$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d697c3a3-21e4-4ff9-8f8a-775187bbe205.roa File: d697c3a3-21e4-4ff9-8f8a-775187bbe205.roa (raw, json) Hash identifier: qv5QstrYNVf4tGf086vqMER+MisvLXJKdonjvNJkS0w= Subject key identifier: 55:F2:7C:0D:00:D6:F8:99:34:80:28:A7:73:25:06:77:83:45:01:3C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1941B8E2220A02E84CE2EF7EDDEE37EFE46DD1CD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d697c3a3-21e4-4ff9-8f8a-775187bbe205.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.172.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:41:b8:e2:22:0a:02:e8:4c:e2:ef:7e:dd:ee:37:ef:e4:6d:d1:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:06:86:5a:36:c4:d8:a0:e6:b8:8b:61:a4:35: 2f:e9:4f:ad:14:07:ee:d6:13:4b:29:2a:5c:7f:31: 58:45:3d:c2:e9:7a:bb:5d:c9:74:92:4b:ef:b7:e1: 74:73:48:f8:ac:30:a8:0f:50:b9:7a:f2:e9:df:61: 22:b6:4c:18:b8:c5:f5:4f:71:84:5d:a1:bf:e6:ef: fd:20:0d:61:ed:7f:d3:66:5c:dd:93:b0:87:7e:e6: 83:5b:39:4b:7f:cf:07:e1:ad:9e:22:a8:cc:a9:be: 77:c4:c4:30:cc:c0:80:b8:c6:9b:1a:44:e8:7a:a9: a9:7a:e7:64:2a:2f:5a:5c:c3:fd:7a:ef:b3:28:e2: d9:67:01:63:40:8f:40:d1:ea:19:53:c8:0b:35:82: 71:cf:a8:f5:29:bd:33:69:8a:78:94:44:ae:7c:ba: 67:1b:b9:66:91:34:b6:23:0b:8e:24:cf:a7:ed:5d: be:09:60:6b:5c:7d:e4:e9:ba:5e:46:72:9c:0c:73: da:4f:a7:c6:0d:03:60:e6:e2:c4:f1:ef:13:58:46: f3:f2:64:d4:4d:4b:97:4c:10:39:29:86:99:00:f0: 3a:de:83:3d:94:40:5f:07:2b:87:cd:b2:6f:fd:50: ef:05:cf:0f:9a:2d:00:12:c8:82:ec:3c:79:79:75: b4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F2:7C:0D:00:D6:F8:99:34:80:28:A7:73:25:06:77:83:45:01:3C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d697c3a3-21e4-4ff9-8f8a-775187bbe205.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.172.0.0/15 Signature Algorithm: sha256WithRSAEncryption 03:cd:04:ed:ad:be:17:3a:e6:04:f4:60:b6:fe:20:eb:32:2e: da:86:23:a1:85:26:1e:92:25:68:c0:96:25:5c:aa:cf:5e:d9: ed:3c:eb:e9:82:6d:92:e7:86:8a:cf:bc:63:ae:b9:63:cb:6c: 32:df:9a:d4:a9:78:55:90:c5:56:b4:fe:76:4a:a3:36:99:33: b9:4e:19:f8:61:90:39:d7:51:14:0f:4c:ee:50:a5:8a:9e:4b: 17:4b:e2:f0:1e:98:07:e4:36:c4:37:dc:2d:8b:2e:4a:53:ac: 7a:04:e0:cf:f3:8b:a9:6d:08:3b:3a:c6:e6:8f:c8:27:51:87: a7:f4:64:5c:b2:3d:f8:82:82:20:b2:20:7e:21:d0:1d:aa:8c: 9b:53:30:86:9d:4d:f5:9d:1c:14:7a:e8:d9:f3:d0:0d:cb:2d: e2:34:1b:d9:45:b4:3a:5f:e9:ec:48:08:b3:1d:6e:09:45:0a: f1:f7:7a:61:db:98:da:03:8a:9e:6a:3e:ea:1e:a7:d0:49:04: 9e:3a:95:c0:7a:d3:4c:82:6a:de:68:ac:7b:2d:9a:d5:74:1c: 9c:73:df:3a:f4:8e:49:87:6b:7d:d7:42:18:35:b6:cb:d6:ee: 13:29:d7:fc:47:cf:7d:bc:40:1f:e3:d2:a4:71:3a:43:a9:26: 5a:36:7d:1b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGUG44iIKAuhM4u9+3e437+Rt0c0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzODhkYjdkMGFkYTM0M2IyNjlmODAxYjg3MjhmMzE5OTg4 MTc5MmE0ZmRhNDM3NmYzNDFkYzdiZDY2MTE0MmJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUBoZaNsTYoOa4i2GkNS/pT60UB+7WE0spKlx/MVhFPcLp ertdyXSSS++34XRzSPisMKgPULl68unfYSK2TBi4xfVPcYRdob/m7/0gDWHtf9Nm XN2TsId+5oNbOUt/zwfhrZ4iqMypvnfExDDMwIC4xpsaROh6qal652QqL1pcw/16 77Mo4tlnAWNAj0DR6hlTyAs1gnHPqPUpvTNpiniURK58umcbuWaRNLYjC44kz6ft Xb4JYGtcfeTpul5GcpwMc9pPp8YNA2Dm4sTx7xNYRvPyZNRNS5dMEDkphpkA8Dre gz2UQF8HK4fNsm/9UO8Fzw+aLQASyILsPHl5dbRPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVfJ8DQDW+Jk0gCincyUGd4NFATwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q2OTdjM2EzLTIxZTQtNGZmOS04ZjhhLTc3NTE4N2JiZTIwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE2rDANBgkqhkiG9w0BAQsFAAOCAQEAA80E7a2+FzrmBPRgtv4g6zIu2oYj oYUmHpIlaMCWJVyqz17Z7Tzr6YJtkueGis+8Y665Y8tsMt+a1Kl4VZDFVrT+dkqj NpkzuU4Z+GGQOddRFA9M7lClip5LF0vi8B6YB+Q2xDfcLYsuSlOsegTgz/OLqW0I OzrG5o/IJ1GHp/RkXLI9+IKCILIgfiHQHaqMm1Mwhp1N9Z0cFHro2fPQDcst4jQb 2UW0Ol/p7EgIsx1uCUUK8fd6YduY2gOKnmo+6h6n0EkEnjqVwHrTTIJq3misey2a 1XQcnHPfOvSOSYdrfddCGDW2y9buEynX/EfPfbxAH+PSpHE6Q6kmWjZ9Gw== -----END CERTIFICATE-----Generated at Wed Feb 5 09:42:49 2025 by rpki-client