$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3a9e17f-b1c9-4295-938a-51cd2cefa556.roa File: d3a9e17f-b1c9-4295-938a-51cd2cefa556.roa (raw, json) Hash identifier: UxCtrhshyv3ob108tVzGixAAR0fzNvc5B6ZFLNiY4Eg= Subject key identifier: 45:6E:E2:27:9E:2F:9B:8E:D2:7C:37:99:1C:D3:A2:9F:5B:4A:64:5D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2DB780C48F8550A2E8C6F3758D234FEA1EBFA412 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3a9e17f-b1c9-4295-938a-51cd2cefa556.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.168.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b7:80:c4:8f:85:50:a2:e8:c6:f3:75:8d:23:4f:ea:1e:bf:a4:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:77:7c:4a:b3:5b:3c:be:e9:3c:9a:0e:ec:98: a0:76:ea:07:92:b3:55:3b:31:07:e8:bb:f9:a1:80: 86:24:3f:1f:bf:d1:d4:93:d2:e8:4c:03:90:bd:9a: 15:15:e1:d3:b1:67:dd:78:07:8a:01:78:e2:60:09: e8:8c:65:8c:d7:6d:73:ec:b1:dd:5f:4c:31:9c:b6: 87:b3:78:22:a6:ad:03:5f:8b:c1:aa:cb:f8:96:70: 2b:47:38:02:0b:19:77:88:c5:a9:90:0e:b6:54:a8: fb:3c:53:ee:17:4b:65:eb:dd:08:d6:29:6a:cf:1d: 2a:c4:c7:40:f6:3e:31:1c:a1:5d:45:57:d0:d1:34: a9:d2:fc:0a:67:b3:a5:ed:dd:66:ef:9a:98:49:08: 09:e3:0f:c3:9d:25:11:a8:76:bb:f0:ce:3a:95:b5: fd:da:66:6b:c2:2d:9e:f6:8a:e3:2a:29:5c:39:f4: 03:b6:5e:40:e6:a6:3f:6b:80:fc:77:2c:17:7d:3b: d0:36:d5:ab:f2:17:d2:f1:0a:e3:58:63:10:69:6e: 60:5b:18:6c:15:9d:d7:54:f1:04:e6:66:ab:25:1e: f4:78:ae:5d:1d:64:9e:94:e1:1c:af:94:cb:4c:6e: 8d:a4:4a:b1:3c:fc:4a:b8:75:0b:af:fd:36:17:ff: 92:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6E:E2:27:9E:2F:9B:8E:D2:7C:37:99:1C:D3:A2:9F:5B:4A:64:5D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3a9e17f-b1c9-4295-938a-51cd2cefa556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.168.0.0/16 Signature Algorithm: sha256WithRSAEncryption 43:0a:a0:82:e6:bf:ae:74:04:f8:4a:26:fb:7a:02:9e:92:32: 3f:7d:b7:56:4c:f0:48:52:6c:27:fd:b8:b7:59:cd:c1:c4:90: 05:0e:78:6b:9f:05:13:2e:80:40:8d:1f:d3:12:a7:2c:d9:c2: ba:e6:a6:6b:b8:cf:be:f1:4c:69:c4:78:91:56:87:ff:04:fa: 29:b2:62:4d:38:a6:bc:2d:06:bd:da:0e:b5:65:ca:04:9e:21: f4:f7:bc:65:70:5f:0b:90:0c:0e:b0:44:48:94:78:be:61:d0: 9f:9f:f9:a2:4b:08:48:7e:72:bf:6f:be:5d:fc:83:5e:10:be: ca:05:25:42:fc:16:5b:cb:4d:73:42:6c:d8:ed:17:a7:1e:2a: 66:0e:01:46:46:2a:53:c2:8d:66:e5:46:df:63:cd:bd:82:32: e5:31:2b:42:0c:77:a4:64:69:ed:ca:1d:59:2b:23:60:83:8c: 53:75:c2:16:d0:50:a2:b2:f7:19:a1:71:f5:f4:04:9c:d5:70: 84:3d:8d:01:9b:5b:39:c6:cb:d1:c1:3c:66:d4:4b:51:35:6d: 67:cf:43:9c:f1:21:68:e2:29:9a:51:46:0d:2b:03:95:ed:3f: 4f:b1:6a:84:87:41:2c:a8:ab:1c:92:62:b7:b0:d0:20:2c:a7: fc:dc:8d:01 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULbeAxI+FUKLoxvN1jSNP6h6/pBIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZmE5NWY5OTgxZTExOWEwNGFlZGQ3OTc1Mzc1ZDA3YzQ4 MGQ5OWMwNGQ5M2IwY2UzZTliYTk0M2FiMmE1ZGQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWd3xKs1s8vuk8mg7smKB26geSs1U7MQfou/mhgIYkPx+/ 0dST0uhMA5C9mhUV4dOxZ914B4oBeOJgCeiMZYzXbXPssd1fTDGctoezeCKmrQNf i8Gqy/iWcCtHOAILGXeIxamQDrZUqPs8U+4XS2Xr3QjWKWrPHSrEx0D2PjEcoV1F V9DRNKnS/Apns6Xt3WbvmphJCAnjD8OdJRGodrvwzjqVtf3aZmvCLZ72iuMqKVw5 9AO2XkDmpj9rgPx3LBd9O9A21avyF9LxCuNYYxBpbmBbGGwVnddU8QTmZqslHvR4 rl0dZJ6U4RyvlMtMbo2kSrE8/Eq4dQuv/TYX/5JTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQURW7iJ54vm47SfDeZHNOin1tKZF0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QzYTllMTdmLWIxYzktNDI5NS05MzhhLTUxY2QyY2VmYTU1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2qDANBgkqhkiG9w0BAQsFAAOCAQEAQwqggua/rnQE+Eom+3oCnpIyP323 VkzwSFJsJ/24t1nNwcSQBQ54a58FEy6AQI0f0xKnLNnCuuama7jPvvFMacR4kVaH /wT6KbJiTTimvC0GvdoOtWXKBJ4h9Pe8ZXBfC5AMDrBESJR4vmHQn5/5oksISH5y v2++XfyDXhC+ygUlQvwWW8tNc0Js2O0Xpx4qZg4BRkYqU8KNZuVG32PNvYIy5TEr Qgx3pGRp7codWSsjYIOMU3XCFtBQorL3GaFx9fQEnNVwhD2NAZtbOcbL0cE8ZtRL UTVtZ89DnPEhaOIpmlFGDSsDle0/T7FqhIdBLKirHJJit7DQICyn/NyNAQ== -----END CERTIFICATE-----Generated at Wed Feb 5 10:50:08 2025 by rpki-client