$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4747cb3a-dada-4e4c-b2af-99fedfffda48.roa File: 4747cb3a-dada-4e4c-b2af-99fedfffda48.roa (raw, json) Hash identifier: eAVtgENqaVT+sNMgGAepQQTm+Twrz+bA9yVoYWHOORY= Subject key identifier: 7D:D4:D2:DE:D3:8B:A6:F5:DB:A7:02:79:73:19:B2:4F:57:A4:B2:C2 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 62768CB564FEB4FFB35C5F0C465A744E4AA66F5A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4747cb3a-dada-4e4c-b2af-99fedfffda48.roa Signing time: Tue 22 Oct 2024 00:00:00 +0000 ROA not before: Tue 22 Oct 2024 00:00:00 +0000 ROA not after: Tue 26 Nov 2024 23:59:59 +0000 asID: 14618 IP address blocks: 173.82.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:76:8c:b5:64:fe:b4:ff:b3:5c:5f:0c:46:5a:74:4e:4a:a6:6f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 22 00:00:00 2024 GMT Not After : Nov 26 23:59:59 2024 GMT Subject: serialNumber=fb6d6707dbb40795b1f6ef3bc4d92de2030da15b436d9a70ad00505754974d0a, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ed:43:64:db:ad:5e:29:cf:84:29:9a:7d:18: 0d:14:9b:48:2f:78:c4:cd:60:0f:3d:8d:9c:46:a7: 22:be:e7:08:5f:e5:0a:d1:2b:80:d7:d0:bf:9c:f0: 72:24:63:d6:b6:2d:b0:19:9b:cd:af:6d:a5:0f:a6: 50:19:6b:de:6e:0d:89:5c:6f:0d:5d:04:4b:b7:af: de:8e:62:42:57:c0:bc:e5:e3:e5:6b:ca:b7:fc:7d: a1:37:7e:59:82:38:1e:9a:fd:a0:03:79:e9:94:df: 99:f7:ba:e9:62:29:9a:d8:ab:e7:f6:2c:30:34:89: 56:35:21:ef:e3:ae:f3:77:e6:c8:1c:09:d1:db:d0: 0f:a0:63:d4:49:d5:4e:36:a8:46:aa:23:44:fc:a5: e7:9b:b4:84:1e:27:83:e7:13:cf:8b:bc:73:e3:62: 3d:75:44:55:b1:f1:65:20:d0:ed:38:2e:c8:23:97: a0:56:5f:c2:bc:40:11:65:ad:c8:5b:44:9f:f2:4f: c9:bc:a3:80:f6:29:63:5c:63:3b:55:9f:b8:6c:a4: 40:09:a0:92:26:98:84:69:ee:f4:e1:23:76:ad:09: e3:62:f6:84:de:8e:80:d9:09:1b:5d:c3:33:b7:2a: 5e:cc:b1:a9:72:45:5b:65:72:6e:06:27:a5:8d:0e: de:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D4:D2:DE:D3:8B:A6:F5:DB:A7:02:79:73:19:B2:4F:57:A4:B2:C2 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4747cb3a-dada-4e4c-b2af-99fedfffda48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.5.0/24 Signature Algorithm: sha256WithRSAEncryption 10:a9:5d:d3:e2:65:c5:85:a7:e9:ac:83:7e:bd:32:ca:86:d7: 71:ba:91:2a:47:65:b7:d2:9c:dc:8a:ed:aa:35:31:68:07:93: 74:e3:ed:23:8d:44:8b:6d:f4:64:c9:af:58:e5:fd:27:8c:b7: 07:f8:d3:d5:61:79:68:aa:19:b3:10:88:37:61:00:9e:ba:ea: 42:7c:4a:6d:99:83:b3:d5:27:9f:d3:33:b2:ac:5e:5d:8d:6a: 9e:42:22:fa:c3:1f:b3:a2:78:33:47:38:54:4a:bc:42:d1:15: 83:0d:bb:a2:5d:a0:60:0e:0f:aa:78:de:d6:52:f5:8e:10:58: 53:83:14:8e:fb:ef:53:92:a7:11:20:a2:6a:93:28:0c:1f:8a: e4:37:a2:66:d7:96:2b:38:db:95:59:a1:27:e3:79:34:72:b2: 09:21:a0:6c:f8:e7:3d:15:6b:87:cc:36:37:f9:95:02:db:91: b1:5d:13:01:86:0e:89:e2:d4:f9:17:4b:6a:05:41:03:cf:41: 67:b9:43:ee:20:47:3c:ab:1f:bd:cf:57:33:07:9d:d6:45:ba: 08:87:da:dd:8f:8e:4c:f1:bd:5b:7b:30:81:cb:16:b5:3d:bd: 3f:34:f9:9f:8d:8a:c6:83:3c:86:8a:39:a6:3b:45:0a:4d:4d: 69:bc:d4:37 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYnaMtWT+tP+zXF8MRlp0Tkqmb1owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQxMDIyMDAwMDAwWhcNMjQxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYjZkNjcwN2RiYjQwNzk1YjFmNmVmM2JjNGQ5MmRlMjAz MGRhMTViNDM2ZDlhNzBhZDAwNTA1NzU0OTc0ZDBhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCr7UNk261eKc+EKZp9GA0Um0gveMTNYA89jZxGpyK+5whf 5QrRK4DX0L+c8HIkY9a2LbAZm82vbaUPplAZa95uDYlcbw1dBEu3r96OYkJXwLzl 4+Vryrf8faE3flmCOB6a/aADeemU35n3uuliKZrYq+f2LDA0iVY1Ie/jrvN35sgc CdHb0A+gY9RJ1U42qEaqI0T8peebtIQeJ4PnE8+LvHPjYj11RFWx8WUg0O04Lsgj l6BWX8K8QBFlrchbRJ/yT8m8o4D2KWNcYztVn7hspEAJoJImmIRp7vThI3atCeNi 9oTejoDZCRtdwzO3Kl7MsalyRVtlcm4GJ6WNDt7BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfdTS3tOLpvXbpwJ5cxmyT1ekssIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQ3NDdjYjNhLWRhZGEtNGU0Yy1iMmFmLTk5ZmVkZmZmZGE0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUgUwDQYJKoZIhvcNAQELBQADggEBABCpXdPiZcWFp+msg369MsqG13G6 kSpHZbfSnNyK7ao1MWgHk3Tj7SONRItt9GTJr1jl/SeMtwf409VheWiqGbMQiDdh AJ666kJ8Sm2Zg7PVJ5/TM7KsXl2Nap5CIvrDH7OieDNHOFRKvELRFYMNu6JdoGAO D6p43tZS9Y4QWFODFI7771OSpxEgomqTKAwfiuQ3ombXlis425VZoSfjeTRysgkh oGz45z0Va4fMNjf5lQLbkbFdEwGGDoni1PkXS2oFQQPPQWe5Q+4gRzyrH73PVzMH ndZFugiH2t2PjkzxvVt7MIHLFrU9vT80+Z+NisaDPIaKOaY7RQpNTWm81Dc= -----END CERTIFICATE-----Generated at Tue Oct 22 21:14:55 2024 by rpki-client on console-ams.rpki-client.org