$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6de0e09c-7fc0-44f1-91c5-605dba16855c.roa File: 6de0e09c-7fc0-44f1-91c5-605dba16855c.roa (raw, json) Hash identifier: z+5UEF4zeXTeqmlD0D6XDvt16hfk+t5kZ5ix2ALaUpM= Subject key identifier: 14:82:AB:14:78:50:0E:F1:82:DD:02:8F:FA:D4:39:E3:F3:03:74:4A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7F516B686AF38C676208891A94E9CEE0A706B255 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6de0e09c-7fc0-44f1-91c5-605dba16855c.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.185.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:51:6b:68:6a:f3:8c:67:62:08:89:1a:94:e9:ce:e0:a7:06:b2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:43:f6:93:df:8d:f2:16:01:6c:44:fe:c3:e7: e4:0a:3c:81:12:7a:a1:b5:ce:e9:60:68:18:b0:cd: f3:e9:e1:f2:fb:a1:77:41:7f:53:15:7a:5b:46:52: 59:b0:f0:21:2e:2c:f1:cc:17:69:5f:06:ec:fd:f9: 69:60:a7:e8:10:25:4e:34:23:c3:54:ac:66:46:7f: 4f:8f:6e:e0:04:04:b8:6a:3f:2d:74:77:86:77:f4: 41:d3:67:ad:19:3c:dc:8e:96:5e:7c:2f:bf:ee:0b: fb:fe:5c:6e:80:e2:79:09:af:1b:5b:a3:6f:c3:24: fd:e8:14:d9:32:4e:59:95:11:8c:a6:2f:f5:0c:10: db:f1:71:f8:a2:91:21:5e:b4:01:16:66:e8:ad:12: b6:62:4f:e1:a7:de:a4:fa:4f:da:e9:38:bc:09:ad: 54:ec:ae:27:25:16:e5:00:75:ca:40:dc:ac:b7:55: 2a:e5:67:09:8c:5f:a9:53:57:91:6a:75:9a:b8:b9: 32:06:3a:1e:a1:9e:36:39:b6:73:51:3e:f3:75:b1: e7:f2:a5:0d:55:7f:9d:59:67:01:69:f8:c5:52:73: 4f:72:5f:5a:2e:26:b5:c9:b3:77:8d:8f:02:e9:16: 45:ab:e8:31:7f:40:0a:34:ec:8f:b2:3d:1f:52:e2: e1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:82:AB:14:78:50:0E:F1:82:DD:02:8F:FA:D4:39:E3:F3:03:74:4A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6de0e09c-7fc0-44f1-91c5-605dba16855c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.185.0.0/22 Signature Algorithm: sha256WithRSAEncryption a1:b4:c2:ed:ea:46:95:76:37:fe:ba:ad:f1:c3:c0:8c:cd:b1: 53:04:d4:2c:50:d5:b6:4a:e3:e6:9f:c6:eb:11:d4:32:84:73: 9d:68:ff:87:da:38:8f:79:e0:3f:fc:c8:8b:fc:4f:27:fd:48: fb:99:e7:f7:99:70:ba:53:85:a6:63:ff:c1:70:ed:92:f9:36: 90:68:a1:1a:37:0a:d5:ef:1b:28:d6:32:12:7a:1c:85:bf:2a: e2:fd:13:ba:1f:80:71:60:df:d9:f0:64:e9:aa:c6:0a:78:f0: 70:cb:32:8d:ec:fa:fb:8e:62:9f:84:2a:e3:24:e9:3e:64:af: 06:f2:30:f9:61:34:78:2f:48:6c:60:84:81:51:f0:3d:5b:88: 1a:98:8b:85:c9:69:b0:69:03:3f:ed:ea:99:63:f8:39:41:34: 96:64:ef:48:7e:67:81:65:dd:f0:c3:63:eb:8a:e6:8d:a0:5d: 71:69:19:f6:85:f7:93:3b:d2:83:21:af:21:65:b0:e8:69:a7: ef:3f:ed:28:96:6f:15:cd:89:b2:7b:19:9d:82:fe:77:95:03: 85:a9:a2:5e:7a:96:4f:0e:b4:18:a8:92:33:ed:76:f5:07:8a: eb:29:48:9c:5e:0e:e5:d3:dc:d7:70:6f:0e:ba:7d:4f:c9:df: 41:fc:b9:ce -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUf1FraGrzjGdiCIkalOnO4KcGslUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjEwMTQyYjFhZTk3NDQ2OGVjM2NmZWQyMjM0M2JiMDEz ZGE5OTE4NDc2OThhNzViMDJkNmUyNzVmMjUzY2QwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOQ/aT343yFgFsRP7D5+QKPIESeqG1zulgaBiwzfPp4fL7 oXdBf1MVeltGUlmw8CEuLPHMF2lfBuz9+Wlgp+gQJU40I8NUrGZGf0+PbuAEBLhq Py10d4Z39EHTZ60ZPNyOll58L7/uC/v+XG6A4nkJrxtbo2/DJP3oFNkyTlmVEYym L/UMENvxcfiikSFetAEWZuitErZiT+Gn3qT6T9rpOLwJrVTsriclFuUAdcpA3Ky3 VSrlZwmMX6lTV5FqdZq4uTIGOh6hnjY5tnNRPvN1sefypQ1Vf51ZZwFp+MVSc09y X1ouJrXJs3eNjwLpFkWr6DF/QAo07I+yPR9S4uELAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFIKrFHhQDvGC3QKP+tQ54/MDdEowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZkZTBlMDljLTdmYzAtNDRmMS05MWM1LTYwNWRiYTE2ODU1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIPuQAwDQYJKoZIhvcNAQELBQADggEBAKG0wu3qRpV2N/66rfHDwIzNsVME 1CxQ1bZK4+afxusR1DKEc51o/4faOI954D/8yIv8Tyf9SPuZ5/eZcLpThaZj/8Fw 7ZL5NpBooRo3CtXvGyjWMhJ6HIW/KuL9E7ofgHFg39nwZOmqxgp48HDLMo3s+vuO Yp+EKuMk6T5krwbyMPlhNHgvSGxghIFR8D1biBqYi4XJabBpAz/t6plj+DlBNJZk 70h+Z4Fl3fDDY+uK5o2gXXFpGfaF95M70oMhryFlsOhpp+8/7SiWbxXNibJ7GZ2C /neVA4Wpol56lk8OtBiokjPtdvUHiuspSJxeDuXT3Ndwbw66fU/J30H8uc4= -----END CERTIFICATE-----Generated at Wed Feb 5 10:50:13 2025 by rpki-client