$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/271fbd57-1b6b-4f93-a986-3200deaab01f.roa File: 271fbd57-1b6b-4f93-a986-3200deaab01f.roa (raw, json) Hash identifier: hY18T9Bw3EPCqeG3YENucBBXvFHBn8SHIuxeIB0sqA0= Subject key identifier: 3B:42:1C:7E:47:A8:C0:33:6F:68:6A:94:CA:4E:D3:AE:13:91:02:77 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 42637AFA6FF573C555FD59334AC2EAD1806638C5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/271fbd57-1b6b-4f93-a986-3200deaab01f.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 18.89.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:63:7a:fa:6f:f5:73:c5:55:fd:59:33:4a:c2:ea:d1:80:66:38:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=20e4d91d8697464754858061c3588c4a0ec71f03a11016a3d9627afc38ccba1e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bc:7b:a3:c0:63:33:ac:9b:41:93:b6:0a:ac: 59:29:40:46:0f:92:15:e4:a3:03:da:9a:de:19:9f: 31:14:4d:81:8b:0e:ec:d8:1c:99:6e:2d:41:0b:62: 1c:03:9a:05:69:b7:47:f0:cc:fb:f2:e1:34:30:13: 8e:1c:42:1e:49:5f:61:c3:74:9d:d3:12:33:1e:b1: 2d:0d:06:16:69:6b:d5:bd:54:65:82:8c:ac:00:b1: 19:27:16:09:0e:f6:e5:9c:89:ee:b1:88:60:17:5b: 9d:2e:73:93:b1:db:74:1e:f1:ef:b7:9c:62:06:24: 0d:96:15:9f:d7:8a:61:73:3b:23:e1:08:2a:e8:28: 5b:66:d3:79:8e:14:ba:56:7a:ea:b1:67:01:72:31: 95:36:da:b5:73:44:d6:a7:c6:8d:8c:e8:81:da:f3: 16:6e:02:cf:a2:b7:e7:23:27:17:de:57:de:1a:54: aa:39:97:63:12:a3:f8:57:9f:98:13:3b:09:ad:35: 9c:1d:0a:fa:60:0f:82:5a:ef:44:d7:62:48:1d:0f: 49:b1:93:af:e6:a9:45:fe:87:06:7e:63:13:a9:b4: 2b:b8:df:11:c8:28:c3:0f:3e:f7:ac:72:f4:38:f7: b6:bc:79:c2:0f:4c:11:13:ec:6b:00:2b:ce:fa:8b: b8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:42:1C:7E:47:A8:C0:33:6F:68:6A:94:CA:4E:D3:AE:13:91:02:77 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/271fbd57-1b6b-4f93-a986-3200deaab01f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.89.128.0/18 Signature Algorithm: sha256WithRSAEncryption 77:a8:f7:ec:e5:9e:a1:9b:1b:6d:2c:04:ba:64:9b:4e:5c:c9: 79:5a:0a:7c:01:93:01:79:30:36:b3:64:71:6f:76:db:11:65: f7:8e:92:2b:f3:91:19:92:25:72:8c:3e:4c:40:d4:b9:28:e6: ac:b6:41:17:24:74:80:5f:df:c4:0f:fa:b1:86:37:97:90:c5: da:0d:62:65:1d:79:f8:c6:52:14:9c:a5:04:b0:29:87:0a:0f: bc:64:00:90:31:c4:12:42:58:5e:23:f6:13:bc:80:bc:8e:a4: 7a:58:2a:68:62:0c:a7:48:78:ef:cf:32:ae:17:29:00:b9:29: b5:26:b8:ec:52:45:04:9f:26:25:a5:41:fb:88:13:4b:39:cb: 4f:85:c1:c7:a6:78:f0:b9:04:ad:b6:c6:ed:e4:00:ec:1d:cc: 03:b1:15:a7:9a:a3:70:f0:98:ca:04:8a:e1:3f:46:6c:fe:b2: 1d:6a:42:e1:ca:17:dc:f3:bc:b5:54:02:fb:76:a1:71:53:e8: 14:ff:57:d1:73:de:3c:13:d2:a6:8b:f9:56:df:ac:d1:d6:53: 10:d5:f2:b2:bf:e7:b6:9f:bc:2f:5e:a1:0b:b5:45:4a:78:a3: 95:11:42:f8:b1:15:ce:b3:46:bd:1b:df:7b:20:4b:53:bd:cf: 45:03:2a:a7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQmN6+m/1c8VV/VkzSsLq0YBmOMUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMGU0ZDkxZDg2OTc0NjQ3NTQ4NTgwNjFjMzU4OGM0YTBl YzcxZjAzYTExMDE2YTNkOTYyN2FmYzM4Y2NiYTFlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYvHujwGMzrJtBk7YKrFkpQEYPkhXkowPamt4ZnzEUTYGL DuzYHJluLUELYhwDmgVpt0fwzPvy4TQwE44cQh5JX2HDdJ3TEjMesS0NBhZpa9W9 VGWCjKwAsRknFgkO9uWcie6xiGAXW50uc5Ox23Qe8e+3nGIGJA2WFZ/XimFzOyPh CCroKFtm03mOFLpWeuqxZwFyMZU22rVzRNanxo2M6IHa8xZuAs+it+cjJxfeV94a VKo5l2MSo/hXn5gTOwmtNZwdCvpgD4Ja70TXYkgdD0mxk6/mqUX+hwZ+YxOptCu4 3xHIKMMPPvescvQ497a8ecIPTBET7GsAK876i7jzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUO0IcfkeowDNvaGqUyk7TrhORAncwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI3MWZiZDU3LTFiNmItNGY5My1hOTg2LTMyMDBkZWFhYjAxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYSWYAwDQYJKoZIhvcNAQELBQADggEBAHeo9+zlnqGbG20sBLpkm05cyXla CnwBkwF5MDazZHFvdtsRZfeOkivzkRmSJXKMPkxA1Lko5qy2QRckdIBf38QP+rGG N5eQxdoNYmUdefjGUhScpQSwKYcKD7xkAJAxxBJCWF4j9hO8gLyOpHpYKmhiDKdI eO/PMq4XKQC5KbUmuOxSRQSfJiWlQfuIE0s5y0+FwcemePC5BK22xu3kAOwdzAOx Faeao3DwmMoEiuE/Rmz+sh1qQuHKF9zzvLVUAvt2oXFT6BT/V9Fz3jwT0qaL+Vbf rNHWUxDV8rK/57afvC9eoQu1RUp4o5URQvixFc6zRr0b33sgS1O9z0UDKqc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:40:45 2024 by rpki-client on console-ams.rpki-client.org