$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc5af573-0543-49a6-a62a-ca1b8e6d1944.roa File: cc5af573-0543-49a6-a62a-ca1b8e6d1944.roa (raw, json) Hash identifier: 9+GeeJMi7sk8Ps3MZ75SbJJYfRo5HsSEKoV2R6s1QkI= Subject key identifier: 55:9C:E0:94:55:E4:5E:10:8F:D1:C3:FF:2B:FC:30:63:BD:BC:F4:2B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 68006FC24B4E4265FA0283CB98598376B061BA69 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc5af573-0543-49a6-a62a-ca1b8e6d1944.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.223.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:00:6f:c2:4b:4e:42:65:fa:02:83:cb:98:59:83:76:b0:61:ba:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:66:b7:fd:d5:88:5f:a2:f4:dc:4a:c8:57:f9: bb:4b:8f:46:c9:d5:32:9c:31:41:d1:1b:4f:65:2e: f6:2c:76:ed:e6:07:b1:06:df:64:2c:43:b8:5c:6c: 6c:7c:6f:d1:fe:98:f4:fb:8f:9f:b2:85:5f:83:e4: a5:44:75:53:61:14:dd:08:ef:88:ed:84:a9:e9:b3: c3:15:cb:33:fb:c8:16:83:00:e4:df:97:a2:d7:04: 25:22:3d:61:4f:7e:f7:83:54:81:ea:52:17:b4:78: dd:c9:5d:17:13:74:2e:45:8c:b6:36:ff:7a:23:0b: 4a:20:8f:71:fa:ba:2a:98:5a:00:34:ac:1f:f5:58: a6:a8:f7:07:fb:f6:c8:8d:13:5d:af:ec:a1:67:86: ab:58:92:89:3c:6d:80:66:4f:02:f4:b6:12:c8:fe: b3:40:91:ad:82:48:ef:d8:71:b8:ca:38:5a:06:a9: 23:11:e0:d2:85:95:12:50:33:ce:02:bf:d8:11:a9: d2:1b:63:a3:eb:1e:ff:c3:21:b1:b2:eb:36:1c:5d: e9:f9:b5:b8:7a:49:a5:7e:53:e2:ba:05:36:ed:2d: b4:38:79:71:7d:0c:6d:bb:03:c6:c5:66:08:59:a6: 4b:0a:60:e5:19:b6:ba:ea:82:c4:09:25:84:f2:d4: bd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9C:E0:94:55:E4:5E:10:8F:D1:C3:FF:2B:FC:30:63:BD:BC:F4:2B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc5af573-0543-49a6-a62a-ca1b8e6d1944.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.223.128.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:5e:b6:54:cb:5f:bc:c7:06:6a:1d:7c:03:64:38:94:03:f8: e9:ed:c4:85:09:2d:43:1b:cf:50:cf:80:7f:52:0d:61:0f:9b: df:87:07:84:24:d6:79:6c:de:a2:3b:a8:ab:79:65:97:fb:0c: af:05:90:fd:bf:97:60:24:bb:c9:93:d8:92:f6:d2:d6:f8:27: aa:eb:e3:fb:dc:96:c5:55:2f:87:65:1a:15:ea:35:31:94:1e: dc:d1:b0:fa:12:11:8c:db:60:da:9a:f8:ca:2c:94:e4:b7:1d: 70:ed:b1:48:6e:27:e1:a0:1b:f6:22:ae:07:44:fa:ee:d3:7b: ae:58:be:d7:14:80:0c:d4:d0:49:4d:aa:86:c4:94:e6:32:c2: f5:1b:91:47:d0:ec:40:bc:47:fe:af:de:6a:0e:1f:ef:5a:05: 4c:5d:ad:7f:05:69:25:fc:d2:d8:6f:54:55:ba:e8:22:17:70: 4b:48:cb:ef:1c:3e:7f:4a:8a:bd:4b:a2:4d:28:e0:97:48:ed: 0f:2a:b3:1c:0d:e8:9b:59:d0:ef:a8:c8:bc:f1:f0:6e:3e:c7: 2a:ca:f6:c1:61:5f:ff:55:64:03:da:40:79:0c:1d:62:b5:9d: d5:33:79:ad:c5:63:f4:3e:3a:40:10:b4:fc:f7:09:62:0d:e6: 4d:34:19:18 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaABvwktOQmX6AoPLmFmDdrBhumkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzdiYTQ1OTRmN2VmYmM1ZGI4MDM1MTg4ODc2ZTg5OThm MWNkZDkzODdlZDZkMjNmMWNjMWFmYjdmY2E5MDY1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwZrf91YhfovTcSshX+btLj0bJ1TKcMUHRG09lLvYsdu3m B7EG32QsQ7hcbGx8b9H+mPT7j5+yhV+D5KVEdVNhFN0I74jthKnps8MVyzP7yBaD AOTfl6LXBCUiPWFPfveDVIHqUhe0eN3JXRcTdC5FjLY2/3ojC0ogj3H6uiqYWgA0 rB/1WKao9wf79siNE12v7KFnhqtYkok8bYBmTwL0thLI/rNAka2CSO/YcbjKOFoG qSMR4NKFlRJQM84Cv9gRqdIbY6PrHv/DIbGy6zYcXen5tbh6SaV+U+K6BTbtLbQ4 eXF9DG27A8bFZghZpksKYOUZtrrqgsQJJYTy1L1xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVZzglFXkXhCP0cP/K/wwY7289CswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NjNWFmNTczLTA1NDMtNDlhNi1hNjJhLWNhMWI4ZTZkMTk0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS34AwDQYJKoZIhvcNAQELBQADggEBAHxetlTLX7zHBmodfANkOJQD+Ont xIUJLUMbz1DPgH9SDWEPm9+HB4Qk1nls3qI7qKt5ZZf7DK8FkP2/l2Aku8mT2JL2 0tb4J6rr4/vclsVVL4dlGhXqNTGUHtzRsPoSEYzbYNqa+MoslOS3HXDtsUhuJ+Gg G/YirgdE+u7Te65YvtcUgAzU0ElNqobElOYywvUbkUfQ7EC8R/6v3moOH+9aBUxd rX8FaSX80thvVFW66CIXcEtIy+8cPn9Kir1Lok0o4JdI7Q8qsxwN6JtZ0O+oyLzx 8G4+xyrK9sFhX/9VZAPaQHkMHWK1ndUzea3FY/Q+OkAQtPz3CWIN5k00GRg= -----END CERTIFICATE-----Generated at Wed Feb 5 10:45:56 2025 by rpki-client