$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa File: 9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa (raw, json) Hash identifier: uPmzBeJX/JhxkRFiWoKDkQojjbdFwmIcBEMsRCiDVEU= Subject key identifier: B6:9B:67:AC:65:0B:64:6A:46:4A:EF:89:57:D3:64:7B:07:A6:C5:31 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 1F8369457D3B157DF6487D094B47E3CE18C54CA6 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa Signing time: Sat 07 Dec 2024 00:00:00 +0000 ROA not before: Sat 07 Dec 2024 00:00:00 +0000 ROA not after: Sat 11 Jan 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Dec 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:83:69:45:7d:3b:15:7d:f6:48:7d:09:4b:47:e3:ce:18:c5:4c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Dec 7 00:00:00 2024 GMT Not After : Jan 11 23:59:59 2025 GMT Subject: serialNumber=cd9d3d4cb683c7b5c1c9b3010e7e99a1897a4a9da7e8a3ec3c12f1f9fdfdd954, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:25:f8:cf:4a:46:40:ab:53:2a:b9:02:44:50: 9a:f7:67:4e:08:66:c5:f5:8c:a8:e7:47:a8:64:9b: 47:2b:62:c6:41:95:21:41:bd:88:ff:54:e8:cd:29: b8:54:ca:97:6e:9c:91:4f:64:41:2a:91:fa:8a:cc: ee:ab:ea:a4:e6:c5:0a:91:8e:e2:2e:f9:c0:c1:dd: 1c:53:83:90:dd:e7:43:e3:1c:25:a5:d1:9b:01:d0: 00:d2:b4:90:ee:c4:c4:08:b5:7c:40:c4:b9:0b:bd: 59:44:ec:2a:21:d0:53:cf:a9:73:50:dd:6c:3e:6a: 2a:da:e2:ed:e6:c0:54:12:08:a7:77:f3:58:d6:74: cc:e2:fc:d3:84:a6:a2:c1:b7:1a:10:65:e3:ee:93: f5:67:69:57:26:29:1c:80:54:de:fe:54:ea:2c:ed: 7f:16:00:17:06:b8:4b:e6:bc:f5:79:a8:c9:60:39: 89:04:73:56:de:3b:4e:cb:5e:fe:85:6f:99:ae:15: c4:9d:c6:1c:01:85:80:df:2d:e2:4d:85:bc:01:1f: 3d:86:d3:82:63:b2:cf:ec:bf:e6:78:f2:5e:b1:a0: b5:5b:47:26:2d:33:20:86:b0:e3:b4:05:7f:4d:e1: 14:8e:4a:03:4d:d8:77:00:6d:30:13:d2:24:26:f3: 09:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9B:67:AC:65:0B:64:6A:46:4A:EF:89:57:D3:64:7B:07:A6:C5:31 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.12.0/24 Signature Algorithm: sha256WithRSAEncryption 50:b4:85:91:07:4d:64:cb:44:22:e3:fd:8a:9d:5d:c8:d6:15: 40:c5:04:35:77:25:6d:f3:74:e3:c4:50:fa:38:9c:eb:92:2a: 00:cf:fb:3b:e1:da:97:17:05:b8:2d:70:e1:de:7a:a1:88:6f: 86:29:eb:b3:24:f5:d2:bc:69:c9:63:aa:17:81:c6:f7:3e:f3: e8:83:36:e1:2e:da:d0:dd:67:2c:74:c4:ea:93:66:cb:89:41: 4f:00:17:b7:06:23:24:5d:eb:1f:d6:85:70:03:e3:c1:58:8d: 2c:f5:e6:29:d9:b5:54:e1:bf:bd:82:47:5a:f6:1e:bf:68:85: 5c:66:a1:ad:96:33:84:8d:0a:67:31:ea:52:cc:7e:82:95:ce: 96:c5:59:ba:4f:4f:2e:90:d1:b8:14:a3:9e:c9:19:95:28:fe: 99:1f:f1:b6:3b:5e:96:ea:a4:64:5f:6b:27:40:21:a6:f1:f3: 29:70:10:c3:3e:6a:bf:12:de:5d:2a:1f:2b:6f:49:b9:e1:0b: 34:91:3c:7c:76:22:33:32:ba:61:6f:8f:d3:de:50:e3:f2:cb: 31:3d:fc:32:b2:f3:41:d3:ec:b4:30:db:9b:62:0f:0b:e6:8e: 8d:44:17:ed:fc:b8:2f:a6:8b:a1:99:92:2d:22:83:81:f7:ad: 4b:6b:69:62 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH4NpRX07FX32SH0JS0fjzhjFTKYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjQxMjA3MDAwMDAwWhcNMjUwMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDlkM2Q0Y2I2ODNjN2I1YzFjOWIzMDEwZTdlOTlhMTg5 N2E0YTlkYTdlOGEzZWMzYzEyZjFmOWZkZmRkOTU0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwJfjPSkZAq1MquQJEUJr3Z04IZsX1jKjnR6hkm0crYsZB lSFBvYj/VOjNKbhUypdunJFPZEEqkfqKzO6r6qTmxQqRjuIu+cDB3RxTg5Dd50Pj HCWl0ZsB0ADStJDuxMQItXxAxLkLvVlE7Coh0FPPqXNQ3Ww+aira4u3mwFQSCKd3 81jWdMzi/NOEpqLBtxoQZePuk/VnaVcmKRyAVN7+VOos7X8WABcGuEvmvPV5qMlg OYkEc1beO07LXv6Fb5muFcSdxhwBhYDfLeJNhbwBHz2G04Jjss/sv+Z48l6xoLVb RyYtMyCGsOO0BX9N4RSOSgNN2HcAbTAT0iQm8wlhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtptnrGULZGpGSu+JV9NkewemxTEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzlmY2Q5ZDZhLTcyNzItNGMxZS1iNDZjLWNjOTRlNTgzMjJlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAwwDQYJKoZIhvcNAQELBQADggEBAFC0hZEHTWTLRCLj/YqdXcjWFUDF BDV3JW3zdOPEUPo4nOuSKgDP+zvh2pcXBbgtcOHeeqGIb4Yp67Mk9dK8acljqheB xvc+8+iDNuEu2tDdZyx0xOqTZsuJQU8AF7cGIyRd6x/WhXAD48FYjSz15inZtVTh v72CR1r2Hr9ohVxmoa2WM4SNCmcx6lLMfoKVzpbFWbpPTy6Q0bgUo57JGZUo/pkf 8bY7XpbqpGRfaydAIabx8ylwEMM+ar8S3l0qHytvSbnhCzSRPHx2IjMyumFvj9Pe UOPyyzE9/DKy80HT7LQw25tiDwvmjo1EF+38uC+mi6GZki0ig4H3rUtraWI= -----END CERTIFICATE-----Generated at Wed Dec 25 18:20:46 2024 by rpki-client on console-fra.rpki-client.org