$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f564605-d738-4768-beb4-1be9139115d8.roa File: 6f564605-d738-4768-beb4-1be9139115d8.roa (raw, json) Hash identifier: BnBAgMTNi/Aa4ZvFj5vhcG+KkzIe90+OUbuf3K7hZBI= Subject key identifier: 9F:88:62:7A:26:FD:77:9D:0C:FE:55:49:05:AE:3C:E0:8A:6C:84:22 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 35BAC0138AC8B780D5D1DBE8A2D039603A48CE8F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f564605-d738-4768-beb4-1be9139115d8.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 3.4.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ba:c0:13:8a:c8:b7:80:d5:d1:db:e8:a2:d0:39:60:3a:48:ce:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=9493a114e2f08af4ceebab69380c591aaf6e13b45c070120de67ace4c0536ba3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:41:75:99:0f:de:57:77:9f:b7:1b:8c:a8:13: 2f:99:f3:cc:54:c8:90:ae:fe:bf:8c:9b:bb:96:1d: fb:8b:ef:5a:0c:4e:d7:44:69:5d:ac:37:17:57:c7: 42:90:e8:9f:67:36:39:29:2d:bb:5c:e0:bd:69:58: c5:5d:3d:7c:f2:af:fd:13:ed:ed:cf:03:4f:3b:d1: df:68:bc:74:0f:5d:5d:0d:f8:1b:bd:28:77:24:c2: 4e:46:c8:44:32:68:b7:4d:d2:b6:e6:d4:d1:42:81: 6e:82:66:86:76:37:bf:4f:48:b5:fa:ba:2f:f2:03: ac:e0:9b:90:71:19:19:12:58:a1:bf:1b:84:f5:07: 02:ff:5c:4f:b4:e0:d0:99:a2:9e:5a:67:15:b7:a3: b7:2b:6e:d3:5e:34:ee:8a:db:b0:64:55:c6:0a:62: 7a:c3:0c:0d:6b:71:af:7a:4e:7a:61:20:37:05:df: cd:03:10:b3:94:63:f4:dc:d2:07:62:f2:7b:77:50: 72:67:7b:1d:42:df:05:4c:80:a9:3a:eb:f9:e0:5f: 4d:96:31:dc:71:29:3f:f6:b5:2e:d7:58:f5:29:33: 54:ed:97:1e:a7:04:b6:7e:13:fc:8e:96:ea:5e:82: 66:fc:6c:18:54:25:81:17:b7:76:bc:93:94:0b:70: 9e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:88:62:7A:26:FD:77:9D:0C:FE:55:49:05:AE:3C:E0:8A:6C:84:22 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f564605-d738-4768-beb4-1be9139115d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.4.32.0/20 Signature Algorithm: sha256WithRSAEncryption 66:8c:b9:13:00:92:d6:7a:0f:34:57:8b:96:49:69:4c:47:ef: 74:ce:1f:57:fa:0d:01:3a:38:2c:e8:d3:53:f4:b5:85:fa:ed: 00:62:a4:4a:d1:d3:57:d0:24:25:5b:0b:6f:60:99:c6:ac:36: 36:02:62:b2:5e:c6:5a:c2:85:92:68:63:2c:09:d1:97:18:73: 9a:bf:49:59:52:df:8e:8b:4e:fe:b9:23:3f:bd:a4:f2:9a:fb: 27:d3:a2:df:48:b0:e0:4d:5b:bd:9a:b4:7f:8b:c6:a9:61:ed: f2:21:d6:cd:2b:0f:e0:e3:8e:6e:ac:a3:6e:d0:ff:3b:72:c6: 62:27:e5:1d:47:9b:00:c0:3f:91:c2:fe:43:e8:4d:16:c1:49: b0:7c:57:0e:aa:cd:0d:cb:2a:5d:ba:bf:b1:cc:78:75:2c:ad: 3a:f0:d8:0c:e0:06:e8:0b:34:0d:3d:d8:4b:c6:ff:62:bb:f1: 15:df:14:a7:07:42:0f:f3:77:c3:f9:89:a9:40:cf:1b:da:4d: 28:8f:b9:f4:c3:4f:20:22:75:42:8b:88:6d:07:bb:9f:a9:16: 0e:8a:2a:e5:c0:fb:ff:42:31:5a:34:79:7c:a1:20:4e:50:4a: 96:20:49:bc:67:36:72:19:b4:e7:9c:d5:2a:0c:79:24:cf:68: 05:1c:f7:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNbrAE4rIt4DV0dvootA5YDpIzo8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDkzYTExNGUyZjA4YWY0Y2VlYmFiNjkzODBjNTkxYWFm NmUxM2I0NWMwNzAxMjBkZTY3YWNlNGMwNTM2YmEzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeQXWZD95Xd5+3G4yoEy+Z88xUyJCu/r+Mm7uWHfuL71oM TtdEaV2sNxdXx0KQ6J9nNjkpLbtc4L1pWMVdPXzyr/0T7e3PA0870d9ovHQPXV0N +Bu9KHckwk5GyEQyaLdN0rbm1NFCgW6CZoZ2N79PSLX6ui/yA6zgm5BxGRkSWKG/ G4T1BwL/XE+04NCZop5aZxW3o7crbtNeNO6K27BkVcYKYnrDDA1rca96TnphIDcF 380DELOUY/Tc0gdi8nt3UHJnex1C3wVMgKk66/ngX02WMdxxKT/2tS7XWPUpM1Tt lx6nBLZ+E/yOlupegmb8bBhUJYEXt3a8k5QLcJ7dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUn4hieib9d50M/lVJBa484IpshCIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZmNTY0NjA1LWQ3MzgtNDc2OC1iZWI0LTFiZTkxMzkxMTVkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQDBCAwDQYJKoZIhvcNAQELBQADggEBAGaMuRMAktZ6DzRXi5ZJaUxH73TO H1f6DQE6OCzo01P0tYX67QBipErR01fQJCVbC29gmcasNjYCYrJexlrChZJoYywJ 0ZcYc5q/SVlS346LTv65Iz+9pPKa+yfTot9IsOBNW72atH+Lxqlh7fIh1s0rD+Dj jm6so27Q/ztyxmIn5R1HmwDAP5HC/kPoTRbBSbB8Vw6qzQ3LKl26v7HMeHUsrTrw 2AzgBugLNA092EvG/2K78RXfFKcHQg/zd8P5ialAzxvaTSiPufTDTyAidUKLiG0H u5+pFg6KKuXA+/9CMVo0eXyhIE5QSpYgSbxnNnIZtOec1SoMeSTPaAUc960= -----END CERTIFICATE-----Generated at Thu Nov 21 21:41:00 2024 by rpki-client on console-ams.rpki-client.org