$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2300644-72b4-45e2-a901-9000d03c36c8.roa File: e2300644-72b4-45e2-a901-9000d03c36c8.roa (raw, json) Hash identifier: XH/Wk4E+3BTyyZtK4kzba8ZBGoy+8J50IJU56eJeHaU= Subject key identifier: A8:27:E4:A6:66:25:9C:C8:78:EF:9D:D1:FC:1B:2B:33:8F:EF:9C:F9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 31EE64E5C015119791345622C3376867A25E5890 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2300644-72b4-45e2-a901-9000d03c36c8.roa Signing time: Tue 25 Feb 2025 15:31:24 +0000 ROA not before: Tue 25 Feb 2025 15:31:24 +0000 ROA not after: Tue 01 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.119.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ee:64:e5:c0:15:11:97:91:34:56:22:c3:37:68:67:a2:5e:58:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 25 15:31:24 2025 GMT Not After : Apr 1 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2c:65:d4:47:c1:33:46:bc:5b:b4:2a:ef:1c: 2d:08:b5:de:78:6c:4d:68:96:3c:48:39:e9:d1:af: 69:08:97:9b:0d:0e:6c:ed:86:23:1f:b4:64:8f:59: 3c:4b:67:6e:93:15:7d:cf:dc:81:fe:c2:61:93:74: 8a:69:46:9a:04:a0:99:05:34:c8:12:5e:e9:b4:d8: b3:72:b4:ff:59:e4:92:61:bd:49:14:9b:9e:da:ba: 9a:50:fb:e8:2f:86:6c:35:6d:ef:28:32:b3:25:5e: 0f:fb:a4:97:ff:0b:50:0e:5b:33:8e:9e:d7:4d:9c: 56:a9:09:11:c8:14:7f:14:2a:da:5d:37:c4:f6:13: c1:17:66:e9:50:2c:25:f9:ea:47:38:9b:0b:42:98: 2b:9d:ab:11:21:35:45:38:ed:8a:e4:d5:b9:13:bf: ed:5d:da:ba:2e:c1:55:0c:29:14:c3:6f:ef:c7:c9: c1:9b:e2:9e:d2:0b:38:80:b1:3a:40:88:4d:8b:f9: 50:f8:f0:05:ba:41:9f:59:63:da:12:2b:db:fa:5a: 5f:23:29:4a:2a:02:4e:ed:1e:da:61:b1:ea:02:f8: b4:e7:60:74:3e:71:cf:d5:df:34:03:7f:b4:e5:64: 08:f0:fd:cd:0f:f8:6b:83:ab:c1:cb:1e:c6:6f:4f: 75:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:27:E4:A6:66:25:9C:C8:78:EF:9D:D1:FC:1B:2B:33:8F:EF:9C:F9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2300644-72b4-45e2-a901-9000d03c36c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.119.128.0/20 Signature Algorithm: sha256WithRSAEncryption 9a:85:2a:50:55:e9:39:45:e1:06:a5:60:51:c8:8e:a2:6c:00: c8:f0:b9:65:da:97:f3:6b:0b:46:ca:9f:d0:09:61:a4:e5:7a: a6:10:98:4a:30:71:03:3e:90:82:7d:27:20:ba:f5:2c:f1:07: 46:9c:50:cd:98:74:5f:01:2d:6f:03:5e:2e:dd:d8:dd:19:fd: bb:88:45:ac:97:d6:3f:35:c7:fc:5b:ae:af:bd:49:ec:d6:a1: 81:b4:27:ab:ce:90:e9:31:e5:17:0b:da:9c:27:58:ae:2f:7e: 39:8b:c2:96:b0:a9:46:62:84:43:9a:b6:83:1c:1c:91:5f:0c: 8d:f4:b1:e5:3e:22:7d:0a:ae:70:1d:e6:c9:c3:08:51:c8:0f: 66:d3:6c:aa:6b:c5:0f:3d:5a:7b:e8:17:cb:3e:e4:6e:12:05: 3e:c8:2f:82:5c:99:71:68:b6:54:de:36:6e:dd:fb:4c:b7:b1: f5:b1:4c:fc:93:a6:8e:ec:b1:bf:6a:0d:a4:2d:97:50:b0:09: 76:8f:b5:8c:47:6e:9e:4e:32:d7:85:0e:0f:01:81:1a:f2:1d: ea:53:84:25:f4:89:95:be:9a:66:19:59:90:fd:aa:d7:c9:e2: 0d:37:b6:36:92:e0:dd:0c:b7:07:72:6c:af:8a:72:cd:d1:7d: 2f:f0:c0:59 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMe5k5cAVEZeRNFYiwzdoZ6JeWJAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMjI1MTUzMTI0WhcNMjUwNDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTE2ZmViY2Q5YTQzNjkzZTY5NTQ0YmJjYmRjYjJmYmIy YzcwNDI2YTI1ZWVjMjM3Y2ZiYTYwZDc0ZGI3NmRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcLGXUR8EzRrxbtCrvHC0Itd54bE1oljxIOenRr2kIl5sN DmzthiMftGSPWTxLZ26TFX3P3IH+wmGTdIppRpoEoJkFNMgSXum02LNytP9Z5JJh vUkUm57auppQ++gvhmw1be8oMrMlXg/7pJf/C1AOWzOOntdNnFapCRHIFH8UKtpd N8T2E8EXZulQLCX56kc4mwtCmCudqxEhNUU47Yrk1bkTv+1d2rouwVUMKRTDb+/H ycGb4p7SCziAsTpAiE2L+VD48AW6QZ9ZY9oSK9v6Wl8jKUoqAk7tHtphseoC+LTn YHQ+cc/V3zQDf7TlZAjw/c0P+GuDq8HLHsZvT3U5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqCfkpmYlnMh4753R/BsrM4/vnPkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UyMzAwNjQ0LTcyYjQtNDVlMi1hOTAxLTkwMDBkMDNjMzZjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ0d4AwDQYJKoZIhvcNAQELBQADggEBAJqFKlBV6TlF4QalYFHIjqJsAMjw uWXal/NrC0bKn9AJYaTleqYQmEowcQM+kIJ9JyC69SzxB0acUM2YdF8BLW8DXi7d 2N0Z/buIRayX1j81x/xbrq+9SezWoYG0J6vOkOkx5RcL2pwnWK4vfjmLwpawqUZi hEOatoMcHJFfDI30seU+In0KrnAd5snDCFHID2bTbKprxQ89WnvoF8s+5G4SBT7I L4JcmXFotlTeNm7d+0y3sfWxTPyTpo7ssb9qDaQtl1CwCXaPtYxHbp5OMteFDg8B gRryHepThCX0iZW+mmYZWZD9qtfJ4g03tjaS4N0MtwdybK+Kcs3RfS/wwFk= -----END CERTIFICATE-----Generated at Thu Mar 13 23:36:45 2025 by rpki-client