$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09d8118d-1c58-4326-8a86-d3a747430522.roa File: 09d8118d-1c58-4326-8a86-d3a747430522.roa (raw, json) Hash identifier: BikrSH9NBXJeZ/TS+do1Gl5LgRqmg0e1di1Lr/mOfMY= Subject key identifier: 38:01:E7:3D:FD:CC:7B:1A:BD:BE:DD:66:2D:D9:B0:CB:7B:29:73:87 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 05EFB0A73F6C7F1272C22C8674019D7E3EA8DF36 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09d8118d-1c58-4326-8a86-d3a747430522.roa Signing time: Mon 28 Oct 2024 00:00:00 +0000 ROA not before: Mon 28 Oct 2024 00:00:00 +0000 ROA not after: Mon 02 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 15.221.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ef:b0:a7:3f:6c:7f:12:72:c2:2c:86:74:01:9d:7e:3e:a8:df:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 28 00:00:00 2024 GMT Not After : Dec 2 23:59:59 2024 GMT Subject: serialNumber=3917353aebf190f667e5c28fc4dec308097e9a6a969a194c5ada12e98ca7c02c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ce:14:77:dd:9b:d5:51:7b:61:9f:d0:d4:db: 64:6f:f9:1a:30:3a:7b:31:94:ca:43:32:cf:77:a6: d9:b1:2e:06:e1:04:8a:c4:db:e2:51:6a:41:7a:d0: 26:f8:94:35:09:a7:6f:0a:64:32:57:e0:34:78:cc: ca:da:69:20:db:50:a7:00:fd:20:55:42:0f:85:a6: 82:11:4e:6f:2d:dd:a0:f8:5f:cf:45:30:6c:00:3f: e6:dd:ca:80:c7:6e:64:73:b8:e2:51:db:3a:1e:81: 56:a2:c8:64:1d:37:d7:cd:48:ad:b7:da:40:45:d8: 7b:3e:f0:1b:5b:18:ed:0a:61:cb:eb:69:f0:39:95: 72:13:f2:ec:52:9c:81:23:78:c3:11:af:13:6a:65: 9b:23:ce:2e:66:fb:cf:82:c8:bd:da:a2:c7:a0:2a: 4b:71:89:e2:2d:23:05:d8:1c:59:14:36:53:ee:76: 54:5c:22:c1:5a:0d:23:d0:5f:f3:38:42:d0:fe:8d: ba:fe:e3:34:cd:97:da:45:90:5d:42:93:74:b0:b2: f9:49:90:1c:57:a8:e9:c6:76:5a:ca:ce:27:10:ad: cc:a9:25:22:f5:57:32:a2:cf:f1:71:23:6f:b6:00: dc:81:b1:8d:8a:6d:12:4a:7c:7a:45:22:1a:67:d0: 05:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:01:E7:3D:FD:CC:7B:1A:BD:BE:DD:66:2D:D9:B0:CB:7B:29:73:87 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09d8118d-1c58-4326-8a86-d3a747430522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.221.128.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:86:75:d8:53:3b:74:56:2b:72:7f:17:06:59:30:b6:9f:f6: bd:57:18:60:a1:66:bc:f7:b4:b2:df:50:5a:bc:58:9d:21:40: e5:ad:49:ad:6d:f3:e3:23:c9:05:ef:93:5f:38:2c:a4:e4:ed: 40:66:bc:2f:62:5c:72:fd:bd:88:f9:a2:38:45:36:6f:6d:06: 3b:8e:cb:63:f2:33:40:d8:ab:9a:c8:44:ec:6f:f7:d7:8f:44: 9d:39:4e:fc:d3:76:0c:9e:db:78:5e:d3:7d:40:3b:2b:64:27: f6:9c:54:ac:35:48:af:3e:92:2b:ff:ed:38:8c:e4:0c:d4:60: ea:1c:31:b2:81:0c:b7:b2:b3:b8:9c:cb:9f:c7:ff:8e:1e:22: 69:bc:e9:f3:f3:ad:7e:a5:f6:1d:68:a2:17:37:5f:e3:a6:32: e5:77:ac:c8:ab:ec:b6:81:1a:60:76:8c:f0:26:55:5c:9f:fc: d7:78:0d:9c:60:09:b7:ae:0d:8c:a8:6e:c1:12:a6:02:40:e7: d1:f5:80:0f:54:73:a4:e3:40:32:3e:d3:40:d6:ce:e9:1b:90: 18:b9:cf:e2:d2:cd:3b:89:df:43:1c:6d:23:7c:e6:16:ca:dc: 79:be:a7:25:7a:cf:e5:6f:1a:d3:36:19:18:64:58:10:ed:32: 87:ae:f4:7c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBe+wpz9sfxJywiyGdAGdfj6o3zYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMDI4MDAwMDAwWhcNMjQxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTE3MzUzYWViZjE5MGY2NjdlNWMyOGZjNGRlYzMwODA5 N2U5YTZhOTY5YTE5NGM1YWRhMTJlOThjYTdjMDJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXzhR33ZvVUXthn9DU22Rv+RowOnsxlMpDMs93ptmxLgbh BIrE2+JRakF60Cb4lDUJp28KZDJX4DR4zMraaSDbUKcA/SBVQg+FpoIRTm8t3aD4 X89FMGwAP+bdyoDHbmRzuOJR2zoegVaiyGQdN9fNSK232kBF2Hs+8BtbGO0KYcvr afA5lXIT8uxSnIEjeMMRrxNqZZsjzi5m+8+CyL3aosegKktxieItIwXYHFkUNlPu dlRcIsFaDSPQX/M4QtD+jbr+4zTNl9pFkF1Ck3SwsvlJkBxXqOnGdlrKzicQrcyp JSL1VzKiz/FxI2+2ANyBsY2KbRJKfHpFIhpn0AXbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOAHnPf3Mexq9vt1mLdmwy3spc4cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA5ZDgxMThkLTFjNTgtNDMyNi04YTg2LWQzYTc0NzQzMDUyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIP3YAwDQYJKoZIhvcNAQELBQADggEBAAqGddhTO3RWK3J/FwZZMLaf9r1X GGChZrz3tLLfUFq8WJ0hQOWtSa1t8+MjyQXvk184LKTk7UBmvC9iXHL9vYj5ojhF Nm9tBjuOy2PyM0DYq5rIROxv99ePRJ05TvzTdgye23he031AOytkJ/acVKw1SK8+ kiv/7TiM5AzUYOocMbKBDLeys7icy5/H/44eImm86fPzrX6l9h1oohc3X+OmMuV3 rMir7LaBGmB2jPAmVVyf/Nd4DZxgCbeuDYyobsESpgJA59H1gA9Uc6TjQDI+00DW zukbkBi5z+LSzTuJ30McbSN85hbK3Hm+pyV6z+VvGtM2GRhkWBDtMoeu9Hw= -----END CERTIFICATE-----Generated at Thu Nov 21 21:40:36 2024 by rpki-client on console-ams.rpki-client.org