$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/267ab406-5ad0-41fb-8a77-9d63c2327475.roa File: 267ab406-5ad0-41fb-8a77-9d63c2327475.roa (raw, json) Hash identifier: r578U5rx3lx9L/GJzhT+0hPqNl17ZomSEdGcsmm2vBk= Subject key identifier: 89:34:06:35:5F:C4:95:F3:77:AD:13:8E:06:81:CA:0F:DF:59:8C:88 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 61F8D12881C5B57C2446C5D42214754FD38F7807 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/267ab406-5ad0-41fb-8a77-9d63c2327475.roa Signing time: Mon 21 Oct 2024 00:00:00 +0000 ROA not before: Mon 21 Oct 2024 00:00:00 +0000 ROA not after: Mon 25 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 3.4.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f8:d1:28:81:c5:b5:7c:24:46:c5:d4:22:14:75:4f:d3:8f:78:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 00:00:00 2024 GMT Not After : Nov 25 23:59:59 2024 GMT Subject: serialNumber=0bb78d62d78fda7a0c5858d7b8045441ff069fe953f3213a1eda6b7d0f07aac7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c9:b4:1f:51:f4:27:55:85:e8:fd:18:fb:60: cc:dd:ed:1a:d1:e6:4c:e6:7e:35:0e:39:0a:8b:a1: 75:51:27:f5:72:b3:45:0f:cd:d4:cb:db:69:f0:83: 16:9c:f6:da:8f:5f:55:26:2e:5a:cc:34:b7:cf:36: 9c:51:bf:54:e3:9c:a3:38:7f:1c:db:47:ca:43:af: 8b:fb:bc:1a:ce:d8:9a:2e:69:93:c6:55:d8:87:9f: f8:f3:f1:de:e5:1f:b6:19:53:08:06:40:2e:3c:79: 2a:98:8c:49:7a:fc:0c:80:30:f1:0d:5f:63:66:60: b6:46:86:8e:8e:5e:0f:76:a8:7e:95:34:27:7e:92: 9a:d4:f4:50:10:dc:bb:12:3b:48:fc:85:dc:ca:fd: 59:9b:1c:60:fc:06:54:35:94:0c:eb:d9:83:67:62: 54:ad:41:d9:a1:10:02:64:6a:47:b0:01:ca:a7:12: 76:c2:ac:e1:a3:f7:b1:9a:87:bc:46:33:d1:9d:c5: e9:1d:9a:3f:0d:cc:f6:a0:96:3e:37:ca:dc:03:c0: be:d0:19:89:84:30:6f:5e:a2:a3:8a:04:e9:90:96: e2:88:6c:78:e1:d0:71:d2:65:96:25:bc:4b:38:35: 37:63:6b:c7:2a:04:a6:33:b2:8e:94:48:ef:38:65: e7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:34:06:35:5F:C4:95:F3:77:AD:13:8E:06:81:CA:0F:DF:59:8C:88 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/267ab406-5ad0-41fb-8a77-9d63c2327475.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.4.16.0/21 Signature Algorithm: sha256WithRSAEncryption a3:7e:82:7d:db:8c:a0:9f:e6:a2:69:4f:05:52:23:58:c0:46: aa:e8:63:dc:7a:59:f3:d5:d1:9c:b9:93:2b:b7:c9:fd:24:2b: 3f:be:c2:b4:cf:47:b2:f5:eb:42:86:35:fc:b6:c3:93:42:5e: 2d:5b:fb:91:4b:8e:15:3a:64:44:f7:f3:ff:cf:09:76:28:8c: 0b:0c:4c:06:41:1d:0f:18:41:fa:1f:a5:2b:d3:d7:cc:11:f4: b0:6f:bf:69:74:ce:e0:e9:47:2a:19:db:54:a2:19:3a:eb:c6: 65:d8:ec:3f:50:2c:84:47:17:b3:54:86:82:f4:2a:d8:27:4a: c9:fd:cb:f6:22:39:0a:28:b2:5d:28:e1:f3:60:b6:34:c3:9f: c0:3e:57:ea:89:59:f0:e6:6a:09:96:0b:fd:03:e0:35:02:42: 27:a2:db:3b:dc:f1:15:d4:28:77:03:00:bf:15:0d:54:2a:0a: 8a:99:35:32:33:d6:22:15:9b:86:48:ef:4b:c8:94:e0:d4:5e: fd:ff:b5:70:4e:84:36:30:dd:f5:eb:f7:53:5f:06:40:b4:30: ce:af:c2:8b:58:0f:a9:58:18:7d:12:e0:e9:91:cf:0c:d8:5f: 02:cb:7c:de:82:ce:2e:3b:62:d4:97:30:3a:ac:f6:70:08:c0: 0c:ac:db:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYfjRKIHFtXwkRsXUIhR1T9OPeAcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMDIxMDAwMDAwWhcNMjQxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYmI3OGQ2MmQ3OGZkYTdhMGM1ODU4ZDdiODA0NTQ0MWZm MDY5ZmU5NTNmMzIxM2ExZWRhNmI3ZDBmMDdhYWM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbybQfUfQnVYXo/Rj7YMzd7RrR5kzmfjUOOQqLoXVRJ/Vy s0UPzdTL22nwgxac9tqPX1UmLlrMNLfPNpxRv1TjnKM4fxzbR8pDr4v7vBrO2Jou aZPGVdiHn/jz8d7lH7YZUwgGQC48eSqYjEl6/AyAMPENX2NmYLZGho6OXg92qH6V NCd+kprU9FAQ3LsSO0j8hdzK/VmbHGD8BlQ1lAzr2YNnYlStQdmhEAJkakewAcqn EnbCrOGj97Gah7xGM9Gdxekdmj8NzPaglj43ytwDwL7QGYmEMG9eoqOKBOmQluKI bHjh0HHSZZYlvEs4NTdja8cqBKYzso6USO84ZedxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiTQGNV/ElfN3rROOBoHKD99ZjIgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI2N2FiNDA2LTVhZDAtNDFmYi04YTc3LTlkNjNjMjMyNzQ3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDBBAwDQYJKoZIhvcNAQELBQADggEBAKN+gn3bjKCf5qJpTwVSI1jARqro Y9x6WfPV0Zy5kyu3yf0kKz++wrTPR7L160KGNfy2w5NCXi1b+5FLjhU6ZET38//P CXYojAsMTAZBHQ8YQfofpSvT18wR9LBvv2l0zuDpRyoZ21SiGTrrxmXY7D9QLIRH F7NUhoL0KtgnSsn9y/YiOQoosl0o4fNgtjTDn8A+V+qJWfDmagmWC/0D4DUCQiei 2zvc8RXUKHcDAL8VDVQqCoqZNTIz1iIVm4ZI70vIlODUXv3/tXBOhDYw3fXr91Nf BkC0MM6vwotYD6lYGH0S4OmRzwzYXwLLfN6Czi47YtSXMDqs9nAIwAys26k= -----END CERTIFICATE-----Generated at Wed Oct 23 17:35:26 2024 by rpki-client on console-ams.rpki-client.org