$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8604d3f2-0388-44f6-acc2-4c889c91f8e6.roa File: 8604d3f2-0388-44f6-acc2-4c889c91f8e6.roa (raw, json) Hash identifier: JK5awyzqtuLW26Yqw+sNkDJ86fQRdQFrc+ZslNOJEww= Subject key identifier: C7:6B:22:E0:79:A2:74:70:36:1E:09:13:06:34:87:5C:F4:F3:C4:36 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4AC7E087C08DFCDE7509412200CC67B01602499F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8604d3f2-0388-44f6-acc2-4c889c91f8e6.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c7:e0:87:c0:8d:fc:de:75:09:41:22:00:cc:67:b0:16:02:49:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e3:fb:c4:4b:c2:1a:78:b9:a8:80:3f:49:80: b7:82:f8:55:93:d4:71:9f:d3:3c:5f:36:0f:27:ba: ab:1d:29:5e:a6:88:d1:43:4b:a8:0f:7a:48:be:13: bf:5a:d9:ba:07:94:42:d1:46:f1:17:c7:66:d8:33: 19:0e:95:3a:ca:5a:81:9e:28:b3:e9:74:31:bd:60: 67:8a:8c:df:34:ef:71:8d:45:8b:e8:1a:aa:ab:42: 76:ee:fc:ab:6e:70:f6:01:66:44:04:72:c4:11:e5: 76:43:e9:10:e3:90:bf:a7:24:a1:9d:68:2d:38:6c: 88:24:4d:51:98:dc:44:a7:b4:91:86:04:01:f7:d8: 7f:6f:68:7c:43:ac:ec:2a:e9:7a:c9:10:f8:55:ed: 0a:57:50:20:33:10:a0:ca:e5:eb:09:03:d4:97:61: aa:96:c2:83:12:28:e6:34:3d:aa:43:8c:e0:e9:65: f5:c9:fa:36:76:a0:9f:72:c0:b9:b1:05:71:e8:62: 58:f2:de:e1:a9:62:9b:4a:4f:9a:6e:0a:0e:80:8f: cc:81:b4:a2:43:c4:2e:ff:73:f5:6c:a2:d8:bc:7c: 1a:67:89:bf:97:0e:59:6b:c8:16:20:ec:e3:0a:97: 3a:10:22:38:1e:82:e0:53:d7:6c:53:e1:6e:11:38: d4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6B:22:E0:79:A2:74:70:36:1E:09:13:06:34:87:5C:F4:F3:C4:36 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8604d3f2-0388-44f6-acc2-4c889c91f8e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.233.0/24 Signature Algorithm: sha256WithRSAEncryption 73:d0:1a:9c:d8:f8:c9:27:75:bd:a3:07:54:87:e6:91:b3:bf: a3:b8:e6:6e:1a:a4:0b:01:8e:c4:9a:54:80:fb:1e:1d:05:12: 6f:de:4c:29:21:9e:b8:83:77:ca:4b:53:13:40:56:d5:01:ad: 3a:e9:bd:d5:b9:a9:e0:b8:3d:34:e8:aa:36:6e:a9:7d:df:10: e8:f0:03:3a:77:99:38:32:f2:6c:81:bf:06:ed:f5:1e:10:b4: 33:07:58:b2:0b:09:dc:d3:df:1a:8f:4e:50:5f:23:db:53:3d: 7d:37:72:02:1e:a4:32:a0:e5:15:b7:ee:9d:4e:02:04:26:b0: 7f:19:8b:6f:8f:9b:9a:3e:ec:28:3b:92:27:e6:81:3e:83:aa: ad:26:bf:54:25:53:b7:17:37:f1:b1:9b:ce:5c:04:de:60:f9: c3:5f:f9:d1:91:50:64:26:77:96:f2:73:51:17:18:5f:f6:46: 6b:d4:9f:3b:74:e4:55:40:b8:59:d9:35:a5:4a:24:30:c8:62: 26:03:68:63:9a:a2:eb:41:67:fc:56:e8:a9:93:0b:c2:fe:3e: 71:b1:6e:f9:13:51:ed:39:33:eb:82:0d:fe:65:b5:80:80:c6: fb:aa:95:80:f9:84:ed:b7:59:2a:db:e9:d1:f8:56:cb:fd:7d: 72:ab:d2:44 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSsfgh8CN/N51CUEiAMxnsBYCSZ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMGZiMGJiMTYxMDA2YjMyODE2MTQ3NjdkYWNmYTMxNGI4 NzdmYmNlNDZlMDFhZjQ5OWMyMzQ3ZmFmMmRmMDVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCk4/vES8IaeLmogD9JgLeC+FWT1HGf0zxfNg8nuqsdKV6m iNFDS6gPeki+E79a2boHlELRRvEXx2bYMxkOlTrKWoGeKLPpdDG9YGeKjN8073GN RYvoGqqrQnbu/KtucPYBZkQEcsQR5XZD6RDjkL+nJKGdaC04bIgkTVGY3ESntJGG BAH32H9vaHxDrOwq6XrJEPhV7QpXUCAzEKDK5esJA9SXYaqWwoMSKOY0PapDjODp ZfXJ+jZ2oJ9ywLmxBXHoYljy3uGpYptKT5puCg6Aj8yBtKJDxC7/c/Vsoti8fBpn ib+XDllryBYg7OMKlzoQIjgeguBT12xT4W4RONRjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUx2si4HmidHA2HgkTBjSHXPTzxDYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg2MDRkM2YyLTAzODgtNDRmNi1hY2MyLTRjODg5YzkxZjhlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP3OkwDQYJKoZIhvcNAQELBQADggEBAHPQGpzY+Mkndb2jB1SH5pGzv6O4 5m4apAsBjsSaVID7Hh0FEm/eTCkhnriDd8pLUxNAVtUBrTrpvdW5qeC4PTToqjZu qX3fEOjwAzp3mTgy8myBvwbt9R4QtDMHWLILCdzT3xqPTlBfI9tTPX03cgIepDKg 5RW37p1OAgQmsH8Zi2+Pm5o+7Cg7kifmgT6Dqq0mv1QlU7cXN/Gxm85cBN5g+cNf +dGRUGQmd5byc1EXGF/2RmvUnzt05FVAuFnZNaVKJDDIYiYDaGOaoutBZ/xW6KmT C8L+PnGxbvkTUe05M+uCDf5ltYCAxvuqlYD5hO23WSrb6dH4Vsv9fXKr0kQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:44 2025 by rpki-client