$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ff300c0b-f5a2-4c88-b82d-c60c5bd8c8f3.roa File: ff300c0b-f5a2-4c88-b82d-c60c5bd8c8f3.roa (raw, json) Hash identifier: GQvswqT5tiNRQ1H6s2/KlTCmTCNscARxbldv0yS3aBU= Subject key identifier: 4A:F4:D1:CA:DB:BC:0D:32:8D:92:5C:15:E4:5F:A7:07:78:9E:A4:81 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 11B663C9327E7E964500CF24AA0C5F988D2FF0FC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ff300c0b-f5a2-4c88-b82d-c60c5bd8c8f3.roa Signing time: Fri 31 Jan 2025 00:00:00 +0000 ROA not before: Fri 31 Jan 2025 00:00:00 +0000 ROA not after: Fri 07 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.238.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b6:63:c9:32:7e:7e:96:45:00:cf:24:aa:0c:5f:98:8d:2f:f0:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jan 31 00:00:00 2025 GMT Not After : Mar 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:fc:25:d8:bd:6b:22:61:72:e9:ed:f5:ef:d8: 10:2d:3d:fb:d4:0f:03:b7:de:e4:5e:98:d1:70:79: 74:38:42:2b:e8:ce:7d:34:79:a8:29:e8:29:ec:1d: f2:fc:e9:12:f9:20:f8:c0:93:c8:bb:68:ab:97:62: d8:c8:5f:9a:ce:4b:e7:81:1e:7f:0f:8b:04:39:4d: 60:e4:f1:a3:21:8f:f7:8d:65:04:d5:c0:56:15:43: 93:1a:7d:ea:b3:b7:b6:4d:e8:76:f4:a9:c6:5c:9a: 87:16:61:95:51:5d:a8:34:88:c7:3e:c1:29:3e:1c: 1d:5a:fb:18:f7:64:29:26:69:cf:a3:57:1d:c2:36: 70:6e:90:80:c1:52:07:f2:2f:0c:21:31:d2:86:7d: aa:00:d8:c5:a7:6e:09:89:fd:60:af:3b:54:94:2c: 92:c8:dd:4e:49:5e:5e:66:27:f2:87:b1:15:32:31: 42:82:7b:d0:3e:7b:f9:3d:2a:18:ce:9c:b6:28:32: 8e:25:53:10:6d:cf:e2:9b:bb:5b:9f:f7:b3:31:9b: 80:2d:0c:1d:79:32:8a:f8:53:50:05:ff:8c:36:6d: 6d:5c:64:5c:c5:44:1a:e0:10:a2:a5:27:3e:f3:c0: 68:9f:e8:d3:21:f2:c7:86:b3:59:ea:e1:ab:2c:19: 97:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F4:D1:CA:DB:BC:0D:32:8D:92:5C:15:E4:5F:A7:07:78:9E:A4:81 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ff300c0b-f5a2-4c88-b82d-c60c5bd8c8f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.238.120.0/22 Signature Algorithm: sha256WithRSAEncryption b4:da:0e:f5:16:a7:85:61:b7:4f:b1:0f:17:e2:a1:c4:91:17: fc:ea:a0:0e:8a:69:ae:57:53:dc:83:fb:21:01:1e:9d:71:51: 2e:a0:0b:80:7a:8a:fc:09:48:d4:f7:51:30:14:7a:4f:f5:cf: 60:e9:c5:8e:ea:2f:3e:a7:67:c6:35:92:fc:3e:88:95:76:63: b2:93:33:46:95:5a:dc:77:d8:04:1c:e3:d0:d2:c8:63:f9:ce: 9b:b0:6c:f2:10:ff:e9:85:54:98:57:a4:fc:c8:c2:9b:21:b9: f9:7e:d1:40:3d:dc:59:37:b4:bc:1a:42:c3:a1:33:bf:b0:71: 75:9b:84:51:74:df:01:62:83:67:ee:ca:ac:e0:d1:ee:24:18: 25:34:78:0a:7c:3b:bf:5e:6d:f6:95:a2:62:35:4b:f9:c0:39: 64:b4:46:65:bb:fc:91:bc:bf:6b:cd:38:f7:90:fc:98:3d:40: a7:2f:36:e4:6f:b7:ee:74:71:51:44:d9:ac:fb:65:dd:92:fa: ba:64:40:69:92:e4:81:28:13:33:8f:50:fa:b9:db:57:4b:fc: 14:36:7c:df:1b:5c:b2:62:06:cf:b0:1f:59:ae:f3:4c:e6:0e: 15:1a:97:cc:9a:4d:9f:4f:b5:63:b1:ad:53:ad:19:c3:e0:47: 37:ba:1a:b8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEbZjyTJ+fpZFAM8kqgxfmI0v8PwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOWZkZjkzZjg0MTEzMzdhYjZkYmU2MjljMjUxNjM2N2U3 N2ViMzBiYWNhZGJlNzEzNmJhYjA0OGM2MzE4ZjVjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDv/CXYvWsiYXLp7fXv2BAtPfvUDwO33uRemNFweXQ4Qivo zn00eagp6CnsHfL86RL5IPjAk8i7aKuXYtjIX5rOS+eBHn8PiwQ5TWDk8aMhj/eN ZQTVwFYVQ5Mafeqzt7ZN6Hb0qcZcmocWYZVRXag0iMc+wSk+HB1a+xj3ZCkmac+j Vx3CNnBukIDBUgfyLwwhMdKGfaoA2MWnbgmJ/WCvO1SULJLI3U5JXl5mJ/KHsRUy MUKCe9A+e/k9KhjOnLYoMo4lUxBtz+Kbu1uf97Mxm4AtDB15Mor4U1AF/4w2bW1c ZFzFRBrgEKKlJz7zwGif6NMh8seGs1nq4assGZcHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSvTRytu8DTKNklwV5F+nB3iepIEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZmMzAwYzBiLWY1YTItNGM4OC1iODJkLWM2MGM1YmQ4YzhmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI27ngwDQYJKoZIhvcNAQELBQADggEBALTaDvUWp4Vht0+xDxfiocSRF/zq oA6Kaa5XU9yD+yEBHp1xUS6gC4B6ivwJSNT3UTAUek/1z2DpxY7qLz6nZ8Y1kvw+ iJV2Y7KTM0aVWtx32AQc49DSyGP5zpuwbPIQ/+mFVJhXpPzIwpshufl+0UA93Fk3 tLwaQsOhM7+wcXWbhFF03wFig2fuyqzg0e4kGCU0eAp8O79ebfaVomI1S/nAOWS0 RmW7/JG8v2vNOPeQ/Jg9QKcvNuRvt+50cVFE2az7Zd2S+rpkQGmS5IEoEzOPUPq5 21dL/BQ2fN8bXLJiBs+wH1mu80zmDhUal8yaTZ9PtWOxrVOtGcPgRze6Grg= -----END CERTIFICATE-----Generated at Wed Feb 5 10:58:12 2025 by rpki-client