$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63c8dd92-0d17-4856-830d-c05fbf171b55.roa File: 63c8dd92-0d17-4856-830d-c05fbf171b55.roa (raw, json) Hash identifier: B8zL7xgQDOubmHba8lUKb71B5jG4wa5JC7JIIFRNF/g= Subject key identifier: BD:3A:96:B2:DD:57:27:86:D2:08:4E:BE:2B:7A:FB:A5:2D:FD:B5:D9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3E54D758276801D340AF134711508955A80E9177 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63c8dd92-0d17-4856-830d-c05fbf171b55.roa Signing time: Mon 28 Oct 2024 00:00:00 +0000 ROA not before: Mon 28 Oct 2024 00:00:00 +0000 ROA not after: Mon 02 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 52.144.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:54:d7:58:27:68:01:d3:40:af:13:47:11:50:89:55:a8:0e:91:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 28 00:00:00 2024 GMT Not After : Dec 2 23:59:59 2024 GMT Subject: serialNumber=76abf08387d1876e0a36eef17638e5963ebc2275f8214b4d136319e224283094, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a4:f3:ed:c1:d0:ba:9d:6b:d0:ee:f0:06:7c: d7:99:c2:f1:e6:2a:f7:18:62:d5:a9:97:21:32:55: 9d:2a:08:b8:82:3b:b7:5b:f5:e2:9e:25:f0:8f:92: a6:9d:47:51:a9:2a:8a:6c:60:07:34:11:71:0a:b6: c2:66:ca:0d:be:54:7d:db:c2:5c:3b:74:00:b3:4d: f1:24:7a:29:65:67:b3:14:09:1d:c2:68:a9:d7:4d: 0a:42:7f:2c:6d:54:9f:f7:23:b6:f4:65:c6:ff:e8: 21:07:b2:1f:e1:81:fc:fa:32:22:7e:49:77:2e:af: b0:20:27:c5:37:44:61:f4:82:2b:90:44:eb:4b:c6: 66:45:03:6f:7a:6b:b7:ae:da:70:02:f7:30:d9:72: 4f:4d:e7:0c:86:9d:03:d3:98:3e:24:36:e8:dd:2d: 91:46:d3:7d:3a:ce:a0:bf:de:e1:93:bc:56:e6:c5: f8:c3:c6:13:30:1a:b2:f2:f2:0b:1b:a9:1b:25:61: 01:b2:91:ad:e3:56:81:48:74:56:31:e6:c3:f2:c1: 4a:6a:7a:81:76:56:17:6b:73:df:54:5a:d6:69:c9: 1b:50:93:7f:60:59:db:9b:bf:d2:8b:30:61:aa:98: 84:82:ee:0d:87:2a:72:d0:df:4c:bd:8d:81:2c:7c: 58:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3A:96:B2:DD:57:27:86:D2:08:4E:BE:2B:7A:FB:A5:2D:FD:B5:D9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63c8dd92-0d17-4856-830d-c05fbf171b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.144.128.0/17 Signature Algorithm: sha256WithRSAEncryption 19:13:4c:b5:91:18:ce:29:3a:c1:ea:f8:15:09:93:3c:19:30: af:53:3e:a4:a3:13:18:83:91:e0:f2:5b:55:c4:15:0a:ce:a1: b2:29:aa:97:36:7f:6c:86:f6:d7:78:cc:d4:7a:5e:01:8d:c6: 6e:ad:82:14:db:15:7d:72:a1:ac:c6:fb:b1:98:4a:11:2e:d7: d3:84:19:40:54:d2:f2:93:8b:49:f9:a7:c9:64:ab:c2:25:b7: ee:8a:d9:ee:e0:1a:ab:3a:12:48:bb:38:53:10:7a:31:c0:b6: 5e:7e:08:0e:8c:64:67:ea:3d:ea:ae:60:3b:23:28:7c:99:db: 60:c6:48:2c:89:02:16:ad:6b:6e:31:9f:f5:d9:cd:5e:01:1c: b2:e0:6e:1d:06:c1:0d:b6:7c:c1:0f:3f:36:58:1c:a2:ef:9e: 51:15:59:29:af:1b:7c:93:7e:a7:8f:ce:0b:d6:a5:50:3e:2a: fe:32:06:99:c9:bc:a2:49:7b:60:e8:97:54:20:a3:39:30:b9: 3b:23:18:8f:4b:b7:15:00:de:64:ea:63:9b:f4:e1:f2:fd:49: 1b:a9:b1:41:de:d3:ff:04:06:34:f5:69:9e:39:d5:70:c4:dd: 08:a8:92:a4:3a:30:2e:16:3d:ce:c7:4c:b8:10:f5:7e:1b:01: df:4b:d2:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPlTXWCdoAdNArxNHEVCJVagOkXcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMDI4MDAwMDAwWhcNMjQxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NmFiZjA4Mzg3ZDE4NzZlMGEzNmVlZjE3NjM4ZTU5NjNl YmMyMjc1ZjgyMTRiNGQxMzYzMTllMjI0MjgzMDk0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcpPPtwdC6nWvQ7vAGfNeZwvHmKvcYYtWplyEyVZ0qCLiC O7db9eKeJfCPkqadR1GpKopsYAc0EXEKtsJmyg2+VH3bwlw7dACzTfEkeillZ7MU CR3CaKnXTQpCfyxtVJ/3I7b0Zcb/6CEHsh/hgfz6MiJ+SXcur7AgJ8U3RGH0giuQ ROtLxmZFA296a7eu2nAC9zDZck9N5wyGnQPTmD4kNujdLZFG0306zqC/3uGTvFbm xfjDxhMwGrLy8gsbqRslYQGyka3jVoFIdFYx5sPywUpqeoF2Vhdrc99UWtZpyRtQ k39gWdubv9KLMGGqmISC7g2HKnLQ30y9jYEsfFjfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvTqWst1XJ4bSCE6+K3r7pS39tdkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYzYzhkZDkyLTBkMTctNDg1Ni04MzBkLWMwNWZiZjE3MWI1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc0kIAwDQYJKoZIhvcNAQELBQADggEBABkTTLWRGM4pOsHq+BUJkzwZMK9T PqSjExiDkeDyW1XEFQrOobIpqpc2f2yG9td4zNR6XgGNxm6tghTbFX1yoazG+7GY ShEu19OEGUBU0vKTi0n5p8lkq8Ilt+6K2e7gGqs6Eki7OFMQejHAtl5+CA6MZGfq PequYDsjKHyZ22DGSCyJAhata24xn/XZzV4BHLLgbh0GwQ22fMEPPzZYHKLvnlEV WSmvG3yTfqePzgvWpVA+Kv4yBpnJvKJJe2Dol1QgozkwuTsjGI9LtxUA3mTqY5v0 4fL9SRupsUHe0/8EBjT1aZ451XDE3QiokqQ6MC4WPc7HTLgQ9X4bAd9L0rE= -----END CERTIFICATE-----Generated at Thu Nov 21 21:03:56 2024 by rpki-client on console-fra.rpki-client.org