$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05b94cff-1fb1-429d-8848-24434f3df007.roa File: 05b94cff-1fb1-429d-8848-24434f3df007.roa (raw, json) Hash identifier: MJUdcNzBJWaD+g0IFtXmdqfBotBUWnO8/YsCqWUYXxI= Subject key identifier: 59:90:8E:BD:EE:07:46:2B:0A:59:0C:6D:51:8C:59:A8:57:45:2D:03 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 619C203627EFEEC72F92F9E42E3E096D07527811 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05b94cff-1fb1-429d-8848-24434f3df007.roa Signing time: Tue 29 Oct 2024 00:00:00 +0000 ROA not before: Tue 29 Oct 2024 00:00:00 +0000 ROA not after: Tue 03 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:9c:20:36:27:ef:ee:c7:2f:92:f9:e4:2e:3e:09:6d:07:52:78:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 29 00:00:00 2024 GMT Not After : Dec 3 23:59:59 2024 GMT Subject: serialNumber=0c79ce8486a739dcf69caccd07eb074e072b0cd6eafa81188aa60de04f0766f2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3d:44:94:67:33:37:0b:65:cf:78:15:03:ca: ef:d8:f6:a1:e5:80:0f:03:10:ef:09:6c:1a:81:5f: 0e:2c:c3:4f:dd:92:73:29:94:77:ba:37:06:dd:2f: 19:ab:28:2f:d4:18:a9:fd:15:9a:12:09:a3:0e:e0: 56:9c:f5:72:f5:a3:ac:e1:f7:d1:6f:d1:d4:44:06: 9b:0d:92:f1:5e:b1:26:7a:c1:f3:54:55:62:ab:49: 3f:74:d1:df:c7:2a:78:17:7b:57:ab:51:f8:4f:76: be:88:8b:10:8c:43:2b:19:8c:f5:a9:73:99:84:b1: 50:77:62:d4:b3:a7:2f:5f:27:52:62:89:18:56:2c: 84:51:64:f7:46:f9:9d:17:d5:67:7f:3a:b2:08:ab: c5:1d:0e:c4:db:01:b8:1e:ef:e0:e1:0a:cd:34:ff: 8f:ea:6c:ca:16:84:e3:27:7f:26:0c:fa:90:75:13: 40:c3:aa:7a:db:da:0a:54:28:ad:7f:e7:ae:ff:f7: 02:5e:47:a5:03:8a:9d:2a:fc:28:4b:da:e4:5c:20: 32:e8:8c:97:da:35:e4:47:c9:6a:90:a0:21:59:40: 23:a0:8a:2e:6f:15:b6:9d:14:a0:56:14:9a:6a:1f: e2:5b:29:57:9f:0f:78:ef:39:0c:45:51:49:d6:e3: dd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:90:8E:BD:EE:07:46:2B:0A:59:0C:6D:51:8C:59:A8:57:45:2D:03 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05b94cff-1fb1-429d-8848-24434f3df007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.227.0/24 Signature Algorithm: sha256WithRSAEncryption 87:b1:a9:2a:cb:2a:f0:7c:c5:d7:6c:cb:da:a3:7f:d4:4d:d7: 14:57:d0:f5:f2:36:81:20:5e:c1:38:51:59:3a:74:f6:70:26: 34:0b:79:92:83:80:c2:22:fb:87:6b:63:f1:6e:ea:9c:0d:d8: 23:ff:d5:24:00:85:8a:62:bd:a6:a3:b7:31:f3:89:03:fe:04: 5e:4c:98:ef:6a:42:f7:e2:cb:a9:b2:9c:6c:cb:48:22:cc:db: f0:e9:25:19:a4:b8:5a:ac:dc:65:83:35:4b:2c:26:43:3c:1c: 89:4f:98:e0:84:31:84:29:55:1c:29:32:c2:11:91:cc:11:95: 78:7b:40:6a:d4:c4:78:38:e9:cf:66:3f:18:25:a4:e5:2b:be: 14:41:d6:f6:dd:ed:cd:2b:2c:99:5c:e0:da:7f:5e:1c:9c:89: 69:be:05:1a:df:6b:8f:91:8f:e0:c3:5a:2d:76:c1:fc:15:31: 13:6f:85:a3:f2:fa:ba:29:f0:b8:41:e8:96:b4:63:15:a7:a5: 9e:2d:69:63:8d:e1:b0:9e:2d:d7:ac:53:c2:de:10:cb:d3:8c: 96:68:58:9f:d3:80:41:ad:da:bb:7e:b7:c5:51:5d:fe:8a:bf: 32:6e:45:50:fc:f1:dd:c2:1e:3a:08:eb:69:f9:66:98:f8:09: b3:59:da:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYZwgNifv7scvkvnkLj4JbQdSeBEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMDI5MDAwMDAwWhcNMjQxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzc5Y2U4NDg2YTczOWRjZjY5Y2FjY2QwN2ViMDc0ZTA3 MmIwY2Q2ZWFmYTgxMTg4YWE2MGRlMDRmMDc2NmYyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXPUSUZzM3C2XPeBUDyu/Y9qHlgA8DEO8JbBqBXw4sw0/d knMplHe6NwbdLxmrKC/UGKn9FZoSCaMO4Fac9XL1o6zh99Fv0dREBpsNkvFesSZ6 wfNUVWKrST900d/HKngXe1erUfhPdr6IixCMQysZjPWpc5mEsVB3YtSzpy9fJ1Ji iRhWLIRRZPdG+Z0X1Wd/OrIIq8UdDsTbAbge7+DhCs00/4/qbMoWhOMnfyYM+pB1 E0DDqnrb2gpUKK1/567/9wJeR6UDip0q/ChL2uRcIDLojJfaNeRHyWqQoCFZQCOg ii5vFbadFKBWFJpqH+JbKVefD3jvOQxFUUnW492vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWZCOve4HRisKWQxtUYxZqFdFLQMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA1Yjk0Y2ZmLTFmYjEtNDI5ZC04ODQ4LTI0NDM0ZjNkZjAwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0X+MwDQYJKoZIhvcNAQELBQADggEBAIexqSrLKvB8xddsy9qjf9RN1xRX 0PXyNoEgXsE4UVk6dPZwJjQLeZKDgMIi+4drY/Fu6pwN2CP/1SQAhYpivaajtzHz iQP+BF5MmO9qQvfiy6mynGzLSCLM2/DpJRmkuFqs3GWDNUssJkM8HIlPmOCEMYQp VRwpMsIRkcwRlXh7QGrUxHg46c9mPxglpOUrvhRB1vbd7c0rLJlc4Np/XhyciWm+ BRrfa4+Rj+DDWi12wfwVMRNvhaPy+rop8LhB6Ja0YxWnpZ4taWON4bCeLdesU8Le EMvTjJZoWJ/TgEGt2rt+t8VRXf6KvzJuRVD88d3CHjoI62n5Zpj4CbNZ2lg= -----END CERTIFICATE-----Generated at Thu Nov 21 21:03:34 2024 by rpki-client on console-fra.rpki-client.org