$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7075c905-b9fd-4de5-a27f-2c570c5622b4.roa File: 7075c905-b9fd-4de5-a27f-2c570c5622b4.roa (raw, json) Hash identifier: ecdZHONyV+i0f5FsznQW3/OPDTsgZ/kcvOOTDFcP7lw= Subject key identifier: AC:10:AF:17:1E:05:5F:FE:DC:46:14:48:7D:BD:87:D9:A0:52:5D:01 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4A63C125A4FE0CE6EA7263CDC33E8BD2CA14FF5D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7075c905-b9fd-4de5-a27f-2c570c5622b4.roa Signing time: Tue 29 Oct 2024 00:00:00 +0000 ROA not before: Tue 29 Oct 2024 00:00:00 +0000 ROA not after: Tue 03 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 168.163.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:63:c1:25:a4:fe:0c:e6:ea:72:63:cd:c3:3e:8b:d2:ca:14:ff:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 29 00:00:00 2024 GMT Not After : Dec 3 23:59:59 2024 GMT Subject: serialNumber=8f58b722dd9280f7401c96827115dfe9dc571938a9e0c33b96da160f2c52327b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:42:ce:bb:2e:83:bd:fb:73:0b:3e:50:19: aa:29:c8:ec:92:92:ae:21:4f:62:96:c3:bf:7f:d8: 0b:7b:d9:27:57:14:32:74:98:25:8e:ca:9d:a1:68: cf:67:70:6e:51:5f:56:d6:02:a5:48:b4:13:75:06: 66:29:da:08:28:ca:5b:cc:df:f4:45:a9:b0:52:69: 1e:4c:a2:10:e8:41:4f:5a:a3:80:d2:f4:00:6f:fa: 86:e6:b5:16:4f:ec:27:20:ce:fb:fa:68:e5:67:6c: 9f:a0:e7:08:43:53:b1:1b:d2:08:f6:fe:34:02:3e: 41:4b:80:de:13:29:fc:3a:59:95:19:68:08:c3:78: ba:35:6e:72:28:b2:2a:79:51:57:4f:c9:0b:63:0d: 1d:5a:69:aa:35:5c:57:7a:49:71:a3:01:20:d7:01: 54:ed:1b:e1:f5:4a:f5:25:c9:c8:72:07:4e:b8:71: b2:21:ff:1c:26:66:41:0c:6d:c0:dc:bc:14:01:dd: f2:93:ab:1a:67:9a:74:1a:d5:3d:15:c6:2b:af:48: 68:cf:47:69:27:f1:b1:9f:32:42:55:f5:20:38:ca: 80:cc:00:e7:68:14:37:2a:51:62:71:db:9b:c4:9c: 30:a2:88:39:33:b9:a0:08:2c:ab:b2:3d:c7:b6:e9: 2f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:10:AF:17:1E:05:5F:FE:DC:46:14:48:7D:BD:87:D9:A0:52:5D:01 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7075c905-b9fd-4de5-a27f-2c570c5622b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.163.0.0/16 Signature Algorithm: sha256WithRSAEncryption 31:7c:9b:6a:2b:35:f9:a2:ee:0f:4f:8e:05:01:e0:ea:33:c8: 0e:51:5b:00:86:0b:0e:c9:f5:73:42:05:d5:55:c0:7d:a3:39: 26:34:68:9c:6c:ee:84:6c:0b:0e:ba:f3:77:78:9c:e1:0f:d7: 97:6a:75:02:40:38:58:7e:0a:42:1f:e2:dc:1f:5d:bc:28:9f: 89:1f:23:12:d6:45:2b:bc:ba:67:2e:33:86:50:f4:28:ac:40: 01:a6:b4:4f:e3:fe:38:ff:49:9b:b3:af:57:8d:3f:08:d5:ac: 1b:4c:13:a8:7e:86:73:15:a4:e4:95:f4:5c:4d:09:60:38:b5: 31:a0:2d:1f:fe:2c:19:3b:26:5d:8c:65:16:0a:13:0e:e7:f9: fc:18:7d:cd:2c:82:80:52:da:e5:12:6b:5b:e4:85:53:a6:4b: 31:f0:f7:d5:13:50:a1:3a:ac:8a:54:8b:0b:8e:47:94:d2:50: 1f:a4:43:ee:52:03:af:8e:20:c2:f2:1c:bc:27:33:33:2c:42: f3:d3:4a:f1:70:4a:e6:c6:eb:32:d8:4c:cf:6b:77:a2:ae:0f: a1:9c:3c:be:cb:14:b0:2e:af:94:17:c6:83:3c:a5:de:59:93: 32:00:df:6e:71:6e:28:38:44:8c:94:c7:a4:3c:19:a5:70:05: 03:77:42:a7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSmPBJaT+DObqcmPNwz6L0soU/10wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMDI5MDAwMDAwWhcNMjQxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZjU4YjcyMmRkOTI4MGY3NDAxYzk2ODI3MTE1ZGZlOWRj NTcxOTM4YTllMGMzM2I5NmRhMTYwZjJjNTIzMjdiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwb0LOuy6DvftzCz5QGaopyOySkq4hT2KWw79/2At72SdX FDJ0mCWOyp2haM9ncG5RX1bWAqVItBN1BmYp2ggoylvM3/RFqbBSaR5MohDoQU9a o4DS9ABv+obmtRZP7Ccgzvv6aOVnbJ+g5whDU7Eb0gj2/jQCPkFLgN4TKfw6WZUZ aAjDeLo1bnIosip5UVdPyQtjDR1aaao1XFd6SXGjASDXAVTtG+H1SvUlychyB064 cbIh/xwmZkEMbcDcvBQB3fKTqxpnmnQa1T0VxiuvSGjPR2kn8bGfMkJV9SA4yoDM AOdoFDcqUWJx25vEnDCiiDkzuaAILKuyPce26S+9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUrBCvFx4FX/7cRhRIfb2H2aBSXQEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcwNzVjOTA1LWI5ZmQtNGRlNS1hMjdmLTJjNTcwYzU2MjJiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCoozANBgkqhkiG9w0BAQsFAAOCAQEAMXybais1+aLuD0+OBQHg6jPIDlFb AIYLDsn1c0IF1VXAfaM5JjRonGzuhGwLDrrzd3ic4Q/Xl2p1AkA4WH4KQh/i3B9d vCifiR8jEtZFK7y6Zy4zhlD0KKxAAaa0T+P+OP9Jm7OvV40/CNWsG0wTqH6GcxWk 5JX0XE0JYDi1MaAtH/4sGTsmXYxlFgoTDuf5/Bh9zSyCgFLa5RJrW+SFU6ZLMfD3 1RNQoTqsilSLC45HlNJQH6RD7lIDr44gwvIcvCczMyxC89NK8XBK5sbrMthMz2t3 oq4PoZw8vssUsC6vlBfGgzyl3lmTMgDfbnFuKDhEjJTHpDwZpXAFA3dCpw== -----END CERTIFICATE-----Generated at Thu Nov 21 21:03:59 2024 by rpki-client on console-fra.rpki-client.org