$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7bc2d2f7-b790-4846-bad9-b0fa648c2e12.roa File: 7bc2d2f7-b790-4846-bad9-b0fa648c2e12.roa (raw, json) Hash identifier: x3ApgVw0044ta0FRF4xxSK4ysrK9nb93zZs4LKPQrQ8= Subject key identifier: AF:3A:4A:6F:BA:DB:E0:1C:FA:6D:58:C1:DD:0A:64:7D:35:25:D6:73 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6FE93E00BC59471AB7A6B2BA07D934DBB0EFE1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7bc2d2f7-b790-4846-bad9-b0fa648c2e12.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.214.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e9:3e:00:bc:59:47:1a:b7:a6:b2:ba:07:d9:34:db:b0:ef:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9a:6d:38:83:3d:2d:71:d6:8c:22:54:7b:b3: ef:4e:ef:76:de:29:7e:73:3d:d1:4a:e9:15:3e:df: e1:d5:21:cf:64:46:62:dc:60:a3:c7:b4:c4:9c:51: 70:4b:86:59:ad:78:c9:94:d8:50:5a:e3:92:96:98: 4f:fb:c7:65:52:7e:ef:0c:42:fb:59:4f:e4:89:8b: 4d:74:de:da:18:d9:d7:56:e4:b4:5b:c6:c5:c3:f8: eb:22:8a:fc:b9:34:8e:42:30:e5:83:9d:3f:b4:0b: 17:8f:ef:2a:c9:79:e8:85:7f:70:a7:81:ef:2b:9f: e0:ad:d2:75:11:6c:90:ff:23:15:10:03:c2:d3:a4: f1:88:68:1f:2e:d2:5f:cd:62:be:38:17:9d:b1:de: f1:c1:a8:d2:18:49:b1:eb:11:f0:dc:bb:cc:39:80: f2:9a:bf:ec:18:a2:78:2d:1b:fc:f1:86:ec:b8:fd: 95:f4:f1:6b:99:06:87:2f:ad:86:01:f3:5f:e4:f9: 33:0d:f8:a6:1a:65:cf:47:42:6c:4f:f2:5d:0b:d1: 63:89:9d:39:fc:05:e9:2e:06:2f:1b:62:bb:3d:a0: e2:95:ed:3c:38:72:56:3e:67:29:c6:ed:cb:28:b1: da:37:5b:fd:c7:79:06:d1:dc:77:5e:65:95:98:a8: 08:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3A:4A:6F:BA:DB:E0:1C:FA:6D:58:C1:DD:0A:64:7D:35:25:D6:73 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7bc2d2f7-b790-4846-bad9-b0fa648c2e12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.214.192.0/19 Signature Algorithm: sha256WithRSAEncryption 99:5d:84:2b:39:38:7d:82:dc:6d:df:69:68:fc:37:cf:66:4b: 5e:14:e4:1c:be:61:59:a8:70:34:b9:b3:cf:62:a7:b5:20:aa: 46:39:e1:fb:0d:8d:88:b1:12:c5:79:a5:49:b7:2c:55:e6:ad: 1b:df:95:ab:c6:d9:71:19:fe:27:2d:1f:c7:96:0d:eb:79:ff: fa:27:fb:b0:d7:f0:28:c3:b0:77:74:0d:fb:b0:40:9e:ba:a4: 5a:8c:ef:8a:a0:45:eb:2d:1a:71:e6:20:16:c2:e5:fc:df:f8: 92:9a:15:3d:dc:43:63:b4:24:b4:40:3b:08:87:8e:52:8c:96: 97:c7:1a:f8:cd:ac:68:77:b0:f9:19:fd:92:91:6a:c8:df:16: ad:e2:90:56:ab:ce:3d:1f:71:bc:d6:f5:7b:b9:28:b9:4b:58: ea:d1:10:55:d8:4e:83:e9:2e:a4:39:7e:64:5e:61:a2:32:a0: cd:a4:25:98:4d:90:99:67:d4:99:b0:60:aa:77:a4:d6:a4:20: 80:93:8e:de:17:7e:5b:2e:71:0b:98:e5:46:0f:53:b2:8c:63: c1:40:9f:dd:3e:bb:db:f5:f5:02:f9:0f:c0:b3:4b:a1:62:68: c3:01:5b:30:1a:07:2e:9b:cb:86:37:1b:ee:13:34:07:a1:87: 25:eb:fa:2e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITb+k+ALxZRxq3prK6B9k027Dv4TANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTAxMjcwMDAwMDBaFw0yNTAzMDMyMzU5NTla MHoxSTBHBgNVBAUTQDdmYjVhOTE0NGIyNDExYTZjYTRmMmVlZGYwZDIxMWY5MzEy N2I5ZmQwNDFiNTNkOGRmZWNmM2RhMDg5NzJhYjMxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJ+abTiDPS1x1owiVHuz707vdt4pfnM90UrpFT7f4dUhz2RG Ytxgo8e0xJxRcEuGWa14yZTYUFrjkpaYT/vHZVJ+7wxC+1lP5ImLTXTe2hjZ11bk tFvGxcP46yKK/Lk0jkIw5YOdP7QLF4/vKsl56IV/cKeB7yuf4K3SdRFskP8jFRAD wtOk8YhoHy7SX81ivjgXnbHe8cGo0hhJsesR8Ny7zDmA8pq/7BiieC0b/PGG7Lj9 lfTxa5kGhy+thgHzX+T5Mw34phplz0dCbE/yXQvRY4mdOfwF6S4GLxtiuz2g4pXt PDhyVj5nKcbtyyix2jdb/cd5BtHcd15llZioCPkCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSvOkpvutvgHPptWMHdCmR9NSXWczAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvN2JjMmQyZjctYjc5MC00ODQ2LWJhZDktYjBmYTY0OGMyZTEyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBTbWwDANBgkqhkiG9w0BAQsFAAOCAQEAmV2EKzk4fYLcbd9paPw3z2ZLXhTk HL5hWahwNLmzz2KntSCqRjnh+w2NiLESxXmlSbcsVeatG9+Vq8bZcRn+Jy0fx5YN 63n/+if7sNfwKMOwd3QN+7BAnrqkWozviqBF6y0aceYgFsLl/N/4kpoVPdxDY7Qk tEA7CIeOUoyWl8ca+M2saHew+Rn9kpFqyN8WreKQVqvOPR9xvNb1e7kouUtY6tEQ VdhOg+kupDl+ZF5hojKgzaQlmE2QmWfUmbBgqnek1qQggJOO3hd+Wy5xC5jlRg9T soxjwUCf3T672/X1AvkPwLNLoWJowwFbMBoHLpvLhjcb7hM0B6GHJev6Lg== -----END CERTIFICATE-----Generated at Wed Feb 5 10:44:26 2025 by rpki-client