$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e2d2ee1-c27f-4d44-8de0-a559f91781fa.roa File: 6e2d2ee1-c27f-4d44-8de0-a559f91781fa.roa (raw, json) Hash identifier: QiyM/JPdSAr5YG3D8RZ8u3Q2TPcqicWtK/rlEQzg+bI= Subject key identifier: 8B:54:69:D9:3A:61:B3:76:5D:78:E6:05:F4:AA:E9:74:90:06:3A:FD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 368421E74FCB908304EECB9FAAE51D4ACA30E07D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e2d2ee1-c27f-4d44-8de0-a559f91781fa.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.23.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:84:21:e7:4f:cb:90:83:04:ee:cb:9f:aa:e5:1d:4a:ca:30:e0:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c1:96:68:d0:e2:99:99:40:82:9b:13:64:d1: 1a:f2:4b:dc:9c:37:6e:e9:08:c4:c5:9e:63:65:52: b3:24:5c:d0:84:9f:d7:c8:52:92:d4:fa:14:b5:93: 4f:ef:c2:a8:37:dd:a5:21:75:a2:b5:89:2e:bd:a7: 76:de:4c:37:a3:a4:f9:f7:31:37:cb:6e:50:ea:e7: 21:15:38:a0:a2:12:87:54:ae:3e:c0:ae:86:33:c2: 04:63:78:41:f2:eb:fb:d6:8e:35:b7:97:69:ec:49: 95:8e:d1:1f:3c:13:e8:df:f2:36:df:7d:ff:5f:20: 8c:68:ba:af:4b:c1:ea:3a:03:5e:a3:a7:d0:57:5e: c8:8c:df:2b:e2:09:45:fe:a8:38:f4:60:54:00:05: 5f:02:4c:d6:02:b9:36:df:fa:f2:b9:7d:91:3e:ea: 2a:55:74:cc:c3:a3:f3:1b:5a:53:1b:ed:61:ab:01: 01:f9:9a:c5:af:0b:ca:3f:a0:69:fa:23:0e:9b:37: 99:17:49:f0:d0:be:93:92:15:00:a8:64:1f:4e:be: 42:7a:02:bd:c2:29:de:7d:dd:29:b1:d4:1c:d6:14: 85:38:44:a2:8f:a5:19:cb:3d:c4:e6:f2:8a:5b:17: 0d:97:53:20:a2:c0:c4:6d:2d:08:f2:10:49:35:fc: 39:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:54:69:D9:3A:61:B3:76:5D:78:E6:05:F4:AA:E9:74:90:06:3A:FD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e2d2ee1-c27f-4d44-8de0-a559f91781fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.23.136.0/23 Signature Algorithm: sha256WithRSAEncryption 33:d9:74:18:ec:b9:ec:a8:88:95:5b:69:12:81:95:99:2f:2b: bf:f8:d9:3c:cf:03:35:24:bd:6c:ab:eb:c0:0d:35:b5:91:62: df:d6:c5:be:22:5d:e8:99:27:f0:38:11:bb:23:06:38:3b:20: 3b:e7:88:9c:24:93:43:86:2c:c8:00:8e:10:68:fb:09:32:85: d4:c3:5f:fe:33:dc:7d:e1:42:4e:07:89:8e:b0:e6:0f:75:b8: f1:52:00:37:34:1a:6c:58:06:c1:05:5d:71:0c:d5:8e:e7:a3: f3:fe:b6:1d:80:e8:ff:15:62:fa:96:d6:b0:72:a6:ec:16:17: 8b:9f:6f:80:24:cb:20:6c:95:ab:83:ac:4e:bb:65:fc:86:98: b3:29:9f:71:f7:ed:f2:ac:f1:f4:cb:e8:3c:c3:15:a0:e7:d8: e2:92:24:cb:0c:55:6a:54:df:d7:51:d6:82:99:55:1e:3a:43: b5:0b:cd:b0:d6:f5:c3:36:1a:c4:e5:36:bb:ee:c8:f7:60:f0: af:7d:b1:64:2f:05:27:1c:26:87:ad:d9:dc:0d:26:f8:ef:00: dc:88:12:86:dc:0b:74:bd:51:60:7e:90:39:7b:e9:c0:3c:77: 66:70:a1:ed:ef:6e:ad:57:cd:06:02:7e:8d:66:c7:f9:33:0b: a0:a9:b6:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNoQh50/LkIME7sufquUdSsow4H0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYzY3MDkyMTdhYzhkODg2ZTA1ZDM0ZjRkZWYzYTdhNDhk NzIwNjE0NWEwM2YyMDU0MjJlMWNjOGE0ZmE4N2M4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWwZZo0OKZmUCCmxNk0RryS9ycN27pCMTFnmNlUrMkXNCE n9fIUpLU+hS1k0/vwqg33aUhdaK1iS69p3beTDejpPn3MTfLblDq5yEVOKCiEodU rj7AroYzwgRjeEHy6/vWjjW3l2nsSZWO0R88E+jf8jbfff9fIIxouq9Lweo6A16j p9BXXsiM3yviCUX+qDj0YFQABV8CTNYCuTbf+vK5fZE+6ipVdMzDo/MbWlMb7WGr AQH5msWvC8o/oGn6Iw6bN5kXSfDQvpOSFQCoZB9OvkJ6Ar3CKd593Smx1BzWFIU4 RKKPpRnLPcTm8opbFw2XUyCiwMRtLQjyEEk1/DmvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUi1Rp2Tphs3ZdeOYF9KrpdJAGOv0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZlMmQyZWUxLWMyN2YtNGQ0NC04ZGUwLWE1NTlmOTE3ODFmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDF4gwDQYJKoZIhvcNAQELBQADggEBADPZdBjsueyoiJVbaRKBlZkvK7/4 2TzPAzUkvWyr68ANNbWRYt/Wxb4iXeiZJ/A4EbsjBjg7IDvniJwkk0OGLMgAjhBo +wkyhdTDX/4z3H3hQk4HiY6w5g91uPFSADc0GmxYBsEFXXEM1Y7no/P+th2A6P8V YvqW1rBypuwWF4ufb4AkyyBslauDrE67ZfyGmLMpn3H37fKs8fTL6DzDFaDn2OKS JMsMVWpU39dR1oKZVR46Q7ULzbDW9cM2GsTlNrvuyPdg8K99sWQvBSccJoet2dwN JvjvANyIEobcC3S9UWB+kDl76cA8d2Zwoe3vbq1XzQYCfo1mx/kzC6Cpth4= -----END CERTIFICATE-----Generated at Wed Feb 5 10:59:53 2025 by rpki-client