$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e3544f10-f318-46d7-ba7e-86bfdebd892c.roa File: e3544f10-f318-46d7-ba7e-86bfdebd892c.roa (raw, json) Hash identifier: s0ce0/92QY/+xotLGpbyCF7AnA5CA7HXCrz56nNIkRo= Subject key identifier: 2B:D3:4C:9E:B0:EE:F6:4A:97:18:6B:CE:2C:24:55:95:B8:C6:A0:6E Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 7E358A2A3973218CB8A0A380112E311F232825E1 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e3544f10-f318-46d7-ba7e-86bfdebd892c.roa Signing time: Fri 16 Aug 2024 00:00:00 +0000 ROA not before: Fri 16 Aug 2024 00:00:00 +0000 ROA not after: Fri 20 Sep 2024 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Sep 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:35:8a:2a:39:73:21:8c:b8:a0:a3:80:11:2e:31:1f:23:28:25:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 16 00:00:00 2024 GMT Not After : Sep 20 23:59:59 2024 GMT Subject: serialNumber=2a5de2e068f0a72e0521262a1963bc82186c710a19f1ee5bbad1b99f2a4e141d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:82:e5:3c:2a:29:9b:35:e8:99:ec:4b:76:01: 73:1b:96:ad:ab:38:21:e4:5e:51:a7:4a:31:8a:36: a1:d8:a6:4e:3e:60:0f:06:b2:b2:1b:c3:5e:6b:8d: 2c:32:27:7b:cb:a0:b8:fd:cf:49:dc:05:6f:2a:d2: 81:56:d1:b0:37:9a:ef:ca:ed:52:7d:6d:75:4e:2a: 70:2c:ba:a3:2a:85:5f:59:fa:ea:b2:15:c9:8b:a2: 41:30:46:2c:bf:88:f5:f2:37:12:8b:53:d2:d3:fa: c3:c5:58:10:d5:7b:bd:85:41:4d:d2:c9:2d:df:7a: e5:f4:fe:dc:d3:7a:96:3d:26:58:bb:e1:70:ec:f2: c8:56:d4:53:a7:4f:b4:eb:59:1d:a7:c4:42:ad:e8: 80:fb:d9:8f:4b:82:b2:1d:84:97:99:c4:22:69:f6: 74:6c:d7:f2:56:cc:62:33:30:dd:97:b6:80:6d:f7: 53:fc:15:14:6e:87:6c:e1:81:2c:9a:ea:3e:76:01: 1b:b4:28:16:b7:51:da:f9:f0:73:4b:04:73:16:5a: 2c:65:69:d8:97:48:96:f9:66:ec:01:d9:04:cc:e7: e1:ea:aa:61:6c:e9:cb:23:6d:17:c8:9c:4f:d8:c5: 5a:ff:f9:c5:ea:86:50:a7:ef:d4:02:27:19:2a:a0: 81:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D3:4C:9E:B0:EE:F6:4A:97:18:6B:CE:2C:24:55:95:B8:C6:A0:6E X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e3544f10-f318-46d7-ba7e-86bfdebd892c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.32.0/20 Signature Algorithm: sha256WithRSAEncryption 3b:37:60:fe:bc:bc:c4:d1:51:2d:91:00:ef:8a:9d:59:4c:e4: 66:33:0e:fc:48:86:28:e9:7f:23:46:e9:86:85:13:46:23:4a: 3a:66:ac:cb:3e:e6:f2:2e:d8:88:6a:86:33:c7:1b:26:16:2b: 22:1f:80:66:f4:b6:60:1e:67:5c:0c:ad:1d:c2:64:8a:4b:45: 82:c4:e8:fd:ff:20:54:3b:e2:a3:20:35:e5:3e:a8:e4:21:89: 35:57:80:65:62:7c:21:13:98:79:03:0e:03:e7:1e:3d:15:7a: 39:fd:3c:76:4c:5d:39:fe:f7:dc:21:d4:44:06:d0:a5:b4:79: 09:7a:fe:01:49:b5:23:f0:05:e7:4a:2c:80:cc:ab:27:15:f4: 79:9b:48:2b:fb:16:01:6f:43:de:91:55:30:a3:f1:cc:46:d9: 4c:a2:3e:7b:01:14:bf:27:2a:03:2a:0b:bf:e5:12:83:6c:aa: a6:63:09:0d:48:cf:fc:50:df:13:30:f4:ae:e6:80:15:34:ea: ee:da:04:c0:86:ce:02:23:9f:b1:62:d4:b6:22:c3:2a:ee:77: 6c:2a:b0:c1:e7:79:6a:d8:11:32:52:b8:31:9a:74:10:13:2a: 0f:d5:1c:61:82:31:b7:77:32:ae:87:1f:1c:48:c6:dd:f3:9e: 4e:37:9b:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfjWKKjlzIYy4oKOAES4xHyMoJeEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjQwODE2MDAwMDAwWhcNMjQwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTVkZTJlMDY4ZjBhNzJlMDUyMTI2MmExOTYzYmM4MjE4 NmM3MTBhMTlmMWVlNWJiYWQxYjk5ZjJhNGUxNDFkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiguU8KimbNeiZ7Et2AXMblq2rOCHkXlGnSjGKNqHYpk4+ YA8GsrIbw15rjSwyJ3vLoLj9z0ncBW8q0oFW0bA3mu/K7VJ9bXVOKnAsuqMqhV9Z +uqyFcmLokEwRiy/iPXyNxKLU9LT+sPFWBDVe72FQU3SyS3feuX0/tzTepY9Jli7 4XDs8shW1FOnT7TrWR2nxEKt6ID72Y9LgrIdhJeZxCJp9nRs1/JWzGIzMN2XtoBt 91P8FRRuh2zhgSya6j52ARu0KBa3Udr58HNLBHMWWixladiXSJb5ZuwB2QTM5+Hq qmFs6csjbRfInE/YxVr/+cXqhlCn79QCJxkqoIFDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUK9NMnrDu9kqXGGvOLCRVlbjGoG4wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2UzNTQ0ZjEwLWYzMTgtNDZkNy1iYTdlLTg2YmZkZWJkODkyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYCAwDQYJKoZIhvcNAQELBQADggEBADs3YP68vMTRUS2RAO+KnVlM5GYz DvxIhijpfyNG6YaFE0YjSjpmrMs+5vIu2IhqhjPHGyYWKyIfgGb0tmAeZ1wMrR3C ZIpLRYLE6P3/IFQ74qMgNeU+qOQhiTVXgGVifCETmHkDDgPnHj0Vejn9PHZMXTn+ 99wh1EQG0KW0eQl6/gFJtSPwBedKLIDMqycV9HmbSCv7FgFvQ96RVTCj8cxG2Uyi PnsBFL8nKgMqC7/lEoNsqqZjCQ1Iz/xQ3xMw9K7mgBU06u7aBMCGzgIjn7Fi1LYi wyrud2wqsMHneWrYETJSuDGadBATKg/VHGGCMbd3Mq6HHxxIxt3znk43myQ= -----END CERTIFICATE-----Generated at Sat Sep 7 16:47:10 2024 by rpki-client on console-fra.rpki-client.org