$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16e38074-2bb1-45d4-bdad-37eaf03741c5.roa File: 16e38074-2bb1-45d4-bdad-37eaf03741c5.roa (raw, json) Hash identifier: MyGzL4o/bi1wvQOnC7hmpDBa9XnJ2h1E3nxjo7bjlnI= Subject key identifier: 42:B7:BD:F0:7F:E5:4A:42:35:99:59:24:6A:04:87:1B:71:ED:56:6E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4A56AC3771D0AC7D03BD9AC778A01385155F1524 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16e38074-2bb1-45d4-bdad-37eaf03741c5.roa Signing time: Fri 22 Nov 2024 00:00:00 +0000 ROA not before: Fri 22 Nov 2024 00:00:00 +0000 ROA not after: Fri 27 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 161.188.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:56:ac:37:71:d0:ac:7d:03:bd:9a:c7:78:a0:13:85:15:5f:15:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 22 00:00:00 2024 GMT Not After : Dec 27 23:59:59 2024 GMT Subject: serialNumber=d91a4222a28da641c42637411d93fcb48e96fb228127d075acb3ed4c1888ba2f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b5:9c:df:41:26:dd:5a:2c:de:d7:ab:f8:10: f1:c7:55:7a:93:23:01:fe:c4:03:fe:1b:e8:4d:d5: 55:0b:eb:b1:14:95:72:25:ae:a4:46:f7:9c:7b:cf: e5:70:b9:19:cc:7c:c0:41:87:77:35:42:93:d4:2b: e3:02:c7:10:bb:0d:89:80:40:5e:c2:36:5a:9d:8f: dc:5a:e1:6f:aa:22:61:3e:dd:e4:81:8d:60:ae:9c: 4a:2c:81:67:ac:df:cf:04:1a:ad:88:e6:53:35:b0: 40:ed:a3:15:f0:9d:67:e2:37:3f:2c:27:a2:fc:aa: f3:ed:79:84:29:33:02:fb:84:ff:83:47:ba:ba:fb: 75:a5:4e:a3:96:34:2e:25:19:db:35:a3:57:08:83: 27:bc:90:7c:49:b3:5f:e1:f6:f0:42:9b:76:6a:3b: bc:ee:d6:38:e1:0e:a9:bf:d2:38:a1:44:99:58:93: d9:0c:85:f4:6b:44:8d:e2:93:2b:1d:2d:98:8c:53: e6:4d:9f:29:50:bf:88:a2:ad:9c:f8:04:d2:84:88: e7:76:3a:97:8f:22:30:31:67:d1:41:2a:bd:29:65: e3:97:a7:41:f1:8d:ed:42:14:f2:c0:5a:fa:04:6d: f9:43:a9:80:97:25:bd:ec:84:65:24:e7:32:a2:9a: d3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B7:BD:F0:7F:E5:4A:42:35:99:59:24:6A:04:87:1B:71:ED:56:6E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16e38074-2bb1-45d4-bdad-37eaf03741c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.148.0/23 Signature Algorithm: sha256WithRSAEncryption 83:79:a8:52:bf:03:0c:c4:20:6a:56:9c:6d:95:8c:58:b3:07: 76:e5:1e:b5:fd:b7:73:89:cf:54:67:b0:87:d8:74:e6:d2:cd: 21:6c:b0:fa:06:6b:52:7b:5f:ed:4d:56:82:fe:fd:c0:c3:1e: 68:6b:25:b4:97:6d:2b:37:07:ed:b6:62:56:99:3d:eb:13:35: 8f:bc:49:64:da:e6:a4:cd:60:1e:e7:88:20:54:08:6f:03:1f: 9d:9a:a3:e4:05:7b:ad:42:16:d2:70:b0:6b:96:d8:e3:5e:5e: f6:29:5e:eb:b9:5f:c7:b9:54:d8:2b:78:3a:6a:7f:80:f1:ee: 16:05:e4:2d:37:d4:b9:3c:e0:a8:6d:ce:3d:83:40:56:cf:ab: 72:39:68:1c:e5:38:b0:82:93:80:2e:59:9f:1b:4d:9b:54:0c: fc:0d:b6:5b:f7:40:e1:30:fb:b7:2d:61:9e:e6:e6:22:27:f8: 53:f4:2c:35:e0:f6:ce:6c:b5:a0:c6:3e:65:70:00:c8:8a:48: a3:ee:b3:70:5b:3b:b0:5d:9d:5b:2c:89:60:1c:67:d0:13:5d: 8c:1a:53:a3:c8:90:66:bf:9c:37:d1:74:2a:dc:4a:70:56:02: ee:ec:8f:6a:da:0d:fa:8f:0e:7b:c5:a0:2a:9c:78:3e:65:75: eb:c5:4a:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSlasN3HQrH0DvZrHeKAThRVfFSQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMTIyMDAwMDAwWhcNMjQxMjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTFhNDIyMmEyOGRhNjQxYzQyNjM3NDExZDkzZmNiNDhl OTZmYjIyODEyN2QwNzVhY2IzZWQ0YzE4ODhiYTJmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCatZzfQSbdWize16v4EPHHVXqTIwH+xAP+G+hN1VUL67EU lXIlrqRG95x7z+VwuRnMfMBBh3c1QpPUK+MCxxC7DYmAQF7CNlqdj9xa4W+qImE+ 3eSBjWCunEosgWes388EGq2I5lM1sEDtoxXwnWfiNz8sJ6L8qvPteYQpMwL7hP+D R7q6+3WlTqOWNC4lGds1o1cIgye8kHxJs1/h9vBCm3ZqO7zu1jjhDqm/0jihRJlY k9kMhfRrRI3ikysdLZiMU+ZNnylQv4iirZz4BNKEiOd2OpePIjAxZ9FBKr0pZeOX p0Hxje1CFPLAWvoEbflDqYCXJb3shGUk5zKimtOPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQre98H/lSkI1mVkkagSHG3HtVm4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE2ZTM4MDc0LTJiYjEtNDVkNC1iZGFkLTM3ZWFmMDM3NDFjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvJQwDQYJKoZIhvcNAQELBQADggEBAIN5qFK/AwzEIGpWnG2VjFizB3bl HrX9t3OJz1RnsIfYdObSzSFssPoGa1J7X+1NVoL+/cDDHmhrJbSXbSs3B+22YlaZ PesTNY+8SWTa5qTNYB7niCBUCG8DH52ao+QFe61CFtJwsGuW2ONeXvYpXuu5X8e5 VNgreDpqf4Dx7hYF5C031Lk84Khtzj2DQFbPq3I5aBzlOLCCk4AuWZ8bTZtUDPwN tlv3QOEw+7ctYZ7m5iIn+FP0LDXg9s5staDGPmVwAMiKSKPus3BbO7BdnVssiWAc Z9ATXYwaU6PIkGa/nDfRdCrcSnBWAu7sj2raDfqPDnvFoCqceD5ldevFSjM= -----END CERTIFICATE-----Generated at Sun Nov 24 21:43:57 2024 by rpki-client on console-ams.rpki-client.org