$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0658659e-dbb6-4a2e-80f5-5b7af9049ed2.roa File: 0658659e-dbb6-4a2e-80f5-5b7af9049ed2.roa (raw, json) Hash identifier: hLof5od9FiX7u5DUB7t2rXkap79PWhcLepPsimY9fLw= Subject key identifier: 1F:63:71:ED:84:B2:B9:65:AE:50:76:D1:0F:95:22:FD:DE:F4:9D:D2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 20586EA52CD0595F9C7262EC0DBFDC7313EBCADD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0658659e-dbb6-4a2e-80f5-5b7af9049ed2.roa Signing time: Tue 29 Oct 2024 00:00:00 +0000 ROA not before: Tue 29 Oct 2024 00:00:00 +0000 ROA not after: Tue 03 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 162.137.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:58:6e:a5:2c:d0:59:5f:9c:72:62:ec:0d:bf:dc:73:13:eb:ca:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 29 00:00:00 2024 GMT Not After : Dec 3 23:59:59 2024 GMT Subject: serialNumber=4fa734c02c2eded54de923d5b0597ac00958134947c62c4cadf066ad5d9dab40, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1a:dc:27:33:76:49:c3:e0:01:30:2c:70:8b: 18:d6:5b:ac:90:5d:17:f9:32:57:09:c4:42:84:49: f2:3e:b2:80:fa:f0:f0:2e:65:25:5e:e5:b0:69:11: 37:6a:9e:53:1b:04:3c:d9:31:91:07:96:52:d9:8f: 17:d9:32:68:ae:2e:de:3c:63:ac:d8:07:38:e2:59: c5:09:a8:ab:c1:a6:64:05:7b:6b:7e:43:5e:bb:28: 15:ce:78:1f:c8:b6:6d:55:9e:5c:25:12:7e:ba:45: 3c:a9:1b:78:9d:56:af:61:fd:e6:64:ad:0f:44:64: 85:2e:86:b1:25:9a:d3:8e:21:42:df:39:94:32:4e: 19:23:b9:0b:9d:c1:79:bf:f0:de:4f:7a:b8:d2:34: ce:79:fd:c3:9b:5f:5e:a1:96:92:ce:14:30:44:79: 14:85:56:4f:60:38:ea:9d:83:cb:21:9f:69:2b:a9: bd:c8:27:a2:ea:76:5e:95:7f:12:12:fc:7c:6f:32: a8:52:1b:32:68:95:7a:6d:f1:ab:1a:a6:bd:a9:e2: fe:d4:f5:e2:86:1c:5c:82:6d:f3:73:88:f4:c2:a8: c6:f6:25:25:e1:57:75:b6:a7:6a:84:6f:4d:3b:8c: b6:2f:f7:8b:d5:20:6b:b1:84:bc:a8:6b:10:2e:a1: f2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:63:71:ED:84:B2:B9:65:AE:50:76:D1:0F:95:22:FD:DE:F4:9D:D2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0658659e-dbb6-4a2e-80f5-5b7af9049ed2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.137.0.0/16 Signature Algorithm: sha256WithRSAEncryption 13:64:3d:8c:3d:95:ab:83:d7:c6:d8:6c:99:70:f1:c6:75:65: a7:47:2e:f7:98:ec:bc:9d:26:a3:0e:47:3a:79:ea:6f:c3:b1: 2a:87:06:30:b8:72:f5:75:c0:fa:54:7e:fa:e3:07:3b:01:ce: 42:5b:36:f2:60:a9:73:6f:ce:01:62:93:70:89:d8:33:40:93: de:5b:72:10:7d:ad:6e:5b:7b:ed:ce:d4:38:96:55:3e:28:f8: 46:51:b8:d4:ec:64:03:05:0a:b0:27:f0:15:2f:8d:51:80:76: c5:75:6c:c5:11:6c:9e:20:9c:91:c4:75:1f:8a:20:fb:e4:b1: f7:ee:d3:78:90:f1:0d:11:81:a1:0e:29:93:3f:d5:37:6e:21: 69:56:56:be:1e:f1:8e:6e:fb:42:64:e1:e6:48:58:1f:40:3a: ad:c2:04:29:74:8a:6a:5e:46:a6:7e:fd:c9:45:12:cc:3e:12: c5:16:2f:a3:3d:9e:22:ec:da:69:55:9e:84:85:9d:1f:0d:bd: c4:86:d5:c6:d8:9b:5d:c2:d4:ff:d2:17:54:71:23:68:84:f2: e5:43:70:aa:5f:cd:4c:6c:05:2a:67:a0:4b:80:ce:6a:b0:35: bc:6a:08:f5:44:ce:5b:75:83:d9:a1:88:ca:48:c2:f5:20:49: b9:6d:6a:a8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIFhupSzQWV+ccmLsDb/ccxPryt0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMDI5MDAwMDAwWhcNMjQxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZmE3MzRjMDJjMmVkZWQ1NGRlOTIzZDViMDU5N2FjMDA5 NTgxMzQ5NDdjNjJjNGNhZGYwNjZhZDVkOWRhYjQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+GtwnM3ZJw+ABMCxwixjWW6yQXRf5MlcJxEKESfI+soD6 8PAuZSVe5bBpETdqnlMbBDzZMZEHllLZjxfZMmiuLt48Y6zYBzjiWcUJqKvBpmQF e2t+Q167KBXOeB/Itm1VnlwlEn66RTypG3idVq9h/eZkrQ9EZIUuhrElmtOOIULf OZQyThkjuQudwXm/8N5PerjSNM55/cObX16hlpLOFDBEeRSFVk9gOOqdg8shn2kr qb3IJ6Lqdl6VfxIS/HxvMqhSGzJolXpt8asapr2p4v7U9eKGHFyCbfNziPTCqMb2 JSXhV3W2p2qEb007jLYv94vVIGuxhLyoaxAuofI1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUH2Nx7YSyuWWuUHbRD5Ui/d70ndIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA2NTg2NTllLWRiYjYtNGEyZS04MGY1LTViN2FmOTA0OWVkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCiiTANBgkqhkiG9w0BAQsFAAOCAQEAE2Q9jD2Vq4PXxthsmXDxxnVlp0cu 95jsvJ0mow5HOnnqb8OxKocGMLhy9XXA+lR++uMHOwHOQls28mCpc2/OAWKTcInY M0CT3ltyEH2tblt77c7UOJZVPij4RlG41OxkAwUKsCfwFS+NUYB2xXVsxRFsniCc kcR1H4og++Sx9+7TeJDxDRGBoQ4pkz/VN24haVZWvh7xjm77QmTh5khYH0A6rcIE KXSKal5Gpn79yUUSzD4SxRYvoz2eIuzaaVWehIWdHw29xIbVxtibXcLU/9IXVHEj aITy5UNwql/NTGwFKmegS4DOarA1vGoI9UTOW3WD2aGIykjC9SBJuW1qqA== -----END CERTIFICATE-----Generated at Thu Nov 21 21:03:34 2024 by rpki-client on console-fra.rpki-client.org