$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93d0d769-14fa-486e-9262-e49c64d46e9c.roa File: 93d0d769-14fa-486e-9262-e49c64d46e9c.roa (raw, json) Hash identifier: XDg7f5HAzgkJW9ZWl80BvGJOTdfVciVvLJg3ZmyfTeY= Subject key identifier: 28:14:57:FF:E8:E9:99:4F:BD:C0:78:B8:70:DE:83:8A:FC:CF:E1:CD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0888E355EDC52B97CA5C6018655DCFCAA61D9DA9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93d0d769-14fa-486e-9262-e49c64d46e9c.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 18.208.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:88:e3:55:ed:c5:2b:97:ca:5c:60:18:65:5d:cf:ca:a6:1d:9d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fb:70:e6:f5:3f:84:c2:2c:d3:06:ab:ea:ad: 79:64:23:0c:3d:b5:d2:2a:cd:79:e6:1a:7a:be:23: 6a:86:4a:25:dc:d7:bf:2c:69:ba:e5:7c:d9:9f:fe: 0b:c3:42:42:79:d8:83:c3:5f:24:2b:b9:bf:bf:41: 54:e1:4a:94:8c:5e:f8:fc:e9:fb:16:ff:65:f0:00: 80:06:e4:07:af:1d:51:47:19:4f:50:21:c7:fc:93: a7:26:28:81:03:c2:e8:1a:7a:8f:0c:8d:9f:ed:a7: 7b:cb:40:6c:13:8c:9a:98:19:f3:2b:bc:13:20:5d: 76:6c:b2:7c:d5:35:cb:70:97:0b:55:ce:de:d6:db: 81:99:50:f0:e0:fb:a4:98:c3:80:7d:b8:01:e6:f1: af:9b:80:2a:ad:cb:16:74:8b:19:7d:08:45:00:3f: 27:a2:5f:9a:cf:eb:71:de:aa:7e:71:5e:ec:18:3e: 58:20:0b:71:7c:0c:0a:e9:3b:cf:c4:73:62:66:07: 78:80:3d:18:dd:14:29:11:c0:05:ca:9d:18:19:58: 71:3f:23:20:4f:bb:b0:21:c0:af:36:2d:44:be:06: 0d:57:db:72:8a:bc:7c:98:de:e1:ee:e5:3f:44:6d: 54:72:87:2a:4d:d9:ae:37:a6:3d:b5:e9:0e:b0:00: 05:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:14:57:FF:E8:E9:99:4F:BD:C0:78:B8:70:DE:83:8A:FC:CF:E1:CD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93d0d769-14fa-486e-9262-e49c64d46e9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.208.0.0/13 Signature Algorithm: sha256WithRSAEncryption 81:72:d3:a3:53:98:b7:73:c6:59:04:7d:2d:96:c8:dd:75:ff: e5:d3:80:21:c1:40:3a:eb:97:df:0a:56:aa:68:a3:46:a6:03: 4e:c3:ce:21:07:de:a4:0b:80:99:3a:3f:0a:bb:fb:00:44:17: e3:17:88:d3:79:70:fa:55:be:91:08:3a:9f:b4:61:df:7a:02: 92:e7:a6:e1:c5:e8:90:75:3a:04:13:fe:6d:ce:0b:25:c1:70: 9b:cc:cb:ca:07:a1:75:5a:fd:51:aa:45:be:11:43:8f:1b:ab: a7:b5:d6:ea:50:d8:36:fd:e8:26:2e:28:08:3d:e0:59:46:1e: 15:a3:ce:52:8d:f1:17:96:08:c2:b3:80:3a:fd:77:49:37:eb: a4:50:04:29:68:3b:f5:d1:fe:ed:6f:e6:8d:a5:e0:1f:40:5e: 25:14:11:71:5c:24:bf:45:d7:76:05:21:4d:1c:29:9f:7b:f5: ab:8c:aa:c7:9c:1b:21:ac:4f:f1:2b:45:a2:40:65:cd:cc:0b: 3b:ee:d8:37:6b:2f:f6:c8:a7:d9:78:0c:92:ef:99:09:df:4b: b3:fa:1f:30:ba:b9:c3:4b:d5:cf:9d:bb:3b:20:c7:cc:23:33: e1:1e:0b:af:e6:69:7c:f3:87:57:4d:77:27:94:26:79:34:fe: b1:b1:1c:5b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCIjjVe3FK5fKXGAYZV3PyqYdnakwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMmVkN2ZiNmE4ZTFiZjc0NjAzNDZiZDI3YmRhNWE0MTFl ZmQ2MWJkZjQ1YzViNjVkMDQzMGJiYTZlYmUyN2Q4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs+3Dm9T+EwizTBqvqrXlkIww9tdIqzXnmGnq+I2qGSiXc 178sabrlfNmf/gvDQkJ52IPDXyQrub+/QVThSpSMXvj86fsW/2XwAIAG5AevHVFH GU9QIcf8k6cmKIEDwugaeo8MjZ/tp3vLQGwTjJqYGfMrvBMgXXZssnzVNctwlwtV zt7W24GZUPDg+6SYw4B9uAHm8a+bgCqtyxZ0ixl9CEUAPyeiX5rP63Heqn5xXuwY PlggC3F8DArpO8/Ec2JmB3iAPRjdFCkRwAXKnRgZWHE/IyBPu7AhwK82LUS+Bg1X 23KKvHyY3uHu5T9EbVRyhypN2a43pj216Q6wAAXVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUKBRX/+jpmU+9wHi4cN6DivzP4c0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkzZDBkNzY5LTE0ZmEtNDg2ZS05MjYyLWU0OWM2NGQ0NmU5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwMS0DANBgkqhkiG9w0BAQsFAAOCAQEAgXLTo1OYt3PGWQR9LZbI3XX/5dOA IcFAOuuX3wpWqmijRqYDTsPOIQfepAuAmTo/Crv7AEQX4xeI03lw+lW+kQg6n7Rh 33oCkuem4cXokHU6BBP+bc4LJcFwm8zLygehdVr9UapFvhFDjxurp7XW6lDYNv3o Ji4oCD3gWUYeFaPOUo3xF5YIwrOAOv13STfrpFAEKWg79dH+7W/mjaXgH0BeJRQR cVwkv0XXdgUhTRwpn3v1q4yqx5wbIaxP8StFokBlzcwLO+7YN2sv9sin2XgMku+Z Cd9Ls/ofMLq5w0vVz527OyDHzCMz4R4Lr+ZpfPOHV013J5QmeTT+sbEcWw== -----END CERTIFICATE-----Generated at Wed Feb 5 09:55:55 2025 by rpki-client