$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61686685-ff60-4c51-b315-424e8f36b47e.roa File: 61686685-ff60-4c51-b315-424e8f36b47e.roa (raw, json) Hash identifier: UPo5cU7Kz+RjQNTw4wiFbkzCChdk2n8KnPit7yHmN6M= Subject key identifier: 81:49:21:D1:C0:53:83:39:94:73:41:5E:87:06:AC:EC:0B:E3:AA:B9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5B7BFE6645EE0C18E62D414060242B0E0CBC129E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61686685-ff60-4c51-b315-424e8f36b47e.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.233.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:7b:fe:66:45:ee:0c:18:e6:2d:41:40:60:24:2b:0e:0c:bc:12:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9c:30:6f:9d:13:a6:57:4a:bb:66:ed:d9:5c: 76:93:50:82:72:25:5e:fc:f8:0b:9b:98:bd:f5:73: fb:d8:db:d4:7e:0e:55:42:0b:4f:59:0a:ec:e3:4c: 5a:d2:b2:e2:88:5f:24:6f:0d:a3:36:33:53:26:87: a8:3d:36:eb:46:20:9d:12:6a:c8:c8:52:fc:30:e2: c6:45:ec:12:9a:72:e6:4e:83:ec:f0:58:82:51:3f: c5:ae:54:1d:9a:49:91:58:8d:c3:f6:5d:bd:ee:5a: b9:ab:20:d2:fc:9e:23:00:c2:15:1f:27:29:9d:04: 40:c0:11:8f:e4:3b:72:6c:ab:8c:9b:4f:83:7e:08: 79:38:4d:67:e0:d3:f3:e4:71:13:05:cf:5e:78:92: 84:48:42:97:27:2f:1c:28:52:ad:de:22:16:f0:3f: 4a:bc:e5:b1:c8:c1:81:34:e3:d8:56:a7:66:a9:bf: 37:88:e6:07:a4:35:a4:26:a0:6d:82:39:0b:ca:08: 1d:bb:f3:aa:73:d7:82:78:92:44:98:f9:4b:22:2a: d8:40:f3:ed:3d:81:a4:90:5c:a7:be:54:4f:5e:58: 34:69:62:ce:67:de:ce:c9:38:b7:b5:33:60:ff:1c: 33:b0:32:1b:0f:2b:32:ea:44:8a:07:90:bf:58:43: f9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:49:21:D1:C0:53:83:39:94:73:41:5E:87:06:AC:EC:0B:E3:AA:B9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61686685-ff60-4c51-b315-424e8f36b47e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.233.0.0/18 Signature Algorithm: sha256WithRSAEncryption 7c:12:1f:b7:fd:b4:aa:aa:1b:dc:ad:1d:6a:a4:55:86:56:b4: 4d:a1:76:50:c3:66:65:d3:c6:2a:0e:0e:ca:78:55:b1:f0:ed: 0a:54:16:39:e1:f1:fc:46:a7:30:f6:d9:ad:62:90:fd:36:5b: 13:03:ec:34:17:74:33:1c:62:7f:61:f3:f4:db:6e:d9:c8:4b: bc:b3:7a:d6:c7:a2:23:53:10:57:9a:67:99:b8:08:db:40:e1: 55:a1:39:19:a8:c8:fb:dd:a2:69:0f:13:da:bd:7c:e7:d6:e6: 6e:23:05:c2:35:fa:d6:99:5d:18:5c:52:ab:e5:7a:7c:67:11: 1b:d9:15:02:48:64:62:91:e5:44:04:19:a3:13:5e:71:75:e4: a0:f9:a8:16:1b:d3:25:45:29:ab:71:31:6a:5a:18:d8:6a:e1: 66:5e:6e:7a:c9:de:b7:c7:98:21:f8:10:a0:d2:9b:fe:40:af: e1:6b:9c:02:b7:6c:ac:62:0f:f2:ed:74:85:7d:03:2d:43:65: f1:4d:05:58:39:fb:78:f8:c4:33:6a:5f:00:ea:6c:67:bf:50: 21:02:0e:b2:db:25:58:97:53:10:0c:6e:9e:87:02:04:16:a4: eb:11:96:38:dd:80:dc:7d:6b:fd:b0:e8:7a:2b:f6:69:25:d3: 16:9a:5c:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW3v+ZkXuDBjmLUFAYCQrDgy8Ep4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZWNmNDZmNmYyNGFjNzMwYWJmNzRlOWMyMWE1MzUzMjNi MjZkYmZhZTc3ODRlZmFhZmQxM2EzZTE0NmVmZmQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLnDBvnROmV0q7Zu3ZXHaTUIJyJV78+AubmL31c/vY29R+ DlVCC09ZCuzjTFrSsuKIXyRvDaM2M1Mmh6g9NutGIJ0SasjIUvww4sZF7BKacuZO g+zwWIJRP8WuVB2aSZFYjcP2Xb3uWrmrINL8niMAwhUfJymdBEDAEY/kO3Jsq4yb T4N+CHk4TWfg0/PkcRMFz154koRIQpcnLxwoUq3eIhbwP0q85bHIwYE049hWp2ap vzeI5gekNaQmoG2COQvKCB2786pz14J4kkSY+UsiKthA8+09gaSQXKe+VE9eWDRp Ys5n3s7JOLe1M2D/HDOwMhsPKzLqRIoHkL9YQ/n3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgUkh0cBTgzmUc0Fehwas7AvjqrkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYxNjg2Njg1LWZmNjAtNGM1MS1iMzE1LTQyNGU4ZjM2YjQ3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY26QAwDQYJKoZIhvcNAQELBQADggEBAHwSH7f9tKqqG9ytHWqkVYZWtE2h dlDDZmXTxioODsp4VbHw7QpUFjnh8fxGpzD22a1ikP02WxMD7DQXdDMcYn9h8/Tb btnIS7yzetbHoiNTEFeaZ5m4CNtA4VWhORmoyPvdomkPE9q9fOfW5m4jBcI1+taZ XRhcUqvlenxnERvZFQJIZGKR5UQEGaMTXnF15KD5qBYb0yVFKatxMWpaGNhq4WZe bnrJ3rfHmCH4EKDSm/5Ar+FrnAK3bKxiD/LtdIV9Ay1DZfFNBVg5+3j4xDNqXwDq bGe/UCECDrLbJViXUxAMbp6HAgQWpOsRljjdgNx9a/2w6Hor9mkl0xaaXJg= -----END CERTIFICATE-----Generated at Wed Feb 5 10:52:05 2025 by rpki-client