$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3bb3c5e-45ec-4f6e-998a-47d7758d3a1a.roa File: d3bb3c5e-45ec-4f6e-998a-47d7758d3a1a.roa (raw, json) Hash identifier: BXsmrJxizjzWoN9YFx841+Fra54VM1zljVhfjd5htSs= Subject key identifier: A7:F7:23:FF:C5:CF:80:8A:06:46:EE:39:AE:EB:47:AA:FF:E2:3B:18 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 46AB941730A6EF1058BD2726FA97E2FD2251E237 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3bb3c5e-45ec-4f6e-998a-47d7758d3a1a.roa Signing time: Mon 13 Jan 2025 00:00:00 +0000 ROA not before: Mon 13 Jan 2025 00:00:00 +0000 ROA not after: Mon 17 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 15.181.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ab:94:17:30:a6:ef:10:58:bd:27:26:fa:97:e2:fd:22:51:e2:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 13 00:00:00 2025 GMT Not After : Feb 17 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:19:7e:bb:ba:2f:b4:91:e4:08:5a:91:6f: 1d:c8:89:86:b7:46:da:3a:b4:26:72:25:5f:f8:06: b6:e6:7a:57:8b:28:26:5c:5b:84:09:e1:5c:fb:c1: 05:fb:7b:68:0e:0b:29:8a:a1:10:b9:88:4e:61:41: b7:93:7b:ee:da:da:ba:c6:9a:75:7c:26:6e:d4:15: f6:4f:bc:e5:c3:ba:de:3f:99:d6:d6:15:fa:40:62: 03:df:d2:f9:18:bd:79:be:4d:4f:62:19:b3:68:bc: 84:8e:2c:6b:6b:ed:5d:25:7b:5b:ef:84:cf:de:46: 9c:2f:1a:b2:ac:95:8f:cf:bd:5f:e1:7d:21:b1:ad: cc:fe:44:4f:2a:10:cd:37:ac:eb:1f:f4:34:5d:aa: 12:cd:e5:97:c4:d3:78:ac:69:ed:8f:72:3c:c7:3e: 2b:e8:10:1a:d8:02:bf:70:d7:44:08:99:c8:c6:79: ef:f4:de:be:b1:8f:d8:f4:0c:c8:c2:f2:a1:ae:d7: 50:b4:c6:81:f6:60:ec:cc:e1:63:72:70:69:72:a7: 00:db:11:4a:d1:9b:60:7e:b7:fb:37:a1:cf:6d:35: 1b:df:1b:fa:4e:81:3d:8d:f0:6b:fa:00:d2:69:59: be:7b:ea:e6:14:59:25:6e:97:51:f1:d2:db:32:c3: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F7:23:FF:C5:CF:80:8A:06:46:EE:39:AE:EB:47:AA:FF:E2:3B:18 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3bb3c5e-45ec-4f6e-998a-47d7758d3a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.181.80.0/20 Signature Algorithm: sha256WithRSAEncryption a6:b5:2e:1c:ee:8e:8a:98:48:04:d9:d5:72:2e:f6:aa:c3:7a: bd:8f:5d:b9:45:38:1f:7e:9b:4f:4d:89:fc:8f:15:57:69:12: a0:3e:01:d5:04:e9:13:0e:46:6e:9b:5b:e9:90:a0:90:c2:f0: d7:cd:84:32:4c:18:dc:9e:c1:4e:aa:3b:6f:36:59:12:a9:d2: 22:00:95:05:d3:d9:d7:70:58:b3:e7:be:5c:f2:ad:c6:c1:4b: 27:83:91:cb:4d:10:db:1e:c3:0a:0c:ed:05:7f:eb:67:2c:9a: 9e:5b:62:a5:b7:5a:0e:67:b0:ac:49:09:a8:08:b9:ad:c1:d3: 9e:ad:5a:8e:91:8e:08:a5:0f:33:82:5b:d5:bc:a9:18:9e:ea: 49:f6:38:9c:b6:7d:39:af:35:63:48:77:fb:8d:50:46:68:62: 4b:32:59:a9:b8:d4:8b:87:40:9a:99:39:da:d8:20:52:76:8b: 7d:ab:36:91:6f:6b:08:77:6c:de:3b:b3:71:c1:be:ad:ed:7e: 58:85:6f:36:e0:c1:57:a5:fb:9f:fb:68:20:b3:0b:f7:05:23: 08:1c:c0:e1:cc:03:fb:c7:66:80:4b:52:d3:75:94:5e:7a:8d: b0:c4:b1:84:48:de:ee:0a:dd:af:0b:35:5c:a6:b5:0f:eb:62: dc:19:66:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURquUFzCm7xBYvScm+pfi/SJR4jcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMmNhMDViZWZjYWJkM2M5MzU0YmRmMGYxYmM2N2U1MzRm ZTM0MzI0NWZlOTIyZGUwYTMyNjRlMTU5OGQ4N2Y3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA/hl+u7ovtJHkCFqRbx3IiYa3Rto6tCZyJV/4BrbmeleL KCZcW4QJ4Vz7wQX7e2gOCymKoRC5iE5hQbeTe+7a2rrGmnV8Jm7UFfZPvOXDut4/ mdbWFfpAYgPf0vkYvXm+TU9iGbNovISOLGtr7V0le1vvhM/eRpwvGrKslY/PvV/h fSGxrcz+RE8qEM03rOsf9DRdqhLN5ZfE03isae2PcjzHPivoEBrYAr9w10QImcjG ee/03r6xj9j0DMjC8qGu11C0xoH2YOzM4WNycGlypwDbEUrRm2B+t/s3oc9tNRvf G/pOgT2N8Gv6ANJpWb576uYUWSVul1Hx0tsyw8MDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUp/cj/8XPgIoGRu45rutHqv/iOxgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QzYmIzYzVlLTQ1ZWMtNGY2ZS05OThhLTQ3ZDc3NThkM2ExYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQPtVAwDQYJKoZIhvcNAQELBQADggEBAKa1LhzujoqYSATZ1XIu9qrDer2P XblFOB9+m09NifyPFVdpEqA+AdUE6RMORm6bW+mQoJDC8NfNhDJMGNyewU6qO282 WRKp0iIAlQXT2ddwWLPnvlzyrcbBSyeDkctNENsewwoM7QV/62csmp5bYqW3Wg5n sKxJCagIua3B056tWo6RjgilDzOCW9W8qRie6kn2OJy2fTmvNWNId/uNUEZoYksy Wam41IuHQJqZOdrYIFJ2i32rNpFvawh3bN47s3HBvq3tfliFbzbgwVel+5/7aCCz C/cFIwgcwOHMA/vHZoBLUtN1lF56jbDEsYRI3u4K3a8LNVymtQ/rYtwZZiY= -----END CERTIFICATE-----Generated at Wed Feb 5 09:57:29 2025 by rpki-client