$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5050d6c6-2f29-4886-89c8-8988f624921d.roa File: 5050d6c6-2f29-4886-89c8-8988f624921d.roa (raw, json) Hash identifier: V4EFtQjHTpbkM0Akpy3WRMneabMo+EmsDONy08hAb/c= Subject key identifier: D1:9D:55:A0:87:69:B2:B4:83:05:99:89:11:AC:03:FB:7D:60:F0:20 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 48F56A8AB4CBDB523C379B7A582FF0DF24DF77CF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5050d6c6-2f29-4886-89c8-8988f624921d.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.248.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f5:6a:8a:b4:cb:db:52:3c:37:9b:7a:58:2f:f0:df:24:df:77:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:d9:e4:7f:07:13:df:51:aa:88:7f:72:14: 30:79:1b:69:9e:c0:e4:dc:cc:f1:6c:15:02:ff:37: e7:e4:4b:33:1f:a0:09:be:01:a1:6b:fc:62:c8:2f: 17:99:d3:fe:f4:7a:a9:10:5e:18:36:1b:04:09:c9: 79:aa:28:24:d5:a6:07:d7:2a:8e:97:47:00:c2:78: 37:80:44:9a:dc:f2:d6:93:b6:66:5b:7a:28:a7:ef: 3e:56:3a:ae:7e:ac:77:cb:7f:04:c9:2b:e1:a0:7b: bf:17:ce:99:21:c5:49:0d:ac:f8:6c:3a:87:9c:95: ab:24:96:b8:ed:68:bd:1b:69:02:53:c4:6c:7c:10: b9:89:ad:2e:90:de:a6:8f:61:9c:ae:8c:6c:07:19: 61:ec:f0:7a:6f:54:a9:df:ac:1b:77:da:3e:63:dc: 62:bd:be:ac:b0:3d:0b:d6:64:e1:00:09:16:db:b5: c4:af:eb:3e:db:0a:64:8e:7e:f6:81:85:dc:85:2e: 5f:16:87:3f:98:1f:19:95:d0:bd:1b:14:47:44:24: 81:62:72:cf:f6:6f:d1:df:29:9b:d2:18:72:8f:a7: dc:cd:3b:91:a4:9f:b0:4f:7b:84:fa:38:1f:a6:54: 04:ca:bd:81:18:ae:2f:4f:90:43:60:68:e4:fa:23: d5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9D:55:A0:87:69:B2:B4:83:05:99:89:11:AC:03:FB:7D:60:F0:20 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5050d6c6-2f29-4886-89c8-8988f624921d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.248.222.0/23 Signature Algorithm: sha256WithRSAEncryption 03:9c:63:cc:29:81:32:b9:7c:8a:0a:5e:6b:c3:71:da:91:37: 6b:05:f5:33:1e:8b:a6:0a:5c:40:b9:42:29:22:f6:3a:ae:16: d1:c5:77:f5:ed:79:22:e1:02:2b:ae:49:0f:a5:7e:1f:91:51: d7:6f:fc:38:d7:ce:6b:e8:d6:a7:cf:14:37:0d:0d:4d:3c:0d: 6d:be:44:9d:fb:a8:f6:ad:c1:cb:c6:d7:a2:b8:8b:8e:d9:49: fc:31:d4:97:e7:0d:42:08:33:c4:22:b9:f6:18:6e:49:ff:36: c8:e7:5e:a3:1a:7c:31:e0:24:29:75:5b:2c:04:cd:f5:15:06: 45:5d:de:5e:8e:ec:b1:1c:82:9c:7e:b7:d7:6e:e9:7b:fc:32: d5:57:30:eb:1b:cb:d0:f6:67:89:a4:ac:4f:63:8a:7e:68:d2: 4b:15:c5:ab:c7:35:06:14:f0:ca:bc:38:ca:81:a2:a7:4c:9e: b8:c7:e2:7f:49:e2:5a:9a:f6:37:d7:1e:05:a9:05:8e:05:84: b8:bc:9a:d5:1a:3a:83:b1:a1:ac:77:70:ec:64:c0:03:5a:6d: 3f:d2:12:c2:27:d6:09:12:56:ae:98:43:8e:55:09:1b:0b:ae: dc:a3:ea:9f:02:27:ac:53:de:e6:d3:da:37:6b:05:61:c4:e7: 9d:1d:48:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSPVqirTL21I8N5t6WC/w3yTfd88wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NzVjYzQwMDUwYzU5MDI3ZjNmMDg1ZjQyNmYyYTFmNjE5 MTVhMDE3MjJhZWFhYTg2ODVlMjEyZGNiZmUxNmFmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEqNnkfwcT31GqiH9yFDB5G2mewOTczPFsFQL/N+fkSzMf oAm+AaFr/GLILxeZ0/70eqkQXhg2GwQJyXmqKCTVpgfXKo6XRwDCeDeARJrc8taT tmZbeiin7z5WOq5+rHfLfwTJK+Gge78XzpkhxUkNrPhsOoeclasklrjtaL0baQJT xGx8ELmJrS6Q3qaPYZyujGwHGWHs8HpvVKnfrBt32j5j3GK9vqywPQvWZOEACRbb tcSv6z7bCmSOfvaBhdyFLl8Whz+YHxmV0L0bFEdEJIFics/2b9HfKZvSGHKPp9zN O5Gkn7BPe4T6OB+mVATKvYEYri9PkENgaOT6I9XzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0Z1VoIdpsrSDBZmJEawD+31g8CAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUwNTBkNmM2LTJmMjktNDg4Ni04OWM4LTg5ODhmNjI0OTIxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2+N4wDQYJKoZIhvcNAQELBQADggEBAAOcY8wpgTK5fIoKXmvDcdqRN2sF 9TMei6YKXEC5Qiki9jquFtHFd/XteSLhAiuuSQ+lfh+RUddv/DjXzmvo1qfPFDcN DU08DW2+RJ37qPatwcvG16K4i47ZSfwx1JfnDUIIM8QiufYYbkn/NsjnXqMafDHg JCl1WywEzfUVBkVd3l6O7LEcgpx+t9du6Xv8MtVXMOsby9D2Z4mkrE9jin5o0ksV xavHNQYU8Mq8OMqBoqdMnrjH4n9J4lqa9jfXHgWpBY4FhLi8mtUaOoOxoax3cOxk wANabT/SEsIn1gkSVq6YQ45VCRsLrtyj6p8CJ6xT3ubT2jdrBWHE550dSDU= -----END CERTIFICATE-----Generated at Wed Feb 5 10:59:02 2025 by rpki-client