$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50767251-a434-47e8-aaa4-6818dde30f2c.roa File: 50767251-a434-47e8-aaa4-6818dde30f2c.roa (raw, json) Hash identifier: DZnL3vDBwaHhe66E7couEO799T30xD81K1C/DSEY85Y= Subject key identifier: 0E:51:4A:CE:35:5F:EC:43:EC:E3:00:AA:81:29:9A:9F:AA:84:49:9D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2B736C10B9FEF2D67A731A41FF7AA97D268DF1AA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50767251-a434-47e8-aaa4-6818dde30f2c.roa Signing time: Fri 07 Feb 2025 00:00:00 +0000 ROA not before: Fri 07 Feb 2025 00:00:00 +0000 ROA not after: Fri 14 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.150.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:73:6c:10:b9:fe:f2:d6:7a:73:1a:41:ff:7a:a9:7d:26:8d:f1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 7 00:00:00 2025 GMT Not After : Mar 14 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d6:29:89:5a:d4:f8:23:73:96:d7:15:48:90: a3:73:04:50:ce:57:2b:3f:da:2f:10:96:87:31:19: 14:28:6c:39:01:dc:93:b7:4d:e5:ce:b9:29:bd:62: 44:a9:29:bf:4c:71:b7:86:61:45:cb:5e:b2:34:c5: ea:b6:08:b7:78:09:9d:ef:04:e6:3b:9f:8e:f1:76: 3a:a5:d9:fb:6e:f1:3f:50:1a:a2:98:d0:5d:b4:8f: 41:d0:99:51:90:c5:e1:d3:26:ad:da:81:50:9c:bd: d3:51:d6:18:35:b4:af:6f:e2:fa:0f:aa:b8:63:17: 19:5a:18:61:cc:28:a1:0b:6d:ac:09:d0:15:bf:0f: 57:33:ed:5c:71:54:24:4d:c2:95:0c:8c:01:27:8c: cf:7a:ef:e7:0d:bc:2e:21:fe:5c:b2:ae:d4:bb:5b: 9e:e0:75:38:11:e4:9e:f9:32:5b:0e:73:36:0a:95: be:a0:7d:d6:da:29:15:80:e7:74:7e:e0:bc:52:59: 49:11:e0:e7:95:8c:9d:b6:0c:ad:81:38:7e:f8:41: e2:f2:cb:a4:2a:32:d7:ea:d6:9d:c3:a0:67:e1:9e: 0d:83:80:b1:18:11:c3:ce:6f:97:56:c9:ad:23:38: c2:92:16:00:1c:ab:41:9d:83:f5:6d:80:0d:fc:6b: 99:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:51:4A:CE:35:5F:EC:43:EC:E3:00:AA:81:29:9A:9F:AA:84:49:9D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50767251-a434-47e8-aaa4-6818dde30f2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.150.0.0/16 Signature Algorithm: sha256WithRSAEncryption 20:4a:08:41:0a:4f:dc:95:57:12:fc:a7:7b:08:63:e4:b5:68: c4:17:b9:82:13:48:e5:8a:e1:c5:46:44:30:dc:8c:b0:8e:8a: d6:c7:ed:83:87:70:25:38:17:1e:ef:53:95:3a:dc:74:ca:dc: 48:33:46:fa:e2:83:e1:30:fb:6a:3a:dd:79:89:2b:7f:30:ee: a3:79:12:e5:61:3c:70:67:8c:8e:be:9b:73:85:c0:b0:7a:cc: ab:ee:ae:bb:7f:84:77:24:7d:be:b3:48:a5:13:41:b5:59:00: 6e:70:ba:c2:83:0c:77:c1:90:f6:28:92:b0:b6:5b:51:07:ed: 98:b5:82:3f:dd:ee:c2:41:6e:46:c9:ac:32:21:f9:18:61:fe: e6:54:da:6c:bc:5e:95:bc:94:b2:a2:b1:0c:ea:b9:d0:d5:7d: 1b:88:84:19:d0:6a:b6:93:a7:2b:41:d5:de:9f:9f:b5:86:30: 99:2e:60:3b:af:69:20:4c:94:fa:f9:92:c8:87:ee:61:7f:56: 90:19:1e:e0:d2:15:e9:24:3b:57:b4:5f:b6:17:d1:df:9f:86: 7c:f6:84:9d:dd:83:50:08:aa:19:b5:ad:1f:23:0f:f9:b5:6a: 31:85:9f:5c:0c:4b:8a:7d:b5:ab:b1:8e:ec:f6:19:dc:5a:0f: b7:0e:d9:d6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUK3NsELn+8tZ6cxpB/3qpfSaN8aowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMjA3MDAwMDAwWhcNMjUwMzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OGU4NDg0OTAzMWQwZDUyNWJmODhmYmRlMmE4ZjVmM2Nl YmNkNjcwMDJiYjIxY2NiMDg2N2UzNDAxODljZmIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDT1imJWtT4I3OW1xVIkKNzBFDOVys/2i8QlocxGRQobDkB 3JO3TeXOuSm9YkSpKb9McbeGYUXLXrI0xeq2CLd4CZ3vBOY7n47xdjql2ftu8T9Q GqKY0F20j0HQmVGQxeHTJq3agVCcvdNR1hg1tK9v4voPqrhjFxlaGGHMKKELbawJ 0BW/D1cz7VxxVCRNwpUMjAEnjM967+cNvC4h/lyyrtS7W57gdTgR5J75MlsOczYK lb6gfdbaKRWA53R+4LxSWUkR4OeVjJ22DK2BOH74QeLyy6QqMtfq1p3DoGfhng2D gLEYEcPOb5dWya0jOMKSFgAcq0Gdg/VtgA38a5mpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUDlFKzjVf7EPs4wCqgSman6qESZ0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUwNzY3MjUxLWE0MzQtNDdlOC1hYWE0LTY4MThkZGUzMGYyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPljANBgkqhkiG9w0BAQsFAAOCAQEAIEoIQQpP3JVXEvynewhj5LVoxBe5 ghNI5YrhxUZEMNyMsI6K1sftg4dwJTgXHu9TlTrcdMrcSDNG+uKD4TD7ajrdeYkr fzDuo3kS5WE8cGeMjr6bc4XAsHrMq+6uu3+EdyR9vrNIpRNBtVkAbnC6woMMd8GQ 9iiSsLZbUQftmLWCP93uwkFuRsmsMiH5GGH+5lTabLxelbyUsqKxDOq50NV9G4iE GdBqtpOnK0HV3p+ftYYwmS5gO69pIEyU+vmSyIfuYX9WkBke4NIV6SQ7V7RfthfR 35+GfPaEnd2DUAiqGbWtHyMP+bVqMYWfXAxLin21q7GO7PYZ3FoPtw7Z1g== -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:47 2025 by rpki-client