$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5116f8fc-b779-4678-9814-1e7dc8e24d07.roa File: 5116f8fc-b779-4678-9814-1e7dc8e24d07.roa (raw, json) Hash identifier: hGbvWtASMDCMwwoaUGWgvUB4HjhepW69wXiXsFOTg54= Subject key identifier: 91:82:3B:3E:E9:6C:4C:13:BD:5C:B4:CE:B9:4C:03:6C:D7:76:95:66 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4E7328EED85E965330380246DA41CAA1FCAE7302 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5116f8fc-b779-4678-9814-1e7dc8e24d07.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.152.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:73:28:ee:d8:5e:96:53:30:38:02:46:da:41:ca:a1:fc:ae:73:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8d:7f:02:26:9b:16:a3:5d:09:d8:19:94:70: 30:d0:df:65:57:b7:24:13:96:ce:a9:ab:d3:21:0b: 7b:e5:ad:e5:27:36:e6:ce:cf:7a:5f:bb:a3:89:5e: 22:01:a7:6d:eb:02:7c:93:af:d4:55:8a:f7:c4:cb: 4a:3f:80:1e:39:aa:d8:49:af:f7:01:4d:e1:08:65: af:fd:b6:74:92:19:58:a2:18:ef:fd:87:bb:87:2b: a3:b7:c5:72:ab:c6:83:21:65:6f:79:97:79:86:50: 96:8e:3d:69:7c:fc:eb:c2:b7:2f:e4:b9:0c:99:4d: 7e:7e:53:52:0e:b8:5c:37:49:3e:7c:a9:e1:75:62: 32:e7:8f:26:d1:54:ad:d9:0a:7b:5b:d0:b8:fc:ec: 6a:74:f4:20:84:13:54:09:dd:c9:66:b0:1b:b7:1b: ab:6f:73:5d:3e:90:94:c9:20:81:03:a7:ce:e7:cd: b2:77:0c:0c:f2:cb:21:be:ca:83:09:7f:75:e8:13: 04:e7:3e:70:ae:95:0a:1b:3b:6e:d5:ca:41:6c:db: 59:18:9c:7f:38:3f:7b:5a:44:d4:f1:5a:7a:55:b1: ae:82:08:6d:73:0f:eb:49:81:f7:4a:2b:1f:ee:0e: 35:d7:52:a8:75:cc:53:66:4c:47:05:e3:e2:16:24: 17:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:82:3B:3E:E9:6C:4C:13:BD:5C:B4:CE:B9:4C:03:6C:D7:76:95:66 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5116f8fc-b779-4678-9814-1e7dc8e24d07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.152.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6f:16:53:c7:81:e4:bd:51:c4:04:16:9d:8e:5f:d8:a3:85:4b: 4a:d0:89:7e:c9:49:e2:2b:92:d2:e5:bf:0f:20:1d:65:ac:ed: ec:59:9a:ed:ee:b7:5e:b5:c0:f6:a9:e0:59:90:55:0d:12:03: d9:e7:f3:ae:e8:7b:a2:f9:c7:6c:54:1a:85:68:e4:9a:99:b8: 4e:2e:bd:c4:58:b6:99:34:ab:59:96:54:d5:58:5f:ef:fc:be: a3:48:2c:cf:14:10:59:52:c9:ff:24:6a:97:8f:d6:24:7a:0b: d6:04:0b:d3:7b:4d:15:14:e9:54:12:ee:db:d4:01:d0:cc:3c: 06:0e:3d:94:27:55:50:e8:12:0d:e4:f5:0c:91:7b:ed:6f:8a: 5c:de:a5:20:53:ba:a4:02:81:f2:e6:21:5e:01:94:42:26:be: bb:1d:e8:3d:cb:87:8a:82:f2:e3:4f:76:1f:88:b9:58:8f:08: 44:7a:6c:a9:e2:c5:91:4f:96:89:d6:d0:3f:85:40:4c:f0:7d: f0:49:8d:ce:bf:4a:57:fd:d6:5e:08:a1:eb:b7:5b:ec:38:af: 54:1f:6a:36:08:62:40:cf:99:a3:3d:9b:26:d4:8f:b0:ac:73: 75:79:ca:fc:2c:27:5d:b3:a8:e4:d9:d3:a9:72:14:ef:89:63: 0a:bd:e3:56 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTnMo7thellMwOAJG2kHKofyucwIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OGUwZjQzODc2ZDE3MmY5YTNlZmU5M2M0NTUzNDU5Zjg3 Yjk2MGQyYmEwYWRlNTA3OTNjYjJkNGE1Zjk2YzUwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnjX8CJpsWo10J2BmUcDDQ32VXtyQTls6pq9MhC3vlreUn NubOz3pfu6OJXiIBp23rAnyTr9RVivfEy0o/gB45qthJr/cBTeEIZa/9tnSSGVii GO/9h7uHK6O3xXKrxoMhZW95l3mGUJaOPWl8/OvCty/kuQyZTX5+U1IOuFw3ST58 qeF1YjLnjybRVK3ZCntb0Lj87Gp09CCEE1QJ3clmsBu3G6tvc10+kJTJIIEDp87n zbJ3DAzyyyG+yoMJf3XoEwTnPnCulQobO27VykFs21kYnH84P3taRNTxWnpVsa6C CG1zD+tJgfdKKx/uDjXXUqh1zFNmTEcF4+IWJBdBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUkYI7PulsTBO9XLTOuUwDbNd2lWYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUxMTZmOGZjLWI3NzktNDY3OC05ODE0LTFlN2RjOGUyNGQwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjmDANBgkqhkiG9w0BAQsFAAOCAQEAbxZTx4HkvVHEBBadjl/Yo4VLStCJ fslJ4iuS0uW/DyAdZazt7Fma7e63XrXA9qngWZBVDRID2efzruh7ovnHbFQahWjk mpm4Ti69xFi2mTSrWZZU1Vhf7/y+o0gszxQQWVLJ/yRql4/WJHoL1gQL03tNFRTp VBLu29QB0Mw8Bg49lCdVUOgSDeT1DJF77W+KXN6lIFO6pAKB8uYhXgGUQia+ux3o PcuHioLy4092H4i5WI8IRHpsqeLFkU+WidbQP4VATPB98EmNzr9KV/3WXgih67db 7DivVB9qNghiQM+Zoz2bJtSPsKxzdXnK/CwnXbOo5NnTqXIU74ljCr3jVg== -----END CERTIFICATE-----Generated at Wed Feb 5 10:47:18 2025 by rpki-client