$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c669244-adce-44d3-ac8e-2b9e87064a76.roa File: 6c669244-adce-44d3-ac8e-2b9e87064a76.roa (raw, json) Hash identifier: VfzW4FtTne987VWrQkCMT+5mzB6rDs4pqcpbQGgixdI= Subject key identifier: AF:31:1F:32:34:D9:84:46:0E:9B:F6:E3:9F:C5:88:CC:76:04:6A:B0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 635519F1AA6FB3668C5763ECED389C762B23658B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c669244-adce-44d3-ac8e-2b9e87064a76.roa Signing time: Tue 04 Feb 2025 00:00:00 +0000 ROA not before: Tue 04 Feb 2025 00:00:00 +0000 ROA not after: Tue 11 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 161.188.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:55:19:f1:aa:6f:b3:66:8c:57:63:ec:ed:38:9c:76:2b:23:65:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 4 00:00:00 2025 GMT Not After : Mar 11 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:73:26:56:56:30:86:3d:82:c1:f7:34:8e: 7f:db:d1:13:05:d8:db:16:ca:c9:ac:2c:a9:56:e5: ee:1c:47:9b:4d:df:ad:57:ed:e8:3b:f8:e0:91:dc: 94:09:44:9e:c7:13:c1:48:98:90:75:89:db:db:47: 30:0f:38:59:83:37:b4:7d:85:d6:16:2d:14:0a:a5: 2e:d5:38:3a:0b:ad:1f:65:ba:b5:7f:3d:cc:65:90: af:5c:29:1d:56:9c:1b:1e:1c:42:b3:fa:ee:23:4b: 90:e1:e1:e4:9e:58:0b:1b:b9:21:a4:2a:38:c6:1e: 1e:bd:ce:f3:e3:2b:da:9a:38:67:16:1f:f6:b3:4b: 8f:ed:a1:1c:c6:72:e6:99:20:64:fe:e9:25:7c:42: 15:db:ef:91:0d:f0:e0:c1:84:e3:08:d2:72:c8:94: 8e:84:28:94:9d:61:45:76:ae:44:a7:8d:41:6a:14: 95:49:dc:eb:75:c5:8b:5c:7c:62:e2:36:7c:1b:fb: c3:2b:b3:4b:e1:01:87:8d:d4:1b:3f:4f:6c:a3:5f: 04:6e:f7:d0:e0:7a:db:88:88:65:c8:78:68:e0:97: 38:01:5f:70:30:92:c7:dd:b3:b2:bb:98:a2:84:7c: 74:49:f2:3b:b9:d7:31:6e:04:c7:b7:0c:b8:e2:e2: a4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:31:1F:32:34:D9:84:46:0E:9B:F6:E3:9F:C5:88:CC:76:04:6A:B0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c669244-adce-44d3-ac8e-2b9e87064a76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.162.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:7b:86:30:06:d8:35:54:69:d2:b4:d4:d0:e6:68:92:ff:d2: af:19:74:90:fe:bd:9e:ab:3f:3e:75:63:61:8d:97:ed:e8:f8: af:da:2b:1d:3c:3c:7d:49:1c:f1:53:a2:f6:6d:66:50:6c:e3: 6f:2c:d8:14:ea:01:db:92:50:ea:c7:56:6d:93:a1:70:34:59: 2c:30:fe:44:38:e6:bc:06:c6:3e:ae:64:39:eb:b2:53:f1:29: cd:b7:7a:a2:eb:d8:69:a8:7b:33:83:9d:16:df:fa:6b:da:b2: c5:b6:81:2e:fe:42:8f:4b:dd:e3:a0:84:cf:cd:41:1b:98:01: 66:ad:1d:5f:d9:bf:ec:9c:91:1b:68:de:29:eb:d3:c7:4f:ef: 35:25:a9:f5:a9:30:e8:8d:94:8a:65:86:1e:7c:3d:a6:89:8c: e1:5b:5a:de:c2:46:f8:9a:0f:87:00:52:b4:21:3b:95:23:d7: fe:54:f9:31:46:49:70:83:bf:69:d0:bf:d8:b6:d2:e2:e2:9e: 95:43:e0:05:fd:59:4d:77:33:6b:80:b5:5a:73:b1:b0:85:a3: c0:e2:5e:a4:e9:72:6f:bb:1b:47:c1:cf:f7:90:18:d4:3f:35: 74:49:f3:6d:ed:e0:96:d1:90:94:64:19:e6:59:c6:bb:5a:c4: f7:47:c6:65 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY1UZ8apvs2aMV2Ps7TicdisjZYswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMjA0MDAwMDAwWhcNMjUwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmY1MjcyOTcxNDFmY2NjYmQwNGU2OTRjMjkwMDIyY2Iz MmYwMTJlOTY5MjI0OWNlZmU2MjU1NzBhNzczMWI4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3QXMmVlYwhj2Cwfc0jn/b0RMF2NsWysmsLKlW5e4cR5tN 361X7eg7+OCR3JQJRJ7HE8FImJB1idvbRzAPOFmDN7R9hdYWLRQKpS7VODoLrR9l urV/PcxlkK9cKR1WnBseHEKz+u4jS5Dh4eSeWAsbuSGkKjjGHh69zvPjK9qaOGcW H/azS4/toRzGcuaZIGT+6SV8QhXb75EN8ODBhOMI0nLIlI6EKJSdYUV2rkSnjUFq FJVJ3Ot1xYtcfGLiNnwb+8Mrs0vhAYeN1Bs/T2yjXwRu99DgetuIiGXIeGjglzgB X3Awksfds7K7mKKEfHRJ8ju51zFuBMe3DLji4qQrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrzEfMjTZhEYOm/bjn8WIzHYEarAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZjNjY5MjQ0LWFkY2UtNDRkMy1hYzhlLTJiOWU4NzA2NGE3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvKIwDQYJKoZIhvcNAQELBQADggEBAIp7hjAG2DVUadK01NDmaJL/0q8Z dJD+vZ6rPz51Y2GNl+3o+K/aKx08PH1JHPFTovZtZlBs428s2BTqAduSUOrHVm2T oXA0WSww/kQ45rwGxj6uZDnrslPxKc23eqLr2GmoezODnRbf+mvassW2gS7+Qo9L 3eOghM/NQRuYAWatHV/Zv+yckRto3inr08dP7zUlqfWpMOiNlIplhh58PaaJjOFb Wt7CRviaD4cAUrQhO5Uj1/5U+TFGSXCDv2nQv9i20uLinpVD4AX9WU13M2uAtVpz sbCFo8DiXqTpcm+7G0fBz/eQGNQ/NXRJ823t4JbRkJRkGeZZxrtaxPdHxmU= -----END CERTIFICATE-----Generated at Wed Feb 5 09:45:17 2025 by rpki-client