$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4838de73-57c8-4786-89f4-8da78c91cdd7.roa File: 4838de73-57c8-4786-89f4-8da78c91cdd7.roa (raw, json) Hash identifier: 0JDMVPjJb5ssls0JcwA2i+zKbVv7zZr5TKVFzRQwIu8= Subject key identifier: F7:43:28:7A:D1:F5:93:AD:21:90:A9:11:8A:7E:44:CA:7A:64:09:01 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5DD53AB7A59B2EE1BB8DD1A55611F1DE6AA8DD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4838de73-57c8-4786-89f4-8da78c91cdd7.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.228.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d5:3a:b7:a5:9b:2e:e1:bb:8d:d1:a5:56:11:f1:de:6a:a8:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:69:f7:a2:4c:98:13:93:85:61:ca:32:24:da: 8b:92:70:cf:02:1c:ea:81:59:c2:47:12:40:68:5d: 23:9a:90:ac:7f:98:e6:48:ac:01:8c:be:70:71:e4: 10:1c:09:63:9c:46:07:45:32:e6:8e:60:e4:22:b3: 13:c4:c7:d2:57:2c:1a:5a:df:4b:a6:ba:2e:e0:7d: 59:4f:1a:83:f7:59:56:88:f4:d1:eb:bc:24:7b:cb: d3:f6:15:83:7a:56:f2:c7:5b:40:21:f5:e5:9d:13: 90:82:47:89:f8:35:b7:aa:e1:35:78:a1:ec:c3:77: 2c:5d:43:0c:b0:14:59:a6:0e:c1:d4:c1:d5:cc:bc: 71:1a:ea:e2:81:d3:56:66:86:6f:1d:32:04:2e:5c: b8:77:2f:48:b6:1d:23:c5:3c:ca:59:1f:64:eb:3f: 93:7d:7e:08:69:7d:01:dc:ad:e8:72:21:5f:ce:5a: 8a:0c:ce:db:d5:f3:1e:1b:42:94:b9:32:58:7f:c5: 56:7e:9e:3f:21:b6:f2:09:3b:4d:ee:d0:fd:4c:b1: df:76:d1:92:04:c1:40:0f:eb:01:31:1c:f8:32:61: 8d:53:5e:cc:23:3f:a1:fe:99:7c:5b:34:06:e4:41: 57:33:bc:5a:b2:ee:4c:88:ab:50:6d:f8:c7:07:be: c2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:43:28:7A:D1:F5:93:AD:21:90:A9:11:8A:7E:44:CA:7A:64:09:01 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4838de73-57c8-4786-89f4-8da78c91cdd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.228.64.0/18 Signature Algorithm: sha256WithRSAEncryption a0:6a:74:b4:a4:a9:03:2e:49:0f:8a:fb:a9:4d:6b:c7:59:e7: 77:16:ac:0f:35:92:d0:ef:ca:02:42:23:f8:5d:fd:1b:01:a9: 08:2c:15:40:bb:02:1e:ca:c1:46:11:c9:4c:4a:00:80:42:03: 0f:dc:6a:04:42:ce:fa:68:68:9c:61:e4:5a:44:57:21:79:32: f7:f8:69:fb:63:05:ef:4d:f1:26:19:76:c9:fe:ed:42:a2:cc: ee:f2:41:8a:e5:2f:46:1e:04:41:34:67:be:66:2b:bd:2c:a1: 09:55:b1:97:e4:6c:f8:13:d0:d2:0f:19:f2:77:bd:81:87:b3: a1:bb:3a:2f:ad:29:ae:13:75:61:a6:67:5a:85:89:50:5d:43: 44:15:3c:d1:e3:72:3a:23:c7:ac:23:0a:aa:cf:02:38:94:86: f3:3d:f5:a6:ec:f7:b8:a8:8b:c0:b5:58:92:3f:40:46:be:d9: 8f:e1:ff:c1:4d:b7:31:ea:f1:1f:a0:30:f7:03:f0:55:f9:c4: 40:72:c0:28:0d:75:a6:08:f1:65:a4:7d:5b:60:90:b5:35:2b: e1:41:d5:13:82:c9:2a:85:a7:8d:48:3b:65:23:ea:9a:fc:c4: d2:c5:04:43:d2:e3:c3:fe:c0:e7:c0:95:34:01:4c:4c:9f:7d: 4b:2d:51:9d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITXdU6t6WbLuG7jdGlVhHx3mqo3TANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTAxMzEwMDAwMDBaFw0yNTAzMDcyMzU5NTla MHoxSTBHBgNVBAUTQDMyOTAwZWQ4YWJhNjBlMDg1MjhjOGNhOWE5ZTFhYTJjZTY5 NmViOTZlMzE3NmZkNjQyY2MwZDJkZmE0MGFjN2UxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJ5p96JMmBOThWHKMiTai5JwzwIc6oFZwkcSQGhdI5qQrH+Y 5kisAYy+cHHkEBwJY5xGB0Uy5o5g5CKzE8TH0lcsGlrfS6a6LuB9WU8ag/dZVoj0 0eu8JHvL0/YVg3pW8sdbQCH15Z0TkIJHifg1t6rhNXih7MN3LF1DDLAUWaYOwdTB 1cy8cRrq4oHTVmaGbx0yBC5cuHcvSLYdI8U8ylkfZOs/k31+CGl9Adyt6HIhX85a igzO29XzHhtClLkyWH/FVn6ePyG28gk7Te7Q/Uyx33bRkgTBQA/rATEc+DJhjVNe zCM/of6ZfFs0BuRBVzO8WrLuTIirUG34xwe+whsCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBT3Qyh60fWTrSGQqRGKfkTKemQJATAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvNDgzOGRlNzMtNTdjOC00Nzg2LTg5ZjQtOGRhNzhjOTFjZGQ3LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBjbkQDANBgkqhkiG9w0BAQsFAAOCAQEAoGp0tKSpAy5JD4r7qU1rx1nndxas DzWS0O/KAkIj+F39GwGpCCwVQLsCHsrBRhHJTEoAgEIDD9xqBELO+mhonGHkWkRX IXky9/hp+2MF703xJhl2yf7tQqLM7vJBiuUvRh4EQTRnvmYrvSyhCVWxl+Rs+BPQ 0g8Z8ne9gYezobs6L60prhN1YaZnWoWJUF1DRBU80eNyOiPHrCMKqs8COJSG8z31 puz3uKiLwLVYkj9ARr7Zj+H/wU23MerxH6Aw9wPwVfnEQHLAKA11pgjxZaR9W2CQ tTUr4UHVE4LJKoWnjUg7ZSPqmvzE0sUEQ9Ljw/7A58CVNAFMTJ99Sy1RnQ== -----END CERTIFICATE-----Generated at Wed Feb 5 10:51:53 2025 by rpki-client