$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/73fdd2fe-ba21-4bea-bdab-cafad748d06e.roa File: 73fdd2fe-ba21-4bea-bdab-cafad748d06e.roa (raw, json) Hash identifier: H5yFF4xB7figluf8tNRSyM0WljrE67YqCGQ7FUpc3dw= Subject key identifier: 07:61:4A:5D:49:3C:E9:25:92:06:FE:41:FF:3F:12:99:92:51:F2:36 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0545B036F6F1289A864FDF4116C7BB1E157E6C1E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/73fdd2fe-ba21-4bea-bdab-cafad748d06e.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.245.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:45:b0:36:f6:f1:28:9a:86:4f:df:41:16:c7:bb:1e:15:7e:6c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:14:29:87:de:bb:40:3d:74:84:c7:7d:e5:0b: 73:65:54:f1:c6:bf:ae:d5:20:d2:90:af:4e:13:f1: 56:0f:4b:80:bd:09:18:52:c4:39:8b:d0:fd:3c:1a: 5f:82:e2:33:a2:32:98:2e:37:7a:f1:15:77:ab:3a: f3:f3:f0:12:ea:e2:77:26:cb:a7:f3:ab:30:d7:f3: a4:32:34:02:b5:a8:f5:b2:99:e1:20:7b:e3:7e:23: e8:44:d5:1c:ce:8e:5b:7b:94:87:f0:7e:29:91:a7: b0:12:9e:94:43:4c:69:59:5a:13:65:cf:d3:1a:b3: 4c:88:06:2d:de:7c:8d:3e:6f:49:cf:f7:72:be:d7: aa:33:8e:1f:0b:8f:77:98:8b:fa:5d:fe:40:d4:29: ce:62:2f:4e:0c:ac:22:e9:eb:48:0d:d8:17:c8:f2: e2:e4:95:41:38:bb:04:39:2e:1c:21:8f:5e:40:57: 4c:68:dc:93:95:a9:86:9a:a8:3f:4a:f2:a6:0b:83: 05:55:b5:71:ec:c4:9a:48:f5:83:4b:0a:18:7b:81: 20:ae:e4:2f:12:8d:37:50:01:bf:36:5d:b9:73:2d: 54:ce:8a:5a:da:5f:c7:75:25:95:7e:eb:fd:ba:cf: 4d:93:67:91:35:35:15:43:15:70:e8:6d:8f:64:ef: d5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:61:4A:5D:49:3C:E9:25:92:06:FE:41:FF:3F:12:99:92:51:F2:36 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/73fdd2fe-ba21-4bea-bdab-cafad748d06e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.245.176.0/20 Signature Algorithm: sha256WithRSAEncryption 95:f4:16:6d:93:19:12:02:1c:85:8f:73:58:e6:a3:02:fb:1c: f7:81:47:dd:29:da:05:4d:3a:71:b0:44:38:ba:d3:bc:26:0c: e8:8e:69:b6:2c:2e:13:40:39:8e:ac:d1:5d:05:d6:af:30:99: 98:1a:4e:32:15:97:08:68:3d:95:1d:77:14:3e:64:9d:a5:4e: b6:e1:52:6b:87:50:13:29:ab:2b:8d:e8:1a:26:5f:99:23:92: b7:1d:00:f1:a8:cd:5b:6e:85:82:3f:59:fc:ae:0a:d3:21:78: 3e:30:8b:6f:24:01:3b:fd:d5:e6:c3:2d:0f:ae:b2:2d:3d:60: 2e:8c:ee:9b:71:a6:97:9d:d2:36:9d:ec:cc:38:88:74:4d:4f: fb:45:13:56:12:b0:e3:93:65:4b:2b:b2:ec:87:f6:15:07:dc: c8:9f:b0:3e:7e:5e:56:16:d1:7b:02:cd:b0:9b:28:64:a5:88: 5d:14:4f:11:cb:6b:5c:cc:c3:5a:bf:92:bc:2d:9b:7a:8b:bf: cc:77:55:83:d9:bb:85:65:9d:9b:c9:43:76:cc:0d:51:59:5f: b9:82:73:49:69:99:6a:58:6b:41:d6:af:14:d0:53:fc:97:03: 2e:4c:31:19:65:5d:05:bf:1b:6d:7e:7c:32:f0:ef:1a:ce:9a: 1a:7b:3c:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBUWwNvbxKJqGT99BFse7HhV+bB4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MWNhNDFkM2ZjYTk3YWUzYTc3ZjdiYjMwYzI0OTM1ODQz ZmI1NTY0YmJhZjg1YjdjMGJhNGIyMDY5NzNhMzI1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDFCmH3rtAPXSEx33lC3NlVPHGv67VINKQr04T8VYPS4C9 CRhSxDmL0P08Gl+C4jOiMpguN3rxFXerOvPz8BLq4ncmy6fzqzDX86QyNAK1qPWy meEge+N+I+hE1RzOjlt7lIfwfimRp7ASnpRDTGlZWhNlz9Mas0yIBi3efI0+b0nP 93K+16ozjh8Lj3eYi/pd/kDUKc5iL04MrCLp60gN2BfI8uLklUE4uwQ5Lhwhj15A V0xo3JOVqYaaqD9K8qYLgwVVtXHsxJpI9YNLChh7gSCu5C8SjTdQAb82XblzLVTO ilraX8d1JZV+6/26z02TZ5E1NRVDFXDobY9k79W7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUB2FKXUk86SWSBv5B/z8SmZJR8jYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzczZmRkMmZlLWJhMjEtNGJlYS1iZGFiLWNhZmFkNzQ4ZDA2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ29bAwDQYJKoZIhvcNAQELBQADggEBAJX0Fm2TGRICHIWPc1jmowL7HPeB R90p2gVNOnGwRDi607wmDOiOabYsLhNAOY6s0V0F1q8wmZgaTjIVlwhoPZUddxQ+ ZJ2lTrbhUmuHUBMpqyuN6BomX5kjkrcdAPGozVtuhYI/WfyuCtMheD4wi28kATv9 1ebDLQ+usi09YC6M7ptxpped0jad7Mw4iHRNT/tFE1YSsOOTZUsrsuyH9hUH3Mif sD5+XlYW0XsCzbCbKGSliF0UTxHLa1zMw1q/krwtm3qLv8x3VYPZu4VlnZvJQ3bM DVFZX7mCc0lpmWpYa0HWrxTQU/yXAy5MMRllXQW/G21+fDLw7xrOmhp7PHU= -----END CERTIFICATE-----Generated at Wed Feb 5 10:49:09 2025 by rpki-client