$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/269a41b0-11e8-455c-b6fd-b49747831f00.roa File: 269a41b0-11e8-455c-b6fd-b49747831f00.roa (raw, json) Hash identifier: wQP2QbSQ/2t0hJ9hxTV9GkwmLoQXUWjhC4rS7ioWx0U= Subject key identifier: FD:51:6F:42:74:0B:BA:D0:D0:AA:04:B4:7A:B0:D3:2F:FF:2A:C7:55 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 18D5F8E0C56CFF65CCC5099D9430D3186D89FCC1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/269a41b0-11e8-455c-b6fd-b49747831f00.roa Signing time: Fri 15 Nov 2024 00:00:00 +0000 ROA not before: Fri 15 Nov 2024 00:00:00 +0000 ROA not after: Fri 20 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 3.108.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d5:f8:e0:c5:6c:ff:65:cc:c5:09:9d:94:30:d3:18:6d:89:fc:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 15 00:00:00 2024 GMT Not After : Dec 20 23:59:59 2024 GMT Subject: serialNumber=cf25220732c5b24a8915bc2fba19356c9a8a31e0e725e133ffd87d320b6e5d7f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:12:7c:17:f8:c2:7a:64:95:69:40:e7:5e:24: e9:ae:02:0f:0f:66:2a:e8:86:85:88:9f:90:6b:83: c0:bc:94:44:9d:f8:68:88:68:24:81:a4:d9:c4:2d: c2:57:3e:27:83:f8:a7:a3:bd:26:b9:3d:0b:9c:da: 73:96:d6:78:5d:fe:7b:cc:85:0c:09:f8:dc:07:f0: 1b:2d:53:23:1e:80:93:7e:c5:2c:2c:91:e7:07:25: 2e:f9:b3:4f:8e:cb:3f:d0:f1:99:24:e0:00:06:76: d4:4f:6d:23:d1:7b:12:48:88:67:27:a0:47:a7:13: 2e:56:f2:90:da:01:56:95:ef:71:b3:4f:41:dc:cb: 84:3f:26:76:da:be:85:ca:b9:d1:29:fd:4d:76:24: 9f:db:16:ef:c1:5d:a9:91:f0:55:f2:66:46:d6:9b: d3:a6:8c:dc:e8:f5:c4:6b:60:e3:c2:45:f5:87:45: 38:81:7d:7e:49:78:c0:f0:1c:99:71:15:df:df:b0: fa:0f:9e:98:10:42:22:6a:5f:72:d7:f9:c3:43:c7: ee:c8:81:5e:97:f6:a6:81:25:db:5a:dc:fb:cb:eb: 66:85:71:3f:1f:b2:2f:3b:60:91:d4:6b:54:9a:a1: 57:72:33:fe:d4:87:17:b7:7b:35:ed:21:b0:a3:20: 03:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:51:6F:42:74:0B:BA:D0:D0:AA:04:B4:7A:B0:D3:2F:FF:2A:C7:55 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/269a41b0-11e8-455c-b6fd-b49747831f00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.108.0.0/14 Signature Algorithm: sha256WithRSAEncryption 8d:53:9a:bc:18:54:4d:ae:94:8b:98:0e:20:0f:16:18:9f:ce: f7:fd:c7:15:c3:bb:22:9a:6b:a0:1e:fa:3b:f9:c8:0f:e0:57: 63:29:e5:d7:25:bb:5a:2a:f5:9e:cb:4d:61:e4:52:4d:a6:e9: e7:78:a4:8f:06:f5:1e:4b:82:57:de:2d:c0:1e:9d:a1:06:dd: 5b:e6:6a:0a:aa:46:e9:f3:c4:7a:ae:f6:61:b6:04:54:bc:f9: 85:8d:e1:e3:61:1d:66:cd:df:98:aa:1e:94:14:44:e4:52:bc: 90:a8:11:3d:4a:3e:f5:c0:a1:8d:c3:4a:c8:f0:3d:7d:4f:aa: 47:c5:00:36:e0:18:26:8d:d2:b6:94:01:c7:bb:b7:8e:5d:15: bb:f5:f8:eb:5b:ba:0b:cd:38:f0:7b:e3:c8:5c:aa:e1:9d:ae: 87:11:a4:cc:17:ec:3b:bb:c7:a7:37:07:a2:20:96:8f:b9:47: c4:ad:57:87:a0:bc:ed:26:81:d7:55:b9:8f:4a:14:15:67:52: 65:bd:b5:06:e8:99:a4:ef:9b:b9:f2:92:78:25:cf:c3:33:b3: b2:c9:63:d4:99:12:9c:c1:4f:47:5b:de:69:57:ec:ee:84:9f: 61:88:45:36:0f:cf:57:12:e6:bb:8f:b7:7b:20:c6:6d:10:37: 2c:9a:f4:7b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGNX44MVs/2XMxQmdlDDTGG2J/MEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMTE1MDAwMDAwWhcNMjQxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZjI1MjIwNzMyYzViMjRhODkxNWJjMmZiYTE5MzU2Yzlh OGEzMWUwZTcyNWUxMzNmZmQ4N2QzMjBiNmU1ZDdmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwEnwX+MJ6ZJVpQOdeJOmuAg8PZirohoWIn5Brg8C8lESd +GiIaCSBpNnELcJXPieD+KejvSa5PQuc2nOW1nhd/nvMhQwJ+NwH8BstUyMegJN+ xSwskecHJS75s0+Oyz/Q8Zkk4AAGdtRPbSPRexJIiGcnoEenEy5W8pDaAVaV73Gz T0Hcy4Q/JnbavoXKudEp/U12JJ/bFu/BXamR8FXyZkbWm9OmjNzo9cRrYOPCRfWH RTiBfX5JeMDwHJlxFd/fsPoPnpgQQiJqX3LX+cNDx+7IgV6X9qaBJdta3PvL62aF cT8fsi87YJHUa1SaoVdyM/7Uhxe3ezXtIbCjIAMhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU/VFvQnQLutDQqgS0erDTL/8qx1UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI2OWE0MWIwLTExZTgtNDU1Yy1iNmZkLWI0OTc0NzgzMWYwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIDbDANBgkqhkiG9w0BAQsFAAOCAQEAjVOavBhUTa6Ui5gOIA8WGJ/O9/3H FcO7IpproB76O/nID+BXYynl1yW7Wir1nstNYeRSTabp53ikjwb1HkuCV94twB6d oQbdW+ZqCqpG6fPEeq72YbYEVLz5hY3h42EdZs3fmKoelBRE5FK8kKgRPUo+9cCh jcNKyPA9fU+qR8UANuAYJo3StpQBx7u3jl0Vu/X461u6C8048HvjyFyq4Z2uhxGk zBfsO7vHpzcHoiCWj7lHxK1Xh6C87SaB11W5j0oUFWdSZb21BuiZpO+bufKSeCXP wzOzsslj1JkSnMFPR1veaVfs7oSfYYhFNg/PVxLmu4+3eyDGbRA3LJr0ew== -----END CERTIFICATE-----Generated at Thu Nov 21 21:03:44 2024 by rpki-client on console-fra.rpki-client.org