$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/929a6eaf-d0e3-4af6-ad8d-686a791be7c3.roa File: 929a6eaf-d0e3-4af6-ad8d-686a791be7c3.roa (raw, json) Hash identifier: sNCL/PAUn/VwIhQzGj4yijKEOvSg17P3+/TeqznBoQY= Subject key identifier: 5A:6C:A3:28:F5:99:DC:75:33:59:CA:C4:C5:F3:EF:24:2C:9E:AE:03 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 67CD78F971F2DB0A3D0B09D4556A5AC29D35EDDD Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/929a6eaf-d0e3-4af6-ad8d-686a791be7c3.roa Signing time: Mon 07 Oct 2024 00:00:00 +0000 ROA not before: Mon 07 Oct 2024 00:00:00 +0000 ROA not after: Mon 11 Nov 2024 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:cd:78:f9:71:f2:db:0a:3d:0b:09:d4:55:6a:5a:c2:9d:35:ed:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 7 00:00:00 2024 GMT Not After : Nov 11 23:59:59 2024 GMT Subject: serialNumber=7d915748318b284912f891b29da938dc0f79fbef39c0c550700a0bf1cbcdefe6, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4c:ae:25:9c:18:9b:1c:8e:f0:8c:00:59:83: 89:2b:19:f9:20:c3:a6:d3:79:6a:33:d4:f7:91:be: ee:36:ec:f4:a4:46:26:0b:40:bc:62:6d:2b:aa:57: 47:e0:2e:99:d2:b1:d4:60:7b:42:86:09:87:bc:8c: 9c:88:28:25:6d:78:58:ed:12:96:a6:4d:b7:5d:af: 77:0c:21:73:3e:92:48:fe:af:66:b5:c8:45:37:02: 94:66:91:08:be:8f:43:86:dc:92:a1:ba:38:ba:ce: 68:dd:d1:aa:85:ed:68:c5:c3:df:33:70:7b:d8:f5: 1b:70:ac:17:ec:08:7e:15:4c:56:3c:f3:ee:10:bc: 94:6d:70:23:41:ba:ad:31:bd:00:ab:d9:42:4b:80: d3:73:28:bd:ab:94:6b:20:60:5a:a8:b9:ab:81:88: e6:63:a6:e3:83:c2:9a:9c:f8:de:2b:d9:a3:5e:9c: 45:7a:53:26:30:2c:ce:52:32:0f:d9:77:b2:3c:42: 18:8c:7e:22:e5:3d:5a:3a:de:ec:ea:e7:25:43:3b: 5a:67:1b:76:15:ee:e6:3e:8b:11:6a:32:61:c9:10: e0:b8:47:51:0c:82:cc:88:88:6c:16:78:4d:a1:c5: 3d:74:b3:42:bf:1e:83:f8:52:12:12:41:fd:2b:d1: 16:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6C:A3:28:F5:99:DC:75:33:59:CA:C4:C5:F3:EF:24:2C:9E:AE:03 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/929a6eaf-d0e3-4af6-ad8d-686a791be7c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.144.0/20 Signature Algorithm: sha256WithRSAEncryption 05:ba:95:85:2d:8c:45:1a:1d:dc:f9:cf:5c:4c:6b:03:7a:53: f4:a6:63:ed:28:1e:d6:17:a9:8a:88:5e:3a:56:2d:38:87:2c: 69:db:ae:f1:36:58:79:57:e3:0e:b4:e0:14:dd:59:ba:95:25: e5:5f:1b:61:26:a5:ae:23:44:03:7e:46:3e:0b:a8:45:85:42: 8a:3e:72:eb:91:04:07:b1:a4:f3:a4:63:01:e0:9c:7f:72:f2: ff:19:96:eb:81:f4:c2:61:fb:eb:9f:60:0d:f3:9d:8c:86:95: 79:27:61:96:04:d0:ee:55:ed:e2:00:92:fd:89:a4:de:8b:02: 78:85:2c:fd:61:97:02:22:4b:a1:5f:34:cf:9d:5c:cd:4e:4e: df:ea:3c:49:c9:e3:e8:c4:48:0a:52:c4:3b:41:22:88:95:8c: bb:03:d5:89:24:cc:89:34:39:43:31:e7:c9:11:dd:41:1a:70: fc:73:1e:f2:59:9f:51:53:e9:02:fc:0f:f8:7a:9d:51:93:bb: e4:ba:1d:53:9c:00:b7:3a:77:a2:8f:1b:45:9f:60:28:57:d4: f8:5d:22:fe:cf:1a:e1:a0:a5:a6:3c:b8:fe:a7:94:c1:01:84: 0b:31:dd:2b:9e:bb:c2:03:d5:d2:eb:6f:86:f9:42:ce:bd:2c: 9b:24:ce:1b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ814+XHy2wo9CwnUVWpawp017d0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjQxMDA3MDAwMDAwWhcNMjQxMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZDkxNTc0ODMxOGIyODQ5MTJmODkxYjI5ZGE5MzhkYzBm NzlmYmVmMzljMGM1NTA3MDBhMGJmMWNiY2RlZmU2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqTK4lnBibHI7wjABZg4krGfkgw6bTeWoz1PeRvu427PSk RiYLQLxibSuqV0fgLpnSsdRge0KGCYe8jJyIKCVteFjtEpamTbddr3cMIXM+kkj+ r2a1yEU3ApRmkQi+j0OG3JKhuji6zmjd0aqF7WjFw98zcHvY9RtwrBfsCH4VTFY8 8+4QvJRtcCNBuq0xvQCr2UJLgNNzKL2rlGsgYFqouauBiOZjpuODwpqc+N4r2aNe nEV6UyYwLM5SMg/Zd7I8QhiMfiLlPVo63uzq5yVDO1pnG3YV7uY+ixFqMmHJEOC4 R1EMgsyIiGwWeE2hxT10s0K/HoP4UhISQf0r0RapAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWmyjKPWZ3HUzWcrExfPvJCyergMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzkyOWE2ZWFmLWQwZTMtNGFmNi1hZDhkLTY4NmE3OTFiZTdjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYJAwDQYJKoZIhvcNAQELBQADggEBAAW6lYUtjEUaHdz5z1xMawN6U/Sm Y+0oHtYXqYqIXjpWLTiHLGnbrvE2WHlX4w604BTdWbqVJeVfG2Empa4jRAN+Rj4L qEWFQoo+cuuRBAexpPOkYwHgnH9y8v8ZluuB9MJh++ufYA3znYyGlXknYZYE0O5V 7eIAkv2JpN6LAniFLP1hlwIiS6FfNM+dXM1OTt/qPEnJ4+jESApSxDtBIoiVjLsD 1YkkzIk0OUMx58kR3UEacPxzHvJZn1FT6QL8D/h6nVGTu+S6HVOcALc6d6KPG0Wf YChX1PhdIv7PGuGgpaY8uP6nlMEBhAsx3Sueu8ID1dLrb4b5Qs69LJskzhs= -----END CERTIFICATE-----Generated at Tue Oct 22 17:17:33 2024 by rpki-client on console-fra.rpki-client.org