:09: c9:b6:c5:17:34:ca:f7:ce:65:48:1c:ef:80:d8:3d:1a:b5:93: d0:19:50:c9:ea:5a:c0:eb:7a:db:ba:4a:df:de:8e:41:31:35: a9:ba:cc:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJoMTUfiEZ+SIA1q+UapsYk4UR4gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZmMzOTI0YjMzMWY5YzA3NGUwMDNkZGUyMzk0MGM4YmFh MjRiOTQ3YTlkNTBiMWZmNTkzNDIyNjJlMzFlNzg2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaTaYsukylDOT9tKZ+igsAcUOY+TSeG5jKcVGfFzmr/tas G50qeI/zMWmceu2JODzMS7UrVIzhllDX0L9TPVUXT+6mvEk1u7horalI7gkl+4kF PdEwVuXFwv9OXnUnYqnFxt0piy1MnvmNKpXP5da7Qf3m4/15cAZDq0E40/554ocn LwUIeGZyIRFFmyBDB4ERnox+RuQwfMYQcasWwmTxwzOIl/JyC+6tT68ZLxPW3ZCk ysWNugs2XC76Xs02sEtrtE8LSGFZ+yTg3b0zqe3AZsWmxQca4vti6vbuG680kG7s 8qFwc1RakRiW/lRcKC20yPj/5LlhEqWvUbv3aZKfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnVlfvZA1pFtIN30zIJVHT5i/HrQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiNDQwMmFmLTliMWYtNGY3ZC05YWZiLThlYjE5NTcyOTM2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUSWYAwDQYJKoZIhvcNAQELBQADggEBALULgDSS5qntF9/fBUW7igutRx/P dZDFBRM7UwArQp09Rf4cgdZUEBySh9brf6k4OH3JCvla0kodMlNmC1w4bQVLGatU wEPb9X1occf7IozCf+S9p7wsXQ07jobUAXWRbqjSSbwK7Pfwz1nBeMaYxFRdRCuy g+0DHtkt+2t10U6PVWgajVs+dCVPHr0U+1w+nXLIfPgiVbH6fsmU5/QCkkU0NEF/ B5+mNHAzDAVXgTty4BBMmwwdibvLqWHoMLUT+FEb0MLr/6vM/JJZSnwXzxaT6+tB s8CrCcm2xRc0yvfOZUgc74DYPRq1k9AZUMnqWsDretu6St/ejkExNam6zOA= -----END CERTIFICATE-----Generated at Wed Feb 5 09:44:48 2025 by rpki-client