$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fd95ec7-ed20-4bc9-89ad-e103c0d05c9b.roa File: 9fd95ec7-ed20-4bc9-89ad-e103c0d05c9b.roa (raw, json) Hash identifier: zKtIv1t5xYW3ni7gVP6VqYMf8o6QhsPKn1hYl4QkEX8= Subject key identifier: 94:F5:AA:A0:73:06:00:31:04:70:E3:93:70:42:C0:81:EC:E3:B6:33 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4D78202F6F50EBCB07B68CCD2102285549EABEDB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fd95ec7-ed20-4bc9-89ad-e103c0d05c9b.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:78:20:2f:6f:50:eb:cb:07:b6:8c:cd:21:02:28:55:49:ea:be:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:b6:0e:fd:41:72:85:7d:14:12:c4:a2:31: 59:db:89:38:40:14:43:33:b6:9d:1e:31:44:62:23: 3e:fb:d0:7d:ff:9b:ce:bb:ef:0e:2c:b8:bf:af:a3: 33:61:95:f6:f5:b5:ec:38:63:62:91:b3:e7:81:07: 33:60:43:3e:06:83:4e:7a:ab:3f:b3:32:9b:f7:1e: 77:65:ff:35:ca:3e:a3:87:b7:be:12:7d:21:f7:b7: 38:a9:c8:cb:52:53:20:87:05:2d:f6:b5:a9:b3:db: 56:ae:a0:eb:a4:88:a9:67:40:90:c7:1a:5f:b3:f7: 31:43:e2:50:05:cd:cd:9c:1a:69:aa:9b:5a:f8:25: 4e:3c:ab:9c:cb:05:d2:7d:40:f0:ee:c4:60:45:72: 02:1d:b5:81:dd:01:95:cd:92:f8:8f:74:ed:21:a0: 26:a0:87:61:9c:e0:9d:bb:90:c6:91:47:60:31:35: d1:18:c9:51:cf:5c:48:0c:a4:07:1d:5b:33:dc:26: 1a:7d:fa:58:d4:cc:86:3d:c2:ec:a3:d1:2d:c9:8c: 1f:88:e6:b1:7a:2c:47:52:3f:f3:0f:ad:ce:80:fe: f7:49:f8:bc:6f:00:23:da:5f:bd:9c:01:69:7e:5d: 4b:ec:35:1d:3f:b4:80:d5:de:b4:6e:e3:d2:31:00: 0f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F5:AA:A0:73:06:00:31:04:70:E3:93:70:42:C0:81:EC:E3:B6:33 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fd95ec7-ed20-4bc9-89ad-e103c0d05c9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.181.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:a9:59:f2:47:02:6a:12:6d:a1:fe:cb:3b:4d:8f:2b:d9:70: 1b:29:a6:11:1b:da:a4:c1:a7:54:29:8b:9a:64:31:1e:ef:df: 47:e1:46:fb:f8:1a:3d:fa:7f:7f:35:42:ab:a9:cb:05:93:33: 04:85:10:6d:c6:bf:ff:30:3c:72:20:27:4f:60:1f:a2:66:cc: 74:f5:f5:3f:6c:25:ae:7f:a2:dd:5a:a7:c0:3d:b9:c8:ec:5c: ca:53:d3:b7:55:06:61:ec:78:fb:16:63:bb:23:3f:09:1f:9b: 24:16:72:7a:fa:2c:d7:1d:fb:e4:04:84:57:1d:2c:7f:2b:43: 1d:40:bb:8e:9c:ba:59:a6:10:db:2b:53:29:9f:c8:24:46:2a: 46:96:ad:b2:5f:d9:3d:33:c9:e1:49:a3:02:12:ea:18:a3:9d: 31:9a:96:ba:de:b7:da:57:bf:37:e9:7b:e3:79:a4:26:b8:29: 37:c0:17:e8:99:26:65:4b:b1:10:ae:22:8c:a5:68:7f:bf:df: b6:3a:6c:43:81:82:d5:ab:3a:c1:cb:61:76:1d:24:dc:59:90: f0:2c:a3:45:70:1a:da:2a:b5:ee:cb:3b:f1:29:8b:97:23:64: d8:de:43:9d:bf:ab:67:ec:5a:c0:e3:17:32:95:34:9d:29:d3: 71:f1:8c:f1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTXggL29Q68sHtozNIQIoVUnqvtswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzA4OWIyZjIyZWUzNzMzMTZmMzNjYjE0ZmQzYTU4NjA0 YjdmZDY4NDFlMmQzYjAyMWZmNjcxOGJhMjI1Mzk3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDD3rYO/UFyhX0UEsSiMVnbiThAFEMztp0eMURiIz770H3/ m8677w4suL+vozNhlfb1tew4Y2KRs+eBBzNgQz4Gg056qz+zMpv3Hndl/zXKPqOH t74SfSH3tzipyMtSUyCHBS32tamz21auoOukiKlnQJDHGl+z9zFD4lAFzc2cGmmq m1r4JU48q5zLBdJ9QPDuxGBFcgIdtYHdAZXNkviPdO0hoCagh2Gc4J27kMaRR2Ax NdEYyVHPXEgMpAcdWzPcJhp9+ljUzIY9wuyj0S3JjB+I5rF6LEdSP/MPrc6A/vdJ +LxvACPaX72cAWl+XUvsNR0/tIDV3rRu49IxAA+DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlPWqoHMGADEEcOOTcELAgezjtjMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlmZDk1ZWM3LWVkMjAtNGJjOS04OWFkLWUxMDNjMGQwNWM5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0LrUwDQYJKoZIhvcNAQELBQADggEBAA2pWfJHAmoSbaH+yztNjyvZcBsp phEb2qTBp1Qpi5pkMR7v30fhRvv4Gj36f381QqupywWTMwSFEG3Gv/8wPHIgJ09g H6JmzHT19T9sJa5/ot1ap8A9ucjsXMpT07dVBmHsePsWY7sjPwkfmyQWcnr6LNcd ++QEhFcdLH8rQx1Au46culmmENsrUymfyCRGKkaWrbJf2T0zyeFJowIS6hijnTGa lrret9pXvzfpe+N5pCa4KTfAF+iZJmVLsRCuIoylaH+/37Y6bEOBgtWrOsHLYXYd JNxZkPAso0VwGtoqte7LO/Epi5cjZNjeQ52/q2fsWsDjFzKVNJ0p03HxjPE= -----END CERTIFICATE-----Generated at Wed Feb 5 10:49:53 2025 by rpki-client