$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd04345b-0564-4c6d-9dce-bfb2c071193a.roa File: bd04345b-0564-4c6d-9dce-bfb2c071193a.roa (raw, json) Hash identifier: 0ZnmJI6WP0HmQet3PAzo5uxjnhg+mRbzlk4vyXa4FPo= Subject key identifier: 70:55:45:DF:B6:BA:86:BB:0C:21:E6:65:6F:78:BD:CB:31:83:00:09 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1F945CDC1B8CD962D556A4875D77F42347470066 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd04345b-0564-4c6d-9dce-bfb2c071193a.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.101.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:94:5c:dc:1b:8c:d9:62:d5:56:a4:87:5d:77:f4:23:47:47:00:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:02:08:5c:e7:8c:e2:42:70:3b:b2:eb:3c:f0: 61:5f:e2:b8:1a:0b:d0:81:b6:4f:90:90:cc:9a:6a: 5e:34:31:ad:50:e4:24:15:ba:3d:29:d6:28:d1:ab: 3b:c6:c8:e4:1e:90:d8:62:95:10:44:5f:cd:98:52: 24:f0:c9:bb:ae:ea:5c:bc:0e:52:97:7a:99:59:ec: aa:d3:be:19:cd:69:a1:f6:9a:a2:e4:12:27:a9:bd: 3d:29:2e:47:40:96:55:10:51:47:e1:22:81:78:d8: 72:21:86:45:d3:30:8b:7c:61:97:57:fe:af:54:41: 12:05:36:62:b8:e0:8e:1a:b5:7c:b4:99:54:1e:66: 7e:92:72:bc:32:bc:50:ae:b2:60:90:82:f5:4a:b6: b1:fd:e8:85:66:e4:00:05:b6:a4:a7:08:cb:a1:74: b7:3b:83:3f:3a:66:6c:76:cf:d1:4b:5d:b3:da:02: 0d:e8:2b:ed:3c:b6:4c:02:4a:1f:0f:bf:34:b6:73: e3:dc:80:f2:fb:41:1b:76:08:63:0d:5f:ac:72:1c: 8d:22:ea:fe:aa:1c:98:c7:d0:39:1b:5b:1f:86:09: a1:2d:a8:f9:89:d8:af:c9:02:0e:c7:21:85:e6:1a: 87:9f:24:0e:21:19:6f:f3:68:a7:24:7f:c7:7d:4c: 49:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:55:45:DF:B6:BA:86:BB:0C:21:E6:65:6F:78:BD:CB:31:83:00:09 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd04345b-0564-4c6d-9dce-bfb2c071193a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.101.232.0/22 Signature Algorithm: sha256WithRSAEncryption a0:3c:a6:d5:15:29:41:5c:b0:e6:c9:5a:6b:40:7c:2a:7f:e8: 84:44:72:53:20:87:bc:56:f4:8c:1c:92:86:8a:7b:b9:78:8b: 96:a8:42:0c:2d:f4:2e:d1:f3:2d:df:b1:73:65:44:08:68:fd: 99:b3:f8:f5:11:9f:e7:65:cd:87:7c:5d:ce:cf:22:4f:7f:d7: d8:14:1b:f3:a0:f8:ce:be:69:81:07:8e:18:19:03:85:2b:83: a7:16:0c:b7:65:54:16:e6:dd:70:b7:3e:4a:34:dd:d2:3b:61: 86:bc:7a:48:f3:5d:ee:7c:fb:1b:f4:3f:60:7d:9d:64:e3:7f: 21:23:c0:fb:a1:93:b9:35:9e:1d:1c:bd:8d:3d:04:ca:1c:29: ce:56:d4:65:8c:74:fa:b9:1d:ca:57:56:36:45:01:80:ba:90: de:0f:c0:f6:a7:ab:d4:21:b2:f6:db:fb:de:96:3a:83:bd:ca: 2b:5c:cf:fe:f9:d3:d8:95:48:98:eb:f4:f1:60:d3:e8:91:44: 34:2a:e4:2f:5b:e4:f0:00:35:a6:1a:00:5d:3c:40:02:a4:36: 45:33:c3:27:09:36:11:5d:4d:0d:03:9b:1d:80:e2:b9:28:96: d5:78:31:8e:04:0a:03:2d:00:5a:43:6f:7c:bb:05:29:00:3c: 25:29:6f:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH5Rc3BuM2WLVVqSHXXf0I0dHAGYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjE1Y2JlZTc5MDc4YmIyODdiYjZlOGRlNzM2YTU2MDNj YzhmNTJlOTc2ODUyZDc0Yjg4OTcyOTE1MjA2YmFjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbAghc54ziQnA7sus88GFf4rgaC9CBtk+QkMyaal40Ma1Q 5CQVuj0p1ijRqzvGyOQekNhilRBEX82YUiTwybuu6ly8DlKXeplZ7KrTvhnNaaH2 mqLkEiepvT0pLkdAllUQUUfhIoF42HIhhkXTMIt8YZdX/q9UQRIFNmK44I4atXy0 mVQeZn6ScrwyvFCusmCQgvVKtrH96IVm5AAFtqSnCMuhdLc7gz86Zmx2z9FLXbPa Ag3oK+08tkwCSh8PvzS2c+PcgPL7QRt2CGMNX6xyHI0i6v6qHJjH0DkbWx+GCaEt qPmJ2K/JAg7HIYXmGoefJA4hGW/zaKckf8d9TEkHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcFVF37a6hrsMIeZlb3i9yzGDAAkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JkMDQzNDViLTA1NjQtNGM2ZC05ZGNlLWJmYjJjMDcxMTkzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDZegwDQYJKoZIhvcNAQELBQADggEBAKA8ptUVKUFcsObJWmtAfCp/6IRE clMgh7xW9IwckoaKe7l4i5aoQgwt9C7R8y3fsXNlRAho/Zmz+PURn+dlzYd8Xc7P Ik9/19gUG/Og+M6+aYEHjhgZA4Urg6cWDLdlVBbm3XC3Pko03dI7YYa8ekjzXe58 +xv0P2B9nWTjfyEjwPuhk7k1nh0cvY09BMocKc5W1GWMdPq5HcpXVjZFAYC6kN4P wPanq9Qhsvbb+96WOoO9yitcz/7509iVSJjr9PFg0+iRRDQq5C9b5PAANaYaAF08 QAKkNkUzwycJNhFdTQ0Dmx2A4rkoltV4MY4ECgMtAFpDb3y7BSkAPCUpb0s= -----END CERTIFICATE-----Generated at Wed Feb 5 10:43:15 2025 by rpki-client