$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9586523-cfb8-4449-afa5-509594fbadc0.roa File: f9586523-cfb8-4449-afa5-509594fbadc0.roa (raw, json) Hash identifier: uYwY5ee3uAUjlygnuez7vhK1frscAzZraJqOafCfzbc= Subject key identifier: 2E:45:DC:5E:0F:77:AA:04:9B:A6:F1:4B:94:7A:F3:66:60:90:9A:5A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5C981D7C582DA8E3573B6F0704A290CCF4B11246 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9586523-cfb8-4449-afa5-509594fbadc0.roa Signing time: Tue 04 Feb 2025 00:00:00 +0000 ROA not before: Tue 04 Feb 2025 00:00:00 +0000 ROA not after: Tue 11 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:98:1d:7c:58:2d:a8:e3:57:3b:6f:07:04:a2:90:cc:f4:b1:12:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 4 00:00:00 2025 GMT Not After : Mar 11 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:23:3a:f6:a8:55:80:45:92:54:8a:8a:86: 7d:15:0a:1b:2a:02:3f:f0:4f:32:3d:7b:c5:14:41: e5:ce:46:f5:15:ac:ac:85:65:a9:46:7d:32:f2:91: f0:bf:54:b4:d3:33:01:44:4b:b9:4c:34:97:69:33: 99:6a:9c:ee:81:1e:cc:42:72:15:42:2e:38:e0:e4: e4:0e:69:20:27:22:e2:41:3e:05:99:6c:d7:9e:da: 07:6f:63:4d:fb:c4:28:84:02:d5:7f:fa:fe:ad:12: 9a:74:cc:9b:e9:cf:c0:a1:2e:04:a3:b1:56:cb:f9: 27:5a:95:77:fd:19:be:51:38:de:cd:12:2d:0f:00: 95:83:01:a6:7a:10:72:d3:ef:8b:1c:76:94:b7:63: f4:dc:07:57:c2:2d:04:d5:e4:a6:0b:ab:5f:36:4c: 53:44:a1:0e:26:ce:f6:fe:f0:23:af:e5:4a:6a:07: dc:d9:47:74:cd:27:78:fa:73:fb:7f:42:b6:1f:e1: 1b:62:9a:b1:64:81:8f:c4:93:7c:4b:4e:89:8d:aa: 9f:89:5b:0e:13:2b:ba:72:ee:37:a5:15:e1:d5:92: c8:6a:ee:40:89:11:fd:22:8c:bd:15:10:cd:ee:37: 54:b1:6e:18:d4:ab:ce:63:af:51:1d:1c:c6:f7:c1: 21:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:45:DC:5E:0F:77:AA:04:9B:A6:F1:4B:94:7A:F3:66:60:90:9A:5A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9586523-cfb8-4449-afa5-509594fbadc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.64.0/19 Signature Algorithm: sha256WithRSAEncryption 5f:4e:69:1b:76:f3:8c:77:9a:ef:40:38:a8:cf:ee:97:c2:a6: 53:14:8e:ef:7d:38:20:b3:e9:0e:06:83:8e:16:77:d4:be:cf: ab:de:05:77:37:31:b5:c0:48:7a:88:39:57:3c:3a:0d:e8:a9: 50:ab:fe:8b:68:92:04:e8:32:e7:6e:21:16:5b:e8:43:62:ec: 49:ae:55:c2:4f:79:ae:76:8e:70:17:3b:40:a5:22:a5:14:d5: 61:94:19:3b:1a:8f:1f:7b:20:b0:15:09:af:74:3a:57:ca:dd: 44:f6:37:c6:fe:3d:82:24:01:da:80:3a:8e:30:cd:44:54:db: e8:20:50:fa:72:a6:5b:a1:0a:92:57:d9:01:82:4d:82:68:53: 07:3e:ef:cb:af:52:4f:a7:27:1f:ec:a3:4d:4a:f5:9b:c8:53: 15:27:45:d2:78:1a:5a:f6:7d:96:75:f4:5f:e3:1b:18:c5:78: 34:9b:cc:bd:8d:4b:49:54:3b:00:45:6d:70:31:b7:4e:81:60: 18:20:5d:92:1e:ef:bc:dd:a4:71:98:03:eb:f9:2f:5b:40:19: 4f:25:08:1a:af:d3:1a:dc:ed:64:c4:2e:bf:98:fc:fa:d9:31: 5d:e7:4e:f4:ec:2a:61:ca:80:64:71:62:83:d0:b4:97:63:64: c5:4e:a2:77 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXJgdfFgtqONXO28HBKKQzPSxEkYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMjA0MDAwMDAwWhcNMjUwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0BlODM4ZmI1Y2VhMGYwMGZkZDg1ZThlNmJmOWEyNGMzMmRl ODYwZmVjOWNlYjY0NzNiZjRhN2UzZjI2YzcxOWZjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjvCM69qhVgEWSVIqKhn0VChsqAj/wTzI9e8UUQeXORvUV rKyFZalGfTLykfC/VLTTMwFES7lMNJdpM5lqnO6BHsxCchVCLjjg5OQOaSAnIuJB PgWZbNee2gdvY037xCiEAtV/+v6tEpp0zJvpz8ChLgSjsVbL+SdalXf9Gb5RON7N Ei0PAJWDAaZ6EHLT74scdpS3Y/TcB1fCLQTV5KYLq182TFNEoQ4mzvb+8COv5Upq B9zZR3TNJ3j6c/t/QrYf4RtimrFkgY/Ek3xLTomNqp+JWw4TK7py7jelFeHVkshq 7kCJEf0ijL0VEM3uN1SxbhjUq85jr1EdHMb3wSGxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULkXcXg93qgSbpvFLlHrzZmCQmlowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y5NTg2NTIzLWNmYjgtNDQ0OS1hZmE1LTUwOTU5NGZiYWRjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU28EAwDQYJKoZIhvcNAQELBQADggEBAF9OaRt284x3mu9AOKjP7pfCplMU ju99OCCz6Q4Gg44Wd9S+z6veBXc3MbXASHqIOVc8Og3oqVCr/otokgToMuduIRZb 6ENi7EmuVcJPea52jnAXO0ClIqUU1WGUGTsajx97ILAVCa90OlfK3UT2N8b+PYIk AdqAOo4wzURU2+ggUPpypluhCpJX2QGCTYJoUwc+78uvUk+nJx/so01K9ZvIUxUn RdJ4Glr2fZZ19F/jGxjFeDSbzL2NS0lUOwBFbXAxt06BYBggXZIe77zdpHGYA+v5 L1tAGU8lCBqv0xrc7WTELr+Y/PrZMV3nTvTsKmHKgGRxYoPQtJdjZMVOonc= -----END CERTIFICATE-----Generated at Wed Feb 5 10:58:04 2025 by rpki-client