$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/464deaeb-80c7-4dcc-bc1b-ecc1b641dd8f.roa File: 464deaeb-80c7-4dcc-bc1b-ecc1b641dd8f.roa (raw, json) Hash identifier: V0nPhXuwfjRmdb9MM8oVvW56ucD2zs+IljaseJC4RcE= Subject key identifier: 69:A7:14:B6:1B:30:F5:14:4B:09:28:DF:97:99:41:39:B7:9D:8A:42 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1A88CE01087A866B81BB714A8FBB58F211AA583A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/464deaeb-80c7-4dcc-bc1b-ecc1b641dd8f.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.214.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:88:ce:01:08:7a:86:6b:81:bb:71:4a:8f:bb:58:f2:11:aa:58:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2c:2c:c9:2a:32:f1:3d:d3:b9:65:7c:95:c0: 5e:38:fb:29:a4:6e:87:a3:d5:e7:e1:5d:c0:3c:d0: aa:c6:a4:ed:15:ea:2c:67:1b:67:54:59:f8:fc:89: 24:38:7d:14:dd:6d:82:32:64:a0:f7:16:e3:35:b9: 46:dc:8b:4c:00:84:31:0c:91:98:ad:83:c7:5f:1f: 9a:90:de:58:79:ff:03:28:39:d5:8e:47:01:29:6d: e2:f8:81:8a:68:89:32:bb:97:84:1c:f8:69:58:98: 7f:8b:91:3f:27:30:98:d5:83:c7:80:c7:5e:75:30: 09:89:6c:9f:fc:5b:71:5c:88:38:e5:2b:ce:24:f1: 24:7a:17:46:9e:27:2e:83:ff:a1:5f:b5:f8:30:6e: 9a:9a:e4:f2:e8:f2:b7:a8:90:b8:a8:a6:b6:59:4e: fd:b1:b8:a8:12:c1:5f:31:fd:82:59:c1:1b:34:5f: 98:e5:fe:58:2d:37:f7:07:f7:ec:48:3b:e0:9a:32: 7b:2a:5d:a2:c5:31:d2:5a:3c:2c:76:e6:59:16:39: 4c:b9:98:c7:4c:f9:09:79:d0:b4:9c:11:32:f5:6b: 11:db:d8:30:1e:af:f6:e9:7a:8c:88:ef:12:b3:f1: ba:a0:db:f0:b2:98:6b:f2:5f:9d:52:02:3d:71:e7: f2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A7:14:B6:1B:30:F5:14:4B:09:28:DF:97:99:41:39:B7:9D:8A:42 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/464deaeb-80c7-4dcc-bc1b-ecc1b641dd8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.214.0.0/17 Signature Algorithm: sha256WithRSAEncryption 0e:17:cd:d0:e5:8b:07:0c:1a:36:00:91:6f:02:73:1b:b6:c9: 12:06:f4:0d:17:6c:c4:02:8a:26:53:61:8f:56:41:82:a6:ff: bd:8e:50:2b:56:9b:c0:5f:5c:39:af:58:fd:23:37:60:18:fd: 12:56:81:ba:e3:eb:0c:74:5f:b4:80:f2:b0:11:64:08:10:4a: 9a:74:d9:b5:c9:6e:bb:e0:1d:21:1c:0b:66:d0:3f:76:31:56: 52:ba:6f:5a:5f:23:e7:13:a0:f3:51:92:e5:97:84:d6:0c:d1: b2:ee:c3:36:27:d3:f1:e1:28:fc:c1:59:fd:1b:a5:46:3b:32: e6:20:f4:15:91:e3:25:6e:67:f9:d1:c3:42:ac:ee:2c:f0:f4: 07:c0:80:67:e5:8d:8c:fe:7f:d0:0d:56:be:1f:aa:2b:79:15: 27:a5:db:5e:76:62:f7:e3:df:c1:2a:85:71:13:a5:28:13:50: e0:10:87:bc:35:65:e7:4c:a7:ef:50:03:bb:06:70:73:59:13: a1:20:0e:2a:e9:f3:23:c0:9f:86:f7:5e:f4:db:96:77:da:3e: 6a:b9:64:0f:13:65:04:ac:75:10:27:da:42:7f:a1:1c:a3:62: 2e:d4:51:e8:c0:fb:62:1d:1f:54:a1:22:39:49:4c:f0:84:10: 8a:89:d6:f9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGojOAQh6hmuBu3FKj7tY8hGqWDowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzgwNDk4MTRhNmM1N2U3NGI4MTkzYzJiOGEzYjBiOWUz YzhjMTI2MTE5NTViMDA5ZDFkMjBlZWYzZjU5ZTVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRLCzJKjLxPdO5ZXyVwF44+ymkboej1efhXcA80KrGpO0V 6ixnG2dUWfj8iSQ4fRTdbYIyZKD3FuM1uUbci0wAhDEMkZitg8dfH5qQ3lh5/wMo OdWORwEpbeL4gYpoiTK7l4Qc+GlYmH+LkT8nMJjVg8eAx151MAmJbJ/8W3FciDjl K84k8SR6F0aeJy6D/6Fftfgwbpqa5PLo8reokLioprZZTv2xuKgSwV8x/YJZwRs0 X5jl/lgtN/cH9+xIO+CaMnsqXaLFMdJaPCx25lkWOUy5mMdM+Ql50LScETL1axHb 2DAer/bpeoyI7xKz8bqg2/CymGvyX51SAj1x5/IhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaacUthsw9RRLCSjfl5lBObedikIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ2NGRlYWViLTgwYzctNGRjYy1iYzFiLWVjYzFiNjQxZGQ4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc21gAwDQYJKoZIhvcNAQELBQADggEBAA4XzdDliwcMGjYAkW8Ccxu2yRIG 9A0XbMQCiiZTYY9WQYKm/72OUCtWm8BfXDmvWP0jN2AY/RJWgbrj6wx0X7SA8rAR ZAgQSpp02bXJbrvgHSEcC2bQP3YxVlK6b1pfI+cToPNRkuWXhNYM0bLuwzYn0/Hh KPzBWf0bpUY7MuYg9BWR4yVuZ/nRw0Ks7izw9AfAgGfljYz+f9ANVr4fqit5FSel 2152Yvfj38EqhXETpSgTUOAQh7w1ZedMp+9QA7sGcHNZE6EgDirp8yPAn4b3XvTb lnfaPmq5ZA8TZQSsdRAn2kJ/oRyjYi7UUejA+2IdH1ShIjlJTPCEEIqJ1vk= -----END CERTIFICATE-----Generated at Wed Feb 5 10:54:59 2025 by rpki-client