$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3d895df-b476-41d3-91ff-5218ae6dd9f1.roa File: d3d895df-b476-41d3-91ff-5218ae6dd9f1.roa (raw, json) Hash identifier: R7tLUWXhDA7pYusOXzso6V538ET7Jnc6oR+SyNGmG1I= Subject key identifier: 57:D7:19:73:AB:14:A3:FF:C4:78:4A:2D:64:90:AB:F0:4F:31:F9:9C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6A9E9ACBE2FB03D640C04652E03D6A868DE5922E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3d895df-b476-41d3-91ff-5218ae6dd9f1.roa Signing time: Mon 27 Jan 2025 00:00:00 +0000 ROA not before: Mon 27 Jan 2025 00:00:00 +0000 ROA not after: Mon 03 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.171.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:9e:9a:cb:e2:fb:03:d6:40:c0:46:52:e0:3d:6a:86:8d:e5:92:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 27 00:00:00 2025 GMT Not After : Mar 3 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a2:2e:c0:7c:fd:fa:9d:30:1c:57:fa:b9:2f: 81:32:2b:d9:af:6c:14:3a:98:20:4c:0c:81:87:c3: fb:ad:8c:5b:ca:e3:59:af:43:64:99:58:75:a0:ea: ff:42:c2:94:c8:e1:21:cc:ff:c3:42:2d:7a:49:2d: 25:99:7f:aa:c8:6e:b5:ec:ac:18:8b:af:ec:04:03: d9:58:f4:5a:81:ca:e3:c7:d2:ad:31:98:a4:77:26: 59:86:49:73:a1:44:22:f4:83:69:36:27:03:ac:4f: c2:62:53:58:6e:fa:4f:f3:90:76:df:70:ea:2e:07: 48:cc:11:69:7e:5b:37:db:a5:03:c6:2f:75:ce:97: a3:1c:62:47:ab:aa:a0:6f:6b:75:c3:10:20:32:47: 3d:7d:a6:79:be:da:41:cf:72:5d:46:26:ed:09:f3: 3d:76:48:9d:af:f8:c7:7c:ae:55:15:13:88:f6:f0: 91:60:0f:df:5c:18:73:80:4d:69:20:91:f8:bb:b6: e7:a9:b8:e7:84:79:7d:5a:5e:22:48:e8:a1:6f:73: bd:6e:75:56:16:29:e0:7b:ba:28:06:66:d8:28:58: 61:e3:ce:2a:aa:46:a9:e1:a8:9c:58:a9:84:82:f0: c4:32:38:7b:c2:9e:db:e3:1d:e2:08:88:01:88:ba: 36:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D7:19:73:AB:14:A3:FF:C4:78:4A:2D:64:90:AB:F0:4F:31:F9:9C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3d895df-b476-41d3-91ff-5218ae6dd9f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.171.0.0/16 Signature Algorithm: sha256WithRSAEncryption 86:ee:48:78:82:2c:64:7d:f0:d9:fa:be:87:7a:72:8f:82:90: 46:a9:bb:5d:a5:5a:5a:af:bc:ed:1f:45:0f:bd:73:8f:22:c3: 9d:b0:7e:72:75:76:4c:b4:54:52:80:55:32:ff:21:df:e5:49: 05:90:1c:d6:6e:af:74:e7:4d:35:82:d4:53:a7:cf:d9:07:46: ec:49:68:9b:90:3b:cf:3f:df:ed:36:b7:6a:c1:bb:71:77:b7: 1c:03:ff:68:87:a5:68:6f:5d:16:1e:17:8f:ce:b6:85:a3:19: 06:64:9f:66:b7:8a:c3:c6:39:d3:b8:30:30:af:46:2f:f7:97: 0a:e0:17:22:43:87:eb:13:3e:7f:e9:51:2d:5d:2b:44:9f:00: 01:2b:9a:68:8c:27:61:d1:f2:f9:f1:eb:a5:c8:22:62:80:f6: 6c:c6:20:84:53:77:9c:1a:2a:ab:cd:04:a6:0c:f2:3c:a3:e4: db:df:06:dc:93:30:87:5f:df:7a:3e:5c:af:f8:e5:51:74:0d: 3a:a1:2e:a9:19:06:f9:f3:e5:95:b3:f0:e2:a8:34:a6:fc:e8: cd:2d:f5:46:73:9f:e2:1c:ad:cc:fd:92:8b:82:f6:82:8d:51: f4:12:48:94:e3:9d:a5:f3:11:fc:b7:d9:00:5f:ef:6a:c8:40: ed:d8:22:27 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUap6ay+L7A9ZAwEZS4D1qho3lki4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTI3MDAwMDAwWhcNMjUwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NGQxNzZmN2JiNGRiYmU3NDFkOWQwYzMwMTJiYWQ0ZTll YTI2YmMxYzZkZWZhOTI2YzcwNTU1NjFhOTViOWY0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjoi7AfP36nTAcV/q5L4EyK9mvbBQ6mCBMDIGHw/utjFvK 41mvQ2SZWHWg6v9CwpTI4SHM/8NCLXpJLSWZf6rIbrXsrBiLr+wEA9lY9FqByuPH 0q0xmKR3JlmGSXOhRCL0g2k2JwOsT8JiU1hu+k/zkHbfcOouB0jMEWl+WzfbpQPG L3XOl6McYkerqqBva3XDECAyRz19pnm+2kHPcl1GJu0J8z12SJ2v+Md8rlUVE4j2 8JFgD99cGHOATWkgkfi7tuepuOeEeX1aXiJI6KFvc71udVYWKeB7uigGZtgoWGHj ziqqRqnhqJxYqYSC8MQyOHvCntvjHeIIiAGIujbvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUV9cZc6sUo//EeEotZJCr8E8x+ZwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QzZDg5NWRmLWI0NzYtNDFkMy05MWZmLTUyMThhZTZkZDlmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2qzANBgkqhkiG9w0BAQsFAAOCAQEAhu5IeIIsZH3w2fq+h3pyj4KQRqm7 XaVaWq+87R9FD71zjyLDnbB+cnV2TLRUUoBVMv8h3+VJBZAc1m6vdOdNNYLUU6fP 2QdG7Elom5A7zz/f7Ta3asG7cXe3HAP/aIelaG9dFh4Xj862haMZBmSfZreKw8Y5 07gwMK9GL/eXCuAXIkOH6xM+f+lRLV0rRJ8AASuaaIwnYdHy+fHrpcgiYoD2bMYg hFN3nBoqq80EpgzyPKPk298G3JMwh1/fej5cr/jlUXQNOqEuqRkG+fPllbPw4qg0 pvzozS31RnOf4hytzP2Si4L2go1R9BJIlOOdpfMR/LfZAF/vashA7dgiJw== -----END CERTIFICATE-----Generated at Wed Feb 5 10:53:30 2025 by rpki-client