$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a950ae9-fc5b-4922-92d9-a5c5bac59d5b.roa File: 9a950ae9-fc5b-4922-92d9-a5c5bac59d5b.roa (raw, json) Hash identifier: tT3s2k+5dbXH7KHP8u0iLL535JT7CCQ+PsWUI4hY0xY= Subject key identifier: 38:02:C5:AA:DC:67:08:37:E7:73:4F:50:3B:68:95:B8:EB:CD:57:45 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2628BBEF50D3B4A2AF3B004BF428F1DDD3F121D4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a950ae9-fc5b-4922-92d9-a5c5bac59d5b.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.199.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:28:bb:ef:50:d3:b4:a2:af:3b:00:4b:f4:28:f1:dd:d3:f1:21:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:d5:b5:d8:25:d2:93:fc:ba:12:02:94:89:21: 6c:6e:5e:20:25:6d:d7:df:ff:f4:9d:78:22:ee:df: d9:fc:c0:d6:ce:01:85:9c:c2:3f:54:d8:38:1b:7f: 0a:ce:ed:4c:50:76:29:d6:2f:bf:50:66:d8:7c:37: 8f:b4:29:d5:57:33:03:e1:58:19:57:3d:e0:28:32: 28:4e:9e:3b:a4:5a:37:0c:10:2b:92:2b:6e:ef:1c: 1d:4f:8f:ba:20:42:ff:d3:08:cf:d2:69:a4:dd:61: c7:95:e2:b1:16:10:b7:8b:79:a9:27:b1:99:a5:d0: ad:a7:e0:68:64:29:ad:4d:65:e2:c1:00:56:13:3e: 17:fc:bf:04:ce:16:97:27:fc:6d:35:ee:3b:3a:44: c4:88:bd:55:41:5c:f9:a9:df:02:63:df:4f:30:e9: c1:07:07:9d:7d:94:ad:66:fb:c8:d6:16:ad:65:93: 89:13:40:cb:db:58:39:b6:e1:6f:14:99:e9:9b:5d: 8f:e1:dc:c7:4a:df:a5:8d:02:a2:59:c7:91:4d:42: cd:8e:a9:ab:3f:10:3c:d8:51:82:ca:67:34:61:2e: 12:f7:a9:f6:7d:c3:a7:8e:45:67:66:3a:39:64:bd: c5:3b:b9:f0:7b:33:4b:81:28:cd:c6:0b:4a:66:8b: 1f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:02:C5:AA:DC:67:08:37:E7:73:4F:50:3B:68:95:B8:EB:CD:57:45 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a950ae9-fc5b-4922-92d9-a5c5bac59d5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.199.211.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:1a:d7:29:8b:7f:44:75:02:4f:a4:a5:bd:46:ea:d1:b8:63: 0b:39:ed:9f:53:b2:cd:60:c6:6a:21:47:36:9d:93:6c:41:ae: c3:db:69:47:1a:29:64:81:6f:b8:f8:a4:1b:cb:eb:32:c5:56: aa:fc:35:b9:d4:38:89:96:79:6b:5a:02:87:19:0f:d2:d1:96: 46:e9:cd:fc:88:f8:a8:df:41:97:4f:f4:ce:b7:27:4b:29:da: 85:04:95:41:9b:6d:02:0f:cd:a3:ad:0b:2f:66:ec:a7:a2:51: 2f:7f:0e:38:b8:8d:a7:0c:3f:93:0c:cf:22:bc:35:0a:59:52: 44:98:77:ad:6e:38:a3:f3:86:dc:24:44:d1:f3:4d:b0:a8:b8: dc:c2:7d:26:70:25:45:87:12:94:97:af:b6:5e:a2:cb:24:d4: 4a:f2:a3:60:af:13:71:87:ec:e5:36:db:37:39:a6:89:31:3a: fd:e1:f4:f6:5a:2c:7e:f1:7c:29:77:77:9d:03:07:b2:42:a9: 31:f7:bd:06:36:ed:2d:2b:0b:5d:ac:18:a8:27:41:9b:69:a0: e5:e0:68:56:89:a1:e3:7e:0d:6b:58:d2:e1:e1:60:40:4b:70: 7f:6b:4e:6f:6f:4c:07:ae:6f:37:f4:73:66:a7:e4:1a:d3:ee: fe:7c:92:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJii771DTtKKvOwBL9Cjx3dPxIdQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZmZjNWU5M2Q0NDA2YTg5ZWYxYjA2MDJhMzU5ZWRmZTUx Yjg3MDBhOGFmYzBkZGQ3Yjk5M2M0MmZiMTBkNjU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDw1bXYJdKT/LoSApSJIWxuXiAlbdff//SdeCLu39n8wNbO AYWcwj9U2DgbfwrO7UxQdinWL79QZth8N4+0KdVXMwPhWBlXPeAoMihOnjukWjcM ECuSK27vHB1Pj7ogQv/TCM/SaaTdYceV4rEWELeLeaknsZml0K2n4GhkKa1NZeLB AFYTPhf8vwTOFpcn/G017js6RMSIvVVBXPmp3wJj308w6cEHB519lK1m+8jWFq1l k4kTQMvbWDm24W8UmembXY/h3MdK36WNAqJZx5FNQs2Oqas/EDzYUYLKZzRhLhL3 qfZ9w6eORWdmOjlkvcU7ufB7M0uBKM3GC0pmix+FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOALFqtxnCDfnc09QO2iVuOvNV0UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlhOTUwYWU5LWZjNWItNDkyMi05MmQ5LWE1YzViYWM1OWQ1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASx9MwDQYJKoZIhvcNAQELBQADggEBADoa1ymLf0R1Ak+kpb1G6tG4Yws5 7Z9Tss1gxmohRzadk2xBrsPbaUcaKWSBb7j4pBvL6zLFVqr8NbnUOImWeWtaAocZ D9LRlkbpzfyI+KjfQZdP9M63J0sp2oUElUGbbQIPzaOtCy9m7KeiUS9/Dji4jacM P5MMzyK8NQpZUkSYd61uOKPzhtwkRNHzTbCouNzCfSZwJUWHEpSXr7Zeossk1Ery o2CvE3GH7OU22zc5pokxOv3h9PZaLH7xfCl3d50DB7JCqTH3vQY27S0rC12sGKgn QZtpoOXgaFaJoeN+DWtY0uHhYEBLcH9rTm9vTAeubzf0c2an5BrT7v58kjk= -----END CERTIFICATE-----Generated at Wed Feb 5 10:42:13 2025 by rpki-client