$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ab2ad23-e3ab-410f-b497-d0c7181fe691.roa File: 8ab2ad23-e3ab-410f-b497-d0c7181fe691.roa (raw, json) Hash identifier: C3dYGCKO0aDqqYuPbqIDoHana5uRP9nGoeU/eA8Ne1U= Subject key identifier: A2:E1:C4:27:D5:BD:CA:C2:39:AA:B7:79:79:E2:36:40:D7:74:F0:EF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 39E3058F00E72BFAB45D331C7250DA50154316DF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ab2ad23-e3ab-410f-b497-d0c7181fe691.roa Signing time: Fri 07 Feb 2025 00:00:00 +0000 ROA not before: Fri 07 Feb 2025 00:00:00 +0000 ROA not after: Fri 14 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.221.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e3:05:8f:00:e7:2b:fa:b4:5d:33:1c:72:50:da:50:15:43:16:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 7 00:00:00 2025 GMT Not After : Mar 14 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:bb:33:34:66:44:31:b5:29:5b:15:73:6b: 71:34:2b:94:b9:43:55:1c:c0:f0:f0:58:4f:90:81: 50:7a:8e:ef:4b:0c:31:25:f2:60:35:5f:3c:e4:47: 4d:9f:73:30:b9:7a:db:39:71:c6:ca:10:63:e7:c1: 84:85:d9:4f:19:1e:6d:62:4a:cd:1e:62:33:1a:55: c8:4f:c2:e6:17:6d:56:4f:66:75:66:fd:02:ef:d7: c4:9d:06:f0:59:45:96:33:9b:62:b9:a0:7d:fc:9d: 71:48:cb:9d:bb:e2:44:56:c3:6d:59:20:92:41:95: 32:da:38:95:cb:a6:4b:3c:78:9a:cd:12:e5:46:72: 81:e0:aa:39:2e:44:ff:89:25:34:e7:70:aa:2a:24: f6:68:0e:13:40:7a:68:d1:c5:f4:7e:77:52:1c:d0: 2f:ad:4f:f5:0c:10:b2:30:a1:b9:fd:ee:6a:94:f4: 1e:28:29:43:0b:f2:d2:70:c3:dd:9c:30:2b:d5:d2: ac:f1:9b:6d:61:9b:ea:ba:49:7d:88:d3:e1:0d:1e: 45:c3:e6:4e:1c:f7:db:3d:de:ea:ed:58:07:ef:26: cc:7f:b6:48:e8:51:46:d0:45:75:2e:b8:30:c3:5f: db:04:70:da:3b:18:88:cd:65:e1:5b:b1:d9:ff:b7: a0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E1:C4:27:D5:BD:CA:C2:39:AA:B7:79:79:E2:36:40:D7:74:F0:EF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ab2ad23-e3ab-410f-b497-d0c7181fe691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.221.24.0/21 Signature Algorithm: sha256WithRSAEncryption 5e:41:83:d0:71:77:cf:bf:a2:62:76:a9:1b:5c:e9:52:18:b9: f8:11:a1:2e:0e:c0:45:a6:ba:4a:11:10:ff:36:86:99:8f:94: 61:79:14:7b:a7:41:f1:83:c3:e0:a6:36:ef:85:1d:d4:6d:2c: 3b:2b:69:be:e9:ea:90:8e:4c:e5:8f:13:51:6d:f8:87:33:7c: ca:3a:51:bd:42:0b:d1:8e:e0:70:99:70:26:25:4b:97:14:83: 4b:1b:59:a5:b0:8d:a8:5a:93:96:01:32:df:f4:09:95:ac:69: 97:1f:6a:1e:53:ed:87:1a:cc:81:88:ed:98:dd:94:3a:66:c3: ea:b0:2a:26:55:cb:89:16:bc:52:61:34:95:13:dd:92:01:cf: db:84:d1:59:de:9a:39:39:80:8d:b1:e7:b6:e1:3c:bf:41:a3: 4a:55:53:9b:a2:57:f8:9f:27:c1:a0:63:39:01:f7:ad:0c:c8: f9:0e:fc:62:7e:e7:0e:c1:ea:c8:c5:8e:b0:16:f1:a7:cc:4c: b1:c7:c3:c3:4b:b5:2c:50:f8:03:dc:0a:cd:f3:b8:ad:8b:45: 1e:5e:19:e6:2f:7d:a6:fe:d0:fe:75:15:a7:02:76:f9:75:d5: e9:94:59:74:69:aa:39:ec:3c:11:39:d8:27:ad:3d:b3:04:9a: 86:ab:9c:96 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOeMFjwDnK/q0XTMcclDaUBVDFt8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMjA3MDAwMDAwWhcNMjUwMzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMjE3OGFhZGM4ZTU5ZGNhY2QyNzBlZGM2ZTFlZjg2ZmJi YTY0N2MzZTZjZmJmYWM0NzNjNDcwNjZkMzk3ZDg4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuULszNGZEMbUpWxVza3E0K5S5Q1UcwPDwWE+QgVB6ju9L DDEl8mA1XzzkR02fczC5ets5ccbKEGPnwYSF2U8ZHm1iSs0eYjMaVchPwuYXbVZP ZnVm/QLv18SdBvBZRZYzm2K5oH38nXFIy5274kRWw21ZIJJBlTLaOJXLpks8eJrN EuVGcoHgqjkuRP+JJTTncKoqJPZoDhNAemjRxfR+d1Ic0C+tT/UMELIwobn97mqU 9B4oKUML8tJww92cMCvV0qzxm21hm+q6SX2I0+ENHkXD5k4c99s93urtWAfvJsx/ tkjoUUbQRXUuuDDDX9sEcNo7GIjNZeFbsdn/t6D5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUouHEJ9W9ysI5qrd5eeI2QNd08O8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhhYjJhZDIzLWUzYWItNDEwZi1iNDk3LWQwYzcxODFmZTY5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMP3RgwDQYJKoZIhvcNAQELBQADggEBAF5Bg9Bxd8+/omJ2qRtc6VIYufgR oS4OwEWmukoREP82hpmPlGF5FHunQfGDw+CmNu+FHdRtLDsrab7p6pCOTOWPE1Ft +IczfMo6Ub1CC9GO4HCZcCYlS5cUg0sbWaWwjahak5YBMt/0CZWsaZcfah5T7Yca zIGI7ZjdlDpmw+qwKiZVy4kWvFJhNJUT3ZIBz9uE0Vnemjk5gI2x57bhPL9Bo0pV U5uiV/ifJ8GgYzkB960MyPkO/GJ+5w7B6sjFjrAW8afMTLHHw8NLtSxQ+APcCs3z uK2LRR5eGeYvfab+0P51FacCdvl11emUWXRpqjnsPBE52CetPbMEmoarnJY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:02 2025 by rpki-client