$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c95439c-3ec6-480e-83bf-766a1060671e.roa File: 7c95439c-3ec6-480e-83bf-766a1060671e.roa (raw, json) Hash identifier: cN+WzVgHk8ufAYLfcJJoiLTqKOgniTIZ/FnH9RBKALQ= Subject key identifier: A7:83:B4:AE:AA:1D:86:B6:31:A1:B0:14:88:44:5A:E1:3D:C9:79:AD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7C2F8E24D02A8A5EC06F371907564218E2E8715B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c95439c-3ec6-480e-83bf-766a1060671e.roa Signing time: Tue 09 Jul 2024 00:00:00 +0000 ROA not before: Tue 09 Jul 2024 00:00:00 +0000 ROA not after: Tue 13 Aug 2024 23:59:59 +0000 asID: 16509 IP address blocks: 13.230.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Jul 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:2f:8e:24:d0:2a:8a:5e:c0:6f:37:19:07:56:42:18:e2:e8:71:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 9 00:00:00 2024 GMT Not After : Aug 13 23:59:59 2024 GMT Subject: serialNumber=af1fc91de91eaf3f54be42d56cc7ef663c7f8b909b957af5a40857507d02c20c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:64:ff:fa:52:6d:1a:00:f6:a2:5f:02:24:27: 49:fc:7d:18:16:5d:7a:2e:8b:52:c9:3f:55:40:43: d6:0c:d6:06:2a:12:90:3b:21:5a:6c:12:1d:cd:24: 39:a3:e9:05:ce:55:30:d5:4f:02:1e:cd:e3:2c:ab: 26:e8:fe:ad:2f:2d:cc:01:93:fd:37:03:b0:9e:e7: ac:92:a1:b1:f8:65:6a:6b:11:8a:18:96:bb:9d:ca: 9e:25:c3:1f:53:70:b3:5f:3f:bb:60:1a:37:cf:6d: 8f:4b:62:86:b3:11:79:26:98:63:f8:e5:96:13:f9: 0c:8c:c9:cd:4d:f2:41:54:fe:a7:d9:2d:d3:4e:ad: ea:30:9f:ca:af:fe:91:19:46:0a:ee:3a:39:bb:24: 45:48:c4:a9:c1:93:fb:25:8a:1f:ae:ef:40:8d:8a: 36:2b:36:dd:20:de:de:04:02:28:10:93:86:01:88: 95:6d:37:bb:b5:c7:9c:56:ff:f4:28:fa:4c:ec:8f: f4:e3:ce:b6:be:9a:f9:47:8b:2a:4e:81:e0:58:0a: bd:13:fd:0c:5d:58:d8:c1:ea:bc:44:98:0c:9d:39: ef:87:58:5f:7f:6e:fc:00:52:ea:64:47:e6:a9:36: f0:84:a9:5f:0d:54:db:c0:8a:e5:08:9a:98:09:a9: 52:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:83:B4:AE:AA:1D:86:B6:31:A1:B0:14:88:44:5A:E1:3D:C9:79:AD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c95439c-3ec6-480e-83bf-766a1060671e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.230.0.0/15 Signature Algorithm: sha256WithRSAEncryption 46:ae:3d:0b:20:d8:bb:d4:a9:7a:9c:1b:5b:6b:9e:5f:ae:95: 24:57:cd:58:8a:86:a6:cb:32:16:f7:1e:01:f3:b4:20:20:84: 16:1e:4d:f8:ee:5f:d6:6b:db:1c:87:6e:32:80:05:c1:7e:13: 21:8a:80:06:94:04:f4:69:41:e9:d2:91:91:ae:12:91:c0:6a: 44:7b:7b:43:6c:8a:aa:5c:c9:02:8f:d1:2a:34:19:73:df:40: fe:41:2d:9c:66:95:25:36:bb:00:14:af:a2:27:13:e8:d7:b8: ef:2e:a1:c5:07:ea:0b:79:96:75:c2:55:b5:cf:0e:1f:bd:ff: ec:40:72:55:d1:72:8d:12:b8:ad:06:e6:6f:02:60:2e:da:9a: 58:a1:9e:6d:e6:37:6f:4b:32:01:54:cb:eb:da:36:11:58:81: 20:49:c3:aa:40:50:b4:13:2b:50:01:09:6f:7f:ec:d1:ab:ab: 63:2b:d1:f0:4d:1a:65:bf:8d:66:72:e7:8a:83:84:01:d5:0a: 24:7a:db:a6:36:da:01:8e:bd:3c:76:19:25:b6:c6:61:c0:8d: 53:f9:0c:11:87:5a:59:0a:99:dd:70:df:e8:a7:cc:b2:e5:f9: 70:cd:cc:4a:5e:fc:ee:10:a0:a2:46:23:3c:5a:71:45:7f:a1: 44:1d:11:11 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfC+OJNAqil7AbzcZB1ZCGOLocVswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNzA5MDAwMDAwWhcNMjQwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjFmYzkxZGU5MWVhZjNmNTRiZTQyZDU2Y2M3ZWY2NjNj N2Y4YjkwOWI5NTdhZjVhNDA4NTc1MDdkMDJjMjBjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmZP/6Um0aAPaiXwIkJ0n8fRgWXXoui1LJP1VAQ9YM1gYq EpA7IVpsEh3NJDmj6QXOVTDVTwIezeMsqybo/q0vLcwBk/03A7Ce56ySobH4ZWpr EYoYlrudyp4lwx9TcLNfP7tgGjfPbY9LYoazEXkmmGP45ZYT+QyMyc1N8kFU/qfZ LdNOreown8qv/pEZRgruOjm7JEVIxKnBk/slih+u70CNijYrNt0g3t4EAigQk4YB iJVtN7u1x5xW//Qo+kzsj/Tjzra+mvlHiypOgeBYCr0T/QxdWNjB6rxEmAydOe+H WF9/bvwAUupkR+apNvCEqV8NVNvAiuUImpgJqVJPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUp4O0rqodhrYxobAUiERa4T3Jea0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdjOTU0MzljLTNlYzYtNDgwZS04M2JmLTc2NmExMDYwNjcxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEN5jANBgkqhkiG9w0BAQsFAAOCAQEARq49CyDYu9SpepwbW2ueX66VJFfN WIqGpssyFvceAfO0ICCEFh5N+O5f1mvbHIduMoAFwX4TIYqABpQE9GlB6dKRka4S kcBqRHt7Q2yKqlzJAo/RKjQZc99A/kEtnGaVJTa7ABSvoicT6Ne47y6hxQfqC3mW dcJVtc8OH73/7EByVdFyjRK4rQbmbwJgLtqaWKGebeY3b0syAVTL69o2EViBIEnD qkBQtBMrUAEJb3/s0aurYyvR8E0aZb+NZnLnioOEAdUKJHrbpjbaAY69PHYZJbbG YcCNU/kMEYdaWQqZ3XDf6KfMsuX5cM3MSl787hCgokYjPFpxRX+hRB0REQ== -----END CERTIFICATE-----Generated at Fri Jul 26 00:47:32 2024 by rpki-client on console-fra.rpki-client.org