$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b92b82f7-3203-43d3-8063-9f05e9c3a3a6.roa File: b92b82f7-3203-43d3-8063-9f05e9c3a3a6.roa (raw, json) Hash identifier: 7qj42C2Ifib733ej8gdEyru/xm+6uodboadbdHv/07M= Subject key identifier: 24:3B:3D:FE:DD:49:64:A0:AD:4C:F3:66:05:75:0B:5D:64:74:BA:CC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5A1535818B2FBF411ED1BB35CC1421ED63DE617B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b92b82f7-3203-43d3-8063-9f05e9c3a3a6.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.56.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:15:35:81:8b:2f:bf:41:1e:d1:bb:35:cc:14:21:ed:63:de:61:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:42:a9:25:1b:e7:2e:49:81:56:31:b2:c0:c5: db:98:91:9c:86:29:5a:33:7d:bb:64:a3:7b:cf:53: 29:69:e8:e7:b7:45:68:46:4d:ea:2f:48:12:2b:e0: d4:04:55:67:98:eb:ec:7d:c8:61:fa:d7:c7:7c:87: d6:07:33:e9:5d:2c:8b:d3:8a:f7:e4:8a:80:df:04: 93:2f:72:6c:ea:e3:4c:07:1a:0a:cc:cc:36:e1:aa: b3:09:29:ca:f9:4a:8f:cf:19:91:d7:62:ab:54:c5: 89:7f:4f:13:37:60:88:3a:e0:33:f1:74:39:cb:6a: 38:c3:31:2f:dd:84:9c:85:a0:7f:b1:eb:0a:25:f0: ff:f9:3c:91:f4:46:e6:7e:38:8b:96:e2:65:e6:2d: 1b:08:fc:f5:7a:5b:75:f5:9e:90:ac:eb:9f:b9:fa: e6:8c:fc:8d:68:43:a6:f0:85:42:06:10:eb:63:b9: 64:a6:ad:7e:63:59:d9:c0:6a:00:33:61:18:1b:b5: 9f:91:67:e1:1e:26:fb:be:15:95:9e:d7:b9:d2:d7: 15:0c:da:0d:be:9b:0b:65:1d:b8:63:54:83:ea:b0: e1:dc:99:6d:24:e9:29:60:e8:50:eb:c5:81:e8:db: 10:0d:ba:b4:d2:72:61:4e:a8:fa:fd:4c:3d:a3:e0: 4a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3B:3D:FE:DD:49:64:A0:AD:4C:F3:66:05:75:0B:5D:64:74:BA:CC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b92b82f7-3203-43d3-8063-9f05e9c3a3a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.56.192.0/18 Signature Algorithm: sha256WithRSAEncryption 20:b4:20:df:34:89:0b:c5:d0:83:84:db:b1:d6:a1:94:5e:98: ab:6f:98:3f:59:f7:c5:12:27:c6:8f:cd:0e:46:a3:62:76:53: fe:00:52:e3:9c:f2:4c:3b:fe:d4:fa:41:0b:20:9d:ef:6a:f7: ac:f4:be:55:25:66:52:9f:15:7a:7a:6a:0d:79:a8:eb:ad:65: a9:c6:c0:72:29:45:78:5f:08:d1:3e:9b:93:2f:81:d2:8b:8f: 4f:05:e2:f6:10:a9:4e:56:1f:d2:e0:c0:c3:42:74:4f:d1:1a: 1d:99:4c:f6:57:9e:8f:2f:74:79:1f:09:8c:47:63:8e:49:94: 29:87:5a:d4:33:25:cb:36:57:4a:58:a0:be:6d:3f:a9:87:03: da:79:6f:4e:63:76:34:97:e6:02:e4:0c:a5:8f:dc:14:10:34: 60:94:eb:11:7f:a8:3e:63:92:d5:ae:cc:41:1c:65:52:df:c7: f2:5e:77:5f:95:9e:e2:2b:20:92:2b:24:ae:89:6b:03:21:89: 50:f4:d3:7d:0d:fb:7a:68:1d:e1:69:02:bc:9c:71:89:77:f6: 95:1a:df:37:09:56:93:6d:0c:2b:c7:64:ea:4c:d2:ad:ba:b9: e8:55:bf:d2:23:72:5d:1d:a0:a0:70:6b:ba:7e:3d:7c:98:b8: af:d3:e4:2c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWhU1gYsvv0Ee0bs1zBQh7WPeYXswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlOWM0YTlkNTk4NDc1ZjQ2MzRjYWY3NjdkMjY2YzQ1NDhl MzBjM2I0M2FkOWVkOWY4MjlhOGMyMWU1N2E3ZDU5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZQqklG+cuSYFWMbLAxduYkZyGKVozfbtko3vPUylp6Oe3 RWhGTeovSBIr4NQEVWeY6+x9yGH618d8h9YHM+ldLIvTivfkioDfBJMvcmzq40wH GgrMzDbhqrMJKcr5So/PGZHXYqtUxYl/TxM3YIg64DPxdDnLajjDMS/dhJyFoH+x 6wol8P/5PJH0RuZ+OIuW4mXmLRsI/PV6W3X1npCs65+5+uaM/I1oQ6bwhUIGEOtj uWSmrX5jWdnAagAzYRgbtZ+RZ+EeJvu+FZWe17nS1xUM2g2+mwtlHbhjVIPqsOHc mW0k6Slg6FDrxYHo2xANurTScmFOqPr9TD2j4Er3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJDs9/t1JZKCtTPNmBXULXWR0uswwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I5MmI4MmY3LTMyMDMtNDNkMy04MDYzLTlmMDVlOWMzYTNhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYNOMAwDQYJKoZIhvcNAQELBQADggEBACC0IN80iQvF0IOE27HWoZRemKtv mD9Z98USJ8aPzQ5Go2J2U/4AUuOc8kw7/tT6QQsgne9q96z0vlUlZlKfFXp6ag15 qOutZanGwHIpRXhfCNE+m5MvgdKLj08F4vYQqU5WH9LgwMNCdE/RGh2ZTPZXno8v dHkfCYxHY45JlCmHWtQzJcs2V0pYoL5tP6mHA9p5b05jdjSX5gLkDKWP3BQQNGCU 6xF/qD5jktWuzEEcZVLfx/Jed1+VnuIrIJIrJK6JawMhiVD0030N+3poHeFpAryc cYl39pUa3zcJVpNtDCvHZOpM0q26uehVv9Ijcl0doKBwa7p+PXyYuK/T5Cw= -----END CERTIFICATE-----Generated at Wed Feb 5 10:41:17 2025 by rpki-client