$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/538fe09f-33dc-4586-9523-b530760023f2.roa File: 538fe09f-33dc-4586-9523-b530760023f2.roa (raw, json) Hash identifier: 9qx0yiYk2TLc+yIxkjoPBG0ekx/Mfe2YFQ4yW7cQurk= Subject key identifier: 5D:D4:59:91:01:75:59:F6:EB:94:E2:BF:11:25:B4:1A:B3:97:6F:61 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5CEA3FF1A21BA38DD679FDF07A23FA6BB32AFA79 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/538fe09f-33dc-4586-9523-b530760023f2.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.116.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ea:3f:f1:a2:1b:a3:8d:d6:79:fd:f0:7a:23:fa:6b:b3:2a:fa:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:eb:c2:e4:04:f1:78:df:58:89:96:f9:f6:f9: 37:ee:0a:a2:15:2e:44:7e:a5:4a:78:f5:3c:a0:d6: 27:f9:c4:8f:94:4d:62:43:75:6e:23:1a:58:9d:ca: 62:22:2b:db:37:4c:30:b4:9a:c0:d4:36:80:05:30: 1e:59:a5:b4:d0:e9:12:ff:fb:64:0b:a1:7e:a3:a8: 98:73:84:78:a4:98:f8:31:82:40:eb:0f:11:a3:c7: 86:ec:f0:bc:e0:52:1c:22:55:2d:40:ee:3e:c6:e1: 37:5d:8e:c1:2e:8a:b8:3a:20:5e:70:a5:5b:46:26: 58:f2:91:b9:95:9d:ea:2e:d9:9f:16:55:50:57:8a: a3:f6:1b:29:c7:34:db:b0:76:f2:fa:87:31:12:1b: bf:cd:d9:f9:32:aa:61:56:cf:c8:f0:57:49:f7:3d: 0b:81:13:f1:9d:b9:16:16:24:37:74:f4:29:7f:b6: ac:3d:0d:a7:f3:d4:f5:c6:e5:1c:2a:06:4f:04:e5: 60:b2:c0:a0:20:48:2b:ae:c6:9e:fd:dc:ae:0d:20: a9:2e:f8:bd:eb:0d:70:3e:3b:d7:5d:95:b1:ef:8e: 2d:00:d7:eb:84:de:09:b5:c5:39:5a:8f:7f:04:c4: f4:32:b5:9e:53:fc:68:02:24:ab:81:05:4f:49:33: 1e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D4:59:91:01:75:59:F6:EB:94:E2:BF:11:25:B4:1A:B3:97:6F:61 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/538fe09f-33dc-4586-9523-b530760023f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.116.0.0/14 Signature Algorithm: sha256WithRSAEncryption 6c:19:c0:38:f3:47:8c:70:0b:c5:93:2f:8e:39:2c:e9:38:b9: b2:ff:50:62:80:d0:ef:b5:15:f6:84:38:4d:37:13:dc:e8:a1: 77:f9:bc:5b:82:5a:27:bb:a1:e6:7e:04:8c:82:28:a5:f7:83: 47:bb:a0:8d:8d:af:97:08:3b:2e:10:75:84:89:79:af:e6:0f: 62:b5:ce:b1:13:92:fb:eb:96:d4:08:e3:02:5e:48:b7:9e:04: 28:52:35:4f:74:af:74:b1:7b:57:b5:ac:29:84:25:f0:35:e6: b1:6a:ca:fe:d1:9d:89:5f:51:4d:63:70:a8:79:2a:0c:05:36: 81:4a:7f:48:a8:c2:46:52:0e:8f:0b:49:d7:d6:91:67:b2:2a: a4:96:89:ac:59:74:9a:73:fa:bb:c5:12:10:50:d2:d8:23:b8: c9:1a:63:ed:54:8d:ff:59:63:a6:5a:5b:bf:f0:49:13:64:dd: 6b:9b:7d:94:76:ae:fa:97:f7:d9:3f:9e:ca:1e:7f:ca:02:71: ef:64:2d:94:a4:e3:70:bd:c9:4d:ed:b9:25:e2:f9:77:1c:0e: 44:3f:cf:8d:33:48:bf:1f:3e:c5:81:98:0d:63:36:7a:7f:48: d5:9c:e4:4d:af:a7:ed:76:b7:a4:25:a5:8d:d7:e2:b7:e3:17: 7e:c9:e2:75 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXOo/8aIbo43Wef3weiP6a7Mq+nkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZWFmZGJhNGM2YTE3YmVhNjQ4YmM0YjliNjY0YjgyOTRi YjA2NWU4NzYzMTA4NzI2NGJiZmRiYjZlZjNiODM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCe68LkBPF431iJlvn2+TfuCqIVLkR+pUp49Tyg1if5xI+U TWJDdW4jGlidymIiK9s3TDC0msDUNoAFMB5ZpbTQ6RL/+2QLoX6jqJhzhHikmPgx gkDrDxGjx4bs8LzgUhwiVS1A7j7G4TddjsEuirg6IF5wpVtGJljykbmVneou2Z8W VVBXiqP2GynHNNuwdvL6hzESG7/N2fkyqmFWz8jwV0n3PQuBE/GduRYWJDd09Cl/ tqw9Dafz1PXG5RwqBk8E5WCywKAgSCuuxp793K4NIKku+L3rDXA+O9ddlbHvji0A 1+uE3gm1xTlaj38ExPQytZ5T/GgCJKuBBU9JMx6PAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUXdRZkQF1WfbrlOK/ESW0GrOXb2EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUzOGZlMDlmLTMzZGMtNDU4Ni05NTIzLWI1MzA3NjAwMjNmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwISdDANBgkqhkiG9w0BAQsFAAOCAQEAbBnAOPNHjHALxZMvjjks6Ti5sv9Q YoDQ77UV9oQ4TTcT3Oihd/m8W4JaJ7uh5n4EjIIopfeDR7ugjY2vlwg7LhB1hIl5 r+YPYrXOsROS++uW1AjjAl5It54EKFI1T3SvdLF7V7WsKYQl8DXmsWrK/tGdiV9R TWNwqHkqDAU2gUp/SKjCRlIOjwtJ19aRZ7IqpJaJrFl0mnP6u8USEFDS2CO4yRpj 7VSN/1ljplpbv/BJE2Tda5t9lHau+pf32T+eyh5/ygJx72QtlKTjcL3JTe25JeL5 dxwORD/PjTNIvx8+xYGYDWM2en9I1ZzkTa+n7Xa3pCWljdfit+MXfsnidQ== -----END CERTIFICATE-----Generated at Wed Feb 5 10:40:22 2025 by rpki-client