$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ad9eba0-b2ba-4340-9e95-cadc0ec6c378.roa File: 9ad9eba0-b2ba-4340-9e95-cadc0ec6c378.roa (raw, json) Hash identifier: syHuHJYqZuOjiynFcjZyw7UYIaO1g6yF8Lha59T2sSY= Subject key identifier: AF:00:A0:33:4B:81:57:AE:11:57:30:1D:88:91:2A:D8:77:2B:4A:39 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7D377FD821378CCA19339CF905675FE0C71DD20B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ad9eba0-b2ba-4340-9e95-cadc0ec6c378.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.157.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:37:7f:d8:21:37:8c:ca:19:33:9c:f9:05:67:5f:e0:c7:1d:d2:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:60:ca:b1:1b:22:f7:dd:e2:8f:2d:66:86:6f: 34:d7:51:8a:04:ab:ba:9e:48:1b:bd:ff:2a:a6:f8: aa:12:96:0b:eb:35:b4:d0:84:f8:9d:e9:0e:a9:27: 49:b5:3d:7f:85:8b:6b:bc:f8:41:48:a6:2e:bd:e9: 8a:52:00:2a:b1:91:97:bb:8c:ff:2e:0b:97:c7:33: 08:7f:c1:5a:25:a3:af:e6:f8:a4:b5:f0:7f:cc:6c: 5f:2d:7c:3d:86:b7:17:76:30:c2:c8:34:0b:94:c8: 7a:59:f9:b6:d2:4d:d6:45:ce:30:73:dc:e0:36:af: 40:49:c3:fc:a0:98:25:17:56:ee:c8:6e:85:b2:60: 3d:10:9c:6d:a5:4e:38:2b:65:b2:c4:43:1b:32:de: 06:f6:48:96:67:cc:97:d7:2c:4b:ee:73:35:40:17: 49:56:9d:c8:c3:dd:59:b3:59:3e:7b:bd:b7:39:0d: 0b:af:70:ad:13:b3:14:4f:54:0e:68:63:aa:3d:96: ef:b2:7b:a8:3b:8b:f6:78:06:5e:d9:fa:1d:aa:95: ad:ea:72:85:01:98:fc:67:b0:62:a3:fb:16:3c:4c: ae:ce:ef:da:85:f9:15:50:85:47:a6:11:56:6f:25: 3d:02:dd:ac:bd:17:7d:5e:e3:75:8d:fc:d5:4e:3e: 47:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:00:A0:33:4B:81:57:AE:11:57:30:1D:88:91:2A:D8:77:2B:4A:39 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ad9eba0-b2ba-4340-9e95-cadc0ec6c378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.157.0.0/18 Signature Algorithm: sha256WithRSAEncryption 6e:8b:0f:3b:06:a2:0a:0a:ef:3c:e4:30:a9:12:62:ca:5b:e3: a2:2a:02:df:aa:d4:8c:4c:fe:6a:5e:ac:88:11:c0:18:92:cd: 2a:8e:81:4e:be:05:c3:1f:05:96:9a:c7:c1:96:30:47:f4:af: 1a:8c:6c:69:4d:88:df:c0:cc:be:30:9e:7b:a2:cf:2f:a0:62: 1f:9f:9b:fa:6d:2c:69:72:c7:88:2e:a9:5d:8d:0b:7e:5f:63: c8:b1:94:22:d7:46:71:8b:c5:d9:77:92:bc:5f:f3:83:ce:b4: 90:70:45:75:87:52:c5:cf:f9:59:43:43:e2:f6:3f:0c:17:8a: 5c:68:04:f5:94:cc:1b:39:7e:90:ce:6b:d1:59:9f:63:84:7f: 24:96:d8:0e:c8:c5:3d:28:d7:4d:93:f4:2c:27:1e:66:a3:19: c4:a7:f0:ef:54:30:83:90:0e:77:9e:2f:9f:c5:f8:92:24:ea: 08:04:8b:80:d0:18:10:41:da:c6:48:da:ec:22:a6:68:09:08: a7:56:e8:60:c5:38:ea:dc:5f:cf:f3:73:a0:80:c9:75:fd:16: b0:58:74:50:0e:5a:29:af:56:ce:a8:75:65:7e:83:25:35:d2: 03:22:42:ad:00:3b:0f:9f:1e:25:51:ad:18:f3:ec:63:f7:29: 57:34:4d:3c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfTd/2CE3jMoZM5z5BWdf4Mcd0gswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzc5MTRkZDQ1ZDU5YWVjZGRlNWM2MmJlMTExMmQ1YTRk MmRkZjMzZmM0MTQ0OTdlMzRhNTljM2ExZTEzODIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0YMqxGyL33eKPLWaGbzTXUYoEq7qeSBu9/yqm+KoSlgvr NbTQhPid6Q6pJ0m1PX+Fi2u8+EFIpi696YpSACqxkZe7jP8uC5fHMwh/wVolo6/m +KS18H/MbF8tfD2Gtxd2MMLINAuUyHpZ+bbSTdZFzjBz3OA2r0BJw/ygmCUXVu7I boWyYD0QnG2lTjgrZbLEQxsy3gb2SJZnzJfXLEvuczVAF0lWncjD3VmzWT57vbc5 DQuvcK0TsxRPVA5oY6o9lu+ye6g7i/Z4Bl7Z+h2qla3qcoUBmPxnsGKj+xY8TK7O 79qF+RVQhUemEVZvJT0C3ay9F31e43WN/NVOPkeZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrwCgM0uBV64RVzAdiJEq2HcrSjkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlhZDllYmEwLWIyYmEtNDM0MC05ZTk1LWNhZGMwZWM2YzM3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2nQAwDQYJKoZIhvcNAQELBQADggEBAG6LDzsGogoK7zzkMKkSYspb46Iq At+q1IxM/mperIgRwBiSzSqOgU6+BcMfBZaax8GWMEf0rxqMbGlNiN/AzL4wnnui zy+gYh+fm/ptLGlyx4guqV2NC35fY8ixlCLXRnGLxdl3krxf84POtJBwRXWHUsXP +VlDQ+L2PwwXilxoBPWUzBs5fpDOa9FZn2OEfySW2A7IxT0o102T9CwnHmajGcSn 8O9UMIOQDneeL5/F+JIk6ggEi4DQGBBB2sZI2uwipmgJCKdW6GDFOOrcX8/zc6CA yXX9FrBYdFAOWimvVs6odWV+gyU10gMiQq0AOw+fHiVRrRjz7GP3KVc0TTw= -----END CERTIFICATE-----Generated at Wed Feb 5 10:59:02 2025 by rpki-client