$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30d5be07-9a44-43ca-8d52-c3ceb09f6c32.roa File: 30d5be07-9a44-43ca-8d52-c3ceb09f6c32.roa (raw, json) Hash identifier: rOyccyb+UpwEkpc7+r5MHa7LInMzW6a0Xb0D4t2wBus= Subject key identifier: 21:E2:FE:B4:F4:09:63:14:A5:2C:C2:2C:B8:C8:AE:50:1B:1D:B2:E5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 03690D98F5CF48C7AD008BA18DE86C613F5D3850 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30d5be07-9a44-43ca-8d52-c3ceb09f6c32.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.252.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:69:0d:98:f5:cf:48:c7:ad:00:8b:a1:8d:e8:6c:61:3f:5d:38:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ae:7d:19:d7:06:ce:1d:c5:0e:20:62:87:0f: 1f:e4:d3:53:fa:ff:25:56:ba:63:19:38:8f:dc:be: 07:bc:f5:47:89:a7:9b:3d:a8:f2:c5:0e:a9:ff:32: fa:8d:11:f5:5b:af:9b:4e:0c:24:b4:7b:b2:28:1e: 0a:b7:97:56:50:9f:de:3c:e2:43:f7:4f:2a:5b:b0: d4:54:2c:49:5d:21:11:53:05:82:d3:cf:d6:b1:e9: fd:6d:c5:dd:98:7c:78:6c:d6:6c:e0:45:e3:07:b8: 32:2a:3a:81:b5:93:5c:b1:82:61:0c:9d:11:23:16: 60:05:d2:6a:5f:05:78:ce:f3:d4:6d:a3:2c:2a:21: f6:8f:19:af:98:ac:29:a4:8d:90:49:5d:4e:1b:d6: 42:a8:5a:f7:b0:2c:fa:fd:3c:46:77:05:76:b6:52: e8:05:ae:7d:c0:94:3b:41:6f:63:84:ff:9e:65:1f: 89:0b:19:59:14:c1:39:9f:57:35:f9:71:9c:9e:cb: 9f:a0:07:0a:15:d3:92:ff:7c:0e:22:3c:7c:30:fe: 07:3c:f7:63:91:7b:22:f9:0c:f5:79:35:1f:32:62: 03:70:27:9f:cd:50:af:d8:dd:b2:d7:6f:c0:81:2d: 50:85:af:6a:a3:fa:30:52:7b:44:a9:fc:22:35:2a: 77:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E2:FE:B4:F4:09:63:14:A5:2C:C2:2C:B8:C8:AE:50:1B:1D:B2:E5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30d5be07-9a44-43ca-8d52-c3ceb09f6c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.252.78.0/24 Signature Algorithm: sha256WithRSAEncryption b0:84:66:a0:56:ff:dc:16:59:b8:4c:1d:1b:5a:44:ff:03:67: 5c:4b:dd:a2:5a:ac:01:cc:b6:1b:c3:ce:85:97:5a:1d:ab:c8: ea:51:94:97:6e:f6:01:99:a1:57:3d:15:2c:16:0c:34:63:d1: 5f:d6:a6:07:73:2a:97:b0:e3:dd:27:68:c1:11:5b:5f:4c:14: 14:0e:86:d0:0d:49:84:86:ff:e1:30:27:03:2c:9f:b6:1c:f8: 27:2d:f8:b0:f3:2d:93:c0:73:74:f0:9f:0e:95:5d:31:79:45: fd:9e:95:d7:1f:79:1a:d5:8b:93:3c:66:23:6c:b6:c1:06:a4: 1c:27:75:c8:21:01:54:04:90:45:dc:7c:52:6e:d5:be:c3:d1: bb:07:2c:34:cf:b3:75:1d:6a:d9:8c:b7:4d:b8:cb:9b:ed:a4: d8:c3:79:02:3d:21:f8:85:2d:79:22:16:51:cc:22:51:e8:6b: 8f:5a:31:83:22:22:cf:b4:8c:d1:4c:74:80:ef:d5:c2:93:79: 48:81:cc:3e:84:93:d9:32:7c:25:19:4c:9f:a0:fc:ab:d4:f0: 0c:f2:4a:1e:79:83:44:51:fd:49:42:7d:eb:71:e4:00:af:cd: 9f:68:68:3f:04:ae:e7:a7:af:6a:48:f0:7c:68:1c:bb:b9:90: 0c:32:05:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA2kNmPXPSMetAIuhjehsYT9dOFAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjc2NjczY2MxNmQxMzNhMzQ0MDM2MGMwYjEzM2Y2OTc1 NTczMWZmZjIxMjMyMDQ1MWJhYTllZjYwNzY3MmE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDprn0Z1wbOHcUOIGKHDx/k01P6/yVWumMZOI/cvge89UeJ p5s9qPLFDqn/MvqNEfVbr5tODCS0e7IoHgq3l1ZQn9484kP3TypbsNRULEldIRFT BYLTz9ax6f1txd2YfHhs1mzgReMHuDIqOoG1k1yxgmEMnREjFmAF0mpfBXjO89Rt oywqIfaPGa+YrCmkjZBJXU4b1kKoWvewLPr9PEZ3BXa2UugFrn3AlDtBb2OE/55l H4kLGVkUwTmfVzX5cZyey5+gBwoV05L/fA4iPHww/gc892OReyL5DPV5NR8yYgNw J5/NUK/Y3bLXb8CBLVCFr2qj+jBSe0Sp/CI1KndxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIeL+tPQJYxSlLMIsuMiuUBsdsuUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMwZDViZTA3LTlhNDQtNDNjYS04ZDUyLWMzY2ViMDlmNmMzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2/E4wDQYJKoZIhvcNAQELBQADggEBALCEZqBW/9wWWbhMHRtaRP8DZ1xL 3aJarAHMthvDzoWXWh2ryOpRlJdu9gGZoVc9FSwWDDRj0V/WpgdzKpew490naMER W19MFBQOhtANSYSG/+EwJwMsn7Yc+Cct+LDzLZPAc3Twnw6VXTF5Rf2eldcfeRrV i5M8ZiNstsEGpBwndcghAVQEkEXcfFJu1b7D0bsHLDTPs3UdatmMt024y5vtpNjD eQI9IfiFLXkiFlHMIlHoa49aMYMiIs+0jNFMdIDv1cKTeUiBzD6Ek9kyfCUZTJ+g /KvU8AzySh55g0RR/UlCfetx5ACvzZ9oaD8Eruenr2pI8HxoHLu5kAwyBZk= -----END CERTIFICATE-----Generated at Wed Feb 5 10:47:28 2025 by rpki-client