$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13c5f4e8-b3ae-4e48-b6e7-232494fd7d92.roa File: 13c5f4e8-b3ae-4e48-b6e7-232494fd7d92.roa (raw, json) Hash identifier: 95IkA+00knLLvHiX0LP1WdXZrnkL5weN8xn7DaTSOuM= Subject key identifier: 0C:BA:31:9A:0C:31:D8:6A:F4:83:9E:B8:02:72:9D:0B:68:7E:8B:DD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 572E4E3337AB49A67DA590D04119BEFD27DF9E45 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13c5f4e8-b3ae-4e48-b6e7-232494fd7d92.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.240.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:2e:4e:33:37:ab:49:a6:7d:a5:90:d0:41:19:be:fd:27:df:9e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b7:80:94:dd:a3:77:f9:19:52:ff:39:07:60: 49:dd:f5:12:2b:17:1e:ea:6e:2d:a0:28:f2:3d:bc: 7c:8e:47:f8:00:1c:0a:ae:be:8d:2a:9a:7a:a0:7e: 6c:82:0b:51:26:69:d5:35:8e:c4:1d:f6:59:2f:11: 73:ee:e2:d3:bf:d0:8b:d6:fb:62:ec:38:3c:a7:52: e9:c7:55:be:17:d8:b3:bd:ba:ac:dd:ea:f8:64:db: 44:26:b0:bf:13:99:36:b7:93:db:39:b6:eb:d3:56: 58:4c:dd:fe:87:30:3e:fe:80:ba:34:d8:42:2b:65: f0:95:f0:92:7a:c4:87:cc:d7:1d:c5:e3:50:c8:dd: 78:88:90:35:0a:e5:d8:67:a1:91:54:ba:a6:63:25: d8:de:0c:59:d1:e9:fd:f7:90:1a:cb:1f:05:86:65: f9:c8:58:80:8b:de:b4:16:01:6c:ea:35:0c:e1:7e: e6:0b:81:eb:e4:00:e8:bc:b4:7b:2c:f5:3e:ed:38: 0b:d1:8d:fc:f9:f8:47:ed:b7:1d:0c:12:f2:09:5f: ce:ab:77:0d:de:1d:a8:3c:07:90:68:e7:11:b5:9f: 83:ef:a0:a7:68:ed:8e:a7:9f:01:5c:12:a0:bc:fa: 7a:2d:f6:25:9a:d5:3d:ac:08:6b:36:c1:3b:f4:12: cb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BA:31:9A:0C:31:D8:6A:F4:83:9E:B8:02:72:9D:0B:68:7E:8B:DD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13c5f4e8-b3ae-4e48-b6e7-232494fd7d92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.30.0/23 Signature Algorithm: sha256WithRSAEncryption 83:49:67:4b:15:d6:8f:99:7a:37:0d:58:63:0a:71:df:7d:c9: ad:34:0a:9c:9f:16:e1:53:10:f5:c3:38:04:54:42:bb:8f:49: 1d:b9:e3:36:08:43:44:14:11:18:d3:c9:93:85:37:f1:3c:6c: 37:9f:bf:23:22:a4:3d:26:c4:d7:1f:e2:e3:0b:db:fc:47:c4: c5:05:1c:58:2b:38:54:6b:be:bd:fe:17:cf:7c:b1:7d:1a:9f: 5d:e5:39:d1:0b:ca:69:c8:ec:e7:2f:fd:47:54:44:95:e1:28: 8b:d5:4f:89:9b:21:1f:74:bc:bd:ee:09:81:e0:e2:10:b3:8d: d8:aa:df:33:6e:1f:a6:e2:01:4e:b0:d3:7d:b1:7e:2f:80:87: 10:51:51:bd:e0:a2:60:ca:00:66:52:5e:15:77:a1:1a:1c:9e: 88:c9:e1:40:0e:84:80:28:4c:93:3f:66:b4:b5:ec:59:13:d2: e3:1e:91:4b:61:1b:6c:9f:4a:cb:7f:43:7f:4e:8e:96:fd:51: bf:13:95:2d:34:97:1f:df:05:22:1b:95:ae:9a:9f:3b:fa:76: 51:8e:6f:5f:30:4e:86:a5:20:bd:c6:86:a1:76:c7:7b:50:d3: 19:72:2e:83:ff:b8:cf:a3:fc:cd:3b:16:59:59:8a:e7:f1:63: 7d:b8:af:14 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVy5OMzerSaZ9pZDQQRm+/SffnkUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTRiYjVkYmM4MzYxMzZmMzA1YjVlNDJmYTA4NGU2YjJh NGI3MTViNjZhNTE4NGQ1NmNlY2UxYTE3YmRkYThkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpt4CU3aN3+RlS/zkHYEnd9RIrFx7qbi2gKPI9vHyOR/gA HAquvo0qmnqgfmyCC1EmadU1jsQd9lkvEXPu4tO/0IvW+2LsODynUunHVb4X2LO9 uqzd6vhk20QmsL8TmTa3k9s5tuvTVlhM3f6HMD7+gLo02EIrZfCV8JJ6xIfM1x3F 41DI3XiIkDUK5dhnoZFUuqZjJdjeDFnR6f33kBrLHwWGZfnIWICL3rQWAWzqNQzh fuYLgevkAOi8tHss9T7tOAvRjfz5+Efttx0MEvIJX86rdw3eHag8B5Bo5xG1n4Pv oKdo7Y6nnwFcEqC8+not9iWa1T2sCGs2wTv0EsuNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDLoxmgwx2Gr0g564AnKdC2h+i90wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEzYzVmNGU4LWIzYWUtNGU0OC1iNmU3LTIzMjQ5NGZkN2Q5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE28B4wDQYJKoZIhvcNAQELBQADggEBAINJZ0sV1o+ZejcNWGMKcd99ya00 CpyfFuFTEPXDOARUQruPSR254zYIQ0QUERjTyZOFN/E8bDefvyMipD0mxNcf4uML 2/xHxMUFHFgrOFRrvr3+F898sX0an13lOdELymnI7Ocv/UdURJXhKIvVT4mbIR90 vL3uCYHg4hCzjdiq3zNuH6biAU6w032xfi+AhxBRUb3gomDKAGZSXhV3oRocnojJ 4UAOhIAoTJM/ZrS17FkT0uMekUthG2yfSst/Q39Ojpb9Ub8TlS00lx/fBSIbla6a nzv6dlGOb18wToalIL3GhqF2x3tQ0xlyLoP/uM+j/M07FllZiufxY324rxQ= -----END CERTIFICATE-----Generated at Wed Feb 5 09:36:43 2025 by rpki-client