$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bff8695d-f830-4f53-a99f-3c59e3b90b32.roa File: bff8695d-f830-4f53-a99f-3c59e3b90b32.roa (raw, json) Hash identifier: /VP5GPpejd/OM8Vy5ScWxMdjAWeqAuCme65YXIaO0sg= Subject key identifier: 00:5A:C8:D4:2F:C2:FD:09:92:CA:D9:74:AF:7D:AF:1D:28:45:9E:98 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5F3F63833C6B2EFCE3C823430D2E50456DC52A69 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bff8695d-f830-4f53-a99f-3c59e3b90b32.roa Signing time: Sat 07 Dec 2024 00:00:00 +0000 ROA not before: Sat 07 Dec 2024 00:00:00 +0000 ROA not after: Sat 11 Jan 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Dec 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3f:63:83:3c:6b:2e:fc:e3:c8:23:43:0d:2e:50:45:6d:c5:2a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Dec 7 00:00:00 2024 GMT Not After : Jan 11 23:59:59 2025 GMT Subject: serialNumber=97ac7c78c9a60fd48202efe5afe34ac952ae08d0ff44b177c85e6bd66e7b7238, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:95:82:60:2b:13:21:40:43:23:15:f6:5c:f9: 3a:19:33:58:36:83:52:89:24:28:89:15:4a:78:c6: c5:4e:4b:fd:85:ae:10:2e:80:5e:a3:69:d3:ca:7a: 13:15:b1:6a:ba:19:d0:34:ee:72:8d:23:0f:37:19: 02:82:2b:bd:fa:6e:87:1c:40:02:52:78:37:f6:b4: cb:a5:bd:86:8c:66:f9:5a:f9:c7:90:91:9e:9b:b1: 7e:ab:0c:56:4c:9d:c6:cb:c9:08:4a:be:bd:a7:ef: 55:29:df:0a:80:5f:02:0e:87:22:9b:90:19:68:97: aa:15:d3:7e:34:41:03:4e:f3:be:14:22:93:59:5b: 66:17:4d:23:7b:6d:43:5d:fe:1c:2b:19:d9:0d:f6: 22:da:f5:50:3e:66:75:d9:d0:95:31:c9:24:03:cf: 26:5e:4f:db:63:b5:39:49:ff:8d:d0:1f:96:2b:28: 8d:bb:b2:2b:2c:88:fc:cb:c9:5b:6a:a5:6a:6e:d7: fa:d5:57:6a:f5:d6:c4:ca:38:11:3f:ad:c6:d4:c0: a1:b6:73:4e:20:f0:53:20:07:da:0a:e6:ab:0b:94: 0e:03:f9:34:0c:49:f8:0a:cd:2d:4d:d3:06:c2:d7: c7:11:8b:cd:64:59:21:fb:47:d0:b6:b5:34:55:e3: a4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5A:C8:D4:2F:C2:FD:09:92:CA:D9:74:AF:7D:AF:1D:28:45:9E:98 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bff8695d-f830-4f53-a99f-3c59e3b90b32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.13.0/24 Signature Algorithm: sha256WithRSAEncryption 30:4b:67:73:8c:28:06:60:14:e5:4e:1a:f3:94:e9:9e:15:a8: 53:be:7b:8f:0e:85:7f:82:16:6c:a0:ca:2e:9e:bd:08:83:27: 7a:4e:e6:c3:58:e7:61:24:84:d9:e0:59:96:9b:27:b9:60:26: 08:4b:74:ca:83:0a:3f:77:50:b0:1b:63:61:5d:de:8b:f0:77: c1:3b:6b:61:1c:8d:c6:6c:4d:d5:a1:d6:cf:1a:0a:f4:0d:0c: 88:a3:b0:32:5a:e1:fc:56:de:8f:02:19:6f:b7:08:ba:20:5e: 43:22:26:04:9e:21:32:e8:df:66:de:95:c6:63:c0:94:a1:c5: ec:94:89:07:ec:4c:21:97:f2:45:39:f2:4b:5e:31:b9:62:8e: 9e:46:01:f8:7a:3e:71:a2:f6:0b:aa:58:fb:33:08:5f:9d:7a: 44:29:97:49:a9:8d:83:a1:06:f4:d9:27:55:4b:25:8d:86:a3: be:60:42:9a:c4:90:06:4c:15:74:9c:63:2f:cd:b4:34:de:58: c3:fb:f0:ab:2d:e8:9f:a5:d9:bc:e4:a4:75:03:73:c2:4b:42: e4:6d:6c:e5:dc:62:84:c8:c2:bd:3c:86:ce:6f:72:28:aa:1a: 16:3c:a0:4e:51:2b:ba:c6:2c:a6:70:0d:0d:78:a5:19:f1:6d: 05:c1:09:62 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXz9jgzxrLvzjyCNDDS5QRW3FKmkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjQxMjA3MDAwMDAwWhcNMjUwMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5N2FjN2M3OGM5YTYwZmQ0ODIwMmVmZTVhZmUzNGFjOTUy YWUwOGQwZmY0NGIxNzdjODVlNmJkNjZlN2I3MjM4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCklYJgKxMhQEMjFfZc+ToZM1g2g1KJJCiJFUp4xsVOS/2F rhAugF6jadPKehMVsWq6GdA07nKNIw83GQKCK736boccQAJSeDf2tMulvYaMZvla +ceQkZ6bsX6rDFZMncbLyQhKvr2n71Up3wqAXwIOhyKbkBlol6oV0340QQNO874U IpNZW2YXTSN7bUNd/hwrGdkN9iLa9VA+ZnXZ0JUxySQDzyZeT9tjtTlJ/43QH5Yr KI27sissiPzLyVtqpWpu1/rVV2r11sTKOBE/rcbUwKG2c04g8FMgB9oK5qsLlA4D +TQMSfgKzS1N0wbC18cRi81kWSH7R9C2tTRV46R/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAFrI1C/C/QmSytl0r32vHShFnpgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2JmZjg2OTVkLWY4MzAtNGY1My1hOTlmLTNjNTllM2I5MGIzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYA0wDQYJKoZIhvcNAQELBQADggEBADBLZ3OMKAZgFOVOGvOU6Z4VqFO+ e48OhX+CFmygyi6evQiDJ3pO5sNY52EkhNngWZabJ7lgJghLdMqDCj93ULAbY2Fd 3ovwd8E7a2EcjcZsTdWh1s8aCvQNDIijsDJa4fxW3o8CGW+3CLogXkMiJgSeITLo 32belcZjwJShxeyUiQfsTCGX8kU58kteMblijp5GAfh6PnGi9guqWPszCF+dekQp l0mpjYOhBvTZJ1VLJY2Go75gQprEkAZMFXScYy/NtDTeWMP78Kst6J+l2bzkpHUD c8JLQuRtbOXcYoTIwr08hs5vciiqGhY8oE5RK7rGLKZwDQ14pRnxbQXBCWI= -----END CERTIFICATE-----Generated at Wed Dec 25 18:20:46 2024 by rpki-client on console-fra.rpki-client.org