$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2a96c097-3899-4a58-93b1-6e400be0ca23.roa File: 2a96c097-3899-4a58-93b1-6e400be0ca23.roa (raw, json) Hash identifier: +k2f0MMXIWnR39I/Goc3zrArRH2qESnHl5z+CfD+VjA= Subject key identifier: E3:65:A7:31:23:F1:6E:3D:78:21:52:22:5E:06:1B:B8:EC:5D:1D:96 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 32D6647D6822EAA789AF780FC0101D11E5BBC186 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2a96c097-3899-4a58-93b1-6e400be0ca23.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.50.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d6:64:7d:68:22:ea:a7:89:af:78:0f:c0:10:1d:11:e5:bb:c1:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:0a:04:ba:c8:cd:6d:2e:c1:8a:0d:bf:a1: bd:8b:fc:87:62:10:e4:29:ad:ea:ab:dd:e6:c9:a7: 8d:5f:85:0e:04:a5:7d:cb:f8:0d:88:ca:5b:1b:06: 32:1c:74:df:fc:47:ef:0b:3c:2b:29:39:7e:8e:54: df:ed:8f:63:fb:f4:ff:25:dd:71:e7:4f:d0:c7:2a: 0f:2f:d1:30:65:55:8b:47:e4:f2:25:ad:4c:d6:fd: 36:eb:36:6e:06:d9:28:24:67:bf:14:f0:12:64:37: e0:ff:69:e8:43:1f:e2:86:ad:2a:68:11:5a:9f:56: 1f:f7:73:b0:a4:9a:8e:a1:2d:ec:58:63:3a:e3:d6: 0f:8f:a7:0e:a1:f4:90:60:58:38:29:d2:c0:40:2c: fc:73:a7:c5:98:f7:04:4a:e9:93:e2:34:3e:99:5b: a5:a0:91:f4:de:2d:4e:2b:ba:df:d0:d4:7f:6e:3f: e2:3d:80:bc:f1:c4:22:53:5f:20:c1:aa:03:af:25: 89:b0:88:c5:dd:1b:c2:e9:aa:12:c7:a9:b3:45:75: 41:0f:85:83:11:c8:c3:bc:a5:f5:41:70:29:8d:87: 7e:06:08:57:37:ed:f1:0e:b7:a3:81:57:cc:c8:65: c5:f0:5c:6e:40:1c:e8:b3:1e:be:4c:2e:a8:92:50: 9e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:65:A7:31:23:F1:6E:3D:78:21:52:22:5E:06:1B:B8:EC:5D:1D:96 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2a96c097-3899-4a58-93b1-6e400be0ca23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.50.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7e:40:dd:f5:6b:5b:7f:dc:78:1c:e5:07:e1:22:8b:ac:d5:58: f6:76:39:1f:3f:c9:a9:81:11:3c:48:4b:40:17:06:75:ac:bc: ac:8b:15:fa:76:d2:25:06:b1:c1:d2:2c:0b:b0:9e:25:42:62: a8:9d:7d:f0:68:6d:25:d7:f3:30:d3:8b:48:3a:50:5c:6f:66: cf:34:de:30:88:ff:7d:03:a1:cb:dd:49:47:66:b9:64:38:80: 81:94:b4:2c:40:09:b1:41:d5:fb:77:69:b0:b0:ac:83:87:70: 57:2d:62:64:a2:b6:9c:1f:2b:87:62:b7:14:ea:7e:ed:a1:fb: df:e0:09:d1:ee:15:3c:bf:b8:80:88:bc:dd:d4:fc:c3:31:64: 59:6c:59:08:f5:ce:77:b6:fc:16:9d:33:54:87:42:58:1d:da: e0:5a:8c:85:ec:b2:ef:a1:fe:61:3b:f0:24:d8:63:ab:e0:cd: 70:7e:b9:4e:23:04:1d:68:cb:fe:ca:ab:c2:b7:d6:16:73:9f: 11:7f:fd:c5:1d:23:e7:9b:c3:be:99:c4:e0:fb:57:8a:9b:a8: 1c:4a:23:c6:67:ba:a3:c0:48:7b:88:0b:d7:f3:94:1d:a5:94: cf:3a:04:5b:75:4a:ff:2c:ce:06:c7:d3:86:a4:08:88:f7:80: 90:09:43:13 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMtZkfWgi6qeJr3gPwBAdEeW7wYYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMThmOTJkODFiMjc1MDc4ZjE5OGExMWE4MmY1MzY2M2Uz OGQ5YjlhOTIzZTM1NDU1ZWM5NzJjNjQxNWNkMTQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6bQoEusjNbS7Big2/ob2L/IdiEOQpreqr3ebJp41fhQ4E pX3L+A2IylsbBjIcdN/8R+8LPCspOX6OVN/tj2P79P8l3XHnT9DHKg8v0TBlVYtH 5PIlrUzW/TbrNm4G2SgkZ78U8BJkN+D/aehDH+KGrSpoEVqfVh/3c7Ckmo6hLexY Yzrj1g+Ppw6h9JBgWDgp0sBALPxzp8WY9wRK6ZPiND6ZW6WgkfTeLU4rut/Q1H9u P+I9gLzxxCJTXyDBqgOvJYmwiMXdG8LpqhLHqbNFdUEPhYMRyMO8pfVBcCmNh34G CFc37fEOt6OBV8zIZcXwXG5AHOizHr5MLqiSUJ65AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU42WnMSPxbj14IVIiXgYbuOxdHZYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJhOTZjMDk3LTM4OTktNGE1OC05M2IxLTZlNDAwYmUwY2EyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwANMjANBgkqhkiG9w0BAQsFAAOCAQEAfkDd9Wtbf9x4HOUH4SKLrNVY9nY5 Hz/JqYERPEhLQBcGday8rIsV+nbSJQaxwdIsC7CeJUJiqJ198GhtJdfzMNOLSDpQ XG9mzzTeMIj/fQOhy91JR2a5ZDiAgZS0LEAJsUHV+3dpsLCsg4dwVy1iZKK2nB8r h2K3FOp+7aH73+AJ0e4VPL+4gIi83dT8wzFkWWxZCPXOd7b8Fp0zVIdCWB3a4FqM heyy76H+YTvwJNhjq+DNcH65TiMEHWjL/sqrwrfWFnOfEX/9xR0j55vDvpnE4PtX ipuoHEojxme6o8BIe4gL1/OUHaWUzzoEW3VK/yzOBsfThqQIiPeAkAlDEw== -----END CERTIFICATE-----Generated at Wed Feb 5 10:40:10 2025 by rpki-client