$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76101579-ae3b-4fef-8285-2aefdd9a91c3.roa File: 76101579-ae3b-4fef-8285-2aefdd9a91c3.roa (raw, json) Hash identifier: YGiERZgpTK4xKYoGhhLqPVbbPInYP5ACA0DP+W9zIog= Subject key identifier: F8:C8:87:69:65:E6:67:A0:8C:6D:A1:A7:47:8C:41:10:26:AD:E8:08 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2D98E6A7BFF1E786BDC70262B352CB3559FCBE6A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76101579-ae3b-4fef-8285-2aefdd9a91c3.roa Signing time: Fri 07 Feb 2025 00:00:00 +0000 ROA not before: Fri 07 Feb 2025 00:00:00 +0000 ROA not after: Fri 14 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.193.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:98:e6:a7:bf:f1:e7:86:bd:c7:02:62:b3:52:cb:35:59:fc:be:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 7 00:00:00 2025 GMT Not After : Mar 14 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:d7:e8:80:8f:44:31:48:30:98:ec:fd:9f: 11:54:bb:45:48:72:88:7e:15:34:8c:82:24:9f:16: 2c:90:0b:a6:e8:8c:75:45:37:c9:2d:53:3b:a9:3b: bd:26:55:ac:42:d6:46:7c:64:a5:47:3b:12:d8:34: 7b:8a:9a:e4:a1:2f:ff:7e:8c:27:40:a3:e9:cf:c6: 58:0b:22:17:b7:bd:68:67:7a:ca:eb:28:5c:01:85: 92:60:52:18:3d:6e:95:54:3d:bd:84:33:6b:3c:c7: 27:b8:5e:af:6f:04:3e:00:55:eb:a6:d1:a5:d4:05: fa:f7:69:0e:6b:4a:c4:78:1b:52:f9:b0:e0:aa:1e: e6:bd:d8:9c:a3:ae:c5:91:45:57:8e:f3:bf:46:11: 5d:03:83:d8:ab:8b:e0:74:64:1a:14:34:31:09:b2: 08:0c:fc:3b:c4:47:60:5c:80:e4:c9:2f:9c:51:f9: 92:6a:b2:b3:7b:73:ca:5d:ab:4b:6f:bb:c0:13:82: 22:eb:07:e6:c3:de:a9:1c:5e:a3:2a:ed:ba:3b:00: b9:c2:cc:71:86:b2:cf:2b:71:8f:f6:d8:c8:12:7f: cb:f8:ec:fb:22:26:c3:7c:c7:3c:c9:c5:a5:67:cf: 1e:5c:0d:63:31:82:77:0a:c4:57:30:04:a0:87:42: 87:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C8:87:69:65:E6:67:A0:8C:6D:A1:A7:47:8C:41:10:26:AD:E8:08 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76101579-ae3b-4fef-8285-2aefdd9a91c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.193.0.0/24 Signature Algorithm: sha256WithRSAEncryption 07:0a:6e:ca:69:7a:57:36:3f:56:ec:3a:09:eb:10:52:29:e4: cd:fb:c9:de:98:e8:23:4f:8e:55:b6:cd:88:c0:53:8f:16:36: 39:b8:fb:09:31:2e:db:40:59:6b:79:2d:09:8c:83:90:d0:0f: e2:18:9d:71:42:26:f2:62:8b:0f:33:6d:33:1e:64:45:5a:e6: d2:54:3f:fb:c9:fe:c9:96:f2:cc:b5:06:57:cf:8f:d4:94:c3: 05:36:26:d6:d3:99:13:9c:30:26:e1:e3:fe:db:bb:fe:f9:2f: 80:f1:69:90:78:ce:ce:5a:6b:6f:44:9b:34:84:56:43:59:cf: bf:53:0f:8f:c5:46:1e:c2:f5:e0:0b:04:1f:d6:da:5a:23:9f: f4:71:a3:ab:eb:9c:54:df:95:f8:9b:5c:f3:c1:72:cf:c6:1e: 90:15:58:8c:44:7c:56:ae:0e:7e:41:4c:48:d6:57:20:50:c4: 79:01:bc:7d:7f:74:5c:92:06:14:9f:1d:2d:f5:e6:57:64:05: 88:e3:74:c6:bc:97:48:9e:39:56:97:3b:de:11:6f:7e:79:75: b4:f3:b8:bc:29:96:f1:fa:72:e1:06:2d:5e:ea:1c:d1:16:05: b2:11:82:84:a6:86:a7:93:32:a9:ad:ee:da:6b:4d:51:ab:d5: cc:21:f9:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULZjmp7/x54a9xwJis1LLNVn8vmowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMjA3MDAwMDAwWhcNMjUwMzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZmM1NTQzNGMyN2VjY2NlYTAwOTFkNGM5ODI0NjEzODk0 ZGNlODQ1OTI5YjI1MjMyYmVhZWFlYzQzMGRjN2Q4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwD9fogI9EMUgwmOz9nxFUu0VIcoh+FTSMgiSfFiyQC6bo jHVFN8ktUzupO70mVaxC1kZ8ZKVHOxLYNHuKmuShL/9+jCdAo+nPxlgLIhe3vWhn esrrKFwBhZJgUhg9bpVUPb2EM2s8xye4Xq9vBD4AVeum0aXUBfr3aQ5rSsR4G1L5 sOCqHua92JyjrsWRRVeO879GEV0Dg9iri+B0ZBoUNDEJsggM/DvER2BcgOTJL5xR +ZJqsrN7c8pdq0tvu8ATgiLrB+bD3qkcXqMq7bo7ALnCzHGGss8rcY/22MgSf8v4 7PsiJsN8xzzJxaVnzx5cDWMxgncKxFcwBKCHQoefAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+MiHaWXmZ6CMbaGnR4xBECat6AgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc2MTAxNTc5LWFlM2ItNGZlZi04Mjg1LTJhZWZkZDlhOTFjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPwQAwDQYJKoZIhvcNAQELBQADggEBAAcKbsppelc2P1bsOgnrEFIp5M37 yd6Y6CNPjlW2zYjAU48WNjm4+wkxLttAWWt5LQmMg5DQD+IYnXFCJvJiiw8zbTMe ZEVa5tJUP/vJ/smW8sy1BlfPj9SUwwU2JtbTmROcMCbh4/7bu/75L4DxaZB4zs5a a29EmzSEVkNZz79TD4/FRh7C9eALBB/W2lojn/Rxo6vrnFTflfibXPPBcs/GHpAV WIxEfFauDn5BTEjWVyBQxHkBvH1/dFySBhSfHS315ldkBYjjdMa8l0ieOVaXO94R b355dbTzuLwplvH6cuEGLV7qHNEWBbIRgoSmhqeTMqmt7tprTVGr1cwh+W4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:18 2025 by rpki-client