$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/66496eeb-98fc-4220-823f-0c3b38023275.roa File: 66496eeb-98fc-4220-823f-0c3b38023275.roa (raw, json) Hash identifier: k/FqsBwntphBszLqemY+3gKlmlrBQddM/7ciITD3Y/o= Subject key identifier: 4D:5C:AE:A0:31:25:D3:B3:D3:BE:BD:A8:A0:1F:F8:20:5A:A6:93:C7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 649755601BA3115D88C8C9EFDEACAFDD80FD48F6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/66496eeb-98fc-4220-823f-0c3b38023275.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 7224 IP address blocks: 15.248.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:97:55:60:1b:a3:11:5d:88:c8:c9:ef:de:ac:af:dd:80:fd:48:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fe:b6:45:ba:dc:83:2b:30:d5:e3:f4:6d:60: c2:b6:e9:27:ff:09:24:65:b6:b4:39:4b:bf:fc:a2: 9f:0e:bb:1a:46:f1:b3:fb:bd:d7:75:43:45:a3:10: eb:f6:ff:4a:48:9c:49:de:a5:cc:10:37:52:00:af: 78:34:19:18:87:66:91:85:5f:41:33:9b:18:e1:b8: 4e:46:f4:88:6c:3c:0c:b2:4f:db:ed:2e:96:7b:7d: 23:df:26:7b:60:9e:fb:d1:b8:f9:e8:29:6d:e0:3d: 0b:14:95:37:66:de:64:e5:b3:a3:45:40:64:3d:00: 20:11:b7:e7:d6:e0:99:5e:38:c6:6e:32:c7:07:14: f2:dc:a8:14:02:10:b7:ac:e9:f0:16:c9:0f:60:f2: e5:0f:e6:a6:f4:89:7f:94:03:0b:32:54:59:b3:84: 24:ee:8b:be:ac:d3:af:e1:04:48:5d:30:9a:95:df: 30:b3:25:65:a9:80:55:36:0f:10:df:e8:eb:2a:8e: 9b:1a:75:0d:29:ee:24:e7:bb:e7:41:74:fa:d0:04: 50:86:a3:72:6a:9c:e3:b4:93:e7:4c:1e:36:d6:1d: e7:5b:f6:db:35:b0:1d:46:f9:e0:a8:b7:fa:80:14: 83:b3:36:81:2d:71:f3:28:03:1d:52:97:5e:25:73: 79:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5C:AE:A0:31:25:D3:B3:D3:BE:BD:A8:A0:1F:F8:20:5A:A6:93:C7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/66496eeb-98fc-4220-823f-0c3b38023275.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.248.105.0/24 Signature Algorithm: sha256WithRSAEncryption 01:e3:e4:f3:e3:32:ac:a3:db:74:e4:66:39:08:2c:39:08:9a: 09:d9:72:12:a7:b8:a2:84:d0:9a:8d:4a:dd:0d:f9:6d:cc:85: 05:e3:8d:f3:b1:ad:82:d8:b4:e9:2b:13:0f:f7:e2:01:27:1d: d6:fe:03:29:13:31:69:af:83:5d:35:6c:28:a9:a0:4b:cc:77: d8:e0:4b:73:7c:53:ae:9f:ee:f1:5f:6b:21:f9:81:4c:25:f4: 34:85:e7:d3:b1:44:1c:e0:f3:1f:56:c6:ba:00:cb:30:54:e5: 38:cb:1f:59:58:96:86:ee:a7:29:8f:d2:68:8f:c2:d5:d3:4b: 6d:fc:81:77:36:3c:7b:5c:c0:55:ef:bc:52:c3:53:0f:b3:74: 10:c1:4b:ed:7f:46:30:1e:26:1b:1a:f6:36:f4:3e:b7:46:48: cd:eb:80:65:17:f9:ca:30:19:ea:8f:b3:db:c4:a7:ea:70:d8: f0:08:c5:31:19:ec:7d:65:45:f0:bd:5a:a7:8b:c9:ff:b1:ab: 49:d8:4a:cd:5d:95:50:f1:95:80:15:b8:21:8f:da:7f:2b:92: 77:cc:7b:f6:eb:83:c4:55:93:38:13:07:9f:92:17:6d:83:95: b9:ca:4f:dd:9b:16:71:fa:ee:0c:58:66:42:0f:fa:0e:2b:0e: 4e:8f:06:3a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZJdVYBujEV2IyMnv3qyv3YD9SPYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjA4NTU2ODE3MGVkNzBlZGRiNzRjZWZhMzM4MDE0NTQy YWQ5ZTk2ZTNlNzZjODdjZjhhNzNkNmU0NmYxNmI3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu/rZFutyDKzDV4/RtYMK26Sf/CSRltrQ5S7/8op8OuxpG 8bP7vdd1Q0WjEOv2/0pInEnepcwQN1IAr3g0GRiHZpGFX0EzmxjhuE5G9IhsPAyy T9vtLpZ7fSPfJntgnvvRuPnoKW3gPQsUlTdm3mTls6NFQGQ9ACARt+fW4JleOMZu MscHFPLcqBQCELes6fAWyQ9g8uUP5qb0iX+UAwsyVFmzhCTui76s06/hBEhdMJqV 3zCzJWWpgFU2DxDf6OsqjpsadQ0p7iTnu+dBdPrQBFCGo3JqnOO0k+dMHjbWHedb 9ts1sB1G+eCot/qAFIOzNoEtcfMoAx1Sl14lc3kDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTVyuoDEl07PTvr2ooB/4IFqmk8cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY2NDk2ZWViLTk4ZmMtNDIyMC04MjNmLTBjM2IzODAyMzI3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP+GkwDQYJKoZIhvcNAQELBQADggEBAAHj5PPjMqyj23TkZjkILDkImgnZ chKnuKKE0JqNSt0N+W3MhQXjjfOxrYLYtOkrEw/34gEnHdb+AykTMWmvg101bCip oEvMd9jgS3N8U66f7vFfayH5gUwl9DSF59OxRBzg8x9WxroAyzBU5TjLH1lYlobu pymP0miPwtXTS238gXc2PHtcwFXvvFLDUw+zdBDBS+1/RjAeJhsa9jb0PrdGSM3r gGUX+cowGeqPs9vEp+pw2PAIxTEZ7H1lRfC9WqeLyf+xq0nYSs1dlVDxlYAVuCGP 2n8rknfMe/brg8RVkzgTB5+SF22DlbnKT92bFnH67gxYZkIP+g4rDk6PBjo= -----END CERTIFICATE-----Generated at Wed Feb 5 10:48:32 2025 by rpki-client