$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd291ebd-16ff-49c6-a1a3-6cbbe236de9d.roa File: cd291ebd-16ff-49c6-a1a3-6cbbe236de9d.roa (raw, json) Hash identifier: thjuxxvyJrYAVBUcTHc+k0EQlGy685igxXCTibE+NlE= Subject key identifier: 98:A2:7D:31:27:14:57:D6:A2:B1:99:75:83:01:5A:CD:08:1C:AE:46 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 434FE118AD879F1843E3B189B1EBA79E7F33A4F2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd291ebd-16ff-49c6-a1a3-6cbbe236de9d.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.13.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:4f:e1:18:ad:87:9f:18:43:e3:b1:89:b1:eb:a7:9e:7f:33:a4:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ab:89:19:fc:13:9f:2f:7a:6e:3c:76:c9:ff: 0d:6c:55:cf:13:71:a7:ef:cb:e2:ef:5b:75:1d:fc: 39:26:bc:bd:0d:6e:bd:15:8f:5c:ac:c2:66:13:f8: 5f:60:fa:f3:cf:72:97:15:22:51:97:bf:6f:d3:3d: 7e:77:80:01:a5:e3:25:70:1e:6f:89:28:3c:1b:fe: 61:39:51:3b:79:67:16:b7:39:d7:cf:f1:cb:6f:6d: d8:95:27:50:eb:29:66:4d:fb:4b:68:9f:a7:c3:61: 37:59:46:b5:1b:66:0b:e6:a9:b1:2f:78:c4:96:08: b7:ea:45:8c:de:4d:f5:ef:cb:5e:35:c7:ab:4e:bd: 26:89:ae:77:d2:6f:d2:ff:78:0d:cb:18:07:58:ef: bb:87:bc:6c:6a:50:ec:99:b0:6a:bf:33:99:0d:de: c8:43:ba:78:e9:92:85:14:9b:df:78:c7:13:5a:fc: ab:97:2f:6d:3e:06:04:1d:db:e2:2e:17:e4:de:43: b5:53:dc:cb:65:33:fa:74:16:07:7b:14:f4:2f:24: 46:d1:26:bf:42:ca:b9:13:18:0f:a5:f5:7a:0a:5b: 70:ce:8d:ef:a1:66:d4:8b:35:c8:f3:35:83:2e:1f: 93:4e:19:00:0c:28:8b:19:5a:ad:04:6f:5d:2e:ff: 00:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A2:7D:31:27:14:57:D6:A2:B1:99:75:83:01:5A:CD:08:1C:AE:46 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd291ebd-16ff-49c6-a1a3-6cbbe236de9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.13.0.0/16 Signature Algorithm: sha256WithRSAEncryption 06:50:4c:ce:ad:a3:92:fe:c7:4c:77:6e:71:75:e1:ca:eb:05: 03:07:95:ec:65:5c:d6:29:ab:8e:9e:4e:f3:13:8b:1a:3a:19: b8:2f:d0:59:ca:6a:eb:05:45:66:da:fc:32:19:38:19:71:fa: d0:91:49:b8:12:ca:02:c2:36:73:11:91:38:60:08:84:2a:9b: 17:5d:f0:a5:6a:ea:a2:64:8a:e6:ef:4d:b8:ae:86:aa:b1:bb: f4:51:1e:db:22:7d:9e:a0:e1:0c:e5:dd:8c:d8:33:19:7c:c6: af:74:8f:ce:85:23:28:5b:17:89:91:cd:38:87:04:c7:8d:2e: 0e:96:cd:cf:51:32:d4:25:f4:ca:37:ff:be:e7:cf:ac:d2:68: 45:6a:77:19:37:ec:66:41:a3:94:ec:e6:a1:43:bf:f4:02:d8: e2:11:43:ef:62:30:10:8c:2a:9d:ba:dc:39:d1:44:f0:31:53: ee:a4:e1:38:d7:1b:83:1d:56:07:9c:45:16:20:e8:8d:76:eb: 5f:f5:bb:78:33:74:bf:16:2c:8b:16:c0:f7:33:7d:20:ea:be: d5:47:54:d9:ca:8d:4e:8d:ec:3c:18:bc:da:21:cd:b6:11:4a: 31:3c:6b:3a:7a:5b:82:58:70:97:31:3f:fb:84:16:60:de:71: b9:ce:19:ff -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQ0/hGK2HnxhD47GJseunnn8zpPIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDY1MGQyMmJkMDhlMzEwNWE1ZGQzODhhNjNjZjY0OTcz ZjRjOTk1MTM4MzVmNTQyZGNiMjdkYWNlMTMzMDc3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIq4kZ/BOfL3puPHbJ/w1sVc8Tcafvy+LvW3Ud/DkmvL0N br0Vj1yswmYT+F9g+vPPcpcVIlGXv2/TPX53gAGl4yVwHm+JKDwb/mE5UTt5Zxa3 OdfP8ctvbdiVJ1DrKWZN+0ton6fDYTdZRrUbZgvmqbEveMSWCLfqRYzeTfXvy141 x6tOvSaJrnfSb9L/eA3LGAdY77uHvGxqUOyZsGq/M5kN3shDunjpkoUUm994xxNa /KuXL20+BgQd2+IuF+TeQ7VT3MtlM/p0Fgd7FPQvJEbRJr9CyrkTGA+l9XoKW3DO je+hZtSLNcjzNYMuH5NOGQAMKIsZWq0Eb10u/wC7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUmKJ9MScUV9aisZl1gwFazQgcrkYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NkMjkxZWJkLTE2ZmYtNDljNi1hMWEzLTZjYmJlMjM2ZGU5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwADDTANBgkqhkiG9w0BAQsFAAOCAQEABlBMzq2jkv7HTHducXXhyusFAweV 7GVc1imrjp5O8xOLGjoZuC/QWcpq6wVFZtr8Mhk4GXH60JFJuBLKAsI2cxGROGAI hCqbF13wpWrqomSK5u9NuK6GqrG79FEe2yJ9nqDhDOXdjNgzGXzGr3SPzoUjKFsX iZHNOIcEx40uDpbNz1Ey1CX0yjf/vufPrNJoRWp3GTfsZkGjlOzmoUO/9ALY4hFD 72IwEIwqnbrcOdFE8DFT7qThONcbgx1WB5xFFiDojXbrX/W7eDN0vxYsixbA9zN9 IOq+1UdU2cqNTo3sPBi82iHNthFKMTxrOnpbglhwlzE/+4QWYN5xuc4Z/w== -----END CERTIFICATE-----Generated at Wed Feb 5 10:54:49 2025 by rpki-client