$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54cea109-0c4c-4e7f-a642-4fc6376e3e0b.roa File: 54cea109-0c4c-4e7f-a642-4fc6376e3e0b.roa (raw, json) Hash identifier: kNgRh6Yr43qn7Lk0FUgBPS/gRFPASTFacqlbY8Sr22Q= Subject key identifier: 8A:C9:FF:33:11:E5:72:75:2E:41:69:29:B3:4E:31:EF:F7:77:05:38 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 693B3AF9666E5AA2897740FB427F886D00E448BD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54cea109-0c4c-4e7f-a642-4fc6376e3e0b.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.228.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:3b:3a:f9:66:6e:5a:a2:89:77:40:fb:42:7f:88:6d:00:e4:48:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:49:a1:f0:b0:a0:78:57:01:96:0f:85:0e:48: 14:62:3c:4e:e3:55:1a:fa:98:7f:e2:9d:13:a2:bd: d9:f9:70:b4:5b:2b:47:47:b9:5b:66:64:3c:3b:67: cf:85:71:9f:b7:02:d2:3b:d8:3d:61:15:fd:1d:87: 4d:27:f3:b8:5f:ab:e1:24:4a:fd:b6:a7:d8:a5:08: 6c:28:0f:05:48:49:c7:52:3d:71:84:b3:01:3d:1b: 1a:2f:08:a8:e3:d2:4e:06:18:61:b8:58:01:5f:95: f8:12:78:d8:7d:6e:6d:08:81:75:bf:4a:47:4b:08: ed:78:48:74:d9:91:d9:0c:ff:74:4c:1e:b1:9d:4a: 60:26:75:d7:e5:a0:75:15:48:21:a6:0d:56:f8:3f: 51:19:73:05:cc:9c:ed:41:23:90:4e:ad:ca:3e:33: 03:cc:aa:16:a6:b5:0e:55:3b:d6:26:3e:ac:e6:05: fa:0f:37:ab:2c:da:eb:c6:ee:2c:2a:74:a1:32:98: c3:5c:a9:a8:2c:5b:b3:43:84:a8:c3:be:12:eb:b5: c8:a5:4c:de:53:db:31:ee:62:50:33:e2:8e:72:74: ad:67:b8:69:15:cc:09:ef:28:a8:23:34:1f:50:7d: 4e:7a:1c:11:23:53:57:be:06:51:ab:86:91:42:c2: 66:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C9:FF:33:11:E5:72:75:2E:41:69:29:B3:4E:31:EF:F7:77:05:38 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54cea109-0c4c-4e7f-a642-4fc6376e3e0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.228.180.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:aa:e0:01:29:a9:0c:dc:3d:0f:ba:d6:6d:65:6d:81:9a:52: 2b:aa:ec:c1:bd:89:80:de:c6:a1:07:ab:98:88:f4:84:9f:96: b1:e5:f5:78:95:c5:5c:bd:c2:c9:40:3e:9d:33:f6:91:36:9d: 1a:ca:48:c4:1d:41:6c:c0:43:7b:a3:ab:24:de:40:b3:fc:1f: a2:6a:a4:8b:9e:08:44:53:30:4a:10:e6:14:24:08:4b:97:48: a8:4e:30:34:e6:71:cc:e5:7c:ec:0a:33:e6:a5:1d:35:80:ae: 62:8d:23:d2:f7:17:aa:46:7d:81:e6:30:7b:d2:f8:63:49:93: 63:e4:40:35:50:4f:49:62:d9:c0:61:74:af:ed:4e:58:99:43: 5e:8f:06:ad:d1:85:5c:3d:5d:64:3f:f4:51:c4:c2:0b:4c:7e: 68:6b:33:c9:06:16:3d:b3:fa:50:67:1f:66:09:23:26:59:bc: 4e:cb:5f:b0:a8:ce:a1:1f:59:86:14:90:d2:9b:32:a3:f5:aa: 47:69:45:04:52:44:02:71:fe:58:ce:7a:86:51:57:31:fa:f3: 5f:b2:8a:02:03:c0:28:ec:c8:6e:be:4a:79:44:46:20:80:74: 44:ed:e4:6d:8f:f8:41:a5:1f:d9:07:2c:dc:0c:6f:bd:23:da: c3:ff:ca:65 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaTs6+WZuWqKJd0D7Qn+IbQDkSL0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTRjOWI2YzllMTMzMjZlYzVjYjYxNjk1OGMyYTdjM2M3 ZjU0NmMwYmY4NzY4NzM3NzNiZTcxZDA5NTYxNjE2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2SaHwsKB4VwGWD4UOSBRiPE7jVRr6mH/inROivdn5cLRb K0dHuVtmZDw7Z8+FcZ+3AtI72D1hFf0dh00n87hfq+EkSv22p9ilCGwoDwVIScdS PXGEswE9GxovCKjj0k4GGGG4WAFflfgSeNh9bm0IgXW/SkdLCO14SHTZkdkM/3RM HrGdSmAmddfloHUVSCGmDVb4P1EZcwXMnO1BI5BOrco+MwPMqhamtQ5VO9YmPqzm BfoPN6ss2uvG7iwqdKEymMNcqagsW7NDhKjDvhLrtcilTN5T2zHuYlAz4o5ydK1n uGkVzAnvKKgjNB9QfU56HBEjU1e+BlGrhpFCwmbRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUisn/MxHlcnUuQWkps04x7/d3BTgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU0Y2VhMTA5LTBjNGMtNGU3Zi1hNjQyLTRmYzYzNzZlM2UwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI25LQwDQYJKoZIhvcNAQELBQADggEBAA6q4AEpqQzcPQ+61m1lbYGaUiuq 7MG9iYDexqEHq5iI9ISflrHl9XiVxVy9wslAPp0z9pE2nRrKSMQdQWzAQ3ujqyTe QLP8H6JqpIueCERTMEoQ5hQkCEuXSKhOMDTmcczlfOwKM+alHTWArmKNI9L3F6pG fYHmMHvS+GNJk2PkQDVQT0li2cBhdK/tTliZQ16PBq3RhVw9XWQ/9FHEwgtMfmhr M8kGFj2z+lBnH2YJIyZZvE7LX7CozqEfWYYUkNKbMqP1qkdpRQRSRAJx/ljOeoZR VzH681+yigIDwCjsyG6+SnlERiCAdETt5G2P+EGlH9kHLNwMb70j2sP/ymU= -----END CERTIFICATE-----Generated at Wed Feb 5 10:45:17 2025 by rpki-client