$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/eac518ed-0e11-4fe5-9a9e-53a05de60f7e.roa File: eac518ed-0e11-4fe5-9a9e-53a05de60f7e.roa (raw, json) Hash identifier: af55u2gdAfdWlv4c8mgRGzix6TnVDfPhEAjvqy5iGaw= Subject key identifier: FD:38:CF:2D:38:1A:25:09:3E:88:81:A3:34:8D:95:BF:96:DE:2B:8D Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 62461863354E9E8D23D71A2547E2766BF1F237EB Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/eac518ed-0e11-4fe5-9a9e-53a05de60f7e.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:46:18:63:35:4e:9e:8d:23:d7:1a:25:47:e2:76:6b:f1:f2:37:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c8:ad:12:ba:96:7f:d5:37:64:ed:ef:94:6b: d2:ac:33:b6:be:7c:39:78:99:df:53:89:27:27:d4: b1:73:c4:cd:2b:df:44:60:a5:da:1a:4d:ab:13:ef: 2f:98:07:57:0e:ef:98:89:6d:33:64:95:3a:a9:7b: 51:a2:3a:a6:70:3e:89:80:4e:32:48:31:e7:57:9d: f6:b5:2d:ad:95:e9:1e:35:81:ac:21:2a:2c:9c:bd: be:d6:22:07:e1:2a:5e:90:72:61:92:09:e7:82:23: e5:36:7d:d7:67:c1:9f:a4:e9:fc:7f:95:04:77:15: 03:f0:fb:98:07:25:f2:7e:5d:58:fe:e1:fa:c7:09: 85:cc:84:8b:ff:24:34:60:40:6d:23:cb:84:c1:b2: dd:9e:4e:b0:a5:49:7d:92:1f:d0:d2:9b:98:60:4d: ae:71:4b:e0:58:9a:b4:cc:8b:94:d8:31:9d:3b:c7: 08:f2:67:ed:74:ee:68:e9:0f:eb:7f:5e:4b:0a:d6: 6a:99:2a:a7:64:68:70:a4:28:25:1b:70:cc:09:5c: 02:19:9f:88:db:e2:e2:4c:ed:aa:75:f3:95:10:de: 77:44:6e:76:f0:03:51:c4:8d:6e:d9:45:85:46:ad: 3e:0b:89:86:ac:d1:c5:a5:61:48:1d:51:ab:67:8e: 19:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:38:CF:2D:38:1A:25:09:3E:88:81:A3:34:8D:95:BF:96:DE:2B:8D X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/eac518ed-0e11-4fe5-9a9e-53a05de60f7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.0.0/21 Signature Algorithm: sha256WithRSAEncryption 26:fc:e3:dc:05:2f:9b:48:0d:4a:b7:70:9b:16:32:60:1c:78: c6:24:d0:0f:14:ec:1c:d4:2b:ed:f8:c4:8b:29:a2:ed:0c:4f: 76:1e:c2:80:18:97:b8:26:97:99:ff:40:ca:84:49:e3:a4:b8: 7a:0d:3d:e1:b5:9d:f3:13:a2:d4:71:11:64:3f:89:3c:ca:67: 10:90:f2:44:70:82:c2:03:9e:44:8c:8a:3e:71:e5:a5:f8:59: a7:1f:80:e5:87:6d:2f:23:7f:5d:48:19:22:e1:15:70:05:ad: 91:a2:0b:e9:80:1e:5d:70:09:18:de:32:6d:06:5b:1d:e8:1f: 62:ef:9d:d2:62:d2:bf:e4:61:bb:91:cc:2d:6f:96:7d:7c:57: a8:fa:b4:ad:d3:df:20:6a:80:fc:fe:93:d0:ae:d7:6c:e8:57: f6:0e:e5:0f:59:71:46:3d:1a:8e:99:d8:d1:2e:29:08:5e:ab: 19:d8:48:dd:d0:29:0c:e8:76:7a:a0:65:14:0a:49:5a:9a:59: 71:6d:68:a8:6d:77:33:9d:a8:15:1d:c4:86:23:3d:b3:10:6f: b8:16:49:e6:d1:5a:97:1a:44:e5:a7:12:94:f2:37:23:b8:9e: 5c:17:12:0f:ef:f9:e9:62:35:a6:f1:74:05:e4:27:a1:5d:6b: 23:29:71:7c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYkYYYzVOno0j1xolR+J2a/HyN+swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyM2Q5OTI4MjA0ZTUwODI2OWI0ZTk0YzY0ZDQ3MWVjYTkz NjQ2NzgwNWQzNTk1YzJhMTdiYWJjMzZkZTFlNWIyMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFyK0SupZ/1Tdk7e+Ua9KsM7a+fDl4md9TiScn1LFzxM0r 30RgpdoaTasT7y+YB1cO75iJbTNklTqpe1GiOqZwPomATjJIMedXnfa1La2V6R41 gawhKiycvb7WIgfhKl6QcmGSCeeCI+U2fddnwZ+k6fx/lQR3FQPw+5gHJfJ+XVj+ 4frHCYXMhIv/JDRgQG0jy4TBst2eTrClSX2SH9DSm5hgTa5xS+BYmrTMi5TYMZ07 xwjyZ+107mjpD+t/XksK1mqZKqdkaHCkKCUbcMwJXAIZn4jb4uJM7ap185UQ3ndE bnbwA1HEjW7ZRYVGrT4LiYas0cWlYUgdUatnjhn/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/TjPLTgaJQk+iIGjNI2Vv5beK40wHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2VhYzUxOGVkLTBlMTEtNGZlNS05YTllLTUzYTA1ZGU2MGY3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANgfwAwDQYJKoZIhvcNAQELBQADggEBACb849wFL5tIDUq3cJsWMmAceMYk 0A8U7BzUK+34xIspou0MT3YewoAYl7gml5n/QMqESeOkuHoNPeG1nfMTotRxEWQ/ iTzKZxCQ8kRwgsIDnkSMij5x5aX4WacfgOWHbS8jf11IGSLhFXAFrZGiC+mAHl1w CRjeMm0GWx3oH2LvndJi0r/kYbuRzC1vln18V6j6tK3T3yBqgPz+k9Cu12zoV/YO 5Q9ZcUY9Go6Z2NEuKQheqxnYSN3QKQzodnqgZRQKSVqaWXFtaKhtdzOdqBUdxIYj PbMQb7gWSebRWpcaROWnEpTyNyO4nlwXEg/v+eliNabxdAXkJ6FdayMpcXw= -----END CERTIFICATE-----Generated at Wed Feb 5 15:46:46 2025 by rpki-client