$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f0994bb-af9b-4d66-9dd2-4a2121d536dd.roa File: 4f0994bb-af9b-4d66-9dd2-4a2121d536dd.roa (raw, json) Hash identifier: 5zdZYll/fG00CxVZGECEZ23HZ3IAUQro186SQhfP5ZI= Subject key identifier: 05:77:2E:04:7F:50:9B:B8:47:26:21:5A:D8:20:9B:0E:74:7D:40:B5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1D3EDB28AE9D3211AF003DAB8A175113DCB584 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f0994bb-af9b-4d66-9dd2-4a2121d536dd.roa Signing time: Fri 15 Nov 2024 00:00:00 +0000 ROA not before: Fri 15 Nov 2024 00:00:00 +0000 ROA not after: Fri 20 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 13.228.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:3e:db:28:ae:9d:32:11:af:00:3d:ab:8a:17:51:13:dc:b5:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 15 00:00:00 2024 GMT Not After : Dec 20 23:59:59 2024 GMT Subject: serialNumber=f4318f9938ca2c7a7a781ae647ffd08c2bd0f0156187a934d82c69140b89cdab, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:11:2f:e0:96:8e:41:29:e7:1c:72:f4:1d:92: e7:07:fe:0e:82:e6:da:89:ad:0d:23:9b:40:64:96: 90:76:bb:2f:bf:bc:74:e4:7b:fd:d8:36:b4:ae:e0: be:73:05:ea:0c:e4:8b:ec:fe:db:ff:3e:0d:01:a0: 8c:cc:c6:07:69:53:32:f0:7d:e4:c5:7f:9d:f0:a5: 43:93:3e:b1:57:a8:bb:04:59:b9:a4:7e:a1:6a:13: 5e:37:af:1d:9a:17:55:9e:69:74:15:90:66:7e:78: 8b:b1:23:aa:2f:0a:55:00:c1:14:0d:17:53:02:36: 37:e9:75:ba:c5:4f:02:e6:95:2b:e0:a9:1e:2c:2c: 80:a6:48:bd:9e:0f:14:3c:07:37:c5:7a:8e:13:ed: a0:87:84:a7:d4:18:a5:41:91:12:7b:81:c2:69:c3: 45:ed:b0:2f:71:17:bf:19:c0:47:69:f4:f8:d3:9b: 11:52:a9:49:e2:34:b7:63:bf:d8:7f:ec:c5:ea:0a: 1a:a4:b6:0d:f8:f5:21:9f:51:5f:f4:b6:2c:6d:cf: 6d:da:27:86:3e:74:c4:d9:d4:b1:10:c9:ef:49:d4: d4:36:73:f9:75:9f:7e:5d:3b:fa:7c:b3:16:f2:37: 9f:36:e6:94:0c:a8:78:46:f2:ed:68:2c:2a:f9:a3: 08:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:77:2E:04:7F:50:9B:B8:47:26:21:5A:D8:20:9B:0E:74:7D:40:B5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f0994bb-af9b-4d66-9dd2-4a2121d536dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.228.0.0/14 Signature Algorithm: sha256WithRSAEncryption 87:ef:96:76:03:25:47:c6:c2:fa:4d:f6:5e:0e:fd:90:c5:83: 6c:b6:36:b5:12:0a:86:97:fa:d1:c6:c0:b6:b2:65:89:02:a0: 54:6c:70:6a:83:e9:2a:ee:3e:e3:d5:dd:74:cb:02:0f:53:9f: 30:2b:4d:46:95:4b:0e:c4:f6:36:4c:0e:a5:cd:5f:30:d2:3e: f3:0a:df:31:19:e0:50:55:2c:80:81:07:47:6b:6c:f5:f3:ff: 8e:42:67:82:f4:0d:fa:94:bc:7b:da:00:6e:d3:b2:61:d2:ca: d0:af:e5:22:ef:72:f3:4f:7e:22:c8:90:65:33:29:3d:3f:ea: b7:51:e4:8f:16:48:c6:1f:0b:b3:92:b9:f4:e0:7c:46:3c:d6: 08:31:23:d4:f3:53:0f:a6:d7:19:71:b4:de:42:27:0d:44:d9: 2c:ca:ee:d5:b5:5e:2b:73:02:e7:7d:82:d0:1c:f5:2f:74:bb: 85:67:ec:6c:29:1b:91:c5:8b:d0:da:0e:eb:11:63:3f:78:4c: 1a:a2:20:f8:0e:0e:dc:2a:66:37:a7:67:03:8c:7a:97:8b:6f: c7:85:55:4e:9c:78:35:87:52:3f:ab:a6:d7:3c:e1:04:f6:d1: 30:9d:71:bc:32:88:1b:70:92:cc:fa:62:ac:c6:a2:82:8e:7b: e1:67:ab:a2 -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgITHT7bKK6dMhGvAD2rihdRE9y1hDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNDExMTUwMDAwMDBaFw0yNDEyMjAyMzU5NTla MHoxSTBHBgNVBAUTQGY0MzE4Zjk5MzhjYTJjN2E3YTc4MWFlNjQ3ZmZkMDhjMmJk MGYwMTU2MTg3YTkzNGQ4MmM2OTE0MGI4OWNkYWIxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJ4RL+CWjkEp5xxy9B2S5wf+DoLm2omtDSObQGSWkHa7L7+8 dOR7/dg2tK7gvnMF6gzki+z+2/8+DQGgjMzGB2lTMvB95MV/nfClQ5M+sVeouwRZ uaR+oWoTXjevHZoXVZ5pdBWQZn54i7Ejqi8KVQDBFA0XUwI2N+l1usVPAuaVK+Cp HiwsgKZIvZ4PFDwHN8V6jhPtoIeEp9QYpUGREnuBwmnDRe2wL3EXvxnAR2n0+NOb EVKpSeI0t2O/2H/sxeoKGqS2Dfj1IZ9RX/S2LG3Pbdonhj50xNnUsRDJ70nU1DZz +XWffl07+nyzFvI3nzbmlAyoeEby7WgsKvmjCE8CAwEAAaOCArAwggKsMB0GA1Ud DgQWBBQFdy4Ef1CbuEcmIVrYIJsOdH1AtTAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvNGYwOTk0YmItYWY5Yi00ZDY2LTlkZDItNGEyMTIxZDUzNmRkLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAg3kMA0GCSqGSIb3DQEBCwUAA4IBAQCH75Z2AyVHxsL6TfZeDv2QxYNstja1 EgqGl/rRxsC2smWJAqBUbHBqg+kq7j7j1d10ywIPU58wK01GlUsOxPY2TA6lzV8w 0j7zCt8xGeBQVSyAgQdHa2z18/+OQmeC9A36lLx72gBu07Jh0srQr+Ui73LzT34i yJBlMyk9P+q3UeSPFkjGHwuzkrn04HxGPNYIMSPU81MPptcZcbTeQicNRNksyu7V tV4rcwLnfYLQHPUvdLuFZ+xsKRuRxYvQ2g7rEWM/eEwaoiD4Dg7cKmY3p2cDjHqX i2/HhVVOnHg1h1I/q6bXPOEE9tEwnXG8MogbcJLM+mKsxqKCjnvhZ6ui -----END CERTIFICATE-----Generated at Sun Nov 24 22:11:12 2024 by rpki-client on console-fra.rpki-client.org