$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebad4984-8328-4120-af6c-4583760d0aca.roa File: ebad4984-8328-4120-af6c-4583760d0aca.roa (raw, json) Hash identifier: /UYLedS5ONBmM7ogLKzOo/eTgroKF3ARgyFJCpRgOAs= Subject key identifier: D4:01:68:41:63:36:5E:34:CB:23:BF:9F:90:79:A6:D0:47:58:D0:D7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6EE3E3EDD45D0ABB8EDB0F2809AA4EC8666D7C2E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebad4984-8328-4120-af6c-4583760d0aca.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.184.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:e3:e3:ed:d4:5d:0a:bb:8e:db:0f:28:09:aa:4e:c8:66:6d:7c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8c:9b:65:85:bb:06:36:43:bc:0e:1a:a5:fb: 86:55:07:88:5a:e1:68:cc:57:db:31:dd:17:ef:08: 23:19:f9:f4:8f:59:03:d8:6f:6d:df:eb:f2:86:c3: b0:56:11:b6:31:8d:78:15:26:79:e5:bb:5d:f3:8a: 90:b1:25:7f:3c:d2:ba:6d:39:20:1a:af:ee:76:d2: 67:47:69:67:65:44:e5:07:e1:b0:2e:c9:c0:c0:d4: b2:ab:02:1f:65:e7:7a:a9:3a:66:63:94:08:36:b1: af:af:a7:c8:12:fc:6a:7b:2d:8a:ae:46:4c:ea:9b: 9e:e3:25:49:1a:90:5c:0d:29:63:ce:1b:96:10:3d: f7:67:1c:80:2e:c2:e1:7e:cf:76:58:9f:81:50:76: 2d:9b:c5:26:cf:23:82:10:fd:84:49:87:01:86:81: 04:c2:52:12:bb:66:88:2d:ee:34:63:40:d0:48:54: a1:c1:cc:7b:aa:9d:72:87:55:36:e4:c4:b0:d8:15: 8c:d9:60:fd:b7:1e:c9:47:b7:c6:bb:72:ea:3f:b3: 51:a1:78:2f:3f:24:83:b3:e2:f6:7d:74:9b:15:40: 5f:51:ac:fd:d8:4e:a0:d1:50:d4:e3:e5:90:cb:06: 32:6b:b9:41:59:ed:0b:86:8c:f3:64:c4:6c:5b:2d: 6e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:01:68:41:63:36:5E:34:CB:23:BF:9F:90:79:A6:D0:47:58:D0:D7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebad4984-8328-4120-af6c-4583760d0aca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.184.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5d:23:4c:bc:b2:ee:f8:6d:e9:b8:3c:96:6e:5b:13:3a:03:ed: 22:d2:30:74:d1:05:14:2c:35:ba:e6:83:0c:14:37:76:ed:23: db:ce:44:42:26:de:22:ca:de:75:6a:62:87:11:e5:af:84:11: a3:31:66:69:b4:c2:ce:7e:f7:2f:f6:0c:88:ca:37:e2:d2:b3: 7e:e9:84:eb:d8:9c:b6:cd:49:a2:67:5e:05:4e:94:41:6e:5e: 21:ed:e9:f8:42:1b:f5:87:c1:13:19:ea:78:d0:62:a1:b8:e3: 4f:ea:b9:1b:75:7b:e9:45:46:dc:77:45:01:16:2a:9a:6c:72: 9a:6a:ea:43:86:22:65:67:65:b7:0c:4c:b4:2e:5a:54:e5:d2: 0d:df:fa:06:2d:ed:75:8f:f7:fb:06:f1:57:f9:78:60:84:b6: 6a:0d:01:9f:33:c3:c4:e1:76:e4:0d:6b:53:22:0f:80:1a:b8: 15:c1:a2:4f:7f:e4:5d:e8:a6:60:89:a8:e2:02:6e:eb:f0:d9: 26:32:a3:7e:7a:d0:aa:10:65:2d:26:48:7b:5a:7a:35:b1:46: a5:12:84:10:a0:87:33:93:96:53:c5:51:2d:82:17:7e:bc:dd: 60:60:26:d3:3a:fb:c1:24:cc:c1:9a:51:a9:e4:d3:8a:7a:62: d5:35:44:e2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbuPj7dRdCruO2w8oCapOyGZtfC4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDZkY2JmYTc0NDY3ZTM4MGExZTRmN2YwN2JjOGIzNjkw YjU5ZTEzYjllNzkyNGY5NTkyODZkNWU5ZWRkZTdlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPjJtlhbsGNkO8Dhql+4ZVB4ha4WjMV9sx3RfvCCMZ+fSP WQPYb23f6/KGw7BWEbYxjXgVJnnlu13zipCxJX880rptOSAar+520mdHaWdlROUH 4bAuycDA1LKrAh9l53qpOmZjlAg2sa+vp8gS/Gp7LYquRkzqm57jJUkakFwNKWPO G5YQPfdnHIAuwuF+z3ZYn4FQdi2bxSbPI4IQ/YRJhwGGgQTCUhK7Zogt7jRjQNBI VKHBzHuqnXKHVTbkxLDYFYzZYP23HslHt8a7cuo/s1GheC8/JIOz4vZ9dJsVQF9R rP3YTqDRUNTj5ZDLBjJruUFZ7QuGjPNkxGxbLW5tAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU1AFoQWM2XjTLI7+fkHmm0EdY0NcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ViYWQ0OTg0LTgzMjgtNDEyMC1hZjZjLTQ1ODM3NjBkMGFjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPuDANBgkqhkiG9w0BAQsFAAOCAQEAXSNMvLLu+G3puDyWblsTOgPtItIw dNEFFCw1uuaDDBQ3du0j285EQibeIsredWpihxHlr4QRozFmabTCzn73L/YMiMo3 4tKzfumE69icts1JomdeBU6UQW5eIe3p+EIb9YfBExnqeNBiobjjT+q5G3V76UVG 3HdFARYqmmxymmrqQ4YiZWdltwxMtC5aVOXSDd/6Bi3tdY/3+wbxV/l4YIS2ag0B nzPDxOF25A1rUyIPgBq4FcGiT3/kXeimYImo4gJu6/DZJjKjfnrQqhBlLSZIe1p6 NbFGpRKEEKCHM5OWU8VRLYIXfrzdYGAm0zr7wSTMwZpRqeTTinpi1TVE4g== -----END CERTIFICATE-----Generated at Wed Feb 5 10:55:04 2025 by rpki-client