$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce454ac7-f728-48cb-a408-0d2789ffd4c5.roa File: ce454ac7-f728-48cb-a408-0d2789ffd4c5.roa (raw, json) Hash identifier: QYgOB54xN71mmxRZR0azIlmNYIAETBvZ2nyOaEUk/sw= Subject key identifier: 24:99:21:B3:BD:3B:74:CB:3D:88:43:8A:00:52:4A:5C:4D:D2:12:65 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 25EC9EA07F8C0C24F0220959A3F67676A378B74A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce454ac7-f728-48cb-a408-0d2789ffd4c5.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.48.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ec:9e:a0:7f:8c:0c:24:f0:22:09:59:a3:f6:76:76:a3:78:b7:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d8:06:02:50:38:d0:ce:27:4d:72:ae:5a:72: 08:79:22:45:aa:6f:98:6d:cb:56:e9:cf:3a:f3:05: 88:3c:c7:6d:f5:22:40:2c:66:a5:65:a9:1b:89:86: 8d:88:55:03:5f:41:e6:5c:df:33:03:20:42:f8:46: 68:8d:39:3c:f5:a7:0f:4d:82:c5:a6:7d:da:a9:52: c8:7f:12:e7:bb:70:e9:ba:01:c2:6d:e5:8b:fb:d5: fd:e7:b1:62:66:a9:8a:11:6e:f2:94:35:f0:2b:2a: 4a:8c:e9:2b:f7:3c:74:e6:11:cb:61:f1:7b:d8:43: 6f:b1:36:b7:27:1a:f2:ea:03:08:0b:24:0c:ac:96: 74:4e:58:ae:71:56:6b:dd:96:d3:e3:7a:43:49:9f: 0a:f6:42:05:f3:de:f7:5b:d0:02:4c:57:f7:b9:f5: fb:4a:38:5e:56:b3:3b:78:6f:39:18:c7:ed:95:e3: 57:70:98:dd:f3:de:28:14:7b:7c:e6:38:e3:16:c8: 14:60:26:c9:47:88:09:79:af:13:35:b8:4e:d8:90: b3:68:bf:24:4d:5b:99:1f:13:24:c6:ef:03:41:fb: 8c:73:c9:54:92:ae:5a:9b:7e:ef:f1:86:e3:83:6c: 58:ca:f0:b1:37:1f:8d:51:f1:75:d9:87:31:1b:b7: 5a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:99:21:B3:BD:3B:74:CB:3D:88:43:8A:00:52:4A:5C:4D:D2:12:65 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce454ac7-f728-48cb-a408-0d2789ffd4c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.48.0.0/15 Signature Algorithm: sha256WithRSAEncryption 1c:36:2b:ce:2b:a5:94:70:b3:e2:a3:ea:7f:1b:83:f6:af:c2: 13:9c:8a:60:e3:99:d7:34:d5:e0:49:ea:43:30:73:2e:6f:8b: 4c:50:b2:e4:93:1d:f9:06:ab:d4:bb:99:b4:64:72:1a:b4:a4: c2:97:39:41:07:cf:57:c7:75:7f:60:ea:92:3b:21:70:95:eb: d2:2e:5b:d2:d6:2f:42:cf:c1:0a:78:5c:61:f1:1a:be:90:bc: 8e:af:ed:0e:92:62:c3:4d:42:03:b0:5a:cd:67:5c:bd:ea:59: f3:b4:b7:b4:e3:dd:ac:b5:1f:88:08:7d:98:31:8b:77:ea:c9: 55:6a:7c:fe:16:31:20:04:4d:8b:d9:69:7b:c4:e1:12:b4:aa: 76:53:7b:c4:0e:8e:6c:c7:aa:27:e4:e2:ab:5f:ef:b6:d6:12: ae:6f:43:04:85:e7:31:1f:e5:83:0a:67:64:9b:62:59:80:4a: e4:16:0e:1d:b5:82:c9:b4:31:fb:39:f7:b8:07:6d:4c:a4:bf: d7:04:10:69:37:f0:68:cd:69:1d:a7:61:78:8d:94:a6:98:4f: a5:37:d0:a0:02:01:9b:1c:9a:ed:50:5a:3f:65:46:f0:bf:41: c8:2b:af:6d:66:60:0f:f5:e9:23:9c:35:4b:09:dc:55:f5:5a: 97:c7:3e:c5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJeyeoH+MDCTwIglZo/Z2dqN4t0owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3Mjc3OGU4YTliYzdiYjY0ZmUwOGUyODM5ODcyZWJjZjg5 MDExMGViZjAyMmY3ZmVhZTFkZTcwZmI5YzA4ZGI1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDx2AYCUDjQzidNcq5acgh5IkWqb5hty1bpzzrzBYg8x231 IkAsZqVlqRuJho2IVQNfQeZc3zMDIEL4RmiNOTz1pw9NgsWmfdqpUsh/Eue7cOm6 AcJt5Yv71f3nsWJmqYoRbvKUNfArKkqM6Sv3PHTmEcth8XvYQ2+xNrcnGvLqAwgL JAyslnROWK5xVmvdltPjekNJnwr2QgXz3vdb0AJMV/e59ftKOF5Wszt4bzkYx+2V 41dwmN3z3igUe3zmOOMWyBRgJslHiAl5rxM1uE7YkLNovyRNW5kfEyTG7wNB+4xz yVSSrlqbfu/xhuODbFjK8LE3H41R8XXZhzEbt1o9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUJJkhs707dMs9iEOKAFJKXE3SEmUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NlNDU0YWM3LWY3MjgtNDhjYi1hNDA4LTBkMjc4OWZmZDRjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwENMDANBgkqhkiG9w0BAQsFAAOCAQEAHDYrziullHCz4qPqfxuD9q/CE5yK YOOZ1zTV4EnqQzBzLm+LTFCy5JMd+Qar1LuZtGRyGrSkwpc5QQfPV8d1f2Dqkjsh cJXr0i5b0tYvQs/BCnhcYfEavpC8jq/tDpJiw01CA7BazWdcvepZ87S3tOPdrLUf iAh9mDGLd+rJVWp8/hYxIARNi9lpe8ThErSqdlN7xA6ObMeqJ+Tiq1/vttYSrm9D BIXnMR/lgwpnZJtiWYBK5BYOHbWCybQx+zn3uAdtTKS/1wQQaTfwaM1pHadheI2U pphPpTfQoAIBmxya7VBaP2VG8L9ByCuvbWZgD/XpI5w1SwncVfVal8c+xQ== -----END CERTIFICATE-----Generated at Wed Feb 5 10:49:40 2025 by rpki-client