$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/011cc990-af06-4655-ace0-17cd79f0ba83.roa File: 011cc990-af06-4655-ace0-17cd79f0ba83.roa (raw, json) Hash identifier: ofhL6XF8gyLJzj/pq+qbGk+7GjBzw1SDG0CBb9nK99o= Subject key identifier: A5:70:E9:2F:40:A9:EB:9A:C1:3A:F9:6F:03:56:DE:15:19:16:9D:02 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0E2811C5825BF8F3985847ABCBCB7A2C584DA7DB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/011cc990-af06-4655-ace0-17cd79f0ba83.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.12.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:28:11:c5:82:5b:f8:f3:98:58:47:ab:cb:cb:7a:2c:58:4d:a7:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:77:ed:19:f4:6c:54:d6:6c:89:d3:4a:66:d1: e3:59:34:57:ae:84:29:d4:49:9f:4d:27:b8:c8:bc: 46:4b:78:fc:e9:a0:97:9d:1e:93:9d:d1:60:52:ea: f3:27:05:c3:41:bd:cf:54:b9:67:88:bb:dd:e6:7b: 67:ea:4d:a6:4a:10:8a:50:8f:21:a6:59:2f:4a:e8: 77:99:6c:76:ef:fa:d9:b3:f6:bf:c8:29:88:06:28: 35:ac:7f:82:f1:ca:8f:b3:6d:91:4f:a0:7c:78:d6: a4:20:75:f7:26:e9:f7:c9:14:b7:38:3f:0d:17:0b: ba:53:4b:70:b2:48:f3:b3:f7:49:d2:37:e9:46:37: ef:4b:92:82:af:97:65:75:3f:b7:77:b0:dc:4e:82: 36:92:7f:b6:04:86:c6:76:4d:66:d5:7c:28:29:63: 1d:25:82:b1:d8:1a:9b:1d:da:10:5e:3e:fb:8e:fa: a7:1d:44:64:b0:ae:b4:7b:48:3b:93:6f:bf:3d:65: 41:05:c5:99:0b:f6:d4:fa:b0:00:b6:db:22:52:3c: a9:3b:06:7c:d2:f8:f8:cd:31:b9:5a:99:07:94:e5: 60:aa:7c:96:9e:10:37:55:95:ad:2d:36:ec:86:24: 0e:49:d7:1e:50:73:d3:53:99:57:17:23:36:0a:21: 17:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:70:E9:2F:40:A9:EB:9A:C1:3A:F9:6F:03:56:DE:15:19:16:9D:02 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/011cc990-af06-4655-ace0-17cd79f0ba83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.12.0.0/15 Signature Algorithm: sha256WithRSAEncryption 8b:75:46:c4:36:80:3e:f4:ad:a6:82:79:b9:64:1c:33:23:ae: 89:0d:07:2a:ba:8b:2d:79:64:5c:c0:11:0f:e5:db:d8:4c:b7: 1a:00:81:7c:67:c8:a3:29:a9:f3:11:52:d6:67:7a:be:9a:ea: 7d:ef:2b:bc:d9:4e:4e:db:2b:3b:64:77:af:c6:ae:44:07:fd: 00:ec:8f:5d:c3:ab:45:0a:04:3d:6e:f9:3b:4d:b5:b5:81:5c: ea:f7:cb:fa:97:29:26:b9:11:4a:f0:fc:33:96:2d:a5:39:c8: bc:b9:30:e6:07:f4:61:a4:83:67:ca:00:e9:e6:dd:58:a5:2c: 46:72:9e:ea:95:b2:e0:fb:28:0c:d2:a9:45:b3:c6:ae:f6:00: 99:e6:11:31:82:43:f1:68:11:38:0b:72:1e:b2:85:f8:fd:52: 7c:1c:d1:f3:4d:9d:0b:71:78:1c:96:a7:a1:94:57:6c:18:6d: 96:2e:82:a3:8b:0f:50:28:7f:a8:02:f0:75:bb:0d:f8:9f:0e: 3c:7e:25:2b:e5:14:ef:e3:09:eb:2b:ad:95:22:7d:a4:03:97: e9:c2:e3:6f:f9:8e:4d:24:2b:57:e1:2c:12:66:7b:4a:96:3f: 52:b4:5f:6b:9e:09:43:5a:d3:b8:11:cd:fc:f3:1c:75:c3:d9: a2:38:7d:68 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDigRxYJb+POYWEery8t6LFhNp9swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDA4ZWM4MGQwYjJlZDA1NmJjZjJmZjgwZGZmZTdiNWEy YWQ1NzY0MGVhOWNhZTQ5YTE0NjA1ZTRiNzFiMzg1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbd+0Z9GxU1myJ00pm0eNZNFeuhCnUSZ9NJ7jIvEZLePzp oJedHpOd0WBS6vMnBcNBvc9UuWeIu93me2fqTaZKEIpQjyGmWS9K6HeZbHbv+tmz 9r/IKYgGKDWsf4Lxyo+zbZFPoHx41qQgdfcm6ffJFLc4Pw0XC7pTS3CySPOz90nS N+lGN+9LkoKvl2V1P7d3sNxOgjaSf7YEhsZ2TWbVfCgpYx0lgrHYGpsd2hBePvuO +qcdRGSwrrR7SDuTb789ZUEFxZkL9tT6sAC22yJSPKk7BnzS+PjNMblamQeU5WCq fJaeEDdVla0tNuyGJA5J1x5Qc9NTmVcXIzYKIRcBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUpXDpL0Cp65rBOvlvA1beFRkWnQIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAxMWNjOTkwLWFmMDYtNDY1NS1hY2UwLTE3Y2Q3OWYwYmE4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE0DDANBgkqhkiG9w0BAQsFAAOCAQEAi3VGxDaAPvStpoJ5uWQcMyOuiQ0H KrqLLXlkXMARD+Xb2Ey3GgCBfGfIoymp8xFS1md6vprqfe8rvNlOTtsrO2R3r8au RAf9AOyPXcOrRQoEPW75O021tYFc6vfL+pcpJrkRSvD8M5YtpTnIvLkw5gf0YaSD Z8oA6ebdWKUsRnKe6pWy4PsoDNKpRbPGrvYAmeYRMYJD8WgROAtyHrKF+P1SfBzR 802dC3F4HJanoZRXbBhtli6Co4sPUCh/qALwdbsN+J8OPH4lK+UU7+MJ6yutlSJ9 pAOX6cLjb/mOTSQrV+EsEmZ7SpY/UrRfa54JQ1rTuBHN/PMcdcPZojh9aA== -----END CERTIFICATE-----Generated at Wed Feb 5 10:41:30 2025 by rpki-client