$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92122d7b-7362-44ff-97d6-983f9814e882.roa File: 92122d7b-7362-44ff-97d6-983f9814e882.roa (raw, json) Hash identifier: 9YgpvkwJK5JnRvBC6pLTB7OGqiVZ24fsP0cWJRD6cCU= Subject key identifier: 06:0C:7C:F9:D0:1B:2F:12:C8:C3:2E:B2:B4:48:F4:B5:6F:D7:B7:3E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 634E6C2D77061C7076DEA91D8ACC1CF41AAC0002 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92122d7b-7362-44ff-97d6-983f9814e882.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.199.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:4e:6c:2d:77:06:1c:70:76:de:a9:1d:8a:cc:1c:f4:1a:ac:00:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:64:f3:24:bd:9d:fb:ff:ef:66:25:0d:8c:c6: fe:a5:07:dc:6b:14:8d:e2:a3:e1:8c:08:1c:82:92: c7:7c:46:45:c4:8c:91:63:18:80:34:32:61:d6:b7: f6:a4:bc:94:d9:b5:c2:e5:1b:95:c7:f2:a6:f0:24: 55:ec:74:11:f2:38:0c:73:a6:fc:04:2b:d2:17:51: cb:95:6e:d7:a9:c1:02:cf:a3:4f:ad:b3:8f:7f:eb: 0a:74:1f:eb:ec:34:3c:aa:0a:45:01:41:f4:00:d0: 92:85:57:42:24:50:eb:18:f4:2e:8a:43:14:0d:9f: 45:89:d4:a7:e1:ad:f0:e9:29:2a:70:e9:de:5e:19: d8:de:81:f8:56:4b:9b:ee:b1:57:40:4c:f6:a7:32: d1:74:b7:0b:7f:7e:6c:25:e4:91:03:99:33:dd:fb: 28:b0:68:11:4d:75:1b:47:64:2a:82:62:ea:d0:87: ef:4f:85:07:6c:b4:01:dd:3a:a8:c6:c5:b8:10:99: c4:fa:88:14:45:d5:0f:6e:e6:72:4f:a2:17:19:35: ca:3f:ea:c4:b5:4f:40:65:9d:5b:13:62:75:1f:05: c3:8a:1c:4a:c5:f5:38:a0:36:c0:70:88:d3:b0:d1: 8d:29:3b:00:40:1e:cd:0c:33:c8:fe:98:83:7f:69: 6d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0C:7C:F9:D0:1B:2F:12:C8:C3:2E:B2:B4:48:F4:B5:6F:D7:B7:3E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92122d7b-7362-44ff-97d6-983f9814e882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.199.126.0/23 Signature Algorithm: sha256WithRSAEncryption 45:75:1c:a8:2a:9f:6b:37:ea:24:6e:db:ab:68:a9:fb:5e:ca: fb:9b:3b:c8:6e:74:84:3c:07:d9:f8:de:98:cd:f8:06:eb:d9: 7c:c1:71:ba:d2:95:44:cc:a7:2a:19:97:de:7b:6c:6a:5b:1c: b2:56:39:a8:49:f8:9f:bf:f6:3f:17:08:6f:ee:70:c5:32:77: 2a:bd:92:dc:75:4d:c8:c6:db:cd:d2:9a:c8:d8:a0:18:bd:54: 58:23:1b:98:ec:69:7a:b0:0a:4e:c1:d8:9d:0d:01:ed:25:42: 9a:40:35:7c:92:16:1c:8c:c9:fa:ed:bd:ed:e2:40:a4:12:72: 77:fd:e5:8c:18:a4:dd:d1:2b:cd:e8:85:0c:62:20:21:a1:5f: 5e:31:95:f4:5b:7c:a7:74:af:a7:11:c3:25:0f:75:a9:b2:00: 76:66:f2:fe:20:32:aa:bf:90:6e:7f:66:ac:ce:d2:5a:b3:f4: cc:c4:83:41:99:7b:96:6c:3c:4a:61:5c:09:87:69:14:f3:d7: a4:04:ab:ad:3b:09:32:3a:5d:9a:e3:d1:b9:9f:4e:45:5b:6d: ab:92:52:34:d8:8a:25:d4:ab:40:e5:c6:2b:d1:25:c6:77:40: 1f:e9:da:f2:0e:1e:f6:7e:44:13:9d:41:aa:35:e5:fc:47:d1: 7c:af:41:07 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY05sLXcGHHB23qkdiswc9BqsAAIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzUxY2JiZDcwYTA5ODA1YjJhODY4MjUzODQ5YmM3YjQ5 YjExYzI4NWU3ZTY5NjdjMDIzZmFhZTAzNGVhOTJkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYZPMkvZ37/+9mJQ2Mxv6lB9xrFI3io+GMCByCksd8RkXE jJFjGIA0MmHWt/akvJTZtcLlG5XH8qbwJFXsdBHyOAxzpvwEK9IXUcuVbtepwQLP o0+ts49/6wp0H+vsNDyqCkUBQfQA0JKFV0IkUOsY9C6KQxQNn0WJ1KfhrfDpKSpw 6d5eGdjegfhWS5vusVdATPanMtF0twt/fmwl5JEDmTPd+yiwaBFNdRtHZCqCYurQ h+9PhQdstAHdOqjGxbgQmcT6iBRF1Q9u5nJPohcZNco/6sS1T0BlnVsTYnUfBcOK HErF9TigNsBwiNOw0Y0pOwBAHs0MM8j+mIN/aW1nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBgx8+dAbLxLIwy6ytEj0tW/Xtz4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkyMTIyZDdiLTczNjItNDRmZi05N2Q2LTk4M2Y5ODE0ZTg4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2x34wDQYJKoZIhvcNAQELBQADggEBAEV1HKgqn2s36iRu26toqfteyvub O8hudIQ8B9n43pjN+Abr2XzBcbrSlUTMpyoZl957bGpbHLJWOahJ+J+/9j8XCG/u cMUydyq9ktx1TcjG283SmsjYoBi9VFgjG5jsaXqwCk7B2J0NAe0lQppANXySFhyM yfrtve3iQKQScnf95YwYpN3RK83ohQxiICGhX14xlfRbfKd0r6cRwyUPdamyAHZm 8v4gMqq/kG5/ZqzO0lqz9MzEg0GZe5ZsPEphXAmHaRTz16QEq607CTI6XZrj0bmf TkVbbauSUjTYiiXUq0DlxivRJcZ3QB/p2vIOHvZ+RBOdQao15fxH0XyvQQc= -----END CERTIFICATE-----Generated at Wed Feb 5 10:47:31 2025 by rpki-client