$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a57f9d8b-6b3c-4ec9-845a-81cab3a69ef2.roa File: a57f9d8b-6b3c-4ec9-845a-81cab3a69ef2.roa (raw, json) Hash identifier: INAgadzrFig5i1fOlPsA9goKvwrxMWE1ZNFakArWN3Y= Subject key identifier: 35:A5:49:96:D0:D4:89:06:BD:69:E4:50:B6:F9:88:7B:A4:43:93:2E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 06B3C3DA89FC787F86E8BD3FDE13B28BC125A3C3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a57f9d8b-6b3c-4ec9-845a-81cab3a69ef2.roa Signing time: Fri 07 Feb 2025 00:00:00 +0000 ROA not before: Fri 07 Feb 2025 00:00:00 +0000 ROA not after: Fri 14 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.53.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:b3:c3:da:89:fc:78:7f:86:e8:bd:3f:de:13:b2:8b:c1:25:a3:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 7 00:00:00 2025 GMT Not After : Mar 14 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ef:7a:66:c4:80:dc:08:40:56:2a:ac:54:69: 81:9f:4f:a5:13:ae:93:e1:0a:76:5b:45:ef:ea:78: 4c:13:d0:34:c5:8f:1b:b1:df:ff:68:3a:72:4c:07: b4:a8:77:ce:09:66:b1:0e:b0:be:a9:04:c2:08:64: 44:f9:5f:a8:5f:07:9b:c0:c0:90:ef:63:b8:f0:17: 72:57:93:6f:91:5a:d8:66:e0:33:f2:d7:02:0a:4c: db:03:1c:8e:f2:28:ad:2a:48:0c:22:f0:a8:fd:7b: 4c:b2:6a:ff:7c:37:e0:ce:d1:71:98:30:25:b1:8d: e2:f9:d7:a5:63:71:98:f9:30:13:12:61:5c:90:eb: 9f:4b:2a:26:e6:7d:b9:ed:62:58:a0:26:89:a9:4a: e9:db:40:2f:8b:51:30:48:7e:2e:ec:a6:fe:6a:57: 4b:19:c8:f1:55:06:a4:b4:30:2d:1f:b8:28:0f:f0: 1f:1e:64:bd:79:85:4a:8d:60:a5:b3:90:7f:62:e3: ab:64:9b:e0:fb:18:4d:d1:dd:ac:1c:3b:9e:9d:cc: 34:e9:a9:81:8e:3a:0c:17:1f:a7:56:d1:e8:63:24: 3d:27:94:77:7b:c3:ec:06:62:ed:fd:e6:8c:fa:f7: 49:3d:71:53:fb:ee:1f:de:bc:9d:af:8a:75:62:19: ce:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A5:49:96:D0:D4:89:06:BD:69:E4:50:B6:F9:88:7B:A4:43:93:2E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a57f9d8b-6b3c-4ec9-845a-81cab3a69ef2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.53.0.0/16 Signature Algorithm: sha256WithRSAEncryption 35:ea:bc:97:31:1f:cb:79:c5:35:66:d5:33:3d:84:4a:7d:49: 5f:2c:c4:f2:2f:9a:c9:2f:be:ae:71:5a:7b:8d:57:44:1c:52: c5:e5:66:78:ac:84:d2:99:b9:2c:d2:72:af:5d:89:a2:10:f0: 19:88:51:8e:92:14:27:89:dd:17:d0:a4:df:a4:ec:64:6c:51: fe:d7:4a:0e:9f:fa:0b:9a:a1:cf:39:58:2c:71:f9:48:66:18: b3:85:c6:c5:52:8e:54:ba:ed:50:60:4f:4c:63:73:4f:cb:88: a9:fc:0c:b4:28:34:6b:9f:58:07:10:81:37:66:76:b0:44:5e: 2d:c3:43:9f:95:ce:11:99:56:1b:20:24:98:64:08:38:38:4c: 3b:4f:63:c3:b2:76:58:a4:5e:24:4a:e7:d4:6c:eb:02:47:b0: 32:2e:27:7a:ec:e7:5c:29:29:a6:68:3b:9d:09:dc:23:d7:81: 63:40:61:fb:e4:3a:12:fa:fc:e2:c2:ba:6e:7f:ce:7a:db:11: 54:53:ac:bd:07:56:24:cf:28:c8:68:08:e4:ff:0b:1e:12:b2: 28:a5:62:4f:52:34:2c:7a:50:d1:39:7f:2a:d2:b2:12:44:7a: 75:1f:aa:70:54:cd:dd:3f:4d:d0:8d:1c:25:46:0b:6b:8e:87: 25:cc:c6:61 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUBrPD2on8eH+G6L0/3hOyi8Elo8MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMjA3MDAwMDAwWhcNMjUwMzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMDZiZDZiYjkyMTc3MmUyNDI0YTZkM2ZjNmRlZTdkOTc1 Y2ZmNjM4Y2Y3N2NlYzg2MzkxY2FiZjBlNjY5MDQ4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDN73pmxIDcCEBWKqxUaYGfT6UTrpPhCnZbRe/qeEwT0DTF jxux3/9oOnJMB7Sod84JZrEOsL6pBMIIZET5X6hfB5vAwJDvY7jwF3JXk2+RWthm 4DPy1wIKTNsDHI7yKK0qSAwi8Kj9e0yyav98N+DO0XGYMCWxjeL516VjcZj5MBMS YVyQ659LKibmfbntYligJompSunbQC+LUTBIfi7spv5qV0sZyPFVBqS0MC0fuCgP 8B8eZL15hUqNYKWzkH9i46tkm+D7GE3R3awcO56dzDTpqYGOOgwXH6dW0ehjJD0n lHd7w+wGYu395oz690k9cVP77h/evJ2vinViGc4VAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUNaVJltDUiQa9aeRQtvmIe6RDky4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E1N2Y5ZDhiLTZiM2MtNGVjOS04NDVhLTgxY2FiM2E2OWVmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASNTANBgkqhkiG9w0BAQsFAAOCAQEANeq8lzEfy3nFNWbVMz2ESn1JXyzE 8i+ayS++rnFae41XRBxSxeVmeKyE0pm5LNJyr12JohDwGYhRjpIUJ4ndF9Ck36Ts ZGxR/tdKDp/6C5qhzzlYLHH5SGYYs4XGxVKOVLrtUGBPTGNzT8uIqfwMtCg0a59Y BxCBN2Z2sEReLcNDn5XOEZlWGyAkmGQIODhMO09jw7J2WKReJErn1GzrAkewMi4n euznXCkppmg7nQncI9eBY0Bh++Q6Evr84sK6bn/OetsRVFOsvQdWJM8oyGgI5P8L HhKyKKViT1I0LHpQ0Tl/KtKyEkR6dR+qcFTN3T9N0I0cJUYLa46HJczGYQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:21 2025 by rpki-client