$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ee0e01a7-94dc-4148-92ea-f767dd93a55d.roa File: ee0e01a7-94dc-4148-92ea-f767dd93a55d.roa (raw, json) Hash identifier: KhT7hv6df4ESfs9o0+wYg7Bv8yJU3ome8MvalDEIw4I= Subject key identifier: 76:A2:81:46:3A:0A:9C:A6:3A:CC:94:6D:42:D7:15:E7:40:B5:42:BD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5EE7C75BBA634E1D7EE02362F2C88550F0B05C36 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ee0e01a7-94dc-4148-92ea-f767dd93a55d.roa Signing time: Wed 05 Feb 2025 00:00:00 +0000 ROA not before: Wed 05 Feb 2025 00:00:00 +0000 ROA not after: Wed 12 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.90.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e7:c7:5b:ba:63:4e:1d:7e:e0:23:62:f2:c8:85:50:f0:b0:5c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 5 00:00:00 2025 GMT Not After : Mar 12 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:09:08:f8:19:c3:0f:16:bc:3f:02:28:42:ee: f1:3d:a4:d1:eb:0d:05:22:19:84:c4:6b:78:6d:d6: 8b:37:42:63:69:1a:23:6b:32:ec:b4:20:9b:8b:96: 35:d8:31:93:dd:c5:c3:45:ef:c8:b1:ce:7d:e6:e5: 21:ec:79:3f:13:5b:39:7b:19:70:7a:34:44:6a:a2: 11:5a:63:fb:9c:df:55:a3:14:a3:4e:75:2b:c7:76: 9b:fc:d4:7c:4c:56:df:ca:7d:ff:71:cd:3a:07:8f: e1:27:4a:44:b8:5a:b1:59:24:96:27:fa:00:2a:ba: 0f:61:38:2f:90:1f:61:16:3e:2a:7f:72:17:04:ae: e1:c0:05:e5:88:5a:db:f9:f5:28:ac:5f:9a:69:7c: 35:35:a3:60:74:78:88:09:66:56:01:86:1a:ad:82: a7:f1:e0:be:b9:76:b1:62:6d:3e:d2:89:59:63:89: 47:6a:37:45:f2:8d:cd:00:b9:72:4d:e6:55:7c:b0: 38:79:5e:ba:4c:72:53:c0:7e:40:68:f3:70:4b:c1: 96:e6:b1:c6:3e:65:6b:0f:cb:3b:d1:8b:04:68:cd: 37:5e:5b:22:4e:3e:41:00:83:22:4a:7f:b0:0d:26: 17:bc:fd:f0:ff:c0:c9:7e:39:3a:9e:0b:7c:a9:d7: fc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A2:81:46:3A:0A:9C:A6:3A:CC:94:6D:42:D7:15:E7:40:B5:42:BD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ee0e01a7-94dc-4148-92ea-f767dd93a55d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.90.0.0/15 Signature Algorithm: sha256WithRSAEncryption 1a:4a:be:3d:f5:de:5b:ea:e2:df:87:a1:85:0e:85:73:f7:62: 55:15:87:5b:74:7d:30:1f:4e:68:e7:7a:15:00:57:be:b5:91: 8c:ce:16:40:c0:56:28:45:e1:28:5f:30:3b:62:0d:7d:a1:1f: 10:3b:ac:f9:aa:a7:04:5b:19:70:ab:3d:d4:d5:c9:48:02:cc: db:54:5c:01:5a:71:a8:f9:a4:fd:59:eb:c4:bf:8e:30:22:e2: 7f:b1:f5:e5:7f:6f:3f:23:6b:39:29:7e:25:25:7e:3e:54:2b: 11:43:5a:8d:dd:d1:98:ce:09:bc:b1:a2:5d:78:6b:37:e7:68: f8:a9:8b:31:41:3a:0a:cf:df:68:59:b2:39:a8:29:5d:f4:ab: 6b:06:4b:44:17:31:64:90:43:48:ad:ee:5d:e1:45:b3:ca:bf: 20:ed:38:7b:7a:e6:95:bb:e3:d2:74:b9:ea:37:3d:52:ae:c6: 5d:ad:bb:c9:28:a6:d3:49:e5:25:88:0b:3e:43:18:23:91:db: 06:6e:b4:d3:e3:8b:b5:0e:1a:be:72:c3:e4:23:fa:6c:4b:be: 93:45:4c:c1:93:f5:0e:1b:75:30:9e:16:90:b2:8b:b9:24:3f: b2:b7:d3:2c:b6:49:8d:ae:58:82:c1:f0:9b:9c:f4:67:c4:4b: 78:2b:41:b5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXufHW7pjTh1+4CNi8siFUPCwXDYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMjA1MDAwMDAwWhcNMjUwMzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmFjZTQxZjhjZGVhZTIyOTgzM2M4ZmNjOTEwMTk4MTJl NDE5OTU4NzU5YzdmNzI4MjQ2ZjFhYjJhN2NiZTY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTCQj4GcMPFrw/AihC7vE9pNHrDQUiGYTEa3ht1os3QmNp GiNrMuy0IJuLljXYMZPdxcNF78ixzn3m5SHseT8TWzl7GXB6NERqohFaY/uc31Wj FKNOdSvHdpv81HxMVt/Kff9xzToHj+EnSkS4WrFZJJYn+gAqug9hOC+QH2EWPip/ chcEruHABeWIWtv59SisX5ppfDU1o2B0eIgJZlYBhhqtgqfx4L65drFibT7SiVlj iUdqN0Xyjc0AuXJN5lV8sDh5XrpMclPAfkBo83BLwZbmscY+ZWsPyzvRiwRozTde WyJOPkEAgyJKf7ANJhe8/fD/wMl+OTqeC3yp1/xpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUdqKBRjoKnKY6zJRtQtcV50C1Qr0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VlMGUwMWE3LTk0ZGMtNDE0OC05MmVhLWY3NjdkZDkzYTU1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE2WjANBgkqhkiG9w0BAQsFAAOCAQEAGkq+PfXeW+ri34ehhQ6Fc/diVRWH W3R9MB9OaOd6FQBXvrWRjM4WQMBWKEXhKF8wO2INfaEfEDus+aqnBFsZcKs91NXJ SALM21RcAVpxqPmk/VnrxL+OMCLif7H15X9vPyNrOSl+JSV+PlQrEUNajd3RmM4J vLGiXXhrN+do+KmLMUE6Cs/faFmyOagpXfSrawZLRBcxZJBDSK3uXeFFs8q/IO04 e3rmlbvj0nS56jc9Uq7GXa27ySim00nlJYgLPkMYI5HbBm600+OLtQ4avnLD5CP6 bEu+k0VMwZP1Dht1MJ4WkLKLuSQ/srfTLLZJja5YgsHwm5z0Z8RLeCtBtQ== -----END CERTIFICATE-----Generated at Wed Feb 5 10:49:53 2025 by rpki-client