$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6811b6f3-74cf-4cfa-ba26-8496ff89b72e.roa File: 6811b6f3-74cf-4cfa-ba26-8496ff89b72e.roa (raw, json) Hash identifier: BpTDm7sY8y0GSHxW9ydVAoQ+jLEOVQ6THO2ALB5W7Qk= Subject key identifier: 7C:D6:A6:31:81:A6:8C:BD:C4:57:2D:5B:D2:AE:9C:95:8F:04:30:FF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4040135BEB1E6E09C3875FA6D58EB0B777B65B15 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6811b6f3-74cf-4cfa-ba26-8496ff89b72e.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.0.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:40:13:5b:eb:1e:6e:09:c3:87:5f:a6:d5:8e:b0:b7:77:b6:5b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bc:f7:80:08:65:2c:71:ed:a7:51:b9:a4:ec: 47:4f:24:73:0a:f6:1d:d6:e3:0c:63:40:af:53:04: 8b:82:79:0b:88:ec:97:45:1d:23:9b:48:30:6f:ed: 51:3a:63:36:db:dd:13:e5:2e:f6:78:02:2b:a3:23: 6a:70:67:7d:33:3c:b1:26:af:b2:c7:59:02:eb:37: 1b:87:c1:be:1b:6d:8e:84:c4:9d:3e:32:5c:5d:50: 87:37:72:d1:9f:d1:cb:c8:e9:e1:01:d5:62:cb:3e: 0d:fb:ad:d0:9c:9b:25:93:02:d1:fa:c4:9a:0d:e4: de:26:89:65:b8:a7:fb:7d:74:f3:17:9a:e7:6e:96: 68:67:9a:df:22:80:97:c2:5b:71:27:74:67:b1:b6: b5:98:b0:20:56:35:a7:36:f9:8b:e4:af:4a:b4:88: 12:75:66:83:5f:20:bf:41:62:cd:78:5b:03:17:4e: 8f:77:bd:71:28:37:55:04:10:91:f2:9d:db:9b:57: 58:11:4a:e7:b7:3b:cf:d0:65:20:68:1f:09:af:ad: 26:ac:74:8f:72:88:21:c5:26:99:2f:16:23:8b:d9: 7d:75:bf:60:97:ea:26:d9:3c:5e:a8:60:85:03:f0: a1:b3:72:26:81:d6:6b:27:9c:51:82:3e:74:da:6a: 3d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D6:A6:31:81:A6:8C:BD:C4:57:2D:5B:D2:AE:9C:95:8F:04:30:FF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6811b6f3-74cf-4cfa-ba26-8496ff89b72e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.0.8.0/24 Signature Algorithm: sha256WithRSAEncryption 59:2a:95:75:8e:c7:2d:00:30:e6:b6:59:c3:99:31:1d:8b:81: 11:24:35:37:4f:64:db:ec:c0:69:6a:3b:9a:37:aa:80:c1:b5: 9c:71:3e:bf:4e:a5:e5:3a:5f:cf:b7:bc:be:66:9e:2c:c3:a2: 14:4d:3f:97:88:40:f1:69:f2:c1:c4:2e:6f:08:5d:37:bc:c9: dd:a9:49:ad:43:a6:78:09:d5:fb:c2:55:78:20:c7:a5:6b:b0: f2:6b:f5:c4:b9:14:96:60:29:f8:6a:9f:f2:e5:dd:7a:95:a8: b0:85:b6:46:d3:0d:cf:f8:8d:b7:8c:b9:72:7a:bd:fd:ca:b5: ad:b2:7f:34:87:43:c5:7a:5f:76:43:f3:3d:6f:2c:b4:3a:71: b5:fe:ce:50:1e:8d:65:52:94:4c:e7:7a:3a:20:a2:31:d3:00: 0a:c6:35:1a:77:59:aa:ee:67:55:62:ce:27:85:9b:f0:f0:ef: 79:b8:60:ca:6a:40:a7:d3:a5:43:9c:04:7a:70:57:20:ec:3f: 3e:21:e6:f1:55:c1:8a:76:41:76:e3:f3:3c:03:02:1b:a8:95: b1:f5:95:d5:9a:bd:9f:e4:e4:1b:64:da:ee:b1:f8:fb:97:01: 16:e6:ca:05:ac:96:6a:15:81:5d:72:73:d4:55:67:b3:ea:ac: 58:00:e9:6d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQEATW+sebgnDh1+m1Y6wt3e2WxUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjg2MmM1MDQ3ZjA0MzBmNTI3OWQ5MjMxOTRkNjUwM2Q4 YWY2MjBiZmFjNjFmNjI1ZjcwOGJiMTdmZjYzMGRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKvPeACGUsce2nUbmk7EdPJHMK9h3W4wxjQK9TBIuCeQuI 7JdFHSObSDBv7VE6Yzbb3RPlLvZ4AiujI2pwZ30zPLEmr7LHWQLrNxuHwb4bbY6E xJ0+MlxdUIc3ctGf0cvI6eEB1WLLPg37rdCcmyWTAtH6xJoN5N4miWW4p/t9dPMX mudulmhnmt8igJfCW3EndGextrWYsCBWNac2+Yvkr0q0iBJ1ZoNfIL9BYs14WwMX To93vXEoN1UEEJHyndubV1gRSue3O8/QZSBoHwmvrSasdI9yiCHFJpkvFiOL2X11 v2CX6ibZPF6oYIUD8KGzciaB1msnnFGCPnTaaj3DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfNamMYGmjL3EVy1b0q6clY8EMP8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY4MTFiNmYzLTc0Y2YtNGNmYS1iYTI2LTg0OTZmZjg5YjcyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAAgwDQYJKoZIhvcNAQELBQADggEBAFkqlXWOxy0AMOa2WcOZMR2LgREk NTdPZNvswGlqO5o3qoDBtZxxPr9OpeU6X8+3vL5mnizDohRNP5eIQPFp8sHELm8I XTe8yd2pSa1DpngJ1fvCVXggx6VrsPJr9cS5FJZgKfhqn/Ll3XqVqLCFtkbTDc/4 jbeMuXJ6vf3Kta2yfzSHQ8V6X3ZD8z1vLLQ6cbX+zlAejWVSlEznejogojHTAArG NRp3WaruZ1VizieFm/Dw73m4YMpqQKfTpUOcBHpwVyDsPz4h5vFVwYp2QXbj8zwD AhuolbH1ldWavZ/k5Btk2u6x+PuXARbmygWslmoVgV1yc9RVZ7PqrFgA6W0= -----END CERTIFICATE-----Generated at Wed Feb 5 10:35:54 2025 by rpki-client