$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/461f4724-f7c6-4955-97f0-5fb9ae192315.roa File: 461f4724-f7c6-4955-97f0-5fb9ae192315.roa (raw, json) Hash identifier: Mp02DV7PxAONhGpUhJ81KLLPIVz6nfeOFzUj4dbs45s= Subject key identifier: 1E:33:47:EB:8A:AC:2C:2A:C6:E5:2A:BD:33:E2:2E:DD:99:3A:06:69 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 7EA0DC833E3E23ABE084810F485932C97B8D906C Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/461f4724-f7c6-4955-97f0-5fb9ae192315.roa Signing time: Mon 09 Dec 2024 00:00:00 +0000 ROA not before: Mon 09 Dec 2024 00:00:00 +0000 ROA not after: Mon 13 Jan 2025 23:59:59 +0000 asID: 16509 IP address blocks: 184.169.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Dec 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a0:dc:83:3e:3e:23:ab:e0:84:81:0f:48:59:32:c9:7b:8d:90:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Dec 9 00:00:00 2024 GMT Not After : Jan 13 23:59:59 2025 GMT Subject: serialNumber=2d12b1f54e10004f1d77eacfb3b453f8e6ffa6a833fee76c606085dbe21d3853, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2d:e4:8d:e8:16:77:6a:c5:35:73:64:58:81: 15:25:31:eb:4d:c6:05:6e:d2:99:fa:eb:20:fb:09: 70:1c:32:27:4d:6f:68:33:1a:b5:9b:a9:a5:42:b0: 98:af:6b:9c:31:b0:ef:e8:b8:9d:76:65:5b:b2:4f: bd:4a:d4:dc:7e:f9:ee:0f:45:13:9a:fe:bb:55:3f: 85:9d:43:c6:54:46:05:24:76:ef:ae:39:47:c5:c6: 93:56:b3:02:a3:19:bc:fc:54:ef:9e:0a:8a:d6:d4: 50:0d:e8:f9:9c:78:65:62:c5:b8:c4:3e:98:67:eb: d9:3b:0f:3b:77:c6:c2:08:01:13:ae:1c:57:fa:b6: 90:ab:dc:12:19:55:5b:a6:73:01:19:5e:93:8e:65: 95:5a:5f:38:cd:ee:0a:9e:c4:16:8b:55:2e:d7:1f: ab:82:81:c6:2d:c3:1e:91:4f:6c:a9:5b:1b:5c:d9: 51:49:fb:f0:45:e9:24:c2:fa:d6:20:f7:7a:7f:a1: 35:0e:a2:29:17:95:18:f5:0b:f3:c9:50:2c:15:20: e4:48:3d:83:5b:30:00:86:07:52:60:4e:06:59:6e: 74:07:fe:e3:55:0c:e9:97:b0:2b:fe:bf:4e:e1:4e: 45:27:2e:42:0a:4c:e4:ad:2b:a0:9b:1f:55:5b:f4: 30:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:33:47:EB:8A:AC:2C:2A:C6:E5:2A:BD:33:E2:2E:DD:99:3A:06:69 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/461f4724-f7c6-4955-97f0-5fb9ae192315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.169.128.0/17 Signature Algorithm: sha256WithRSAEncryption 7e:29:1c:f9:96:49:3a:3b:2d:16:f1:c8:03:0a:6a:c0:70:4e: 4e:a3:b2:34:05:0b:f0:49:d8:3d:7b:d1:36:d8:3d:5d:83:68: f9:25:45:13:29:e5:81:4d:84:be:eb:f2:a5:d8:a3:f3:9d:aa: 06:cc:38:c3:c1:76:90:47:1c:30:00:6d:cf:a0:34:95:48:b1: f7:09:09:ae:b6:1e:76:0e:19:c5:9d:b6:39:e9:12:44:b9:d6: 58:84:23:8c:b3:36:e6:11:7f:e2:9d:a3:80:86:7f:4a:96:14: 24:b4:29:b2:78:d0:f4:6d:af:f0:5d:2c:c1:4b:dc:3b:35:71: ec:1c:21:6f:23:25:49:25:7c:2f:6f:f5:84:78:50:dd:7b:2c: 12:e2:bc:0e:00:22:fc:08:e9:78:06:64:c5:4f:f9:b3:fe:6f: 61:fe:38:8c:7d:9b:34:99:2c:23:51:e5:7e:9a:f2:e9:5e:77: 4e:15:2f:e5:3d:22:cc:92:ac:28:88:be:85:a2:d7:d0:db:6f: f7:55:ef:43:63:8f:cd:d6:4f:ac:2a:1a:23:ac:d1:f1:50:dc: c6:3a:c3:de:28:36:48:c9:d7:ed:dc:1f:2d:a4:0d:13:bb:38: db:ed:e4:bc:2e:db:e5:f8:45:6d:13:55:1c:e4:79:00:bf:de: f1:19:91:d5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfqDcgz4+I6vghIEPSFkyyXuNkGwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjQxMjA5MDAwMDAwWhcNMjUwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDEyYjFmNTRlMTAwMDRmMWQ3N2VhY2ZiM2I0NTNmOGU2 ZmZhNmE4MzNmZWU3NmM2MDYwODVkYmUyMWQzODUzMS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYLeSN6BZ3asU1c2RYgRUlMetNxgVu0pn66yD7CXAcMidN b2gzGrWbqaVCsJiva5wxsO/ouJ12ZVuyT71K1Nx++e4PRROa/rtVP4WdQ8ZURgUk du+uOUfFxpNWswKjGbz8VO+eCorW1FAN6PmceGVixbjEPphn69k7Dzt3xsIIAROu HFf6tpCr3BIZVVumcwEZXpOOZZVaXzjN7gqexBaLVS7XH6uCgcYtwx6RT2ypWxtc 2VFJ+/BF6STC+tYg93p/oTUOoikXlRj1C/PJUCwVIORIPYNbMACGB1JgTgZZbnQH /uNVDOmXsCv+v07hTkUnLkIKTOStK6CbH1Vb9DCdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHjNH64qsLCrG5Sq9M+Iu3Zk6BmkwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjLzQ2MWY0NzI0LWY3YzYtNDk1NS05N2YwLTVmYjlhZTE5MjMxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAe4qYAwDQYJKoZIhvcNAQELBQADggEBAH4pHPmWSTo7LRbxyAMKasBwTk6j sjQFC/BJ2D170TbYPV2DaPklRRMp5YFNhL7r8qXYo/OdqgbMOMPBdpBHHDAAbc+g NJVIsfcJCa62HnYOGcWdtjnpEkS51liEI4yzNuYRf+Kdo4CGf0qWFCS0KbJ40PRt r/BdLMFL3Ds1cewcIW8jJUklfC9v9YR4UN17LBLivA4AIvwI6XgGZMVP+bP+b2H+ OIx9mzSZLCNR5X6a8uled04VL+U9IsySrCiIvoWi19Dbb/dV70Njj83WT6wqGiOs 0fFQ3MY6w94oNkjJ1+3cHy2kDRO7ONvt5Lwu2+X4RW0TVRzkeQC/3vEZkdU= -----END CERTIFICATE-----Generated at Tue Dec 10 19:46:52 2024 by rpki-client on console-ams.rpki-client.org