$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5224e2b7-2f6f-43d7-9b0e-bbcc30c5ad6a.roa File: 5224e2b7-2f6f-43d7-9b0e-bbcc30c5ad6a.roa (raw, json) Hash identifier: BBNBoutz2bpTCzzVbxS9FaGIjE7iRJmC0WMPMybhmXI= Subject key identifier: 7D:11:81:53:09:91:97:10:BF:0B:36:59:DF:7D:C1:A3:C4:01:19:D0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5B15B363B3450F0276ECADA6DC7DB352A7524EAD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5224e2b7-2f6f-43d7-9b0e-bbcc30c5ad6a.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.153.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:15:b3:63:b3:45:0f:02:76:ec:ad:a6:dc:7d:b3:52:a7:52:4e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:8c:32:54:6d:aa:11:8b:a0:47:91:00:2c: 90:97:66:68:6d:ee:f4:b2:b1:e3:6c:4d:b1:7f:a1: e6:d4:ac:24:b2:b6:58:9f:83:bf:99:f3:fc:71:99: e1:d3:dd:30:d5:3e:d1:53:3f:89:c4:56:60:72:07: c1:1e:f3:4e:b9:3c:6c:b7:30:c6:4e:3d:bd:ee:8b: b2:37:ea:d2:96:60:0e:3b:79:25:8c:9a:f7:af:5a: da:47:7d:0b:98:12:b7:ff:67:59:4a:c1:da:da:77: 21:ad:b0:0d:6e:96:05:8d:78:3c:e9:63:9f:cd:4a: 59:57:71:d1:b4:57:5b:79:0e:70:b7:94:24:0f:5e: 29:ff:41:d9:86:9e:f5:de:2b:58:ba:9b:d4:7f:59: c1:ad:21:ce:ff:8a:60:b2:50:f6:c4:02:5e:ba:f1: 81:f8:0a:d4:47:2a:10:c3:c4:00:1b:01:5e:75:a3: f7:67:1d:70:da:3d:62:8d:3f:8b:ac:83:e4:cf:a4: 40:b2:41:24:bf:c5:e0:73:fa:c7:2a:06:4a:66:ef: fc:2e:e6:bc:ca:97:d8:55:e2:34:28:90:a2:6e:9d: 02:3b:34:62:25:97:76:30:16:36:2e:86:8b:17:32: b3:6c:5b:5a:aa:60:a4:5b:d3:0f:49:20:27:d8:b9: db:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:11:81:53:09:91:97:10:BF:0B:36:59:DF:7D:C1:A3:C4:01:19:D0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5224e2b7-2f6f-43d7-9b0e-bbcc30c5ad6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.153.0.0/22 Signature Algorithm: sha256WithRSAEncryption a8:b4:9c:ae:ab:c3:1b:ce:54:47:01:88:aa:e8:45:9f:60:af: eb:05:74:5f:78:5a:14:0b:65:45:cd:58:86:02:da:62:9a:55: ed:17:8f:70:7b:15:be:9b:18:a0:c1:94:f9:7d:03:87:46:31: d8:14:a7:64:39:88:32:9d:81:1c:90:70:5d:d3:dd:79:39:4e: a7:2b:27:7b:0d:f8:b1:bb:ce:4f:90:8c:b0:ec:11:36:30:87: c0:d2:2f:37:3d:29:3b:71:83:77:1e:b9:5a:99:2f:87:6b:89: 58:f7:73:58:69:79:99:79:00:08:db:00:76:ca:d0:de:a9:b0: 66:14:0f:9d:35:3c:d4:b2:bf:c5:6f:30:4b:75:90:7a:b5:cd: b5:10:b4:44:3b:39:c3:11:f3:83:10:e9:90:f1:a6:9e:af:36: 81:94:ff:74:a4:05:7e:6c:53:cb:77:de:2d:42:b9:4f:0e:39: 21:e6:77:af:7d:f9:2e:89:63:2a:4b:bd:a9:c1:81:71:17:81: a1:fc:52:2f:ad:0b:ca:e9:d1:fd:bd:9b:1c:4a:72:a9:de:1d: 96:5d:4d:94:74:96:22:e9:1f:7c:70:25:fe:e6:49:48:f4:33: e2:82:93:cf:e2:06:3e:5e:09:7b:5f:f4:9d:90:3e:c3:70:8a: 0d:53:65:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWxWzY7NFDwJ27K2m3H2zUqdSTq0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjg4ODViMTFiZWNiYmExMDkxNTZmMzY4YWU2YWU4ZDRm MzQ4OWNmNWY1Zjc1ZmQ5YWRkMTIzYzRiOGIzYmU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3MowyVG2qEYugR5EALJCXZmht7vSyseNsTbF/oebUrCSy tlifg7+Z8/xxmeHT3TDVPtFTP4nEVmByB8Ee8065PGy3MMZOPb3ui7I36tKWYA47 eSWMmvevWtpHfQuYErf/Z1lKwdradyGtsA1ulgWNeDzpY5/NSllXcdG0V1t5DnC3 lCQPXin/QdmGnvXeK1i6m9R/WcGtIc7/imCyUPbEAl668YH4CtRHKhDDxAAbAV51 o/dnHXDaPWKNP4usg+TPpECyQSS/xeBz+scqBkpm7/wu5rzKl9hV4jQokKJunQI7 NGIll3YwFjYuhosXMrNsW1qqYKRb0w9JICfYudtHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfRGBUwmRlxC/CzZZ333Bo8QBGdAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUyMjRlMmI3LTJmNmYtNDNkNy05YjBlLWJiY2MzMGM1YWQ2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjmQAwDQYJKoZIhvcNAQELBQADggEBAKi0nK6rwxvOVEcBiKroRZ9gr+sF dF94WhQLZUXNWIYC2mKaVe0Xj3B7Fb6bGKDBlPl9A4dGMdgUp2Q5iDKdgRyQcF3T 3Xk5TqcrJ3sN+LG7zk+QjLDsETYwh8DSLzc9KTtxg3ceuVqZL4driVj3c1hpeZl5 AAjbAHbK0N6psGYUD501PNSyv8VvMEt1kHq1zbUQtEQ7OcMR84MQ6ZDxpp6vNoGU /3SkBX5sU8t33i1CuU8OOSHmd699+S6JYypLvanBgXEXgaH8Ui+tC8rp0f29mxxK cqneHZZdTZR0liLpH3xwJf7mSUj0M+KCk8/iBj5eCXtf9J2QPsNwig1TZQ8= -----END CERTIFICATE-----Generated at Wed Feb 5 09:52:56 2025 by rpki-client