$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa3f9cf5-e792-4102-90b6-d3b0a0246399.roa File: aa3f9cf5-e792-4102-90b6-d3b0a0246399.roa (raw, json) Hash identifier: 7x+qr/UK6xH18EY7Broxwl4c/5Na3/0W4kD1h93zOkg= Subject key identifier: ED:C9:CD:1B:50:02:6C:B6:4A:1C:FD:D7:A2:36:2A:78:91:F5:35:89 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 445E6107816AE6D3A299387D7E7F6CE51C7BA7A0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa3f9cf5-e792-4102-90b6-d3b0a0246399.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.215.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:5e:61:07:81:6a:e6:d3:a2:99:38:7d:7e:7f:6c:e5:1c:7b:a7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3d:23:be:a9:f0:6f:71:c6:10:4e:9d:c4:2a: d5:a2:6c:a7:08:0d:4b:b1:b0:2a:ee:a3:3f:ab:0e: 1a:d3:e4:4d:19:bf:b1:d9:5e:d1:00:96:ba:fa:d2: 5d:f5:ee:a0:10:ab:a2:71:3c:94:6f:86:ee:25:7c: a0:59:29:c5:e4:ff:b7:00:0c:91:17:c1:8f:32:60: 35:76:05:64:d6:a3:8f:a3:56:84:b6:b6:ee:1b:b6: fb:ec:b1:ed:ec:0a:b4:5b:a7:f8:49:4c:f2:4f:ae: 55:08:7f:f4:32:d0:59:f5:51:39:e4:12:64:63:2f: e8:88:c0:09:b4:c1:71:dc:a0:d4:91:a2:e1:2f:4e: de:72:4a:2c:45:ec:9f:17:76:53:65:22:b3:40:3c: 77:eb:4a:a6:1d:d0:77:30:90:fa:1c:4e:a7:64:26: bd:ea:be:f6:6f:3f:9f:65:29:9c:4b:df:7c:a0:ae: b8:ef:0e:fe:ea:8d:c9:bc:b7:cc:f5:14:7d:f8:98: 96:9a:40:b4:7f:29:8b:91:5c:5b:3a:f2:ef:0e:9a: 57:f0:49:6d:e5:a9:90:ea:ad:a7:1a:ca:c8:f1:7a: aa:b9:21:99:f2:95:4e:f7:b9:37:f2:80:9d:2c:7b: ee:7c:f6:8a:8b:fc:eb:16:d2:7b:64:24:cb:d8:cf: 0b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C9:CD:1B:50:02:6C:B6:4A:1C:FD:D7:A2:36:2A:78:91:F5:35:89 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa3f9cf5-e792-4102-90b6-d3b0a0246399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.215.0.0/16 Signature Algorithm: sha256WithRSAEncryption 26:6a:77:dd:2c:a9:7f:63:d3:c1:9f:50:d1:cd:92:42:12:1b: 1e:20:56:61:cd:73:14:17:a0:10:b0:1b:0f:c1:97:5f:97:97: 26:1e:25:ac:7d:b0:f8:34:f0:30:3b:0c:e1:d0:e0:25:b5:81: d6:3d:d2:17:06:8b:d2:5d:d5:2a:3a:48:df:ba:9b:ac:e6:73: 5c:c9:38:fd:ee:68:82:a7:c0:93:41:82:6d:08:ec:38:46:ce: e0:fa:f7:c3:ee:1c:a4:86:25:42:db:b1:87:92:3b:d4:92:70: 4d:0d:b5:0b:4c:f4:97:99:dc:a5:fa:5b:d5:db:a1:57:50:3b: cd:cc:d3:5a:1f:08:43:f1:fd:9b:54:a1:2b:35:43:28:b7:f1: 4c:45:08:93:f0:66:1c:67:ab:05:27:92:cf:a9:c9:9f:f9:76: 3f:ed:cf:07:82:5d:b6:f9:53:49:0b:3f:d3:fe:ce:c1:cd:d0: 07:62:d9:7a:32:dd:40:9b:d1:7b:6c:05:ee:22:88:f1:1d:9c: fc:53:e5:75:71:a6:39:ed:6b:f2:aa:62:26:b4:3d:8f:58:f1: 01:69:72:38:c3:23:6d:77:05:5b:07:87:b6:1d:5c:39:31:72: 13:fd:7e:5d:4b:e1:7c:88:21:05:b2:d3:ac:9c:02:27:7f:39: 04:cf:93:1b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURF5hB4Fq5tOimTh9fn9s5Rx7p6AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4OTNmYTA3MTMzNWJlMTlmMTY2MTg4YjMyYTJmMTc5ODYy ZjRmNDQxMWYxOGNmZjY5YjYwMjZmYzhlZTk3NjMzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTPSO+qfBvccYQTp3EKtWibKcIDUuxsCruoz+rDhrT5E0Z v7HZXtEAlrr60l317qAQq6JxPJRvhu4lfKBZKcXk/7cADJEXwY8yYDV2BWTWo4+j VoS2tu4btvvsse3sCrRbp/hJTPJPrlUIf/Qy0Fn1UTnkEmRjL+iIwAm0wXHcoNSR ouEvTt5ySixF7J8XdlNlIrNAPHfrSqYd0HcwkPocTqdkJr3qvvZvP59lKZxL33yg rrjvDv7qjcm8t8z1FH34mJaaQLR/KYuRXFs68u8OmlfwSW3lqZDqracaysjxeqq5 IZnylU73uTfygJ0se+589oqL/OsW0ntkJMvYzwvZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU7cnNG1ACbLZKHP3XojYqeJH1NYkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FhM2Y5Y2Y1LWU3OTItNDEwMi05MGI2LWQzYjBhMDI0NjM5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA21zANBgkqhkiG9w0BAQsFAAOCAQEAJmp33Sypf2PTwZ9Q0c2SQhIbHiBW Yc1zFBegELAbD8GXX5eXJh4lrH2w+DTwMDsM4dDgJbWB1j3SFwaL0l3VKjpI37qb rOZzXMk4/e5ogqfAk0GCbQjsOEbO4Pr3w+4cpIYlQtuxh5I71JJwTQ21C0z0l5nc pfpb1duhV1A7zczTWh8IQ/H9m1ShKzVDKLfxTEUIk/BmHGerBSeSz6nJn/l2P+3P B4JdtvlTSQs/0/7Owc3QB2LZejLdQJvRe2wF7iKI8R2c/FPldXGmOe1r8qpiJrQ9 j1jxAWlyOMMjbXcFWweHth1cOTFyE/1+XUvhfIghBbLTrJwCJ385BM+TGw== -----END CERTIFICATE-----Generated at Wed Feb 5 10:47:06 2025 by rpki-client