$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b4dfbe7a-019b-4307-9fd4-39678e948bec.roa File: b4dfbe7a-019b-4307-9fd4-39678e948bec.roa (raw, json) Hash identifier: IqjCjmr4xaw+3ACZq23eBQblnJLsUkUweZ2w5DZ31a8= Subject key identifier: 0B:8A:14:31:3A:99:BB:E8:E1:42:81:84:6D:BD:DA:7D:F6:C5:A5:4A Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d Certificate serial: 38D6FBF456EA1A98940F4F45971B67C47A389C1F Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b4dfbe7a-019b-4307-9fd4-39678e948bec.roa Signing time: Tue 24 Sep 2024 00:00:00 +0000 ROA not before: Tue 24 Sep 2024 00:00:00 +0000 ROA not after: Tue 29 Oct 2024 23:59:59 +0000 asID: 400098 IP address blocks: 199.36.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Sep 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d6:fb:f4:56:ea:1a:98:94:0f:4f:45:97:1b:67:c4:7a:38:9c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d Validity Not Before: Sep 24 00:00:00 2024 GMT Not After : Oct 29 23:59:59 2024 GMT Subject: serialNumber=a04bb57eb52ebb6ec22806ce4edd93002ef0ecae371b31874008e71cc3ac51d8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a4:d5:fa:db:40:e2:f5:64:7e:92:7a:61:dc: d6:89:5b:1e:cd:a6:5c:9e:b3:df:45:b4:ce:40:1c: 8f:a9:11:e6:30:f8:d4:09:c6:85:74:be:72:ca:39: 5b:63:ce:33:58:d2:19:14:da:2a:9a:69:9c:30:ad: ff:59:16:f5:09:e9:3f:1b:cf:a4:47:dd:e2:a5:65: 55:32:b8:52:0c:b7:32:87:b3:07:7f:fa:47:c8:1f: 95:b0:2e:b9:24:38:7f:ce:fd:c5:3d:6d:01:07:b6: 3b:23:3d:20:1c:c0:9a:05:c0:45:89:d0:6c:ce:4d: bb:86:74:a0:f4:6e:02:57:f4:6e:b9:d1:02:a9:b5: 1a:48:64:76:9a:5f:fd:62:e3:0b:fd:56:7e:e5:3d: 79:64:d4:3c:ce:15:41:df:f1:84:43:42:22:ea:ac: 51:c7:f2:ce:a9:d3:e5:45:ef:d6:3a:0e:7c:84:b3: b6:8e:38:05:09:50:97:f2:2a:f1:a7:0b:40:9a:9d: 74:07:94:06:d7:ae:49:71:eb:99:87:71:db:81:e9: 55:1d:86:a1:d9:b8:37:5d:ec:bb:95:a1:c2:4b:01: ec:07:d9:82:cc:b6:1c:1d:1b:10:6a:ce:9d:08:b3: b6:52:5f:ee:ee:07:30:16:0e:54:98:ba:9e:4f:86: de:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8A:14:31:3A:99:BB:E8:E1:42:81:84:6D:BD:DA:7D:F6:C5:A5:4A X509v3 Authority Key Identifier: keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b4dfbe7a-019b-4307-9fd4-39678e948bec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.36.120.0/24 Signature Algorithm: sha256WithRSAEncryption 22:60:53:d3:77:87:f1:aa:54:85:a6:c6:2f:f0:34:dc:1a:08: 2c:ac:a3:9d:72:5e:04:b8:07:c1:db:69:ad:e7:5c:92:17:f5: 88:a3:97:1c:e2:a8:62:de:d2:ff:3b:73:3f:8c:6d:7b:05:56: 07:75:00:34:60:cb:22:ab:e5:9a:7d:b1:d2:d6:b3:ee:2c:ff: 49:63:fd:48:2d:fc:1b:69:8a:12:40:a9:cd:af:4b:3b:38:ef: 37:81:75:c7:a6:5f:75:5b:7e:2e:37:68:dc:ee:27:d6:6f:dc: 2f:d6:01:1f:f0:5b:3a:cb:a1:45:66:15:a5:b6:32:2f:fb:0b: 4c:dc:db:0d:ed:a5:f8:5a:bb:44:12:12:ce:cb:0d:10:e0:63: 47:f7:b4:65:19:6a:fc:ed:de:a3:7f:58:a4:e3:62:3b:09:06: 92:70:2d:79:58:b9:69:c7:58:f4:93:c1:2f:3c:7e:23:71:a0: 01:d7:6e:46:8a:2a:61:35:10:06:15:02:47:51:52:fd:22:a9: 3c:70:ea:ad:c1:a2:07:cd:7b:8f:85:db:f8:28:39:5b:57:e1: f6:4e:82:9e:57:81:f8:77:f7:d1:4d:33:e9:7f:59:a3:d1:fb: 97:5c:57:76:a4:2b:b9:3e:ef:5f:db:b6:79:76:29:f4:f7:b2: 5f:62:be:87 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUONb79FbqGpiUD09FlxtnxHo4nB8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwOTI0MDAwMDAwWhcNMjQxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDRiYjU3ZWI1MmViYjZlYzIyODA2Y2U0ZWRkOTMwMDJl ZjBlY2FlMzcxYjMxODc0MDA4ZTcxY2MzYWM1MWQ4MS0wKwYDVQQDEyRjMGNlMjNl YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHpNX620Di9WR+knph3NaJWx7Nplyes99FtM5AHI+pEeYw +NQJxoV0vnLKOVtjzjNY0hkU2iqaaZwwrf9ZFvUJ6T8bz6RH3eKlZVUyuFIMtzKH swd/+kfIH5WwLrkkOH/O/cU9bQEHtjsjPSAcwJoFwEWJ0GzOTbuGdKD0bgJX9G65 0QKptRpIZHaaX/1i4wv9Vn7lPXlk1DzOFUHf8YRDQiLqrFHH8s6p0+VF79Y6DnyE s7aOOAUJUJfyKvGnC0CanXQHlAbXrklx65mHcduB6VUdhqHZuDdd7LuVocJLAewH 2YLMthwdGxBqzp0Is7ZSX+7uBzAWDlSYup5Pht7BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUC4oUMTqZu+jhQoGEbb3affbFpUowHwYDVR0jBBgwFoAUVajdRdlEE/nR kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk ZWZhOWEwMmM2L2I0ZGZiZTdhLTAxOWItNDMwNy05ZmQ0LTM5Njc4ZTk0OGJlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1 LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACJgU9N3h/GqVIWmxi/wNNwaCCys o51yXgS4B8Hbaa3nXJIX9YijlxziqGLe0v87cz+MbXsFVgd1ADRgyyKr5Zp9sdLW s+4s/0lj/Ugt/BtpihJAqc2vSzs47zeBdcemX3Vbfi43aNzuJ9Zv3C/WAR/wWzrL oUVmFaW2Mi/7C0zc2w3tpfhau0QSEs7LDRDgY0f3tGUZavzt3qN/WKTjYjsJBpJw LXlYuWnHWPSTwS88fiNxoAHXbkaKKmE1EAYVAkdRUv0iqTxw6q3BogfNe4+F2/go OVtX4fZOgp5Xgfh399FNM+l/WaPR+5dcV3akK7k+71/btnl2KfT3sl9ivoc= -----END CERTIFICATE-----Generated at Tue Sep 24 09:20:40 2024 by rpki-client on console-ams.rpki-client.org