$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a678ba6e-7d9b-4e94-9561-3851140b9f8c.roa File: a678ba6e-7d9b-4e94-9561-3851140b9f8c.roa (raw, json) Hash identifier: oRbP9nAGyPiU8ZwX/rDzbagunGosgltV7qMQyfsDzuo= Subject key identifier: 7C:05:49:0C:26:14:4B:98:02:5D:16:95:89:91:A4:76:9B:C1:4C:D6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 11C90A5B8260C7779FCE19DAA7FD980769D41D20 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a678ba6e-7d9b-4e94-9561-3851140b9f8c.roa Signing time: Fri 24 Jan 2025 00:00:00 +0000 ROA not before: Fri 24 Jan 2025 00:00:00 +0000 ROA not after: Fri 28 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.93.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c9:0a:5b:82:60:c7:77:9f:ce:19:da:a7:fd:98:07:69:d4:1d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 24 00:00:00 2025 GMT Not After : Feb 28 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a4:97:fe:ea:ca:3b:cc:00:4e:bf:fb:9f:6a: 1e:11:75:c4:2f:ec:e8:bf:e2:9d:4c:f3:67:13:f8: 36:a5:92:31:50:66:3a:2e:ff:42:e3:a4:d5:3c:de: 6c:44:8e:4d:de:33:5d:23:68:0c:47:76:b8:b8:40: bd:5b:0b:54:58:11:87:12:cc:d4:4a:73:e7:a0:15: bc:dd:bb:f7:8d:12:fa:37:e6:38:43:9f:52:7b:8f: 91:dc:c0:1a:e1:a6:ea:34:d5:38:75:1f:19:71:dc: 6e:65:35:4b:48:64:7a:a1:73:8c:e7:8e:0e:4b:eb: fa:92:5f:08:49:3a:af:82:f9:5c:fa:0e:9e:a8:1d: 69:a9:5e:1d:c4:32:ba:65:ca:bb:9e:3d:13:3f:5f: f0:34:bb:a0:1d:d7:c0:a0:01:d6:a4:c9:ba:85:6e: 99:a0:e8:44:06:8b:cd:2e:91:36:ab:73:f3:e0:17: d4:5c:c7:3e:cf:8b:fa:89:02:bd:21:a7:e2:f4:7d: a8:fb:49:79:a8:9e:a0:76:1a:c9:ad:99:f0:74:98: bb:3f:17:9f:f4:87:59:8b:fd:7c:2f:01:e4:f4:7e: 46:39:a1:c6:af:d1:03:f9:68:35:8a:74:88:4c:c3: 75:c7:be:9e:a0:ee:61:00:21:3c:11:98:07:81:1a: d8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:05:49:0C:26:14:4B:98:02:5D:16:95:89:91:A4:76:9B:C1:4C:D6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a678ba6e-7d9b-4e94-9561-3851140b9f8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.51.0/24 Signature Algorithm: sha256WithRSAEncryption ab:79:7d:af:eb:35:5c:2b:ae:27:61:bf:cd:05:02:50:3d:60: 74:45:f5:ad:59:33:17:0a:57:83:77:8f:bb:43:db:f1:44:36: 24:20:06:ec:ff:59:42:08:97:40:3e:ba:b5:79:d4:1f:9f:de: fe:f9:42:00:27:40:9f:0f:14:54:b1:58:b6:e4:71:15:3f:92: 6b:85:0e:6d:ca:60:5c:d6:c8:de:37:06:f0:64:a8:86:04:c9: 4b:ad:b1:e2:f1:70:0a:67:c6:c4:ac:cd:f6:4d:bd:86:2d:a5: 76:18:fe:9d:b3:a7:ff:12:e9:6d:8b:d7:d6:16:85:79:d6:e0: 22:7d:e6:26:1d:32:64:1d:e2:77:0a:5e:91:5c:72:25:16:47: 24:20:3c:ee:9e:54:c0:dd:66:19:59:f9:df:dc:f7:73:2e:8d: fb:42:45:fd:9f:10:78:01:0f:93:b4:37:48:ae:dd:9f:65:62: 93:0a:c9:36:98:53:3a:61:9d:ac:25:f6:19:5e:d8:11:47:85: 93:19:03:98:a8:57:d3:d4:c5:ba:03:b8:05:3b:ee:e1:3e:fc: 40:1b:f9:91:bb:52:79:8c:2c:68:ab:06:98:2c:cb:62:df:ec: e7:bf:0a:7a:20:9a:47:bc:fb:f0:41:8a:c4:b4:79:45:63:50: 33:57:97:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEckKW4Jgx3efzhnap/2YB2nUHSAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMDlhM2M5ZTQ3YTg2ODY4NDU3NGY3YjQyZTlmMjhkNGU1 ZmI1MWVmMGQxZmRhM2Q2NWNmNWNhOWNjY2IwOTVhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCepJf+6so7zABOv/ufah4RdcQv7Oi/4p1M82cT+DalkjFQ Zjou/0LjpNU83mxEjk3eM10jaAxHdri4QL1bC1RYEYcSzNRKc+egFbzdu/eNEvo3 5jhDn1J7j5HcwBrhpuo01Th1Hxlx3G5lNUtIZHqhc4znjg5L6/qSXwhJOq+C+Vz6 Dp6oHWmpXh3EMrplyruePRM/X/A0u6Ad18CgAdakybqFbpmg6EQGi80ukTarc/Pg F9Rcxz7Pi/qJAr0hp+L0faj7SXmonqB2GsmtmfB0mLs/F5/0h1mL/XwvAeT0fkY5 ocav0QP5aDWKdIhMw3XHvp6g7mEAITwRmAeBGthbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfAVJDCYUS5gCXRaViZGkdpvBTNYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E2NzhiYTZlLTdkOWItNGU5NC05NTYxLTM4NTExNDBiOWY4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XTMwDQYJKoZIhvcNAQELBQADggEBAKt5fa/rNVwrridhv80FAlA9YHRF 9a1ZMxcKV4N3j7tD2/FENiQgBuz/WUIIl0A+urV51B+f3v75QgAnQJ8PFFSxWLbk cRU/kmuFDm3KYFzWyN43BvBkqIYEyUutseLxcApnxsSszfZNvYYtpXYY/p2zp/8S 6W2L19YWhXnW4CJ95iYdMmQd4ncKXpFcciUWRyQgPO6eVMDdZhlZ+d/c93MujftC Rf2fEHgBD5O0N0iu3Z9lYpMKyTaYUzphnawl9hle2BFHhZMZA5ioV9PUxboDuAU7 7uE+/EAb+ZG7UnmMLGirBpgsy2Lf7Oe/Cnogmke8+/BBisS0eUVjUDNXlzY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:56:21 2025 by rpki-client