$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d99d9ec-42c4-4861-afdc-51606b09cc48.roa File: 2d99d9ec-42c4-4861-afdc-51606b09cc48.roa (raw, json) Hash identifier: yE0EwzBU2TEt/U8/m62YLdQUrSMrp0K4rr04fXmn4kg= Subject key identifier: 2C:8E:B8:64:C6:FB:F4:64:1A:A3:5C:8D:22:CB:E0:09:50:5F:77:D0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 19ADE427195EA3AE9E6EAF38938F2D18346607CA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d99d9ec-42c4-4861-afdc-51606b09cc48.roa Signing time: Mon 10 Feb 2025 00:00:00 +0000 ROA not before: Mon 10 Feb 2025 00:00:00 +0000 ROA not after: Mon 17 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ad:e4:27:19:5e:a3:ae:9e:6e:af:38:93:8f:2d:18:34:66:07:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 10 00:00:00 2025 GMT Not After : Mar 17 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6d:a8:4c:3c:65:2f:21:26:79:d9:5f:23:b7: 9c:16:2a:c2:26:ee:21:34:a6:6f:86:fc:7f:26:57: e9:87:e6:6b:98:ce:22:65:24:3e:c1:27:96:db:1e: 4f:0f:74:d3:31:d6:db:01:09:d9:7c:e5:ce:2f:bb: eb:42:85:17:a9:4d:a6:e0:ea:4f:22:08:af:b1:ee: 14:be:7b:27:4a:cb:b1:0c:02:9b:37:63:75:9a:ec: 9d:b4:1a:d4:56:03:30:00:86:e6:2e:6b:3c:e2:b3: d4:92:d1:5a:75:bc:3a:a2:3f:ec:e9:34:16:20:b1: a5:34:af:c8:6d:dd:51:8d:4f:a4:ce:ec:76:17:bc: 33:58:57:e5:68:cb:02:ea:88:2e:9e:89:32:09:ca: a8:08:af:c5:40:d8:dd:c8:5a:0b:a9:64:71:e4:ed: 1f:a1:0f:aa:db:84:5e:89:2a:9b:64:8b:be:51:8b: 70:8c:c9:0f:83:3b:fd:f8:b0:65:9b:4d:16:24:c6: 11:17:a5:90:e4:ad:11:7b:b6:49:e5:ca:dd:87:7c: 26:84:8c:3d:d8:7f:e5:1f:67:52:f9:19:79:b6:7d: 55:0b:cf:b8:9f:6c:95:39:d8:6e:c7:d9:1a:ca:42: 14:5c:c1:98:01:81:e0:a3:32:27:62:37:97:5b:0e: 79:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8E:B8:64:C6:FB:F4:64:1A:A3:5C:8D:22:CB:E0:09:50:5F:77:D0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d99d9ec-42c4-4861-afdc-51606b09cc48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.32.0/21 Signature Algorithm: sha256WithRSAEncryption 43:7e:74:b2:7e:7d:93:12:c0:82:83:e1:92:b7:33:88:b7:95: 60:bb:88:61:ae:21:4a:19:ba:92:6e:aa:d8:58:35:81:8f:f5: 89:59:67:07:c9:9e:8a:63:6f:b2:9c:bf:3f:84:e4:d3:09:9f: bc:f1:8e:03:62:1a:ae:4e:d3:ee:f4:ff:da:67:6c:d9:9b:64: c8:39:72:33:13:8a:ab:d3:7a:b9:ab:dd:34:9e:56:64:b0:58: 8d:30:71:7d:46:e9:4f:e4:a4:79:0d:9b:9b:7c:14:ac:36:f9: ee:38:61:d5:4f:7f:df:d1:eb:90:00:aa:29:55:24:b5:a6:fc: a0:bc:bc:46:93:d7:2d:b4:0f:fc:7c:7f:a7:1e:31:75:1c:92: 7f:52:5d:b2:d7:f7:34:66:92:e1:94:c9:5f:bf:0e:5c:29:f8: 56:c1:45:2f:18:d5:88:6d:7a:51:67:ce:5e:26:5d:b5:a1:5f: 20:9c:e1:d9:3f:dc:5a:f3:77:0b:4f:01:71:df:29:17:a7:6e: db:bf:b9:91:ea:51:aa:e1:06:8f:14:87:2d:b8:21:fb:10:aa: 6a:e6:3f:e8:85:d2:6c:f9:7c:6a:70:1f:a3:7a:7b:c9:b4:9e: 71:99:40:8a:1f:6e:b3:6d:15:4e:af:cf:bc:84:4e:25:15:78: 77:c8:57:b9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGa3kJxleo66ebq84k48tGDRmB8owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMjEwMDAwMDAwWhcNMjUwMzE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTU3YmU3NTcyMjJjZTMzNGE5OGY0OWMwYWE4OTJiNTg4 N2FmMTllMDQ3OWNjMmYzMjM2MDAwZmY4ODJmNGZjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkbahMPGUvISZ52V8jt5wWKsIm7iE0pm+G/H8mV+mH5muY ziJlJD7BJ5bbHk8PdNMx1tsBCdl85c4vu+tChRepTabg6k8iCK+x7hS+eydKy7EM Aps3Y3Wa7J20GtRWAzAAhuYuazzis9SS0Vp1vDqiP+zpNBYgsaU0r8ht3VGNT6TO 7HYXvDNYV+VoywLqiC6eiTIJyqgIr8VA2N3IWgupZHHk7R+hD6rbhF6JKptki75R i3CMyQ+DO/34sGWbTRYkxhEXpZDkrRF7tknlyt2HfCaEjD3Yf+UfZ1L5GXm2fVUL z7ifbJU52G7H2RrKQhRcwZgBgeCjMidiN5dbDnk9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULI64ZMb79GQao1yNIsvgCVBfd9AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJkOTlkOWVjLTQyYzQtNDg2MS1hZmRjLTUxNjA2YjA5Y2M0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM27yAwDQYJKoZIhvcNAQELBQADggEBAEN+dLJ+fZMSwIKD4ZK3M4i3lWC7 iGGuIUoZupJuqthYNYGP9YlZZwfJnopjb7Kcvz+E5NMJn7zxjgNiGq5O0+70/9pn bNmbZMg5cjMTiqvTermr3TSeVmSwWI0wcX1G6U/kpHkNm5t8FKw2+e44YdVPf9/R 65AAqilVJLWm/KC8vEaT1y20D/x8f6ceMXUckn9SXbLX9zRmkuGUyV+/Dlwp+FbB RS8Y1YhtelFnzl4mXbWhXyCc4dk/3FrzdwtPAXHfKRenbtu/uZHqUarhBo8Uhy24 IfsQqmrmP+iF0mz5fGpwH6N6e8m0nnGZQIofbrNtFU6vz7yETiUVeHfIV7k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:34 2025 by rpki-client