$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49fdead4-c94e-400e-a318-03520b2eb197.roa File: 49fdead4-c94e-400e-a318-03520b2eb197.roa (raw, json) Hash identifier: kJEGtMhPCU25rZJBpZy6vz919LbcnbSQraNFkYFxa20= Subject key identifier: 10:1E:E6:22:3E:E7:D3:B5:84:7A:BB:B9:E5:46:44:CF:89:06:50:C4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7C75987BA6840B794E9AC3BCC53648632211EBC5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49fdead4-c94e-400e-a318-03520b2eb197.roa Signing time: Mon 28 Oct 2024 00:00:00 +0000 ROA not before: Mon 28 Oct 2024 00:00:00 +0000 ROA not after: Mon 02 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:75:98:7b:a6:84:0b:79:4e:9a:c3:bc:c5:36:48:63:22:11:eb:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 28 00:00:00 2024 GMT Not After : Dec 2 23:59:59 2024 GMT Subject: serialNumber=8480f36cc0ffda8cb2c442275235d9ba869237dd9da601ed98e39836aee2e95c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:58:45:da:e9:5e:81:63:c2:c4:12:e4:76:44: ca:db:b8:c0:ea:f2:33:30:b3:28:af:fd:01:ac:37: e3:55:f0:7f:36:71:f6:f4:16:22:31:eb:09:bc:86: 17:9d:79:92:76:32:ab:f1:20:1b:e5:68:e0:2b:d0: 5b:27:0f:ff:fb:c9:38:8b:fb:5a:c5:79:ef:81:0f: a7:90:50:51:f2:53:67:1d:46:e2:9f:7a:3b:f6:80: 12:23:93:23:74:8f:d5:fe:3f:85:03:cb:28:98:70: 83:53:fb:46:95:9d:85:e7:0e:3b:fd:20:d5:3a:ed: a2:e3:8f:6f:86:b5:8c:f1:f6:ce:43:63:b8:6e:d0: a6:ae:c5:62:dc:ec:42:01:64:3e:45:38:35:00:95: be:56:ee:84:ab:fe:f3:f6:4c:cb:60:b4:7b:2a:13: 50:2e:ec:4d:c4:2a:8b:c5:40:65:d1:6c:47:bb:55: 6e:d4:02:43:4c:5f:d8:59:38:76:30:d1:69:f9:86: 55:fe:bf:d5:c3:25:24:3a:e5:7e:bc:88:46:a2:a2: b6:48:10:7f:6b:03:46:8a:46:42:d5:f3:20:0f:44: d2:6e:b7:a6:00:12:33:a4:70:06:2c:a1:7c:38:d8: c0:00:e4:b2:6f:c8:ec:da:15:77:f1:ca:e5:fd:03: 74:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1E:E6:22:3E:E7:D3:B5:84:7A:BB:B9:E5:46:44:CF:89:06:50:C4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49fdead4-c94e-400e-a318-03520b2eb197.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.0.0/15 Signature Algorithm: sha256WithRSAEncryption aa:d6:3a:8b:b2:3a:62:74:63:19:64:53:87:f2:e4:73:67:90: 68:ca:c6:81:82:68:33:57:29:7d:a7:3d:d6:93:4a:22:71:d4: ff:ee:c4:d1:c9:ba:68:99:c0:2f:8c:a9:80:ae:a4:e0:00:33: 68:7a:62:c6:df:cd:5b:39:1c:dc:d7:35:46:ce:4b:5c:f3:c1: 63:9f:c4:3c:9b:0e:b9:ab:af:fc:10:9b:14:30:3d:03:91:cc: a2:b4:89:09:c4:88:fd:59:a5:b1:94:00:c0:69:f0:f3:fe:c1: 6d:e7:92:02:b3:e6:86:97:52:b7:91:c2:f9:a1:d5:6b:de:e4: 06:e7:da:0f:34:2d:2a:be:9a:ad:1f:7f:59:ba:8c:c7:a5:b4: 37:4e:67:45:ed:a5:c1:f8:94:df:d4:22:cc:00:12:8e:a4:a8: 53:7f:27:aa:f4:d7:b0:83:73:af:3f:cd:b3:2e:b5:60:34:f3: ed:f7:64:06:16:98:cd:92:a1:8b:98:4f:af:4c:0a:9f:3c:25: 67:5b:03:8d:ef:f4:9d:3e:95:c0:ea:91:e4:65:ec:09:fb:f0: 5d:ed:15:f1:20:0b:7b:a0:6f:f5:3b:cb:a1:00:67:ee:c6:2a: 75:4d:ab:57:cb:a5:c3:01:da:de:30:c8:84:f3:fb:e4:ab:3f: 1c:bc:77:eb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfHWYe6aEC3lOmsO8xTZIYyIR68UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMDI4MDAwMDAwWhcNMjQxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDgwZjM2Y2MwZmZkYThjYjJjNDQyMjc1MjM1ZDliYTg2 OTIzN2RkOWRhNjAxZWQ5OGUzOTgzNmFlZTJlOTVjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmWEXa6V6BY8LEEuR2RMrbuMDq8jMwsyiv/QGsN+NV8H82 cfb0FiIx6wm8hhedeZJ2MqvxIBvlaOAr0FsnD//7yTiL+1rFee+BD6eQUFHyU2cd RuKfejv2gBIjkyN0j9X+P4UDyyiYcINT+0aVnYXnDjv9INU67aLjj2+GtYzx9s5D Y7hu0KauxWLc7EIBZD5FODUAlb5W7oSr/vP2TMtgtHsqE1Au7E3EKovFQGXRbEe7 VW7UAkNMX9hZOHYw0Wn5hlX+v9XDJSQ65X68iEaiorZIEH9rA0aKRkLV8yAPRNJu t6YAEjOkcAYsoXw42MAA5LJvyOzaFXfxyuX9A3SlAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUEB7mIj7n07WEeru55UZEz4kGUMQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ5ZmRlYWQ0LWM5NGUtNDAwZS1hMzE4LTAzNTIwYjJlYjE5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE0VDANBgkqhkiG9w0BAQsFAAOCAQEAqtY6i7I6YnRjGWRTh/Lkc2eQaMrG gYJoM1cpfac91pNKInHU/+7E0cm6aJnAL4ypgK6k4AAzaHpixt/NWzkc3Nc1Rs5L XPPBY5/EPJsOuauv/BCbFDA9A5HMorSJCcSI/VmlsZQAwGnw8/7BbeeSArPmhpdS t5HC+aHVa97kBufaDzQtKr6arR9/WbqMx6W0N05nRe2lwfiU39QizAASjqSoU38n qvTXsINzrz/Nsy61YDTz7fdkBhaYzZKhi5hPr0wKnzwlZ1sDje/0nT6VwOqR5GXs CfvwXe0V8SALe6Bv9TvLoQBn7sYqdU2rV8ulwwHa3jDIhPP75Ks/HLx36w== -----END CERTIFICATE-----Generated at Thu Nov 21 21:03:51 2024 by rpki-client on console-fra.rpki-client.org