$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6693717-e91a-427f-bbf9-675e5dba8ece.roa File: c6693717-e91a-427f-bbf9-675e5dba8ece.roa (raw, json) Hash identifier: Nnp2MBDCaIFCnPdDYHaT+Qz7MKPEym5SouHZzPTXpuY= Subject key identifier: D8:86:E5:0C:80:D8:72:83:49:33:5B:4F:F3:BD:7A:40:36:A3:00:4D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7D04B530757D923CE84942961B9ADC2377F0016D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6693717-e91a-427f-bbf9-675e5dba8ece.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:04:b5:30:75:7d:92:3c:e8:49:42:96:1b:9a:dc:23:77:f0:01:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:34:16:61:22:4a:2e:5a:64:2a:68:99:02: cc:0c:65:73:64:b7:7d:c9:1e:64:b5:14:25:39:d7: 7c:b3:96:fb:03:77:d4:e4:1a:c9:43:85:87:20:ed: b3:91:61:a1:01:90:d2:af:7b:fa:2e:a1:f9:cb:dd: 3c:34:19:6d:30:83:d2:4b:c4:05:74:00:81:eb:a3: 6e:1f:a5:73:a6:ee:07:8c:ae:57:3c:17:03:f9:15: 23:8f:52:1e:75:cf:13:70:d8:bc:a6:aa:fb:d5:68: b2:43:fd:e0:4a:bb:44:73:12:30:d5:2e:8d:c8:86: 66:45:85:1f:95:e7:63:26:e8:0b:f4:8c:91:bf:32: d0:66:ae:b9:bc:87:99:69:9f:4b:b1:0b:19:0a:d9: e5:fa:e4:be:e9:ce:6d:ec:fe:fa:70:dc:a2:e7:f9: ec:32:3a:a6:59:cf:03:12:65:97:e6:a7:7a:41:5d: 2c:21:d8:e9:e6:26:4e:71:60:0c:19:7e:e9:74:0f: dc:8b:f1:7c:a8:c1:c1:13:25:fa:b1:1b:f0:da:8f: 0a:4d:6a:06:21:f4:d8:4b:64:16:5c:92:71:f8:89: 4d:4f:3c:63:8f:19:cc:5d:49:60:77:83:df:84:74: 52:7f:7c:1d:e6:34:40:70:15:69:ce:ba:df:78:f9: 87:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:86:E5:0C:80:D8:72:83:49:33:5B:4F:F3:BD:7A:40:36:A3:00:4D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6693717-e91a-427f-bbf9-675e5dba8ece.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.180.0/24 Signature Algorithm: sha256WithRSAEncryption 12:86:2a:5d:bb:38:13:f6:20:27:60:42:21:16:69:44:2f:bd: c6:47:e9:2c:77:4e:db:1e:35:9d:40:15:69:65:11:4d:8f:8b: 65:0d:ec:ee:27:ea:f1:e6:c1:e8:de:69:f6:14:eb:45:cd:78: c4:ef:5c:11:21:0e:07:bd:76:37:01:8e:05:5f:37:96:37:4e: 79:cb:24:14:4b:db:0f:01:80:27:e1:a7:bf:99:c2:8b:6e:f7: 70:b2:7a:fa:55:03:71:75:5b:60:e3:8b:11:1e:e1:96:72:82: 6e:09:e6:08:f2:c6:3a:b9:02:a6:ac:32:c1:66:11:50:a6:22: 44:69:c3:44:11:b3:94:2d:dd:44:00:57:63:9f:0e:5c:18:ec: c6:92:e7:97:3f:42:30:6d:91:21:d3:15:62:c9:78:5d:51:aa: fc:b5:5b:d2:11:90:66:30:a5:cc:e0:94:46:6e:a7:4c:c6:71: 54:bb:1f:29:d8:f3:db:5a:cb:c8:84:c0:01:7f:c4:ef:46:bc: 61:af:84:80:7c:c0:9a:e4:d7:d3:9f:46:a2:09:0c:bd:e3:f9: 52:83:9d:a6:20:7a:89:65:0d:c6:54:79:ca:e9:da:85:6c:19: ed:98:d4:cf:97:de:90:85:ee:bc:9e:46:92:c9:ab:ff:ce:e2: cc:12:1d:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfQS1MHV9kjzoSUKWG5rcI3fwAW0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYWJkYjY0ZWE1OTdhMGI2Zjc0OTMyNGQyN2M1NDQzNzg0 ZmQ5NjAwYWJlOGE1YTY2YjliNzgyYWQ3NTM5NGY1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNgTQWYSJKLlpkKmiZAswMZXNkt33JHmS1FCU513yzlvsD d9TkGslDhYcg7bORYaEBkNKve/ouofnL3Tw0GW0wg9JLxAV0AIHro24fpXOm7geM rlc8FwP5FSOPUh51zxNw2LymqvvVaLJD/eBKu0RzEjDVLo3IhmZFhR+V52Mm6Av0 jJG/MtBmrrm8h5lpn0uxCxkK2eX65L7pzm3s/vpw3KLn+ewyOqZZzwMSZZfmp3pB XSwh2OnmJk5xYAwZful0D9yL8XyowcETJfqxG/DajwpNagYh9NhLZBZcknH4iU1P PGOPGcxdSWB3g9+EdFJ/fB3mNEBwFWnOut94+YfjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2IblDIDYcoNJM1tP8716QDajAE0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M2NjkzNzE3LWU5MWEtNDI3Zi1iYmY5LTY3NWU1ZGJhOGVjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0LrQwDQYJKoZIhvcNAQELBQADggEBABKGKl27OBP2ICdgQiEWaUQvvcZH 6Sx3TtseNZ1AFWllEU2Pi2UN7O4n6vHmwejeafYU60XNeMTvXBEhDge9djcBjgVf N5Y3TnnLJBRL2w8BgCfhp7+Zwotu93CyevpVA3F1W2DjixEe4ZZygm4J5gjyxjq5 AqasMsFmEVCmIkRpw0QRs5Qt3UQAV2OfDlwY7MaS55c/QjBtkSHTFWLJeF1Rqvy1 W9IRkGYwpczglEZup0zGcVS7HynY89tay8iEwAF/xO9GvGGvhIB8wJrk19OfRqIJ DL3j+VKDnaYgeollDcZUecrp2oVsGe2Y1M+X3pCF7ryeRpLJq//O4swSHTU= -----END CERTIFICATE-----Generated at Wed Feb 5 10:48:56 2025 by rpki-client