$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/15b831bf-aa81-4498-8d17-fe0fe2a6deeb.roa File: 15b831bf-aa81-4498-8d17-fe0fe2a6deeb.roa (raw, json) Hash identifier: YgIc5vBrAnDtP8lQMZx9DD4qmKeGgcPLgEqj2dQews0= Subject key identifier: F0:E2:45:60:4E:8B:E8:1B:61:BF:D7:E0:C8:C5:28:BA:36:C8:5D:FC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1DE60632FD5379DE5F476B93C1F780B60AE1B633 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/15b831bf-aa81-4498-8d17-fe0fe2a6deeb.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.40.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e6:06:32:fd:53:79:de:5f:47:6b:93:c1:f7:80:b6:0a:e1:b6:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f3:27:7a:e7:5a:44:e9:10:41:19:c7:ea:59: 3e:6d:01:1e:18:47:4a:4a:03:7f:0c:55:16:bc:4b: 84:c3:a8:a6:8e:2a:1c:a7:d8:71:b7:f4:a9:b1:f9: 38:b1:27:c9:77:34:1b:38:0a:97:b0:5f:91:98:ee: 8d:93:72:54:2f:9d:4e:39:c9:8e:13:dc:0e:48:8f: be:9a:a8:86:ae:10:07:ec:0a:27:fd:61:aa:98:f3: 54:a3:cf:b6:6d:1b:63:39:59:24:79:96:83:b7:45: ce:b6:84:95:16:d2:f2:d4:6c:0d:af:aa:57:8e:04: 55:f0:55:c5:3c:25:6b:8a:e5:2e:86:d0:14:14:ca: df:14:d3:d7:e5:ee:49:8b:0c:ff:07:df:e2:4a:3c: c1:ac:a2:49:f4:59:c0:76:b1:47:7e:82:05:c2:76: aa:99:ea:a6:3f:d2:55:da:36:94:f1:f4:81:86:51: 24:79:b6:bb:5b:81:ed:c2:a4:c9:9f:77:30:2d:2c: 76:4f:2e:4d:7b:ab:6e:a9:f9:80:d1:bc:63:a1:db: 96:bb:04:4a:ec:b5:3d:8f:d5:6f:47:d0:3b:a1:d5: 11:b0:03:50:9e:00:37:af:2b:25:89:c5:86:7f:b9: 29:0f:cd:ea:55:56:77:19:16:e8:d6:61:76:88:f9: 5c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E2:45:60:4E:8B:E8:1B:61:BF:D7:E0:C8:C5:28:BA:36:C8:5D:FC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/15b831bf-aa81-4498-8d17-fe0fe2a6deeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.40.0.0/14 Signature Algorithm: sha256WithRSAEncryption 59:43:af:fa:87:1a:99:97:8e:96:e8:d0:3f:37:66:6f:ff:9e: 61:96:c9:30:07:dc:60:63:a5:4e:6e:40:0a:c3:17:4d:c5:f0: 95:87:a6:65:b5:72:c8:ea:cb:69:21:0e:a4:2a:ce:d8:39:e5: 54:33:33:56:85:d9:94:e2:e2:9b:e0:2f:65:5c:27:90:16:f0: b5:da:62:b6:22:0f:0b:d5:5b:fd:5b:cd:bb:8c:e0:c9:a5:fb: bb:ba:45:a5:5e:9d:f9:e2:ff:80:3e:16:53:6a:33:53:ff:cf: 67:08:35:ea:be:b7:49:f7:47:c7:03:2c:26:40:ce:13:5f:75: 71:f2:5d:b1:d5:ae:bd:9a:c2:44:30:41:7c:8e:82:07:81:16: 22:25:e4:af:df:84:09:fb:35:2f:91:2f:9b:a1:32:3f:95:a0: 06:68:7a:bd:77:e4:cc:36:20:d8:fa:dd:d4:1d:fc:7f:ec:cb: d7:78:04:d7:81:85:79:ae:60:7e:04:f6:ce:c8:af:f6:55:a2: 54:55:ad:8b:50:4f:53:af:16:8f:5f:2b:11:55:8e:e6:77:ea: d0:9d:91:b2:1b:d4:51:ff:42:f8:47:30:69:6c:d6:ba:06:aa: 0a:03:ae:46:2e:ee:bc:85:ca:52:09:a8:3f:eb:05:ca:5f:9e: ee:a3:6e:bf -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHeYGMv1Ted5fR2uTwfeAtgrhtjMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzRjZGUzMDNmNDRjNjkxN2ViMjk5Y2Y3MGMwZTUwZWJj OWU3YjhhNjIxMTFhMDUwYjllYTBjNmU4YWIxZTBmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx8yd651pE6RBBGcfqWT5tAR4YR0pKA38MVRa8S4TDqKaO Khyn2HG39Kmx+TixJ8l3NBs4CpewX5GY7o2TclQvnU45yY4T3A5Ij76aqIauEAfs Cif9YaqY81Sjz7ZtG2M5WSR5loO3Rc62hJUW0vLUbA2vqleOBFXwVcU8JWuK5S6G 0BQUyt8U09fl7kmLDP8H3+JKPMGsokn0WcB2sUd+ggXCdqqZ6qY/0lXaNpTx9IGG USR5trtbge3CpMmfdzAtLHZPLk17q26p+YDRvGOh25a7BErstT2P1W9H0Duh1RGw A1CeADevKyWJxYZ/uSkPzepVVncZFujWYXaI+Vz9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU8OJFYE6L6Bthv9fgyMUoujbIXfwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE1YjgzMWJmLWFhODEtNDQ5OC04ZDE3LWZlMGZlMmE2ZGVlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwINKDANBgkqhkiG9w0BAQsFAAOCAQEAWUOv+ocamZeOlujQPzdmb/+eYZbJ MAfcYGOlTm5ACsMXTcXwlYemZbVyyOrLaSEOpCrO2DnlVDMzVoXZlOLim+AvZVwn kBbwtdpitiIPC9Vb/VvNu4zgyaX7u7pFpV6d+eL/gD4WU2ozU//PZwg16r63SfdH xwMsJkDOE191cfJdsdWuvZrCRDBBfI6CB4EWIiXkr9+ECfs1L5Evm6EyP5WgBmh6 vXfkzDYg2Prd1B38f+zL13gE14GFea5gfgT2zsiv9lWiVFWti1BPU68Wj18rEVWO 5nfq0J2RshvUUf9C+EcwaWzWugaqCgOuRi7uvIXKUgmoP+sFyl+e7qNuvw== -----END CERTIFICATE-----Generated at Wed Feb 5 10:47:43 2025 by rpki-client