$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b5ed8cce-1cb6-4b6c-a526-7bf2dc1e5782.roa File: b5ed8cce-1cb6-4b6c-a526-7bf2dc1e5782.roa (raw, json) Hash identifier: TJlBs053bKflH0r2NzQ4JDnc1VssA+cVD9juyC6H4mk= Subject key identifier: 66:60:0C:55:8A:CB:FA:D7:7C:C2:8A:BB:D9:B3:68:CB:44:EC:7A:4D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7B7FC859CAF0842C3EB83F3810F4BEA89D3FE3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b5ed8cce-1cb6-4b6c-a526-7bf2dc1e5782.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.241.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7f:c8:59:ca:f0:84:2c:3e:b8:3f:38:10:f4:be:a8:9d:3f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:af:9b:ac:d6:20:b2:c9:8c:7b:5e:13:f7:a4: e9:f8:3b:a1:ca:a6:cb:52:46:0b:d7:ec:34:4e:ea: e1:f6:5f:1b:9e:38:48:09:62:11:1e:5c:78:66:b5: 5f:b2:a9:30:0c:16:4b:e0:ac:05:7c:0d:06:2f:d3: 1c:20:52:db:d6:2e:58:42:48:af:09:94:5b:80:75: 90:ba:ec:e0:8a:f6:30:e0:4f:2f:18:81:ef:f0:bf: aa:ed:c2:b7:e2:48:2e:9a:c3:e1:e7:b9:cd:92:ca: 7d:1f:f3:b4:b1:64:85:3a:75:5a:e2:db:f7:86:64: 84:73:02:08:63:2e:39:57:85:05:be:dc:f2:7d:3d: 6f:83:9c:93:52:70:97:eb:a9:19:32:e4:79:d2:b0: dc:ab:76:2c:66:b7:c1:39:11:3f:6e:d7:20:6b:9e: 9c:4b:53:6e:79:f8:cb:23:5e:9a:55:6c:bc:89:bc: 42:e1:dc:ac:38:ab:4d:45:6f:ff:f3:83:c0:46:1a: 7b:41:fb:64:40:5a:c0:94:26:49:d7:39:cb:8b:a9: d7:79:a5:c0:2b:79:6b:1b:e8:55:34:1c:d0:49:4f: 22:45:ea:c1:e9:dd:2a:94:93:12:00:eb:69:df:31: 6d:82:d6:18:2c:1c:bd:b2:ea:33:e1:87:0e:d7:31: 06:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:60:0C:55:8A:CB:FA:D7:7C:C2:8A:BB:D9:B3:68:CB:44:EC:7A:4D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b5ed8cce-1cb6-4b6c-a526-7bf2dc1e5782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.241.224.0/20 Signature Algorithm: sha256WithRSAEncryption 88:62:6d:48:b8:07:ef:f4:9e:e1:33:25:d9:65:f6:23:07:f5: 3b:ba:43:87:0c:15:03:d9:ad:a0:da:e5:58:43:5d:95:25:2e: 93:81:95:33:d3:de:c7:e7:1f:af:c7:d0:7f:64:17:c0:0f:98: 4a:f0:bf:9f:f4:7d:79:f1:c0:e6:9a:bd:03:6c:cb:73:f7:47: 71:cd:82:c5:65:ec:42:83:62:a7:e4:45:48:25:d1:be:c8:2d: 3a:b2:e5:4a:fd:90:54:9c:a3:5a:37:78:c1:33:5c:07:0f:38: b0:b5:3c:25:2d:fd:65:14:63:2f:fb:e4:30:19:8e:a9:a9:eb: 74:1c:ee:02:67:ef:11:40:9e:1d:4c:8d:be:7c:4e:5b:9e:65: e8:64:83:9b:57:9e:7c:85:0d:d3:d6:41:9c:2f:b8:fa:4f:7a: 82:a0:a2:a1:e1:4b:be:17:8f:7f:24:08:4e:35:8b:d4:9a:c1: 77:77:8a:1a:8f:e1:19:50:67:98:9e:3b:4a:1b:a8:33:f9:4e: 23:e6:4d:bb:75:af:61:42:72:0c:22:31:49:eb:bc:c2:3e:d6: a5:fd:52:23:e7:14:0a:ff:18:53:fb:1d:b5:ac:91:a0:c9:39: f8:b0:70:16:13:80:6f:63:f1:64:76:4c:98:b3:52:3c:82:f1: bc:da:44:66 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITe3/IWcrwhCw+uD84EPS+qJ0/4zANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTAxMzEwMDAwMDBaFw0yNTAzMDcyMzU5NTla MHoxSTBHBgNVBAUTQDA5MDVjYzE2MzkyYTUzM2Q1ODYwMTA4OTUyY2ZhMmZkMGI5 NDczNWEzZjBiZDc5MWJlZWMzYWFlOTNhMzk1ZjYxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMOvm6zWILLJjHteE/ek6fg7ocqmy1JGC9fsNE7q4fZfG544 SAliER5ceGa1X7KpMAwWS+CsBXwNBi/THCBS29YuWEJIrwmUW4B1kLrs4Ir2MOBP LxiB7/C/qu3Ct+JILprD4ee5zZLKfR/ztLFkhTp1WuLb94ZkhHMCCGMuOVeFBb7c 8n09b4Ock1Jwl+upGTLkedKw3Kt2LGa3wTkRP27XIGuenEtTbnn4yyNemlVsvIm8 QuHcrDirTUVv//ODwEYae0H7ZEBawJQmSdc5y4up13mlwCt5axvoVTQc0ElPIkXq wendKpSTEgDrad8xbYLWGCwcvbLqM+GHDtcxBp8CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBRmYAxVisv613zCirvZs2jLROx6TTAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvYjVlZDhjY2UtMWNiNi00YjZjLWE1MjYtN2JmMmRjMWU1NzgyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBDbx4DANBgkqhkiG9w0BAQsFAAOCAQEAiGJtSLgH7/Se4TMl2WX2Iwf1O7pD hwwVA9mtoNrlWENdlSUuk4GVM9Pex+cfr8fQf2QXwA+YSvC/n/R9efHA5pq9A2zL c/dHcc2CxWXsQoNip+RFSCXRvsgtOrLlSv2QVJyjWjd4wTNcBw84sLU8JS39ZRRj L/vkMBmOqanrdBzuAmfvEUCeHUyNvnxOW55l6GSDm1eefIUN09ZBnC+4+k96gqCi oeFLvhePfyQITjWL1JrBd3eKGo/hGVBnmJ47ShuoM/lOI+ZNu3WvYUJyDCIxSeu8 wj7Wpf1SI+cUCv8YU/sdtayRoMk5+LBwFhOAb2PxZHZMmLNSPILxvNpEZg== -----END CERTIFICATE-----Generated at Wed Feb 5 10:52:54 2025 by rpki-client