$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f74e97f5-aa47-44e3-a39d-52b1d674051c.roa File: f74e97f5-aa47-44e3-a39d-52b1d674051c.roa (raw, json) Hash identifier: 2ri4p7HnINr1QCzxPfA203R055lYM00U3a2igV3+dH4= Subject key identifier: DF:D5:D9:42:C3:A0:A9:DB:18:5D:8B:29:1E:28:7E:86:C7:25:50:A5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6417AC0F03219E9CB7901CFC0E3444B2EB2086C7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f74e97f5-aa47-44e3-a39d-52b1d674051c.roa Signing time: Fri 07 Feb 2025 00:00:00 +0000 ROA not before: Fri 07 Feb 2025 00:00:00 +0000 ROA not after: Fri 14 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:17:ac:0f:03:21:9e:9c:b7:90:1c:fc:0e:34:44:b2:eb:20:86:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 7 00:00:00 2025 GMT Not After : Mar 14 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:5b:88:e6:46:53:0e:e3:51:80:16:b7:95: 5a:06:01:b4:c6:7e:e4:0c:29:91:be:4d:d8:7c:10: 58:23:df:18:32:86:16:05:b3:55:d9:3c:d8:d8:c6: 3b:c4:6d:b7:e6:94:d7:da:79:8f:ac:1a:85:59:81: 55:b4:8b:21:76:45:bd:9e:ec:64:ec:8c:eb:47:50: 0b:2c:55:54:b9:ea:c4:3e:85:8f:c1:02:21:15:bd: 98:f7:ef:35:97:c7:fb:c7:fb:76:a7:58:a4:ef:9b: 6d:1a:5f:83:ef:c7:16:b5:80:95:42:99:91:b6:93: 6c:5d:76:89:92:b3:b2:9e:82:17:dd:b2:0f:20:70: 98:3b:d9:09:82:4a:5d:0b:20:3e:13:8d:e7:44:65: 3a:64:3f:96:b1:a6:73:21:11:b2:f7:23:ce:b1:31: d2:ea:b1:60:2e:72:89:37:0d:9b:7e:d5:89:c7:60: f5:6f:8d:80:5e:59:97:c6:5b:b4:6d:87:5a:06:a6: 39:64:ae:18:1a:52:51:92:f7:62:a6:5f:81:81:8a: 11:38:28:28:21:da:8b:b5:e2:74:c4:85:12:25:13: 4b:66:6e:96:4e:59:49:6b:a3:c6:72:80:14:c4:87: ea:d1:d7:0b:22:30:e7:b4:18:3f:bd:1d:8d:67:fb: ae:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D5:D9:42:C3:A0:A9:DB:18:5D:8B:29:1E:28:7E:86:C7:25:50:A5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f74e97f5-aa47-44e3-a39d-52b1d674051c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.250.0/23 Signature Algorithm: sha256WithRSAEncryption a5:ee:2a:93:41:ce:78:37:88:f8:e0:4a:bb:fd:65:51:ae:7c: c4:3f:6f:aa:d7:a8:cb:14:62:50:a8:ea:11:52:fe:c4:66:5a: b2:67:32:2d:35:b0:fa:87:41:06:e1:04:e8:a5:5d:e9:cd:42: 18:f8:43:c5:45:e9:93:a4:21:8d:c9:9e:30:ea:ef:ea:76:55: 36:9d:b0:de:8f:2a:cb:d1:73:d7:ec:f1:58:bf:97:fe:69:b6: 01:80:84:34:ca:9f:2b:76:24:de:ea:99:87:5e:bc:d1:a9:27: 9b:30:74:ac:d4:ea:f3:47:4d:67:f2:04:66:b0:2f:07:8e:5d: fa:82:a2:bf:82:d7:8d:6b:98:cc:9e:5c:39:39:c3:59:23:c4: 74:8c:38:59:6e:41:cc:1e:4d:78:a6:f9:ef:28:bd:8c:2c:f8: be:f5:fe:0b:97:53:03:57:79:97:1f:b2:9b:b0:92:80:24:81: 59:6f:6b:95:7a:35:ed:68:84:9a:f0:a6:c0:73:30:6e:7c:a4: 93:41:90:de:2d:f9:37:39:e2:11:08:e4:10:9b:fa:70:33:c4: d3:87:e5:41:54:2e:cf:c1:4f:b3:13:3f:19:7b:36:e4:5b:c3: f2:43:b7:97:00:c7:cb:12:0b:85:21:76:80:99:a6:92:e3:41: 6b:ba:72:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZBesDwMhnpy3kBz8DjREsusghscwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMjA3MDAwMDAwWhcNMjUwMzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmE4M2FkMjUyYTdhY2VjYzc4MjlkYzk2ZmYwMGU2ZGZk MzE5YmZiMGE0OGUwYWU1NzJmZWNmZGE4NjUwOTVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsSFuI5kZTDuNRgBa3lVoGAbTGfuQMKZG+Tdh8EFgj3xgy hhYFs1XZPNjYxjvEbbfmlNfaeY+sGoVZgVW0iyF2Rb2e7GTsjOtHUAssVVS56sQ+ hY/BAiEVvZj37zWXx/vH+3anWKTvm20aX4Pvxxa1gJVCmZG2k2xddomSs7Keghfd sg8gcJg72QmCSl0LID4TjedEZTpkP5axpnMhEbL3I86xMdLqsWAucok3DZt+1YnH YPVvjYBeWZfGW7Rth1oGpjlkrhgaUlGS92KmX4GBihE4KCgh2ou14nTEhRIlE0tm bpZOWUlro8ZygBTEh+rR1wsiMOe0GD+9HY1n+66VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU39XZQsOgqdsYXYspHih+hsclUKUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y3NGU5N2Y1LWFhNDctNDRlMy1hMzlkLTUyYjFkNjc0MDUxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0LvowDQYJKoZIhvcNAQELBQADggEBAKXuKpNBzng3iPjgSrv9ZVGufMQ/ b6rXqMsUYlCo6hFS/sRmWrJnMi01sPqHQQbhBOilXenNQhj4Q8VF6ZOkIY3JnjDq 7+p2VTadsN6PKsvRc9fs8Vi/l/5ptgGAhDTKnyt2JN7qmYdevNGpJ5swdKzU6vNH TWfyBGawLweOXfqCor+C141rmMyeXDk5w1kjxHSMOFluQcweTXim+e8ovYws+L71 /guXUwNXeZcfspuwkoAkgVlva5V6Ne1ohJrwpsBzMG58pJNBkN4t+Tc54hEI5BCb +nAzxNOH5UFULs/BT7MTPxl7NuRbw/JDt5cAx8sSC4UhdoCZppLjQWu6cqg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:51 2025 by rpki-client