$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a121af65-dcc1-476d-bdbc-9678cc816b63.roa File: a121af65-dcc1-476d-bdbc-9678cc816b63.roa (raw, json) Hash identifier: lgKWWoV8hzG7ZFuZO93yk/m/0hE0ZjpMRim/AqUpm5g= Subject key identifier: 5B:6F:5F:3E:52:71:B2:AF:12:A4:46:37:AA:4C:A5:7A:1B:FC:68:DF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 749288AED4A60BE584EF22A8E554A4C1047639BF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a121af65-dcc1-476d-bdbc-9678cc816b63.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:92:88:ae:d4:a6:0b:e5:84:ef:22:a8:e5:54:a4:c1:04:76:39:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:7b:dd:79:ed:e7:00:3c:e4:7c:8b:4b:31: bd:f1:a0:22:d9:f5:a2:63:2b:ee:e2:8f:6e:78:4b: 3c:0c:e6:05:e3:65:82:74:e6:30:1b:01:90:b2:2e: f9:ce:33:df:64:e9:b3:fd:19:e0:81:65:72:9b:91: 3d:59:f9:d7:72:e7:81:0d:c1:22:89:17:6f:ef:99: 82:1e:1c:eb:10:3f:8c:0b:21:cc:db:dc:a1:d3:8b: de:b0:20:ee:2c:41:4f:d6:ea:94:1a:f9:76:fc:4f: a1:61:d4:ea:c4:47:d6:d3:a2:5d:fd:b4:12:cb:e2: f3:fd:27:39:2f:06:d3:30:2c:a6:b0:91:d0:35:c8: 1e:24:cf:11:e9:e3:84:dd:ce:45:3b:5a:6d:84:9a: 64:89:53:46:2d:4b:10:a2:43:64:e4:1b:a2:30:13: aa:fc:71:25:0a:1a:81:d2:07:0a:02:1d:df:89:09: 69:32:08:14:6b:cb:c2:30:f4:2b:6e:8a:34:ba:cb: 96:2a:b5:d7:b2:fb:3b:f6:ab:64:32:e1:e8:2e:15: c7:f5:f6:4c:15:6d:a2:b4:6c:73:e2:dc:5f:76:e4: 9f:2a:51:de:2e:df:1d:0f:73:f5:a9:11:1c:de:ae: 89:bf:f7:3d:70:45:78:c2:08:80:57:db:db:45:67: c8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6F:5F:3E:52:71:B2:AF:12:A4:46:37:AA:4C:A5:7A:1B:FC:68:DF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a121af65-dcc1-476d-bdbc-9678cc816b63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.222.0/23 Signature Algorithm: sha256WithRSAEncryption 29:a5:31:4f:eb:f8:d7:01:51:81:47:4c:8c:f7:1d:39:09:b4: 4c:a3:b8:fc:e3:53:02:9f:b1:fa:f6:44:fc:bf:68:f0:74:67: 0f:4e:bb:40:b2:3c:76:af:30:54:93:7b:66:c7:66:89:8e:09: e7:a6:60:65:f3:a9:12:8d:42:18:c4:a0:62:d9:26:47:38:d7: bd:35:79:7a:40:6c:58:76:f1:19:2f:4b:50:8f:49:8b:b3:fc: cc:7e:3b:4b:0c:b8:f7:c1:58:ac:1a:ad:58:0a:b0:d7:52:24: d4:77:91:91:2f:57:dd:bd:10:40:97:1e:73:ca:dc:34:e7:ac: 94:d8:42:d9:f3:f6:b6:fb:58:60:18:5f:26:46:82:94:cb:20: 20:4e:f4:b7:95:32:c5:c1:ff:0f:07:33:bc:f8:a0:2e:ff:ac: 45:9d:aa:31:40:59:4f:f0:b4:17:3d:51:ab:6a:96:48:4e:e6: 41:4b:fd:b4:b0:13:12:02:c6:02:d8:f5:39:60:80:27:d1:5d: 71:cc:77:e4:17:f6:af:23:50:cc:12:81:78:6d:50:4a:f8:bb: 18:40:7c:08:a9:03:9a:d0:c8:5e:05:7f:78:0c:09:0c:d1:cf: 3a:99:b4:66:81:23:7c:1e:83:39:ec:ba:13:46:5e:4b:46:10: 00:59:3e:d3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdJKIrtSmC+WE7yKo5VSkwQR2Ob8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNGE4ZTk5NGQwZjVjNzMyMmU5OGRhZGI5YjYzMmJmNDIz YzYyYjgxZDAwYjhlNjBjNmJkNjU2NjNkMzk2ZDNjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNK3vdee3nADzkfItLMb3xoCLZ9aJjK+7ij254SzwM5gXj ZYJ05jAbAZCyLvnOM99k6bP9GeCBZXKbkT1Z+ddy54ENwSKJF2/vmYIeHOsQP4wL Iczb3KHTi96wIO4sQU/W6pQa+Xb8T6Fh1OrER9bTol39tBLL4vP9JzkvBtMwLKaw kdA1yB4kzxHp44TdzkU7Wm2EmmSJU0YtSxCiQ2TkG6IwE6r8cSUKGoHSBwoCHd+J CWkyCBRry8Iw9CtuijS6y5Yqtdey+zv2q2Qy4eguFcf19kwVbaK0bHPi3F925J8q Ud4u3x0Pc/WpERzerom/9z1wRXjCCIBX29tFZ8hVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW29fPlJxsq8SpEY3qkylehv8aN8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ExMjFhZjY1LWRjYzEtNDc2ZC1iZGJjLTk2NzhjYzgxNmI2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEP3N4wDQYJKoZIhvcNAQELBQADggEBACmlMU/r+NcBUYFHTIz3HTkJtEyj uPzjUwKfsfr2RPy/aPB0Zw9Ou0CyPHavMFSTe2bHZomOCeemYGXzqRKNQhjEoGLZ Jkc41701eXpAbFh28RkvS1CPSYuz/Mx+O0sMuPfBWKwarVgKsNdSJNR3kZEvV929 EECXHnPK3DTnrJTYQtnz9rb7WGAYXyZGgpTLICBO9LeVMsXB/w8HM7z4oC7/rEWd qjFAWU/wtBc9UatqlkhO5kFL/bSwExICxgLY9TlggCfRXXHMd+QX9q8jUMwSgXht UEr4uxhAfAipA5rQyF4Ff3gMCQzRzzqZtGaBI3wegznsuhNGXktGEABZPtM= -----END CERTIFICATE-----Generated at Wed Feb 5 10:50:29 2025 by rpki-client