$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fdc2322e-8d87-4784-9e91-c92020c3a4ed.roa File: fdc2322e-8d87-4784-9e91-c92020c3a4ed.roa (raw, json) Hash identifier: FDlg01VT3hKsJFncNHNUs0xwenLjtGfmtKo201yuYGM= Subject key identifier: 09:B1:8D:84:80:BA:A2:3D:98:B6:68:72:D8:E8:E4:6A:F0:FF:9B:89 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 22DFB2D5D70AFAA1F548B92946F7065C82A7E945 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fdc2322e-8d87-4784-9e91-c92020c3a4ed.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.227.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:df:b2:d5:d7:0a:fa:a1:f5:48:b9:29:46:f7:06:5c:82:a7:e9:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:49:a0:dc:d7:33:8d:96:e2:1a:e5:86:c1:cd: 3b:27:92:ca:9d:55:f5:4e:2e:1f:f9:28:75:7f:38: 91:48:af:7d:be:f4:0e:a0:76:9d:50:b2:57:88:50: 86:ae:a4:f6:35:2f:35:c7:6d:8e:eb:63:7e:ee:8b: 4c:a2:90:ae:63:36:55:a1:b7:b8:52:ad:e8:0e:f8: e1:01:0e:53:3f:14:7f:35:44:7e:06:1f:b2:09:6c: 41:af:c2:94:11:70:2f:f4:04:83:2f:76:03:16:59: e0:2d:7f:3c:a4:6f:6e:09:fe:38:9b:45:4b:cb:b4: dd:7a:33:52:5a:aa:f0:f7:6c:9f:0c:2a:af:cc:ed: 3f:93:f9:eb:3b:bd:1b:2b:56:a9:ae:e1:58:9b:0b: fb:c6:c1:68:6e:1e:a4:82:3e:08:7b:88:ee:f7:b6: 0c:61:63:47:4c:9c:d3:5e:46:ba:66:ec:08:0b:42: 25:9d:f6:3a:87:37:da:1d:39:c3:e0:ac:71:1e:c7: 68:3d:c0:12:e4:fd:bc:1c:c1:74:3f:12:79:e1:1a: c0:fd:26:ab:92:25:2d:ed:92:25:c5:69:f2:88:8b: ba:c8:fc:ab:03:ac:ee:71:93:64:b2:90:b6:d4:f8: a8:a8:d4:5d:c5:d4:58:72:a5:4f:4f:f7:33:19:28: 77:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B1:8D:84:80:BA:A2:3D:98:B6:68:72:D8:E8:E4:6A:F0:FF:9B:89 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fdc2322e-8d87-4784-9e91-c92020c3a4ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.227.224.0/21 Signature Algorithm: sha256WithRSAEncryption 34:21:b9:a0:a6:d8:67:11:08:48:fe:ae:5b:f8:57:d1:5f:b3: 23:16:4d:30:06:8a:6a:9e:4d:85:23:7a:fa:16:fc:22:8f:15: db:0e:ff:35:17:60:ea:cb:31:06:b4:6e:57:d4:2f:71:0a:36: 92:ed:a6:43:f8:9d:e0:7a:45:3d:9b:6d:cc:83:c2:42:38:c1: 6f:3e:7f:f3:de:68:53:1c:14:02:90:99:12:1c:d2:60:01:a7: d3:c9:bf:58:47:8d:28:b6:2c:94:f9:2a:f0:7a:6f:da:e9:0d: 90:cb:37:35:3b:5d:a3:bc:65:0d:69:8c:71:6a:f8:8c:d4:4f: 2b:6d:c4:c5:3d:78:75:37:32:eb:be:ca:35:33:17:65:82:fa: 40:fe:9a:b5:44:64:74:5b:6d:3c:ed:4e:58:79:4c:e7:51:e4: 6b:98:92:d3:33:66:b8:42:80:1f:e6:a4:aa:dc:d9:47:ba:53: 72:ae:00:fa:da:c5:c3:c4:25:3c:40:4a:96:ff:1c:4d:9f:e6: d2:09:d5:d9:8d:6c:39:46:a5:7c:e2:5c:9a:fb:c6:49:4b:33: 8f:59:97:bd:37:f5:d9:78:59:8a:cd:47:d0:58:7a:5b:90:59: 2d:de:5a:ce:5c:17:22:b0:51:ca:20:0c:0f:6b:f5:a4:2e:44: b1:3c:f3:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIt+y1dcK+qH1SLkpRvcGXIKn6UUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0Njk2MTI4NzBhODE5ZWY2NjE5Y2JjMmQwZmJkNTIwZDlj OWU0Yzc5MGZjODAwNDJhYjA4ZjgwYzJlYTdjMDZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNSaDc1zONluIa5YbBzTsnksqdVfVOLh/5KHV/OJFIr32+ 9A6gdp1QsleIUIaupPY1LzXHbY7rY37ui0yikK5jNlWht7hSregO+OEBDlM/FH81 RH4GH7IJbEGvwpQRcC/0BIMvdgMWWeAtfzykb24J/jibRUvLtN16M1JaqvD3bJ8M Kq/M7T+T+es7vRsrVqmu4VibC/vGwWhuHqSCPgh7iO73tgxhY0dMnNNeRrpm7AgL QiWd9jqHN9odOcPgrHEex2g9wBLk/bwcwXQ/EnnhGsD9JquSJS3tkiXFafKIi7rI /KsDrO5xk2SykLbU+Kio1F3F1FhypU9P9zMZKHe3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCbGNhIC6oj2Ytmhy2OjkavD/m4kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZkYzIzMjJlLThkODctNDc4NC05ZTkxLWM5MjAyMGMzYTRlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM24+AwDQYJKoZIhvcNAQELBQADggEBADQhuaCm2GcRCEj+rlv4V9FfsyMW TTAGimqeTYUjevoW/CKPFdsO/zUXYOrLMQa0blfUL3EKNpLtpkP4neB6RT2bbcyD wkI4wW8+f/PeaFMcFAKQmRIc0mABp9PJv1hHjSi2LJT5KvB6b9rpDZDLNzU7XaO8 ZQ1pjHFq+IzUTyttxMU9eHU3Muu+yjUzF2WC+kD+mrVEZHRbbTztTlh5TOdR5GuY ktMzZrhCgB/mpKrc2Ue6U3KuAPraxcPEJTxASpb/HE2f5tIJ1dmNbDlGpXziXJr7 xklLM49Zl7039dl4WYrNR9BYeluQWS3eWs5cFyKwUcogDA9r9aQuRLE887E= -----END CERTIFICATE-----Generated at Wed Feb 5 10:55:12 2025 by rpki-client