$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/088b1a42-fe73-41ea-ba41-b31eec3ce08b.roa File: 088b1a42-fe73-41ea-ba41-b31eec3ce08b.roa (raw, json) Hash identifier: LhpXXdE930iJteJhfwFI8uEAu6fRGqoPyBwPFju4E58= Subject key identifier: 85:E3:39:93:A4:97:6E:4B:C1:C0:E4:5B:3A:74:50:AD:FA:65:5A:64 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 74503DA25FB36BAC722D19CBA4D40C8BF61198D6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/088b1a42-fe73-41ea-ba41-b31eec3ce08b.roa Signing time: Mon 18 Nov 2024 00:00:00 +0000 ROA not before: Mon 18 Nov 2024 00:00:00 +0000 ROA not after: Mon 23 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:50:3d:a2:5f:b3:6b:ac:72:2d:19:cb:a4:d4:0c:8b:f6:11:98:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 18 00:00:00 2024 GMT Not After : Dec 23 23:59:59 2024 GMT Subject: serialNumber=8dfbf7e0269b0c2483a977767e4b23ea5c11bd0ed3817e0682e5c3fd48e65c2d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:63:40:10:c2:3f:7a:91:2f:75:d6:ea:43:39: aa:79:ac:e3:9b:80:d7:98:1a:cb:76:87:4e:8d:07: 60:2b:3e:1c:24:c2:2b:de:9a:73:55:09:72:5e:8d: df:cc:59:bd:6c:0f:fb:e0:a8:8b:71:bc:aa:11:7a: a4:c5:0a:2e:01:c7:d7:88:83:97:71:4c:b4:a1:77: 73:70:8c:f9:ae:c2:c5:b1:67:c9:dd:e4:a5:77:6b: 2d:be:67:72:63:61:02:5c:b0:26:6f:ca:7c:bc:08: ff:e0:94:ac:46:c9:ca:37:ca:14:a3:31:e2:46:6c: fe:ee:89:7c:1f:21:67:44:d9:19:9d:57:11:29:d4: 66:5a:df:ed:7e:69:83:12:c8:1e:38:54:c6:d3:26: 75:28:26:14:2b:03:22:f4:ab:e2:a2:14:de:92:46: 8a:54:d6:a0:4f:e7:f5:f9:70:2a:0c:b3:83:60:f3: 4d:1c:b4:3e:9f:52:90:5b:bf:42:f4:5e:6d:36:e3: f7:76:ff:a3:e3:02:ba:17:ce:8a:61:8e:24:f7:04: 09:64:dd:18:56:ec:b1:1a:6c:d7:fe:2d:6f:cd:60: 39:92:50:fd:40:59:3c:44:49:df:bb:de:49:21:43: e1:bc:ee:0f:4b:be:0a:b9:fd:c0:f5:82:07:21:d2: 84:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E3:39:93:A4:97:6E:4B:C1:C0:E4:5B:3A:74:50:AD:FA:65:5A:64 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/088b1a42-fe73-41ea-ba41-b31eec3ce08b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.60.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:29:93:2a:a7:f8:61:23:70:73:b4:1d:3c:ab:6b:0a:be:16: a4:c3:4e:26:69:79:7b:b3:cd:96:76:3d:60:f0:43:30:59:a8: 09:65:31:10:f9:57:29:4e:66:0d:3d:46:4d:ff:4d:c9:b0:c8: ac:42:cb:78:d2:ac:e8:d1:b3:c5:97:25:60:38:15:d9:5c:02: f0:68:58:e0:1d:d9:18:f8:4c:65:5b:ec:42:74:00:76:05:f5: ae:8e:9e:3a:b5:c7:0a:41:c7:2d:61:cd:a7:91:40:a1:5b:6c: 03:0f:f7:d6:ed:5c:2e:1b:0c:10:3b:8a:ae:c5:11:bc:53:ca: 49:77:df:6e:01:21:91:50:25:cd:42:32:eb:24:51:37:74:a9: f9:15:81:2f:19:38:fd:af:73:30:2a:2c:4f:89:38:a1:60:3a: fc:7b:af:ec:66:44:a4:94:2a:ab:ec:13:3e:a7:7e:58:25:ba: c4:5b:78:e0:03:33:4d:f7:00:ab:c2:99:dc:a5:c6:c0:4f:32: d8:aa:4d:db:04:d5:bd:58:a5:e5:e7:4f:96:ea:84:bd:a3:c0: 12:a0:64:a7:7e:0f:75:84:74:c7:d2:b3:76:01:aa:75:fa:cc: 0e:a3:16:27:e0:59:18:78:b7:fd:1f:c8:1b:f2:00:ec:8b:87: 7d:80:bd:17 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdFA9ol+za6xyLRnLpNQMi/YRmNYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMTE4MDAwMDAwWhcNMjQxMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZGZiZjdlMDI2OWIwYzI0ODNhOTc3NzY3ZTRiMjNlYTVj MTFiZDBlZDM4MTdlMDY4MmU1YzNmZDQ4ZTY1YzJkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoY0AQwj96kS911upDOap5rOObgNeYGst2h06NB2ArPhwk wivemnNVCXJejd/MWb1sD/vgqItxvKoReqTFCi4Bx9eIg5dxTLShd3NwjPmuwsWx Z8nd5KV3ay2+Z3JjYQJcsCZvyny8CP/glKxGyco3yhSjMeJGbP7uiXwfIWdE2Rmd VxEp1GZa3+1+aYMSyB44VMbTJnUoJhQrAyL0q+KiFN6SRopU1qBP5/X5cCoMs4Ng 800ctD6fUpBbv0L0Xm024/d2/6PjAroXzophjiT3BAlk3RhW7LEabNf+LW/NYDmS UP1AWTxESd+73kkhQ+G87g9Lvgq5/cD1ggch0oSHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUheM5k6SXbkvBwORbOnRQrfplWmQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA4OGIxYTQyLWZlNzMtNDFlYS1iYTQxLWIzMWVlYzNjZTA4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI28DwwDQYJKoZIhvcNAQELBQADggEBAHwpkyqn+GEjcHO0HTyrawq+FqTD TiZpeXuzzZZ2PWDwQzBZqAllMRD5VylOZg09Rk3/TcmwyKxCy3jSrOjRs8WXJWA4 FdlcAvBoWOAd2Rj4TGVb7EJ0AHYF9a6Onjq1xwpBxy1hzaeRQKFbbAMP99btXC4b DBA7iq7FEbxTykl3324BIZFQJc1CMuskUTd0qfkVgS8ZOP2vczAqLE+JOKFgOvx7 r+xmRKSUKqvsEz6nflglusRbeOADM033AKvCmdylxsBPMtiqTdsE1b1YpeXnT5bq hL2jwBKgZKd+D3WEdMfSs3YBqnX6zA6jFifgWRh4t/0fyBvyAOyLh32AvRc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:03:35 2024 by rpki-client on console-fra.rpki-client.org