$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cabc422c-bdb9-4659-a5de-dec2c59d5350.roa File: cabc422c-bdb9-4659-a5de-dec2c59d5350.roa (raw, json) Hash identifier: MrJz1zQNn0T6LPhsXFBjTErVy7fc6ON3LNluio24n6Y= Subject key identifier: F3:A2:F7:DC:64:48:F1:72:C3:38:56:D2:02:59:8D:10:C4:2E:2B:79 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 594706B0476E6273DFE8CD0D9A0AAB0A7BCA0A8D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cabc422c-bdb9-4659-a5de-dec2c59d5350.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.47.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:47:06:b0:47:6e:62:73:df:e8:cd:0d:9a:0a:ab:0a:7b:ca:0a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:b5:cf:1f:21:3f:e9:d6:83:28:b5:70:4e: 25:ff:51:ef:12:71:2a:f7:2e:27:ba:a5:32:62:2f: 37:c3:44:c1:62:4f:99:00:4c:f0:36:71:1a:d5:55: 00:f3:ec:71:ef:85:f3:af:3a:7e:1f:01:d0:a4:aa: 5e:aa:f9:ee:54:0e:13:2c:b8:c2:97:bb:69:06:56: 19:15:f1:78:28:00:18:4d:4e:19:33:88:ac:79:6f: d6:55:50:02:0d:de:36:f8:53:3b:80:b5:c5:a3:dc: df:77:24:85:33:b0:c9:00:39:b5:ae:8b:25:5f:ae: bd:c3:58:15:6e:19:4e:c0:90:c0:f1:f7:ef:26:1b: 8e:7c:aa:a7:f6:6e:95:91:45:35:0d:f9:36:49:6f: 4b:c0:18:37:2f:25:60:9a:02:ac:04:8f:69:b7:9a: b7:32:3e:df:2e:61:71:57:a9:c5:dd:a8:06:f2:5f: 98:e9:f0:9c:8c:49:5c:7d:b8:3e:89:77:52:a0:0c: 37:a2:05:af:2c:2c:52:f6:92:d9:bf:3b:4d:a2:f7: 9a:26:10:48:85:b9:2b:b2:cd:67:14:ba:00:d0:ed: 3c:c0:f7:b5:6f:f5:42:6d:11:d7:72:e2:d9:46:35: 8f:96:d7:10:ed:ce:d1:63:3e:18:31:33:3b:5a:61: 50:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A2:F7:DC:64:48:F1:72:C3:38:56:D2:02:59:8D:10:C4:2E:2B:79 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cabc422c-bdb9-4659-a5de-dec2c59d5350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.47.1.0/24 Signature Algorithm: sha256WithRSAEncryption 02:71:5d:0f:1f:38:6e:89:8e:4f:0a:b3:a6:15:2d:0d:fc:f0: b0:ec:87:4e:77:8d:7d:6c:12:e8:0e:c8:ed:49:5e:6e:e1:15: 3e:73:7e:ae:a1:18:e9:45:b1:ea:32:59:ea:24:e5:65:36:21: db:38:18:6e:db:b8:90:97:32:92:bf:f9:ee:9d:90:7c:1d:e8: af:b9:2a:6e:71:c2:05:c2:63:7b:5e:20:0c:85:02:20:a1:01: 89:63:63:17:0a:9d:02:e8:fc:e7:da:a3:3a:5b:e9:40:c4:c7: 0f:44:80:cc:ea:e8:9a:18:d2:ce:20:d7:c2:59:3b:f2:d6:e1: eb:d0:22:f5:08:b0:57:8d:e3:fc:27:fc:eb:f6:f3:a0:39:ef: 2c:a2:89:99:06:0f:6c:0e:1c:82:ce:eb:95:ba:fb:f8:72:79: a7:a4:23:b4:5f:fe:19:d1:f9:d0:4a:db:fd:1c:0e:26:1a:38: 9c:d7:39:cd:06:c6:13:2e:3c:a7:97:16:79:7f:45:9f:2e:da: 9f:de:73:10:05:0c:34:87:2d:87:54:85:a7:98:a5:bd:c5:e9: b9:b2:d7:19:1a:8e:78:da:d6:cc:e3:5d:2d:eb:d9:7a:82:bb: 44:74:58:b8:5b:e3:07:58:e3:a4:ac:ef:b7:ee:a7:ed:73:39: 46:56:8d:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWUcGsEduYnPf6M0NmgqrCnvKCo0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDI2MjczOWM1YWNmZTFkZGNlNGEyYTY0OGQxYzVmNWIz NGE2YTlkYTY2OTMxZDE0YTEyNTRmYmI4ZjI1MTIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6rrXPHyE/6daDKLVwTiX/Ue8ScSr3Lie6pTJiLzfDRMFi T5kATPA2cRrVVQDz7HHvhfOvOn4fAdCkql6q+e5UDhMsuMKXu2kGVhkV8XgoABhN ThkziKx5b9ZVUAIN3jb4UzuAtcWj3N93JIUzsMkAObWuiyVfrr3DWBVuGU7AkMDx 9+8mG458qqf2bpWRRTUN+TZJb0vAGDcvJWCaAqwEj2m3mrcyPt8uYXFXqcXdqAby X5jp8JyMSVx9uD6Jd1KgDDeiBa8sLFL2ktm/O02i95omEEiFuSuyzWcUugDQ7TzA 97Vv9UJtEddy4tlGNY+W1xDtztFjPhgxMztaYVAnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU86L33GRI8XLDOFbSAlmNEMQuK3kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NhYmM0MjJjLWJkYjktNDY1OS1hNWRlLWRlYzJjNTlkNTM1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0LwEwDQYJKoZIhvcNAQELBQADggEBAAJxXQ8fOG6Jjk8Ks6YVLQ388LDs h053jX1sEugOyO1JXm7hFT5zfq6hGOlFseoyWeok5WU2Ids4GG7buJCXMpK/+e6d kHwd6K+5Km5xwgXCY3teIAyFAiChAYljYxcKnQLo/Ofaozpb6UDExw9EgMzq6JoY 0s4g18JZO/LW4evQIvUIsFeN4/wn/Ov286A57yyiiZkGD2wOHILO65W6+/hyeaek I7Rf/hnR+dBK2/0cDiYaOJzXOc0GxhMuPKeXFnl/RZ8u2p/ecxAFDDSHLYdUhaeY pb3F6bmy1xkajnja1szjXS3r2XqCu0R0WLhb4wdY46Ss77fup+1zOUZWjZk= -----END CERTIFICATE-----Generated at Wed Feb 5 10:47:49 2025 by rpki-client