$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d227eb6a-a15c-4284-b425-102d04b80a6f.roa File: d227eb6a-a15c-4284-b425-102d04b80a6f.roa (raw, json) Hash identifier: 0wiLNX6+NKVYH9aRTvAmDaCMxLJC8PmhjjfFtwBuEYc= Subject key identifier: 1D:AC:33:F2:01:0F:E1:92:F3:31:DA:63:AE:65:07:DD:26:C5:83:A8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 521C538FCA882B6F70E886D8664CE07627689C28 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d227eb6a-a15c-4284-b425-102d04b80a6f.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.245.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:1c:53:8f:ca:88:2b:6f:70:e8:86:d8:66:4c:e0:76:27:68:9c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d6:6d:ee:59:a1:ab:7c:25:48:6a:62:76:e6: 5c:45:24:74:ba:61:9f:c9:fd:bf:ed:d9:2c:28:31: 56:54:e1:30:93:38:f4:5a:1f:5c:78:3a:61:08:4c: b9:7a:9b:b1:8c:a0:52:e5:12:e0:af:50:7f:94:e3: 2f:02:89:40:26:91:fc:fd:2b:e7:0d:10:a1:ab:15: b3:29:2d:84:1d:ed:f8:82:5c:80:80:dc:2e:4b:5b: 37:72:21:d7:da:54:e8:83:57:2b:48:ad:59:6f:ee: 7e:48:59:15:a8:21:a0:57:e0:68:fb:ce:b4:46:57: d2:c9:91:ef:67:7e:ca:a5:fc:a9:fe:8c:93:58:db: 75:d2:6c:00:31:3c:0a:6d:3b:93:1d:1a:76:b4:0c: 60:fb:ed:7a:45:d2:f4:7d:4f:55:0e:f8:0b:44:2e: f5:92:4a:66:94:ce:31:35:f8:6d:99:10:3f:6a:f8: 7c:bc:64:a3:62:8b:35:1b:74:e5:40:88:3c:e2:d5: b8:ce:2a:6f:ed:0c:10:0d:59:2a:55:c4:b8:bb:9b: 88:29:9d:28:d2:3e:39:bf:51:64:fd:d6:89:ea:6e: 6a:cc:d3:3d:6a:34:f0:69:05:f4:5b:10:1f:00:ef: 00:3b:30:83:d2:27:c8:49:e6:07:3a:fe:26:a2:09: 35:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AC:33:F2:01:0F:E1:92:F3:31:DA:63:AE:65:07:DD:26:C5:83:A8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d227eb6a-a15c-4284-b425-102d04b80a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.245.128.0/17 Signature Algorithm: sha256WithRSAEncryption 5e:2d:93:20:a8:2b:2e:fc:b4:be:e2:cd:55:e2:b2:44:d2:93: 72:1c:80:e8:d4:cc:e7:45:ab:9f:bb:65:80:fb:68:63:c7:2e: e1:ff:78:3e:e0:91:f0:e8:8c:45:7c:24:c4:ec:2e:24:8c:d9: 28:de:12:dd:4a:fc:c2:81:75:a0:94:49:cf:63:08:af:0d:ba: 92:46:49:3b:c9:71:7e:27:6e:fc:21:1a:22:05:24:1b:52:d5: 57:a0:1c:92:25:7c:5a:47:73:2e:d4:d1:7d:e1:a1:13:a6:4c: 35:1f:27:c6:33:f0:28:59:6f:46:07:4e:3a:cf:21:ae:bb:94: c4:f6:af:b0:ad:0f:18:72:2c:3a:71:10:c5:24:e9:42:a5:d8: eb:93:cd:74:65:0a:84:5e:e1:74:7b:34:db:cf:53:70:a9:33: 9c:39:f9:0d:d6:1a:05:db:50:c3:3d:87:68:bc:a2:9f:81:d4: 23:24:a1:05:8c:bc:fd:f3:b6:31:49:b9:cc:90:9b:eb:07:37: b7:76:24:f2:a9:99:51:2c:65:b2:50:bc:ec:3a:1f:12:0e:1b: 37:25:2b:2f:b6:2e:8f:1a:d9:ab:63:75:2a:2d:23:39:ee:21: 0c:82:a9:a1:58:67:e9:38:9d:66:89:12:f4:f4:7b:57:ff:84: e4:63:13:ff -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUhxTj8qIK29w6IbYZkzgdidonCgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMDlmNDQzZWEwM2JkMTA4Y2IxOTA1YWRkYWZhZmNkNjE2 YTU2YWE3NDJmZDAzMmYxZWQwOWIzYTRjNWQ0ZTgxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm1m3uWaGrfCVIamJ25lxFJHS6YZ/J/b/t2SwoMVZU4TCT OPRaH1x4OmEITLl6m7GMoFLlEuCvUH+U4y8CiUAmkfz9K+cNEKGrFbMpLYQd7fiC XICA3C5LWzdyIdfaVOiDVytIrVlv7n5IWRWoIaBX4Gj7zrRGV9LJke9nfsql/Kn+ jJNY23XSbAAxPAptO5MdGna0DGD77XpF0vR9T1UO+AtELvWSSmaUzjE1+G2ZED9q +Hy8ZKNiizUbdOVAiDzi1bjOKm/tDBANWSpVxLi7m4gpnSjSPjm/UWT91onqbmrM 0z1qNPBpBfRbEB8A7wA7MIPSJ8hJ5gc6/iaiCTURAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHawz8gEP4ZLzMdpjrmUH3SbFg6gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QyMjdlYjZhLWExNWMtNDI4NC1iNDI1LTEwMmQwNGI4MGE2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc29YAwDQYJKoZIhvcNAQELBQADggEBAF4tkyCoKy78tL7izVXiskTSk3Ic gOjUzOdFq5+7ZYD7aGPHLuH/eD7gkfDojEV8JMTsLiSM2SjeEt1K/MKBdaCUSc9j CK8NupJGSTvJcX4nbvwhGiIFJBtS1VegHJIlfFpHcy7U0X3hoROmTDUfJ8Yz8ChZ b0YHTjrPIa67lMT2r7CtDxhyLDpxEMUk6UKl2OuTzXRlCoRe4XR7NNvPU3CpM5w5 +Q3WGgXbUMM9h2i8op+B1CMkoQWMvP3ztjFJucyQm+sHN7d2JPKpmVEsZbJQvOw6 HxIOGzclKy+2Lo8a2atjdSotIznuIQyCqaFYZ+k4nWaJEvT0e1f/hORjE/8= -----END CERTIFICATE-----Generated at Wed Feb 5 10:49:51 2025 by rpki-client