$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb2c1b3f-204b-4cc1-86b2-5ed12574a805.roa File: bb2c1b3f-204b-4cc1-86b2-5ed12574a805.roa (raw, json) Hash identifier: PAlYmfqx9462edmohzil63XIbOIBgZqxQ84mcvI1QPg= Subject key identifier: 0E:18:6D:D2:AB:E0:56:7E:97:05:D8:3B:1A:56:47:24:99:B9:70:3A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 784841AF6CBEB87B742EDAA7E08F6358D46E2C23 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb2c1b3f-204b-4cc1-86b2-5ed12574a805.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.195.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:48:41:af:6c:be:b8:7b:74:2e:da:a7:e0:8f:63:58:d4:6e:2c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bf:19:25:11:8b:8b:05:79:96:39:d8:0f:e9: e2:e8:ea:5d:5f:3d:bd:aa:00:fc:e9:68:9b:57:b3: b3:a4:6d:0f:c2:89:36:ec:c9:d2:0c:d0:96:c0:f8: b7:b0:2f:dd:2c:9b:78:b0:01:49:08:a3:f1:d0:0e: a2:a7:ce:50:d4:15:5e:22:d9:07:80:3f:64:dc:c6: 0f:55:6a:eb:35:0d:8b:37:c2:01:95:0d:10:64:b7: fd:68:0b:9b:c0:2d:d5:68:de:2e:50:9d:05:35:10: ed:e0:c2:59:dd:07:d3:7a:fa:f4:ee:b8:a9:98:02: 60:0a:01:b8:bb:01:d8:39:1f:2e:3b:8c:93:99:78: 46:d4:49:89:27:56:6e:61:18:48:62:ca:d1:93:37: 36:26:c8:7e:de:28:01:42:9c:09:09:94:45:6c:38: 92:72:a4:14:25:04:8a:1f:54:32:01:51:eb:50:5d: 20:6f:c9:b7:1a:25:8c:9f:92:91:e2:f2:92:ee:4c: 36:0c:61:37:f0:5f:74:6d:3a:b0:2e:92:33:75:1b: b8:a0:5c:59:9d:1b:c6:8c:77:fc:9e:28:d9:39:89: 78:41:92:f1:c9:32:7f:88:0f:7d:6b:df:ac:69:4f: 65:97:6e:3e:41:a9:e8:cd:81:46:39:0a:13:f4:4c: 0c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:18:6D:D2:AB:E0:56:7E:97:05:D8:3B:1A:56:47:24:99:B9:70:3A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb2c1b3f-204b-4cc1-86b2-5ed12574a805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.195.224.0/21 Signature Algorithm: sha256WithRSAEncryption 63:94:a2:ff:29:4c:18:ec:fb:2c:98:12:51:7e:cd:9d:a7:07: a4:93:76:4d:57:2f:a7:eb:8e:8d:5a:5e:1c:2b:7a:e8:95:cf: a2:56:f6:47:3b:e2:ab:1b:a4:3b:3d:98:8d:96:e4:7d:86:cb: 79:72:a6:9d:78:4c:37:41:f5:52:78:88:12:29:42:e8:da:2e: 29:e4:8a:68:1e:ca:65:04:0e:40:58:66:bd:97:19:19:a7:4a: 6e:fa:d0:1b:01:83:72:d8:cf:6f:a7:c1:a9:bb:28:b2:99:9d: fc:7d:09:e0:5b:d8:f8:06:5b:b7:d2:85:1a:2c:e0:4f:f1:c5: c6:20:8d:fe:30:73:22:24:78:f9:2f:ab:35:e9:14:e6:20:64: 03:e8:3e:aa:f4:44:de:e2:07:01:ad:d9:13:f9:ca:9e:83:04: 29:fd:0a:e8:f3:f0:71:50:42:fc:43:8c:dd:66:2c:01:c1:2d: 48:8d:23:1a:c0:8b:49:5f:b4:6c:af:06:e7:2d:aa:de:68:ec: 13:3c:e4:3c:66:e9:a0:ab:5f:8e:19:ee:ab:fa:d6:15:df:6a: 31:0b:73:8f:91:09:14:1e:cc:34:99:b8:bd:39:29:d9:50:fa: fa:40:15:46:05:51:46:c0:c0:13:8a:42:0f:9e:6f:2a:27:aa: 94:b0:09:57 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeEhBr2y+uHt0Ltqn4I9jWNRuLCMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyM2EzMGMwNmQ5ZDk4NGE2NWI0ZTkyOTQ3YTE3MWFhY2M5 Nzg5ZTA4ZjE2NDQzYjZhZWJiZTNkNjk4OWNhYzc1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQvxklEYuLBXmWOdgP6eLo6l1fPb2qAPzpaJtXs7OkbQ/C iTbsydIM0JbA+LewL90sm3iwAUkIo/HQDqKnzlDUFV4i2QeAP2Tcxg9Vaus1DYs3 wgGVDRBkt/1oC5vALdVo3i5QnQU1EO3gwlndB9N6+vTuuKmYAmAKAbi7Adg5Hy47 jJOZeEbUSYknVm5hGEhiytGTNzYmyH7eKAFCnAkJlEVsOJJypBQlBIofVDIBUetQ XSBvybcaJYyfkpHi8pLuTDYMYTfwX3RtOrAukjN1G7igXFmdG8aMd/yeKNk5iXhB kvHJMn+ID31r36xpT2WXbj5BqejNgUY5ChP0TAyPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDhht0qvgVn6XBdg7GlZHJJm5cDowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JiMmMxYjNmLTIwNGItNGNjMS04NmIyLTVlZDEyNTc0YTgwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM2w+AwDQYJKoZIhvcNAQELBQADggEBAGOUov8pTBjs+yyYElF+zZ2nB6ST dk1XL6frjo1aXhwreuiVz6JW9kc74qsbpDs9mI2W5H2Gy3lypp14TDdB9VJ4iBIp QujaLinkimgeymUEDkBYZr2XGRmnSm760BsBg3LYz2+nwam7KLKZnfx9CeBb2PgG W7fShRos4E/xxcYgjf4wcyIkePkvqzXpFOYgZAPoPqr0RN7iBwGt2RP5yp6DBCn9 Cujz8HFQQvxDjN1mLAHBLUiNIxrAi0lftGyvBuctqt5o7BM85Dxm6aCrX44Z7qv6 1hXfajELc4+RCRQezDSZuL05KdlQ+vpAFUYFUUbAwBOKQg+ebyonqpSwCVc= -----END CERTIFICATE-----Generated at Wed Feb 5 10:53:27 2025 by rpki-client