$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af8e3b09-bf50-473b-9e3c-6b3c03ffc327.roa File: af8e3b09-bf50-473b-9e3c-6b3c03ffc327.roa (raw, json) Hash identifier: HWGKL2BnGs4dCORGVY09KyELpDgVPjMoHf4Ek+Meq3k= Subject key identifier: A3:98:8F:BC:81:3A:3C:DB:81:14:F2:E3:74:E2:C1:27:A7:E2:95:82 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 30C7349B7BE432470AFF91FDCBF85DBCDA47494D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af8e3b09-bf50-473b-9e3c-6b3c03ffc327.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.161.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:c7:34:9b:7b:e4:32:47:0a:ff:91:fd:cb:f8:5d:bc:da:47:49:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a2:e9:45:3f:6a:9d:8f:4e:be:6f:aa:ad:2e: a1:0a:31:55:df:f6:48:b1:03:14:6b:11:37:25:62: fa:55:93:e9:c2:f7:23:0f:64:93:1e:53:e0:b7:ea: 13:36:ff:93:f9:05:f3:99:cc:ce:88:b2:ed:91:b5: 4a:da:e8:7f:f7:7e:a8:a2:56:a4:33:d5:76:b8:7d: 4c:c8:d4:6b:32:3d:0e:6d:fe:f2:17:8b:61:0e:78: d8:5d:04:3b:32:36:ac:f4:cb:ae:e8:c3:2d:07:f8: d1:52:4b:95:4f:86:8c:0e:19:ae:64:81:12:d7:6a: c0:e0:31:dc:1c:f1:f6:db:9f:89:87:d3:8b:ea:9b: c3:b3:f8:d6:e3:b6:ee:08:0a:03:b6:af:0d:8f:8e: fa:f5:9f:33:11:fd:a2:1c:8c:dd:b5:28:cc:4e:c4: f4:a5:1b:70:0c:96:c6:1c:19:b7:f6:a9:58:bc:45: 01:0a:ec:7a:f8:27:0a:c2:64:b8:b1:c7:a0:72:ce: 20:57:33:2c:96:83:9b:ff:7f:b9:a9:dc:78:93:93: 12:c5:07:46:e1:de:51:18:b7:5c:63:ae:0f:ed:47: 04:bf:41:60:0c:5d:c2:a4:c8:6b:d4:21:a2:17:47: dc:7e:f5:ef:50:57:1c:c5:29:31:79:ab:e3:3b:cf: 4c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:98:8F:BC:81:3A:3C:DB:81:14:F2:E3:74:E2:C1:27:A7:E2:95:82 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af8e3b09-bf50-473b-9e3c-6b3c03ffc327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.161.0.0/17 Signature Algorithm: sha256WithRSAEncryption 9f:49:52:23:e9:94:85:11:5b:87:5d:f9:07:b9:77:35:e7:61: 2f:36:52:4b:0d:a5:b4:f7:9f:66:fc:2b:56:5f:4e:5d:4e:54: 3b:fa:4b:af:b4:e6:a7:59:08:43:30:dd:e7:80:52:68:d5:82: 03:c3:de:53:e3:06:49:ca:d7:24:dc:59:6f:5c:00:23:82:cf: aa:4d:88:0f:6a:f5:ee:af:d1:ab:a6:96:d8:7b:30:06:64:a7: 5f:f8:22:c9:c6:49:bf:77:75:6e:4d:51:30:5f:ec:98:fa:b5: 06:7d:64:09:7a:af:a7:60:fa:08:a1:f8:1f:d5:40:e6:15:26: f3:8f:9e:ca:5f:39:6b:0d:fd:78:6b:fb:85:81:b1:93:37:2e: b3:82:58:81:3a:06:a8:99:d9:97:ad:6b:52:d0:98:d0:69:9b: a6:d7:fc:6f:7d:c8:88:f3:11:9b:c2:eb:df:b0:83:57:a5:84: 11:bd:28:14:82:39:e1:31:9c:65:b9:0a:d5:7e:ac:4f:f5:c1: a0:e2:06:b8:c9:ae:1f:5f:83:57:9d:65:52:50:45:7a:fa:23: ae:e8:34:ac:fc:f9:e0:38:36:05:99:ee:4b:15:80:da:86:0b: d3:11:63:1e:39:51:40:02:d1:83:27:8e:94:b0:fa:70:cf:cd: 39:9d:b4:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMMc0m3vkMkcK/5H9y/hdvNpHSU0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYTNkOWU2MzUxZTVjOGRkZmJlMWViYjZhM2E2ZTNiYzc1 M2RhNmNiNTY2YmExMzU5YWE0YTVkMzFiYzNhMTIzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCooulFP2qdj06+b6qtLqEKMVXf9kixAxRrETclYvpVk+nC 9yMPZJMeU+C36hM2/5P5BfOZzM6Isu2RtUra6H/3fqiiVqQz1Xa4fUzI1GsyPQ5t /vIXi2EOeNhdBDsyNqz0y67owy0H+NFSS5VPhowOGa5kgRLXasDgMdwc8fbbn4mH 04vqm8Oz+Nbjtu4ICgO2rw2Pjvr1nzMR/aIcjN21KMxOxPSlG3AMlsYcGbf2qVi8 RQEK7Hr4JwrCZLixx6ByziBXMyyWg5v/f7mp3HiTkxLFB0bh3lEYt1xjrg/tRwS/ QWAMXcKkyGvUIaIXR9x+9e9QVxzFKTF5q+M7z0w9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUo5iPvIE6PNuBFPLjdOLBJ6filYIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FmOGUzYjA5LWJmNTAtNDczYi05ZTNjLTZiM2MwM2ZmYzMyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2oQAwDQYJKoZIhvcNAQELBQADggEBAJ9JUiPplIURW4dd+Qe5dzXnYS82 UksNpbT3n2b8K1ZfTl1OVDv6S6+05qdZCEMw3eeAUmjVggPD3lPjBknK1yTcWW9c ACOCz6pNiA9q9e6v0aumlth7MAZkp1/4IsnGSb93dW5NUTBf7Jj6tQZ9ZAl6r6dg +gih+B/VQOYVJvOPnspfOWsN/Xhr+4WBsZM3LrOCWIE6BqiZ2Zeta1LQmNBpm6bX /G99yIjzEZvC69+wg1elhBG9KBSCOeExnGW5CtV+rE/1waDiBrjJrh9fg1edZVJQ RXr6I67oNKz8+eA4NgWZ7ksVgNqGC9MRYx45UUAC0YMnjpSw+nDPzTmdtL8= -----END CERTIFICATE-----Generated at Wed Feb 5 10:45:43 2025 by rpki-client