$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bec7b89c-c20e-4b70-bf36-43e09ecd1f75.roa File: bec7b89c-c20e-4b70-bf36-43e09ecd1f75.roa (raw, json) Hash identifier: bTUOjG9xld+xWgDC9MXy23+nIPFBmOsSqXx3Vb/mtUI= Subject key identifier: EF:07:35:59:13:46:6D:1A:08:A6:7E:8F:21:78:97:A4:6B:DA:4A:2C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6C4D5445446985F4C82E31726919BCCC9DD1BA6F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bec7b89c-c20e-4b70-bf36-43e09ecd1f75.roa Signing time: Fri 24 Jan 2025 00:00:00 +0000 ROA not before: Fri 24 Jan 2025 00:00:00 +0000 ROA not after: Fri 28 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.3.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:4d:54:45:44:69:85:f4:c8:2e:31:72:69:19:bc:cc:9d:d1:ba:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 24 00:00:00 2025 GMT Not After : Feb 28 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ad:da:3e:b9:8e:4e:a9:d4:42:36:a3:4a:93: d8:7e:63:57:d4:cb:dc:6b:69:02:24:73:5e:5b:51: 63:e8:2b:f9:8e:40:17:7d:ad:0b:fc:27:22:d0:42: cc:74:76:ae:3e:8a:4d:78:3a:2e:62:79:71:c0:36: 8c:6c:b5:84:3e:64:d9:a2:cb:54:ea:09:5a:e0:4a: e5:45:86:e1:32:7c:dc:8b:a9:d9:ac:69:6a:31:87: 9d:d3:8b:8f:e7:cc:3d:d4:74:78:be:df:ae:74:0b: 3c:fc:03:27:8c:f0:6b:57:9c:71:83:6e:7e:e2:21: 76:c2:8f:3e:2a:41:09:13:3e:cf:01:10:58:d7:f6: 0a:05:05:21:11:cd:2c:13:ef:89:84:50:db:f1:40: 2f:71:b1:95:93:e8:aa:db:a0:95:bf:ee:60:51:25: 22:9f:f5:9f:f3:6c:19:1d:a9:da:d1:dd:55:9e:fe: 8e:7f:05:1d:99:c0:2b:f2:60:ba:b6:d7:44:d9:28: 42:ad:69:36:5d:f7:a7:20:66:28:fa:23:7f:7f:44: 34:48:e3:b9:42:b4:68:14:47:09:7c:f8:42:e0:31: 23:31:56:51:3b:f4:19:7a:40:10:82:ee:bb:c9:57: c8:3d:23:ae:4f:22:dc:77:e4:51:3e:ce:0d:e2:23: e0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:07:35:59:13:46:6D:1A:08:A6:7E:8F:21:78:97:A4:6B:DA:4A:2C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bec7b89c-c20e-4b70-bf36-43e09ecd1f75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.3.3.0/24 Signature Algorithm: sha256WithRSAEncryption 39:90:6d:68:89:6a:c1:d7:69:56:5d:ec:d5:82:1c:2f:a5:2f: 77:99:87:67:1b:d0:6d:57:fa:91:f0:2a:14:e8:be:67:2b:78: aa:c5:fd:e3:81:ee:76:52:b0:5a:1b:f9:03:0a:35:cb:44:77: 44:dd:07:f1:07:26:bd:db:ad:d4:99:3d:bb:82:d7:25:1c:dc: 30:d8:53:fe:87:37:1b:79:51:2b:52:2d:6a:8e:8c:02:84:59: 6a:e4:e4:8d:a4:8d:db:64:51:ef:9f:77:d2:fa:c3:df:f1:be: bb:d0:4c:3f:cb:e1:35:b3:dc:24:e2:23:44:e1:ab:9d:04:79: 9a:4d:7b:fd:ae:70:33:0f:25:d9:a0:93:8e:ca:07:4c:39:2a: 02:1f:91:5e:8e:cd:66:f3:72:0a:5c:21:45:bd:ee:20:c7:f9: 21:f6:46:76:06:ef:a0:58:23:07:a0:05:dd:ab:51:4c:40:f1: d9:00:51:a7:20:d8:6e:87:ab:be:1c:34:83:1f:b4:05:57:7f: fc:59:b2:0f:e6:b1:6d:e7:72:d4:7f:8b:a9:0d:4c:ee:83:ed: 03:7e:13:cb:82:88:be:53:e4:1d:cf:b9:a6:e8:ed:5d:cd:ce: c3:ba:e0:04:02:fb:75:6d:67:c4:2d:7c:1d:f6:f8:e4:7e:81: 1f:da:2e:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbE1URURphfTILjFyaRm8zJ3Rum8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YWZlZGY1ODc4NDdiOTk3ZDUxZTMwNjlmOGVhYmMwNmRi NDRhZDIzNjYxZDQ5Y2Q0MDAyZGI5ZmJiMmZiNmNmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/rdo+uY5OqdRCNqNKk9h+Y1fUy9xraQIkc15bUWPoK/mO QBd9rQv8JyLQQsx0dq4+ik14Oi5ieXHANoxstYQ+ZNmiy1TqCVrgSuVFhuEyfNyL qdmsaWoxh53Ti4/nzD3UdHi+3650Czz8AyeM8GtXnHGDbn7iIXbCjz4qQQkTPs8B EFjX9goFBSERzSwT74mEUNvxQC9xsZWT6KrboJW/7mBRJSKf9Z/zbBkdqdrR3VWe /o5/BR2ZwCvyYLq210TZKEKtaTZd96cgZij6I39/RDRI47lCtGgURwl8+ELgMSMx VlE79Bl6QBCC7rvJV8g9I65PItx35FE+zg3iI+CfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7wc1WRNGbRoIpn6PIXiXpGvaSiwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JlYzdiODljLWMyMGUtNGI3MC1iZjM2LTQzZTA5ZWNkMWY3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAwMwDQYJKoZIhvcNAQELBQADggEBADmQbWiJasHXaVZd7NWCHC+lL3eZ h2cb0G1X+pHwKhTovmcreKrF/eOB7nZSsFob+QMKNctEd0TdB/EHJr3brdSZPbuC 1yUc3DDYU/6HNxt5UStSLWqOjAKEWWrk5I2kjdtkUe+fd9L6w9/xvrvQTD/L4TWz 3CTiI0Thq50EeZpNe/2ucDMPJdmgk47KB0w5KgIfkV6OzWbzcgpcIUW97iDH+SH2 RnYG76BYIwegBd2rUUxA8dkAUacg2G6Hq74cNIMftAVXf/xZsg/msW3nctR/i6kN TO6D7QN+E8uCiL5T5B3Puabo7V3NzsO64AQC+3VtZ8QtfB32+OR+gR/aLpI= -----END CERTIFICATE-----Generated at Wed Feb 5 10:42:20 2025 by rpki-client