$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1fde637-becd-4e25-8fd7-57380fc4e43c.roa File: a1fde637-becd-4e25-8fd7-57380fc4e43c.roa (raw, json) Hash identifier: l8hnTH6btKq89jFiHLpYBbAFIi3i6jSOPyz83zB3mck= Subject key identifier: 80:28:21:E6:CF:75:4C:6A:9B:5A:97:3E:0A:75:AC:53:5E:FA:06:4F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 011CF366F020ED4428912D2FE47754E3B8381CA3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1fde637-becd-4e25-8fd7-57380fc4e43c.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.195.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1c:f3:66:f0:20:ed:44:28:91:2d:2f:e4:77:54:e3:b8:38:1c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:86:da:d6:c1:d6:aa:f7:70:02:b9:03:8b:19: bc:0f:8b:73:e4:03:7b:a6:71:94:3e:7a:ad:44:14: b8:d2:fc:ef:dd:cc:68:af:b8:c2:c3:ff:cb:23:ee: 16:a7:53:f3:eb:86:72:07:36:73:02:77:0a:2b:36: c5:b7:0b:23:88:29:b3:ef:a5:fc:37:62:55:55:4c: 28:9a:53:64:d2:30:a5:f2:8a:91:4c:ea:4c:60:72: 04:f6:e6:af:ff:5b:6a:23:87:54:07:eb:0e:96:16: de:79:34:d9:a4:27:9b:8c:19:50:c8:e0:91:28:ab: 4f:90:52:1b:1f:d4:b1:39:09:e7:cb:8d:ec:b4:5a: 45:75:61:3f:8a:bd:2c:04:2a:d2:89:f1:73:8e:bd: 4a:c8:b2:8c:43:ee:56:7f:1b:20:7e:63:af:d3:13: 0f:e7:21:2f:3b:99:c4:e6:b4:89:10:eb:d0:fe:ec: dd:a6:0f:0b:1f:84:28:cf:56:56:1c:a0:9a:87:5d: 51:05:9e:e4:4a:09:27:e6:e3:72:d3:05:ed:c9:0e: 20:6c:f7:aa:0e:27:fc:62:08:b3:94:c0:cf:01:84: 21:43:8c:9a:cd:1f:fd:74:5c:e5:30:ee:1c:2d:91: c8:3c:9f:06:32:60:4f:68:7d:87:9d:74:12:8c:06: 93:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:28:21:E6:CF:75:4C:6A:9B:5A:97:3E:0A:75:AC:53:5E:FA:06:4F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1fde637-becd-4e25-8fd7-57380fc4e43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.195.240.0/20 Signature Algorithm: sha256WithRSAEncryption 79:2f:65:10:8f:4f:cd:d3:0c:ec:55:41:eb:a4:93:a2:fe:77: 6f:8c:0d:17:c6:18:b7:30:ad:90:cd:83:4b:42:96:51:e7:e7: bc:f2:b0:8b:2f:25:46:13:74:56:2c:44:bd:82:dd:6d:ca:65: 51:ed:d5:d0:4b:84:f0:8c:fb:c8:28:05:82:c9:65:7d:34:9f: 01:00:94:17:5d:d7:89:fa:09:b4:72:3e:98:7c:e9:ef:27:f8: 7e:8f:48:9c:fc:1c:7f:3a:ee:b4:e5:24:5f:df:3b:6a:d3:43: 29:87:f2:8b:1c:a5:62:1a:f7:f8:5c:6b:fc:54:51:b8:01:d2: 36:78:48:61:6a:14:9b:a6:d0:76:23:5f:bf:b2:33:f2:bb:33: 88:d8:c1:0c:13:4e:82:3d:18:e2:1f:0c:81:13:bb:e1:c0:41: 7d:53:95:d2:20:fd:d4:3f:ca:e4:bc:06:c0:fd:42:57:2e:b4: 7f:97:19:34:de:ea:68:de:96:be:c8:be:6c:4b:35:f3:ce:9f: 5b:6e:20:ce:22:5f:21:68:7b:ce:5c:11:33:94:b5:5d:c4:9d: c8:8c:95:c0:5d:da:62:e6:09:4a:b6:63:28:60:0c:7e:eb:4e: 74:15:ae:0e:67:d7:42:bd:9a:a0:80:73:23:4e:1d:53:42:24: 03:10:6b:5e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUARzzZvAg7UQokS0v5HdU47g4HKMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhM2MyNmZiNjY3MmU5OWM2MjY4MDUwNWRkNzE3NjA3NDcy MTMwMDI0YWNjYjg3MjBjNDY1N2FkMDFmZDQ0MjRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnhtrWwdaq93ACuQOLGbwPi3PkA3umcZQ+eq1EFLjS/O/d zGivuMLD/8sj7hanU/PrhnIHNnMCdworNsW3CyOIKbPvpfw3YlVVTCiaU2TSMKXy ipFM6kxgcgT25q//W2ojh1QH6w6WFt55NNmkJ5uMGVDI4JEoq0+QUhsf1LE5CefL jey0WkV1YT+KvSwEKtKJ8XOOvUrIsoxD7lZ/GyB+Y6/TEw/nIS87mcTmtIkQ69D+ 7N2mDwsfhCjPVlYcoJqHXVEFnuRKCSfm43LTBe3JDiBs96oOJ/xiCLOUwM8BhCFD jJrNH/10XOUw7hwtkcg8nwYyYE9ofYeddBKMBpPBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgCgh5s91TGqbWpc+CnWsU176Bk8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ExZmRlNjM3LWJlY2QtNGUyNS04ZmQ3LTU3MzgwZmM0ZTQzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ2w/AwDQYJKoZIhvcNAQELBQADggEBAHkvZRCPT83TDOxVQeukk6L+d2+M DRfGGLcwrZDNg0tCllHn57zysIsvJUYTdFYsRL2C3W3KZVHt1dBLhPCM+8goBYLJ ZX00nwEAlBdd14n6CbRyPph86e8n+H6PSJz8HH867rTlJF/fO2rTQymH8oscpWIa 9/hca/xUUbgB0jZ4SGFqFJum0HYjX7+yM/K7M4jYwQwTToI9GOIfDIETu+HAQX1T ldIg/dQ/yuS8BsD9QlcutH+XGTTe6mjelr7IvmxLNfPOn1tuIM4iXyFoe85cETOU tV3EnciMlcBd2mLmCUq2YyhgDH7rTnQVrg5n10K9mqCAcyNOHVNCJAMQa14= -----END CERTIFICATE-----Generated at Wed Feb 5 11:00:05 2025 by rpki-client