$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d08c621-aba0-4b34-937d-e77451e3d8f9.roa File: 2d08c621-aba0-4b34-937d-e77451e3d8f9.roa (raw, json) Hash identifier: xNyFbQHCS6I2TpsUei7Z86owE5akXZyedkHkXKSmCJU= Subject key identifier: BA:DC:B4:32:CB:39:C1:AD:C1:68:52:74:44:77:94:1B:4B:9F:A4:51 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5DF444C3E60D7E6D8C8B27ED074F5B5D2F142004 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d08c621-aba0-4b34-937d-e77451e3d8f9.roa Signing time: Tue 29 Oct 2024 00:00:00 +0000 ROA not before: Tue 29 Oct 2024 00:00:00 +0000 ROA not after: Tue 03 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 15.230.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f4:44:c3:e6:0d:7e:6d:8c:8b:27:ed:07:4f:5b:5d:2f:14:20:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 29 00:00:00 2024 GMT Not After : Dec 3 23:59:59 2024 GMT Subject: serialNumber=587d9b86db2946c76f2711c925309b02db23b5494925c8cfd92bcb607ef5d49f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2e:f4:12:e4:ad:27:51:64:2d:fb:5d:86:5b: ae:b2:ee:22:de:5c:5b:88:20:c8:12:e8:1f:22:a1: 58:61:13:dc:12:3c:97:91:69:b5:f3:1d:33:6f:55: 41:c6:5b:0a:70:a7:14:90:89:95:99:31:36:a7:e0: 1d:d8:5f:b9:b2:2d:70:d7:ce:02:8f:12:44:df:b2: e9:37:fb:81:3d:5a:f8:85:40:2b:3b:78:4d:c9:28: e1:17:e5:33:2a:fa:0b:8e:62:78:f7:39:ea:f7:7d: 73:6d:db:35:34:9e:84:02:66:a9:80:cc:ff:2e:bd: 89:b9:2c:32:47:20:35:1c:36:f8:79:99:f4:45:9e: 46:75:fa:72:63:c4:c8:54:14:45:d5:c7:f0:2b:d2: a7:8e:8c:be:e6:5e:32:9f:dc:8d:64:1d:2d:77:a9: ac:bb:43:13:85:c1:1a:2e:d5:ce:51:a3:8e:f3:74: ac:06:7c:a2:3f:5c:b3:99:48:98:58:ea:97:bb:32: 7b:62:81:55:6d:e6:d0:c9:98:d5:d8:e0:9b:d3:af: b2:11:14:69:71:29:c1:89:83:b2:b7:4a:39:01:8b: 69:0f:93:99:a7:4b:11:6a:16:b8:1b:70:74:35:2e: a2:3f:6b:64:f1:25:1e:09:4c:42:c5:29:76:56:dc: 62:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DC:B4:32:CB:39:C1:AD:C1:68:52:74:44:77:94:1B:4B:9F:A4:51 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d08c621-aba0-4b34-937d-e77451e3d8f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.230.112.0/24 Signature Algorithm: sha256WithRSAEncryption 37:c8:63:88:dd:40:d3:79:4e:43:be:ad:85:43:56:fe:6e:90: 81:f8:3e:3b:8b:54:37:ae:7d:0d:f1:d4:ed:ed:b5:e4:d7:ca: ac:6d:00:66:e1:bf:ba:cf:8e:ed:3c:0d:a8:d0:4b:87:20:9c: 92:85:16:83:1f:04:22:23:52:35:b2:1d:8c:75:56:9a:ed:49: c1:d0:80:92:84:1e:ce:e4:8d:3d:6f:0f:ba:f8:d5:87:f7:f0: 2b:ed:01:6b:20:37:c2:19:92:f3:ae:fd:96:e3:ec:63:bc:69: d8:02:6b:0e:2e:4e:f6:b4:3e:23:6c:fc:64:fb:6e:9d:de:2c: 38:8a:75:61:a2:c4:66:78:5c:74:f2:f5:7f:8b:8c:d9:29:70: 09:c8:3f:93:66:65:72:1c:09:b6:5f:a3:f5:fe:93:f2:2c:9a: 86:72:f5:96:ac:aa:ef:4f:0f:7a:86:5c:3b:ad:26:f2:38:b6: 9d:dc:64:cc:e3:93:42:c6:9b:37:a1:51:9d:16:65:dd:ef:c7: 96:6b:de:45:3e:a2:60:bd:47:f2:68:2a:79:7c:3b:58:ba:bb: 0a:4d:a2:22:a9:a0:48:66:58:48:08:6b:53:01:10:d4:ed:b1: 7a:b7:35:fb:2d:3c:a9:d4:d4:2e:03:40:06:a8:37:9c:a4:54: 8f:c2:2b:81 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXfREw+YNfm2MiyftB09bXS8UIAQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMDI5MDAwMDAwWhcNMjQxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODdkOWI4NmRiMjk0NmM3NmYyNzExYzkyNTMwOWIwMmRi MjNiNTQ5NDkyNWM4Y2ZkOTJiY2I2MDdlZjVkNDlmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4LvQS5K0nUWQt+12GW66y7iLeXFuIIMgS6B8ioVhhE9wS PJeRabXzHTNvVUHGWwpwpxSQiZWZMTan4B3YX7myLXDXzgKPEkTfsuk3+4E9WviF QCs7eE3JKOEX5TMq+guOYnj3Oer3fXNt2zU0noQCZqmAzP8uvYm5LDJHIDUcNvh5 mfRFnkZ1+nJjxMhUFEXVx/Ar0qeOjL7mXjKf3I1kHS13qay7QxOFwRou1c5Ro47z dKwGfKI/XLOZSJhY6pe7MntigVVt5tDJmNXY4JvTr7IRFGlxKcGJg7K3SjkBi2kP k5mnSxFqFrgbcHQ1LqI/a2TxJR4JTELFKXZW3GI3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuty0Mss5wa3BaFJ0RHeUG0ufpFEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJkMDhjNjIxLWFiYTAtNGIzNC05MzdkLWU3NzQ1MWUzZDhmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP5nAwDQYJKoZIhvcNAQELBQADggEBADfIY4jdQNN5TkO+rYVDVv5ukIH4 PjuLVDeufQ3x1O3tteTXyqxtAGbhv7rPju08DajQS4cgnJKFFoMfBCIjUjWyHYx1 VprtScHQgJKEHs7kjT1vD7r41Yf38CvtAWsgN8IZkvOu/Zbj7GO8adgCaw4uTva0 PiNs/GT7bp3eLDiKdWGixGZ4XHTy9X+LjNkpcAnIP5NmZXIcCbZfo/X+k/IsmoZy 9Zasqu9PD3qGXDutJvI4tp3cZMzjk0LGmzehUZ0WZd3vx5Zr3kU+omC9R/JoKnl8 O1i6uwpNoiKpoEhmWEgIa1MBENTtsXq3NfstPKnU1C4DQAaoN5ykVI/CK4E= -----END CERTIFICATE-----Generated at Thu Nov 21 21:40:46 2024 by rpki-client on console-ams.rpki-client.org