$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1133861e-0903-4903-acc5-9a591817b8e5.roa File: 1133861e-0903-4903-acc5-9a591817b8e5.roa (raw, json) Hash identifier: pOD5ujJT8NecjdBH4f91MrwDd0TMsFY7Wchfd7eb5HI= Subject key identifier: 99:E0:E0:08:3F:BC:07:F4:AD:16:1E:ED:76:7C:F4:2A:B3:00:54:2F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 34B404CEB52460726EDA799429E00F90E4510908 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1133861e-0903-4903-acc5-9a591817b8e5.roa Signing time: Fri 15 Nov 2024 00:00:00 +0000 ROA not before: Fri 15 Nov 2024 00:00:00 +0000 ROA not after: Fri 20 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b4:04:ce:b5:24:60:72:6e:da:79:94:29:e0:0f:90:e4:51:09:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 15 00:00:00 2024 GMT Not After : Dec 20 23:59:59 2024 GMT Subject: serialNumber=9840a395629cbfd7adc99a65d5be0f5a7697c29a4f3c20230c71cb213a5762ca, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6f:99:18:d4:5b:fd:ef:39:c7:a7:b8:d2:f6: e7:0b:8a:f5:5b:47:30:b7:d2:e5:47:39:12:61:23: 59:36:95:06:9e:0a:ff:0f:2d:56:4d:17:67:d1:a3: 93:e1:74:a2:13:03:1d:b1:33:83:b9:c8:28:6b:62: e5:2a:14:36:71:02:b4:ff:c3:d5:ec:7f:a1:79:ed: 71:fa:d7:53:34:9a:87:c0:b0:07:85:a9:75:94:c3: ec:ec:e7:25:36:98:a7:82:d8:61:5e:15:29:54:f0: d0:ee:29:ab:31:3a:42:f9:8a:14:db:4e:42:52:1e: 5b:97:23:9d:64:82:76:16:d0:ff:7c:9f:da:4e:b0: 8b:8e:73:54:53:2f:d8:07:c5:ad:ab:ad:b5:aa:5a: f2:69:4d:ba:52:55:bc:27:14:c2:6c:ca:02:d7:bb: 6b:5f:a4:2b:30:03:85:ff:47:02:5d:ab:4a:54:d1: d0:64:22:de:2d:19:ca:cd:5a:5d:4f:3a:ad:6b:3a: 26:d7:81:ae:98:18:c1:26:f7:a5:a9:3f:35:f1:11: 84:db:c2:83:10:8a:0b:4d:0b:cd:5e:07:fe:43:8c: f1:eb:d4:2c:d3:5e:e8:4c:c3:1c:f3:f9:b0:ee:46: 92:d9:a0:56:8e:06:db:db:ed:63:80:da:24:99:44: c1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E0:E0:08:3F:BC:07:F4:AD:16:1E:ED:76:7C:F4:2A:B3:00:54:2F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1133861e-0903-4903-acc5-9a591817b8e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.156.0/24 Signature Algorithm: sha256WithRSAEncryption 34:92:e0:82:db:d4:8e:9a:20:d0:cb:f7:b6:06:7c:ae:60:f0: 96:bb:0c:c7:ab:d9:da:7a:05:43:d6:86:6c:7a:ab:2a:4e:f4: 5d:cc:88:a6:09:ae:61:8a:f2:18:82:1f:f7:bf:5a:48:41:9d: f4:1a:e5:3a:ea:74:14:fc:72:3a:c6:37:45:39:2c:6c:1b:4a: 21:bc:3c:7f:13:f6:82:f5:27:88:9d:95:b1:23:33:e0:57:d4: aa:1d:85:01:9e:4d:58:cd:73:57:fd:97:a6:0b:4c:c0:57:72: c1:48:c4:5d:d2:28:81:93:3c:8b:dc:11:eb:4c:14:4f:e9:b8: 69:eb:45:97:56:d4:7b:f7:c0:0f:be:c0:29:5c:de:10:25:35: ed:45:12:be:fb:94:51:96:ad:45:ba:b9:e3:e3:74:1f:ba:5d: d2:be:31:fd:b8:d7:97:34:ee:18:be:55:7c:1f:d3:a9:6c:70: 5c:86:34:a4:f0:8f:d1:96:a3:58:73:0a:ec:37:8e:d2:7e:2e: bf:49:2f:fe:a1:4f:3d:aa:97:15:f9:39:3a:13:6f:89:14:3a: cf:f5:ee:b4:b8:59:1d:57:31:44:31:33:7a:10:e9:cb:7f:fc: da:78:29:2d:47:c0:0e:da:cc:e6:ca:96:2f:0e:94:da:21:22: f9:87:f6:6f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNLQEzrUkYHJu2nmUKeAPkORRCQgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMTE1MDAwMDAwWhcNMjQxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ODQwYTM5NTYyOWNiZmQ3YWRjOTlhNjVkNWJlMGY1YTc2 OTdjMjlhNGYzYzIwMjMwYzcxY2IyMTNhNTc2MmNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3b5kY1Fv97znHp7jS9ucLivVbRzC30uVHORJhI1k2lQae Cv8PLVZNF2fRo5PhdKITAx2xM4O5yChrYuUqFDZxArT/w9Xsf6F57XH611M0mofA sAeFqXWUw+zs5yU2mKeC2GFeFSlU8NDuKasxOkL5ihTbTkJSHluXI51kgnYW0P98 n9pOsIuOc1RTL9gHxa2rrbWqWvJpTbpSVbwnFMJsygLXu2tfpCswA4X/RwJdq0pU 0dBkIt4tGcrNWl1POq1rOibXga6YGMEm96WpPzXxEYTbwoMQigtNC81eB/5DjPHr 1CzTXuhMwxzz+bDuRpLZoFaOBtvb7WOA2iSZRME5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmeDgCD+8B/StFh7tdnz0KrMAVC8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzExMzM4NjFlLTA5MDMtNDkwMy1hY2M1LTlhNTkxODE3YjhlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0X5wwDQYJKoZIhvcNAQELBQADggEBADSS4ILb1I6aINDL97YGfK5g8Ja7 DMer2dp6BUPWhmx6qypO9F3MiKYJrmGK8hiCH/e/WkhBnfQa5TrqdBT8cjrGN0U5 LGwbSiG8PH8T9oL1J4idlbEjM+BX1KodhQGeTVjNc1f9l6YLTMBXcsFIxF3SKIGT PIvcEetMFE/puGnrRZdW1Hv3wA++wClc3hAlNe1FEr77lFGWrUW6uePjdB+6XdK+ Mf2415c07hi+VXwf06lscFyGNKTwj9GWo1hzCuw3jtJ+Lr9JL/6hTz2qlxX5OToT b4kUOs/17rS4WR1XMUQxM3oQ6ct//Np4KS1HwA7azObKli8OlNohIvmH9m8= -----END CERTIFICATE-----Generated at Sun Nov 24 22:10:55 2024 by rpki-client on console-fra.rpki-client.org