$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f83b6b6-37f8-4d76-82b2-ed42fb0f4b38.roa File: 8f83b6b6-37f8-4d76-82b2-ed42fb0f4b38.roa (raw, json) Hash identifier: ka0+TiNj96LV1CQrzeOyWMuPXOc7h2vIxOLdmdLG5vs= Subject key identifier: E4:E5:4E:E7:7D:E9:B5:43:C8:65:A5:DC:A9:B3:62:71:75:F1:18:DC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 16BBA51D28BC6235CC26ABA940E78E4B2112148A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f83b6b6-37f8-4d76-82b2-ed42fb0f4b38.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.227.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:bb:a5:1d:28:bc:62:35:cc:26:ab:a9:40:e7:8e:4b:21:12:14:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d5:78:21:28:75:f1:6e:22:fe:2b:ab:af:fc: 5d:f3:bb:03:4c:3c:7e:a6:9e:c4:18:eb:eb:d8:69: 48:d3:7a:ef:01:6d:8c:d7:95:9a:82:b9:ba:46:eb: 91:89:92:f4:da:a2:45:20:00:6d:e5:91:cc:9e:37: 2b:0c:0a:2d:a4:55:1d:a4:85:30:a2:a1:44:15:de: e6:87:7e:fe:a4:88:f6:03:7a:9e:35:c3:c1:24:e4: 37:67:67:09:0f:96:58:ac:fe:30:39:df:de:8c:be: 9d:af:2f:b8:8f:23:ea:ee:4f:09:73:3c:17:e9:e4: 32:e2:b7:18:22:81:89:78:f3:6c:70:a9:d0:8f:38: b7:81:f2:a4:2d:02:33:ec:da:61:8d:17:19:76:2e: 74:e6:10:88:62:36:d4:1c:c8:4d:9f:02:58:20:33: 3d:20:ee:cf:05:e1:74:5a:eb:82:31:04:2f:7f:1e: 37:c0:af:a5:4f:83:d0:e4:13:e9:5e:3a:4f:68:5f: 9e:d1:9f:f2:14:40:a4:1e:0a:0c:6f:d0:56:c2:ee: ad:77:fd:45:85:d2:be:eb:42:63:3e:a2:00:48:c3: 1a:fa:e3:11:5f:b4:2a:66:10:05:48:10:84:5a:64: 8c:a4:f4:a9:92:c8:d9:93:3a:56:96:27:4a:95:71: 1f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E5:4E:E7:7D:E9:B5:43:C8:65:A5:DC:A9:B3:62:71:75:F1:18:DC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f83b6b6-37f8-4d76-82b2-ed42fb0f4b38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.227.0.0/17 Signature Algorithm: sha256WithRSAEncryption 04:ba:69:97:6b:52:e2:74:64:65:8b:e9:30:96:26:4d:f2:79: 6c:d1:f3:62:50:a9:79:2a:55:01:04:12:06:10:b1:da:d0:3a: 34:14:43:88:ff:fa:5a:2e:24:bc:60:07:c2:a9:a9:e7:68:df: fb:7d:49:80:18:95:20:b6:16:17:29:49:d0:b2:42:5a:44:fc: 0f:ee:c4:47:55:91:c5:97:bf:82:90:d3:e4:51:88:ac:e6:c7: 2e:7a:f2:1d:9f:83:f4:fa:7d:15:69:72:16:d8:d8:15:c5:fd: 92:05:2b:79:53:d6:db:a2:81:6b:fb:e6:21:de:84:dc:bf:0d: 34:4e:4d:f5:07:9b:11:1b:2d:b2:fd:a8:65:e5:5e:f5:f2:6a: ea:9f:7c:6f:a9:d1:94:eb:ee:1f:a8:db:3a:2f:03:65:f9:04: 29:00:49:5e:5b:35:50:f1:2e:9b:03:c2:41:77:f8:cd:32:24: 5f:3d:62:75:c6:c8:e9:95:87:5a:91:3d:ea:70:60:a2:53:60: dc:f5:dc:95:bc:d3:0b:f9:af:90:a0:6c:21:78:f4:72:70:77: 55:4b:4f:d8:b2:2b:38:9d:48:a8:d8:8e:d6:51:b3:2b:58:5d: ae:f4:21:4d:9c:4a:0d:e3:94:02:47:e7:ba:61:b4:96:b5:f9: 34:6f:05:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFrulHSi8YjXMJqupQOeOSyESFIowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZTE4ZTNjNjNlYTEwM2IwODBlZmI5MzM0NGJkNWI0NGE2 Zjk1M2U1ZTc0ODM1Zjg0NTY1YjMxYjQxODU0ZTJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK1XghKHXxbiL+K6uv/F3zuwNMPH6mnsQY6+vYaUjTeu8B bYzXlZqCubpG65GJkvTaokUgAG3lkcyeNysMCi2kVR2khTCioUQV3uaHfv6kiPYD ep41w8Ek5DdnZwkPllis/jA5396Mvp2vL7iPI+ruTwlzPBfp5DLitxgigYl482xw qdCPOLeB8qQtAjPs2mGNFxl2LnTmEIhiNtQcyE2fAlggMz0g7s8F4XRa64IxBC9/ HjfAr6VPg9DkE+leOk9oX57Rn/IUQKQeCgxv0FbC7q13/UWF0r7rQmM+ogBIwxr6 4xFftCpmEAVIEIRaZIyk9KmSyNmTOlaWJ0qVcR/7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5OVO533ptUPIZaXcqbNicXXxGNwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhmODNiNmI2LTM3ZjgtNGQ3Ni04MmIyLWVkNDJmYjBmNGIzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc24wAwDQYJKoZIhvcNAQELBQADggEBAAS6aZdrUuJ0ZGWL6TCWJk3yeWzR 82JQqXkqVQEEEgYQsdrQOjQUQ4j/+louJLxgB8Kpqedo3/t9SYAYlSC2FhcpSdCy QlpE/A/uxEdVkcWXv4KQ0+RRiKzmxy568h2fg/T6fRVpchbY2BXF/ZIFK3lT1tui gWv75iHehNy/DTROTfUHmxEbLbL9qGXlXvXyauqffG+p0ZTr7h+o2zovA2X5BCkA SV5bNVDxLpsDwkF3+M0yJF89YnXGyOmVh1qRPepwYKJTYNz13JW80wv5r5CgbCF4 9HJwd1VLT9iyKzidSKjYjtZRsytYXa70IU2cSg3jlAJH57phtJa1+TRvBSA= -----END CERTIFICATE-----Generated at Wed Feb 5 10:41:02 2025 by rpki-client