$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc1eccd7-1e2c-4cb2-a289-d629e0c0e1ae.roa File: fc1eccd7-1e2c-4cb2-a289-d629e0c0e1ae.roa (raw, json) Hash identifier: NPFR0GuFAyt8NP7A5btHIuB/IEsvwEtpiR6/XT6wbLE= Subject key identifier: 58:A6:15:B8:60:43:28:9F:54:A7:63:F2:34:27:AF:EC:05:7B:2A:15 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5CACF79EA7AEBA8FAB54737EABC606E705AD1BA5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc1eccd7-1e2c-4cb2-a289-d629e0c0e1ae.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.255.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ac:f7:9e:a7:ae:ba:8f:ab:54:73:7e:ab:c6:06:e7:05:ad:1b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:3e:98:77:d6:7e:f2:87:0f:62:0c:9c:fe: 3c:e4:22:7e:42:36:0c:18:d1:69:7c:e9:2f:58:b1: 4e:04:43:d9:8f:bb:49:bf:a1:9e:ec:d5:74:e1:ab: d3:91:43:d7:95:c8:ec:47:29:ba:a3:65:28:c4:49: 7f:ac:a5:90:b3:de:86:c1:ba:c4:75:3d:37:e3:d7: 8e:d5:77:46:54:f0:1f:9b:8e:af:91:e3:de:e4:1b: d4:a3:89:b7:b8:66:a7:89:16:94:85:af:2b:fe:14: 88:cf:5b:78:c4:ae:f8:91:a9:6a:26:8a:87:1c:3d: 54:5b:bb:6b:bf:ab:84:14:1c:f3:7e:54:70:98:02: ba:8d:af:f4:00:5a:45:51:a9:e7:dc:80:22:ea:44: cb:a7:16:a0:58:7f:e2:b4:15:b8:93:ac:f8:63:ee: 4b:5f:25:d5:50:b5:ff:59:b1:4d:c2:a3:de:dd:67: ca:50:f7:79:ec:11:8b:87:7f:6a:01:94:d4:5a:f0: e7:05:3b:6e:d1:ef:ff:c2:46:3b:1a:0b:2e:aa:12: e9:af:4f:38:ea:ef:e2:6a:ce:a7:7a:c8:a9:54:0a: 12:4a:fd:ab:91:24:7d:a1:6a:e2:de:1f:76:e2:73: e4:da:42:a5:0e:1f:b1:fd:b7:98:12:3f:be:ad:d8: 18:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A6:15:B8:60:43:28:9F:54:A7:63:F2:34:27:AF:EC:05:7B:2A:15 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc1eccd7-1e2c-4cb2-a289-d629e0c0e1ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.255.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0e:f7:c4:7c:ff:08:ca:a3:c1:97:57:1e:71:d8:ac:ca:87:fb: c9:22:b9:53:89:82:48:72:2f:2b:b5:93:f1:28:e8:70:63:9d: 7d:ee:aa:a3:3e:7d:6d:4a:c7:cf:78:0c:e4:38:4a:b9:08:21: 39:d5:2b:35:e2:b9:56:b8:67:00:eb:0a:74:3c:9d:94:0b:07: 5d:99:d0:03:85:f4:c3:4b:55:20:d6:c1:02:07:9c:1a:3b:23: cb:d1:1f:65:65:48:aa:7b:92:16:19:d4:7b:02:2a:f0:ec:f0: 54:a5:fc:c3:c3:41:2c:61:74:57:2c:6c:2a:f0:6f:0c:dc:9c: d6:1d:ff:b3:52:e9:fc:fa:3d:a5:3b:c3:b6:8f:de:2a:25:a2: 33:66:f3:47:76:ce:74:05:b0:55:2f:4b:74:39:2d:c4:42:3f: 97:c7:80:f8:cd:5e:29:1b:4e:b4:54:66:03:9c:98:32:ec:99: 7e:3c:09:0c:0e:41:74:74:3f:5e:f3:2f:b6:83:9a:ad:77:d4: 47:2c:e9:3a:db:e7:d0:14:eb:e5:20:40:3a:cb:30:fb:83:f4: e9:04:b9:1e:47:cc:6a:26:01:44:fb:2a:b8:aa:7e:a8:90:6f: eb:9d:35:12:4a:5c:e0:c5:7f:47:b8:a9:f0:fd:9b:8e:34:a8: fd:ca:e7:4b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXKz3nqeuuo+rVHN+q8YG5wWtG6UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNmZkMGE3MWQyNGNiMDk2ODkyYTM0MmNmNTMzZDZmYWU5 Nzk4YjQyNWUyZWQ2YThlZWY3ZTIwODU2YjA4OTZlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDB6T6Yd9Z+8ocPYgyc/jzkIn5CNgwY0Wl86S9YsU4EQ9mP u0m/oZ7s1XThq9ORQ9eVyOxHKbqjZSjESX+spZCz3obBusR1PTfj147Vd0ZU8B+b jq+R497kG9Sjibe4ZqeJFpSFryv+FIjPW3jErviRqWomioccPVRbu2u/q4QUHPN+ VHCYArqNr/QAWkVRqefcgCLqRMunFqBYf+K0FbiTrPhj7ktfJdVQtf9ZsU3Co97d Z8pQ93nsEYuHf2oBlNRa8OcFO27R7//CRjsaCy6qEumvTzjq7+Jqzqd6yKlUChJK /auRJH2hauLeH3bic+TaQqUOH7H9t5gSP76t2BjrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUWKYVuGBDKJ9Up2PyNCev7AV7KhUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZjMWVjY2Q3LTFlMmMtNGNiMi1hMjg5LWQ2MjllMGMwZTFhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2/zANBgkqhkiG9w0BAQsFAAOCAQEADvfEfP8IyqPBl1cecdisyof7ySK5 U4mCSHIvK7WT8SjocGOdfe6qoz59bUrHz3gM5DhKuQghOdUrNeK5VrhnAOsKdDyd lAsHXZnQA4X0w0tVINbBAgecGjsjy9EfZWVIqnuSFhnUewIq8OzwVKX8w8NBLGF0 VyxsKvBvDNyc1h3/s1Lp/Po9pTvDto/eKiWiM2bzR3bOdAWwVS9LdDktxEI/l8eA +M1eKRtOtFRmA5yYMuyZfjwJDA5BdHQ/XvMvtoOarXfURyzpOtvn0BTr5SBAOssw +4P06QS5HkfMaiYBRPsquKp+qJBv6501Ekpc4MV/R7ip8P2bjjSo/crnSw== -----END CERTIFICATE-----Generated at Wed Feb 5 10:48:41 2025 by rpki-client