$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/818e7d37-2665-41cd-b742-0306afcce5a9.roa File: 818e7d37-2665-41cd-b742-0306afcce5a9.roa (raw, json) Hash identifier: kzd+nOBwusbECNZf74YxJ95WOGmvmB5pPkFlQmZdVAQ= Subject key identifier: 31:5E:59:1B:92:F5:0C:63:0D:DA:D5:63:82:4A:C2:71:6A:93:27:03 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 218A30A6F0CF883554840B4DEE3F44D059C7D743 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/818e7d37-2665-41cd-b742-0306afcce5a9.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.64.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:8a:30:a6:f0:cf:88:35:54:84:0b:4d:ee:3f:44:d0:59:c7:d7:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:11:c0:2e:97:ae:9e:7e:04:96:da:d1:12:40: ae:58:94:24:b8:fe:0f:71:22:de:0b:ae:18:c0:31: ef:d1:c3:19:43:b6:67:35:6a:a1:7e:ab:b7:62:34: e0:13:a6:d3:5f:6d:09:93:79:03:48:51:ed:f8:67: 70:3c:fa:6f:5e:51:94:6d:2a:36:79:e5:f4:a2:d9: f7:4a:da:15:0b:7b:3e:5f:e3:bc:4c:e5:a0:a0:95: 7f:03:a9:d9:ef:2e:17:0d:13:2e:00:37:dd:25:31: 03:78:e4:57:3f:d4:2a:16:fb:45:27:aa:20:8f:f8: 31:2a:46:fa:90:e3:47:63:1e:3f:ab:fb:a6:45:ae: 46:d8:18:1a:ae:db:f3:1f:68:09:c3:1b:9f:a7:9b: b2:3e:bc:09:a9:43:d2:fe:a5:48:b4:b2:d0:05:fa: 5c:f1:12:38:ef:e6:21:1c:7e:e5:7e:36:80:6f:e6: 02:b7:4f:4b:ed:82:f2:94:b7:41:fc:3f:d9:67:59: cc:c7:c4:69:72:b6:fa:be:c9:b6:84:29:31:8f:82: b2:b7:d1:75:60:8d:2d:1b:f6:f6:af:53:07:58:47: a9:0a:0f:b0:4c:af:e4:59:10:87:16:ab:6c:4e:c4: 6a:52:a7:a8:aa:57:03:e4:6b:2f:56:88:6c:5c:43: e8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5E:59:1B:92:F5:0C:63:0D:DA:D5:63:82:4A:C2:71:6A:93:27:03 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/818e7d37-2665-41cd-b742-0306afcce5a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.64.0.0/13 Signature Algorithm: sha256WithRSAEncryption 94:07:01:b7:78:2a:f2:c0:be:65:19:8c:0b:29:b4:11:d0:4f: 2c:cb:73:26:40:2a:a1:e6:45:b9:e3:5c:26:67:e3:85:8f:fd: 02:6b:09:9f:b1:bb:d3:ad:29:33:cd:8f:c3:36:d8:67:30:47: 0d:1f:90:fb:87:14:ce:45:3a:fa:9b:82:eb:d6:94:0d:76:88: 07:28:57:1c:0a:40:5e:16:ec:aa:d5:00:d0:01:82:1f:77:de: ba:32:52:b4:b8:b0:c6:ae:b5:13:d8:5f:da:10:a3:bd:c5:5c: d2:a0:cf:8d:10:4d:dc:1c:7a:76:4e:80:dd:19:69:0f:74:e7: a4:34:3c:47:cd:9d:13:d1:3c:73:49:1f:a8:1b:ff:df:cc:34: a0:a7:60:bb:af:8a:f5:ba:c0:1a:f4:cf:fa:2d:2d:92:e4:08: 9f:0c:fd:12:6a:db:61:fa:b5:ea:42:fe:2c:13:52:c5:bf:68: 5c:ee:dc:2a:ed:d8:4f:cf:27:f8:3d:af:9d:ae:15:c9:36:6d: c8:95:5b:6c:67:38:fa:19:9c:50:31:a8:24:e0:b7:e5:4c:59: b5:96:ca:2e:b5:a0:8b:32:e2:02:82:39:27:02:d6:cb:de:0f: 60:49:ae:92:5c:f2:19:ae:34:88:58:4c:2a:db:e9:b5:aa:9a: c3:9d:d7:28 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIYowpvDPiDVUhAtN7j9E0FnH10MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOGJhOThmMTM4ZmFlOTA3OGVlNjdjZDRhNWM4MTMyZTdk ZmE2OWY3NDQzYmQwNDY1OWRhYTdkOWU5ZmNhMmMxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmEcAul66efgSW2tESQK5YlCS4/g9xIt4LrhjAMe/RwxlD tmc1aqF+q7diNOATptNfbQmTeQNIUe34Z3A8+m9eUZRtKjZ55fSi2fdK2hULez5f 47xM5aCglX8DqdnvLhcNEy4AN90lMQN45Fc/1CoW+0UnqiCP+DEqRvqQ40djHj+r +6ZFrkbYGBqu2/MfaAnDG5+nm7I+vAmpQ9L+pUi0stAF+lzxEjjv5iEcfuV+NoBv 5gK3T0vtgvKUt0H8P9lnWczHxGlytvq+ybaEKTGPgrK30XVgjS0b9vavUwdYR6kK D7BMr+RZEIcWq2xOxGpSp6iqVwPkay9WiGxcQ+hPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUMV5ZG5L1DGMN2tVjgkrCcWqTJwMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgxOGU3ZDM3LTI2NjUtNDFjZC1iNzQyLTAzMDZhZmNjZTVhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwM2QDANBgkqhkiG9w0BAQsFAAOCAQEAlAcBt3gq8sC+ZRmMCym0EdBPLMtz JkAqoeZFueNcJmfjhY/9AmsJn7G7060pM82PwzbYZzBHDR+Q+4cUzkU6+puC69aU DXaIByhXHApAXhbsqtUA0AGCH3feujJStLiwxq61E9hf2hCjvcVc0qDPjRBN3Bx6 dk6A3RlpD3TnpDQ8R82dE9E8c0kfqBv/38w0oKdgu6+K9brAGvTP+i0tkuQInwz9 EmrbYfq16kL+LBNSxb9oXO7cKu3YT88n+D2vna4VyTZtyJVbbGc4+hmcUDGoJOC3 5UxZtZbKLrWgizLiAoI5JwLWy94PYEmuklzyGa40iFhMKtvptaqaw53XKA== -----END CERTIFICATE-----Generated at Wed Feb 5 10:59:34 2025 by rpki-client