$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a8070c5-0cc9-4b90-a36a-f5fe5c898da6.roa File: 8a8070c5-0cc9-4b90-a36a-f5fe5c898da6.roa (raw, json) Hash identifier: VqNGZ5/uuhlrm+ieggr6i0Y7xdv/zf4rBdJt3spZxS8= Subject key identifier: 0B:27:53:75:7B:6B:E6:21:6E:AB:7B:71:2D:6D:3A:C5:B9:1E:35:BC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 132F64D0B93B63EF3D758EF5862E660146C74F80 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a8070c5-0cc9-4b90-a36a-f5fe5c898da6.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.124.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2f:64:d0:b9:3b:63:ef:3d:75:8e:f5:86:2e:66:01:46:c7:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2c:13:86:6b:57:32:ca:02:fc:a4:2a:7f:33: 7f:8a:e4:69:1e:e4:4f:4e:74:f8:c6:b1:a3:e7:67: e2:c2:fb:a2:63:8a:be:31:40:9f:01:43:c6:14:22: 06:69:37:27:b9:f1:49:1f:40:f1:44:52:3b:c4:09: 23:ca:4c:94:1d:02:bb:68:ae:9c:b2:46:93:3b:da: 57:f1:04:63:57:0f:45:a0:a2:76:8a:dd:4a:43:5f: 05:2d:fc:56:1e:50:e4:fe:30:87:59:73:f5:cc:ad: 7d:d5:2a:f6:50:0d:13:d3:98:ec:1a:89:24:5d:61: ae:01:3d:1a:91:77:1c:73:94:a0:23:ef:e3:11:a1: 82:6b:c6:3a:55:ab:8b:a3:3e:32:4a:4f:1e:ae:8f: 9f:e0:75:23:19:de:60:0a:d2:77:4b:87:47:90:30: 87:85:5f:bb:e4:87:e7:5d:d8:c0:4e:73:fa:41:5b: 96:88:99:20:7c:71:7b:d5:3a:e7:b7:73:c6:53:49: 21:1a:29:fe:97:fd:00:cb:ad:36:c6:83:20:b3:89: 86:5b:e0:a7:8e:b8:01:f8:42:79:ca:87:07:bf:81: 53:37:0a:1c:c7:67:26:f2:67:ca:b6:9d:81:22:55: f3:a4:e7:ec:09:c1:b9:09:00:55:2c:9a:a3:e2:d8: 72:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:27:53:75:7B:6B:E6:21:6E:AB:7B:71:2D:6D:3A:C5:B9:1E:35:BC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a8070c5-0cc9-4b90-a36a-f5fe5c898da6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.124.159.0/24 Signature Algorithm: sha256WithRSAEncryption a5:85:46:a3:5e:ff:11:f3:10:7e:12:12:5d:ab:9a:25:d1:2e: 50:c5:09:43:9f:4f:99:38:1c:eb:25:da:e5:53:cd:58:de:83: 73:1b:46:eb:a5:b3:cc:61:9e:7c:17:71:5c:6a:37:79:19:6f: da:f9:23:18:50:68:ac:76:c8:1b:98:e8:53:c5:99:10:c0:6c: 18:15:2c:5f:f2:33:f2:82:a2:bb:bc:6a:31:88:90:88:7b:b6: 2e:36:db:12:02:bc:20:30:ed:12:f0:54:f8:8f:9e:d0:2e:c7: bd:70:30:86:a6:17:d3:ec:4d:b0:ec:5f:57:bf:d0:4a:07:61: 73:60:b4:e0:0c:77:78:2b:d4:7f:10:32:71:18:58:59:00:8b: f5:51:e5:6d:a3:e3:54:b4:fa:49:84:44:31:26:d1:4e:81:34: 84:8a:22:5d:cd:0c:6e:ba:1a:11:c2:3a:23:13:64:b7:99:52: a6:c5:92:04:85:67:42:a3:ec:40:bd:94:fd:34:f5:a6:21:1c: 95:74:92:ce:d4:0e:62:da:3b:6e:a9:0a:c6:d6:76:2e:ff:ce: 4a:fe:aa:1c:c8:03:d6:8d:f2:84:db:83:5b:6f:09:1f:2c:cc: 61:03:41:9d:d9:4a:09:2a:f7:1d:1c:86:2b:aa:49:48:b6:20: 3d:48:13:cb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEy9k0Lk7Y+89dY71hi5mAUbHT4AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOWVhZTlkZjk2ODY0MzRhNTE2ZWU2M2Y5YTRmNGQzMmZj M2MxYmU1YjViMDMzYzJhYmUyYjcwYTVkM2E2ODYwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKLBOGa1cyygL8pCp/M3+K5Gke5E9OdPjGsaPnZ+LC+6Jj ir4xQJ8BQ8YUIgZpNye58UkfQPFEUjvECSPKTJQdArtorpyyRpM72lfxBGNXD0Wg onaK3UpDXwUt/FYeUOT+MIdZc/XMrX3VKvZQDRPTmOwaiSRdYa4BPRqRdxxzlKAj 7+MRoYJrxjpVq4ujPjJKTx6uj5/gdSMZ3mAK0ndLh0eQMIeFX7vkh+dd2MBOc/pB W5aImSB8cXvVOue3c8ZTSSEaKf6X/QDLrTbGgyCziYZb4KeOuAH4QnnKhwe/gVM3 ChzHZybyZ8q2nYEiVfOk5+wJwbkJAFUsmqPi2HLJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCydTdXtr5iFuq3txLW06xbkeNbwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhhODA3MGM1LTBjYzktNGI5MC1hMzZhLWY1ZmU1Yzg5OGRhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADfJ8wDQYJKoZIhvcNAQELBQADggEBAKWFRqNe/xHzEH4SEl2rmiXRLlDF CUOfT5k4HOsl2uVTzVjeg3MbRuuls8xhnnwXcVxqN3kZb9r5IxhQaKx2yBuY6FPF mRDAbBgVLF/yM/KCoru8ajGIkIh7ti422xICvCAw7RLwVPiPntAux71wMIamF9Ps TbDsX1e/0EoHYXNgtOAMd3gr1H8QMnEYWFkAi/VR5W2j41S0+kmERDEm0U6BNISK Il3NDG66GhHCOiMTZLeZUqbFkgSFZ0Kj7EC9lP009aYhHJV0ks7UDmLaO26pCsbW di7/zkr+qhzIA9aN8oTbg1tvCR8szGEDQZ3ZSgkq9x0chiuqSUi2ID1IE8s= -----END CERTIFICATE-----Generated at Wed Feb 5 10:59:14 2025 by rpki-client