$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f847c21e-23f9-4beb-aa8d-9db0dc4cf4d3.roa File: f847c21e-23f9-4beb-aa8d-9db0dc4cf4d3.roa (raw, json) Hash identifier: MkfRs9+0BX2+tGe4Mutk/DUJehfBCKdTAB9e143UQK8= Subject key identifier: 19:5C:4D:74:2B:84:D9:E5:76:A9:14:7E:1D:50:FA:74:8C:64:21:83 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2CA604100D08E651C34D573752CC5B68E7F89915 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f847c21e-23f9-4beb-aa8d-9db0dc4cf4d3.roa Signing time: Wed 05 Feb 2025 00:00:00 +0000 ROA not before: Wed 05 Feb 2025 00:00:00 +0000 ROA not after: Wed 12 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.80.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a6:04:10:0d:08:e6:51:c3:4d:57:37:52:cc:5b:68:e7:f8:99:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 5 00:00:00 2025 GMT Not After : Mar 12 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d1:b3:0a:37:53:ee:54:ac:c2:83:a2:3e:70: dc:a3:12:68:4f:ba:45:a2:23:0d:de:e3:33:1d:41: a9:e4:33:7c:31:45:99:0c:da:cc:17:b4:be:50:3c: a8:0b:32:14:b0:6e:76:99:6e:ff:20:e3:fe:8a:4a: e3:45:19:b6:27:61:cd:96:70:7e:68:14:a7:8b:10: c8:aa:0d:e4:68:ea:41:b8:da:ce:26:d0:49:c4:42: ff:40:6c:10:3e:b0:73:96:0a:83:66:1c:3b:52:3a: 9f:27:56:36:b7:b0:e2:7d:e4:6c:f3:10:bc:a5:e1: f6:7a:60:78:ca:ef:c8:b9:47:df:da:f5:39:31:db: 92:84:f8:29:58:c6:73:f2:a1:eb:6c:9f:0f:e3:d5: 27:16:59:b0:46:be:e1:40:e0:a2:bc:c7:37:99:82: 5e:67:d8:3f:e8:a5:64:80:05:1c:bd:9e:3a:da:60: db:29:2d:0f:71:f7:0a:e0:47:c5:20:1c:63:b8:42: 68:79:af:4d:c9:55:34:6a:de:61:22:7d:2f:ab:28: 65:15:b8:ec:51:ed:b7:7a:87:55:17:23:eb:64:d9: b1:3f:e1:06:85:9a:40:b1:61:69:9b:b5:88:de:b0: f2:93:af:60:75:91:ad:d5:cd:0e:24:fc:f5:3d:71: 80:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5C:4D:74:2B:84:D9:E5:76:A9:14:7E:1D:50:FA:74:8C:64:21:83 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f847c21e-23f9-4beb-aa8d-9db0dc4cf4d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.80.0.0/15 Signature Algorithm: sha256WithRSAEncryption ad:46:a5:3b:c8:eb:4c:79:d7:f3:1a:e5:77:22:44:f7:99:df: 71:b1:87:22:69:3c:c5:e3:13:e8:27:2c:ae:98:b7:75:63:13: 24:d0:cb:53:26:b6:17:52:e2:a0:25:0b:9b:4f:ed:67:8c:b7: 13:8d:3c:cb:70:56:ff:7e:ca:ca:96:97:f4:73:e3:c1:ec:5b: 42:a6:bb:75:0c:3e:6b:09:04:99:74:8e:dd:f7:cc:fe:61:12: 44:94:1b:28:8d:4a:c0:d4:7e:6c:49:36:bc:b3:39:62:72:e2: e2:4b:10:b4:73:7c:39:e5:be:d5:8d:fd:5c:d5:1f:6e:b6:73: 48:45:d7:1c:dd:b6:d6:e2:64:d3:1f:d3:38:95:b8:67:ee:94: e6:3f:e4:39:00:da:a2:eb:c4:5a:02:f4:95:c8:75:2c:e6:ad: 0c:b6:01:0c:00:58:99:34:e5:52:40:2c:7c:8d:0b:2d:5a:a5: 7c:6f:e2:09:54:94:30:8d:62:ba:78:61:a6:ba:a0:d4:56:e3: 39:c2:33:db:38:e3:d4:60:d6:ca:c6:4a:9c:ab:93:a1:03:d7: 97:ba:fd:04:d0:5d:2d:ce:3d:24:75:12:6e:84:c1:9c:6b:41: dc:c7:6b:37:a6:1d:45:61:e5:cb:01:7e:ab:99:e8:9d:00:84: 95:89:4f:93 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULKYEEA0I5lHDTVc3UsxbaOf4mRUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMjA1MDAwMDAwWhcNMjUwMzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTk4Yzc4MDc4NTc4MzYyYzYyMGVkNTUwNGEwYWVmZjI3 NGNkZjQyNGY2MWM3ZTMxOGU3NTRhNjRhODc1NGQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDR0bMKN1PuVKzCg6I+cNyjEmhPukWiIw3e4zMdQankM3wx RZkM2swXtL5QPKgLMhSwbnaZbv8g4/6KSuNFGbYnYc2WcH5oFKeLEMiqDeRo6kG4 2s4m0EnEQv9AbBA+sHOWCoNmHDtSOp8nVja3sOJ95GzzELyl4fZ6YHjK78i5R9/a 9Tkx25KE+ClYxnPyoetsnw/j1ScWWbBGvuFA4KK8xzeZgl5n2D/opWSABRy9njra YNspLQ9x9wrgR8UgHGO4Qmh5r03JVTRq3mEifS+rKGUVuOxR7bd6h1UXI+tk2bE/ 4QaFmkCxYWmbtYjesPKTr2B1ka3VzQ4k/PU9cYDvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUGVxNdCuE2eV2qRR+HVD6dIxkIYMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y4NDdjMjFlLTIzZjktNGJlYi1hYThkLTlkYjBkYzRjZjRkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE2UDANBgkqhkiG9w0BAQsFAAOCAQEArUalO8jrTHnX8xrldyJE95nfcbGH Imk8xeMT6Ccsrpi3dWMTJNDLUya2F1LioCULm0/tZ4y3E408y3BW/37KypaX9HPj wexbQqa7dQw+awkEmXSO3ffM/mESRJQbKI1KwNR+bEk2vLM5YnLi4ksQtHN8OeW+ 1Y39XNUfbrZzSEXXHN221uJk0x/TOJW4Z+6U5j/kOQDaouvEWgL0lch1LOatDLYB DABYmTTlUkAsfI0LLVqlfG/iCVSUMI1iunhhprqg1FbjOcIz2zjj1GDWysZKnKuT oQPXl7r9BNBdLc49JHUSboTBnGtB3MdrN6YdRWHlywF+q5nonQCElYlPkw== -----END CERTIFICATE-----Generated at Wed Feb 5 09:40:20 2025 by rpki-client