$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c585118f-198f-4a8d-87d2-b53b2e5d037c.roa File: c585118f-198f-4a8d-87d2-b53b2e5d037c.roa (raw, json) Hash identifier: HoHE1UZ/fj1F0CnaeEEYOHBbB66afjg4QTZU/8Y8YPY= Subject key identifier: 96:01:F9:72:B1:75:53:44:1A:55:9C:CF:7A:36:09:78:FC:A8:A3:1C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 44A5F159705AA275B4341B661307D2BBA55DC30E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c585118f-198f-4a8d-87d2-b53b2e5d037c.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.113.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a5:f1:59:70:5a:a2:75:b4:34:1b:66:13:07:d2:bb:a5:5d:c3:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:38:64:6d:27:f0:d2:51:1e:44:00:7a:8d:e3: d8:07:d9:a1:eb:35:c8:c5:0a:26:e5:07:65:39:02: 05:73:26:9f:bc:ef:bd:82:2c:1f:cd:77:0c:5d:35: d3:60:d2:da:19:aa:50:38:1d:af:40:4f:73:7d:d5: ee:31:46:0b:6d:06:a3:93:4f:42:e4:a9:c7:2b:e5: a9:df:16:6a:21:3f:8d:9f:cb:98:6f:95:fe:19:9b: 27:0b:3c:72:c0:0c:5e:76:44:72:60:f9:48:08:1b: 23:ee:18:62:c8:b8:d8:70:7c:f5:ca:58:f4:eb:fe: da:3d:4e:db:41:00:9d:c3:d8:a9:d9:a1:9a:92:74: a1:cf:0d:19:fb:51:fb:d0:88:5f:f5:ae:ea:30:c3: fe:c6:b1:7d:dd:1b:de:f0:e8:4b:c8:ba:f5:12:32: 71:c4:49:9d:76:66:3e:b9:55:c0:92:86:0d:9b:bf: 44:35:74:f3:af:e9:4b:75:59:3e:ac:8a:85:dd:26: a7:55:93:57:f2:40:2d:a6:72:48:7a:1e:a7:30:6c: af:27:5b:b8:4f:7a:54:9a:18:a3:a8:e5:f8:fd:6e: d7:8b:72:38:d7:28:36:24:6e:07:e5:b9:3b:1d:b3: d6:da:64:31:03:36:38:3f:a1:f4:82:6c:5c:19:b5: 2f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:01:F9:72:B1:75:53:44:1A:55:9C:CF:7A:36:09:78:FC:A8:A3:1C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c585118f-198f-4a8d-87d2-b53b2e5d037c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.113.192.0/18 Signature Algorithm: sha256WithRSAEncryption 99:b3:44:bb:4d:65:0c:5f:22:dc:f4:47:0e:9c:90:5a:8a:1a: d1:19:ac:7b:2d:09:ed:3a:62:a9:87:4c:fc:ac:33:f5:a9:52: c0:5a:86:fb:19:e0:84:69:56:07:19:04:35:33:e8:dd:c8:9b: 65:56:87:d0:16:e2:44:ca:86:1d:15:dc:ec:e3:2e:13:61:48: ed:ee:7f:2a:b2:98:05:22:71:83:62:df:ae:b9:97:f9:85:f7: 51:0c:e5:4f:92:e1:3a:6d:ee:8d:3b:21:b4:88:97:9a:7d:f1: 53:b9:43:67:1b:bc:25:f1:33:4c:00:72:83:b2:93:90:58:bb: 19:0f:49:05:14:ac:ef:ce:07:34:2f:5d:4a:96:59:1b:06:25: cb:34:51:a5:a1:72:b5:f6:65:53:ad:00:e0:77:bd:13:bf:b3: 19:b1:d0:fa:71:bb:fc:d1:68:65:ba:34:41:0d:41:ab:4f:c9: 9d:1f:a8:d2:f0:26:10:e8:27:57:65:f5:fd:b7:80:96:35:98: 2a:ac:70:40:c0:ec:e3:5a:86:12:04:4c:dc:f6:23:2b:cc:72: 6d:39:2e:d8:91:90:71:70:c6:31:28:02:79:95:d6:75:70:f4: ac:cf:2a:ee:6f:c8:f7:1e:87:3f:2f:e5:eb:3e:6f:da:47:3f: 27:e9:2b:b8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURKXxWXBaonW0NBtmEwfSu6Vdww4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhODRmMDAzNzkzMWQ3OWU5YmM5YjU0YzlmYTJlYzVlNDhk MTdjOWJjYjk4N2I0ZDQ1MGViNTBlZGEwNzc0ODYwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgOGRtJ/DSUR5EAHqN49gH2aHrNcjFCiblB2U5AgVzJp+8 772CLB/NdwxdNdNg0toZqlA4Ha9AT3N91e4xRgttBqOTT0Lkqccr5anfFmohP42f y5hvlf4ZmycLPHLADF52RHJg+UgIGyPuGGLIuNhwfPXKWPTr/to9TttBAJ3D2KnZ oZqSdKHPDRn7UfvQiF/1ruoww/7GsX3dG97w6EvIuvUSMnHESZ12Zj65VcCShg2b v0Q1dPOv6Ut1WT6sioXdJqdVk1fyQC2mckh6HqcwbK8nW7hPelSaGKOo5fj9bteL cjjXKDYkbgfluTsds9baZDEDNjg/ofSCbFwZtS9tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlgH5crF1U0QaVZzPejYJePyooxwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M1ODUxMThmLTE5OGYtNGE4ZC04N2QyLWI1M2IyZTVkMDM3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYNccAwDQYJKoZIhvcNAQELBQADggEBAJmzRLtNZQxfItz0Rw6ckFqKGtEZ rHstCe06YqmHTPysM/WpUsBahvsZ4IRpVgcZBDUz6N3Im2VWh9AW4kTKhh0V3Ozj LhNhSO3ufyqymAUicYNi3665l/mF91EM5U+S4Tpt7o07IbSIl5p98VO5Q2cbvCXx M0wAcoOyk5BYuxkPSQUUrO/OBzQvXUqWWRsGJcs0UaWhcrX2ZVOtAOB3vRO/sxmx 0Ppxu/zRaGW6NEENQatPyZ0fqNLwJhDoJ1dl9f23gJY1mCqscEDA7ONahhIETNz2 IyvMcm05LtiRkHFwxjEoAnmV1nVw9KzPKu5vyPcehz8v5es+b9pHPyfpK7g= -----END CERTIFICATE-----Generated at Wed Feb 5 10:53:57 2025 by rpki-client