$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/86ae19a6-782a-4d7d-9e7a-b014f31e7820.roa File: 86ae19a6-782a-4d7d-9e7a-b014f31e7820.roa (raw, json) Hash identifier: yD7BbqClETwR0ZyKNyH5qPx4E038OwQUaPUc1u2yOhI= Subject key identifier: EB:28:1D:68:B8:72:27:52:DB:96:21:A7:53:01:E3:8E:6D:66:04:26 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7255B7DD0C46D1E3DC79C321A1CD0FF8A99D0ACC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/86ae19a6-782a-4d7d-9e7a-b014f31e7820.roa Signing time: Mon 02 Sep 2024 00:00:00 +0000 ROA not before: Mon 02 Sep 2024 00:00:00 +0000 ROA not after: Mon 07 Oct 2024 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Sep 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:55:b7:dd:0c:46:d1:e3:dc:79:c3:21:a1:cd:0f:f8:a9:9d:0a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 2 00:00:00 2024 GMT Not After : Oct 7 23:59:59 2024 GMT Subject: serialNumber=37c85f5c312583162a43586f511020ddfb50a5aa98aa6c14e7fc338c7e85cc1a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:48:ea:11:9a:74:c0:b7:ac:99:63:92:57:47: 1b:ae:c4:5c:b6:0e:3f:46:a8:7f:3b:6b:35:12:2e: dc:87:81:54:49:4a:c4:16:3e:1e:e0:23:d6:f7:35: f3:5e:71:8f:98:aa:f3:e1:a9:83:e2:ce:7a:a8:ae: ff:a3:1d:b1:24:6c:f8:04:da:03:37:ec:21:8b:3e: 60:97:7b:da:6f:ce:e4:f9:31:19:80:a8:c8:f4:ca: 41:d3:69:3a:14:99:96:76:2d:b2:7b:10:0e:f3:a3: 02:be:cf:b2:b5:dd:f5:38:f4:5a:a6:d7:71:cd:80: 60:76:2d:e2:97:e0:45:d5:58:0f:d2:ef:34:bd:80: c7:e4:c5:ff:1e:39:ce:72:aa:9a:32:8e:1a:de:d1: da:7b:8a:e0:2d:cb:9a:44:f3:91:9a:cd:6e:57:9b: 4c:83:66:a0:28:36:68:6a:dd:e8:c5:c5:ce:70:35: 5f:59:9b:94:af:8a:9d:f2:eb:61:dd:0f:14:26:29: 04:0f:32:ce:76:af:1e:01:d2:71:17:ec:40:2d:06: d2:e9:c4:db:61:95:aa:e4:e2:11:48:94:14:1a:fb: 82:a2:6d:4a:f7:bf:a6:70:a2:7e:dd:a8:f7:fa:75: 56:37:1a:15:18:a2:82:5a:1c:af:28:af:d5:4b:62: d9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:28:1D:68:B8:72:27:52:DB:96:21:A7:53:01:E3:8E:6D:66:04:26 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/86ae19a6-782a-4d7d-9e7a-b014f31e7820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.228.0/22 Signature Algorithm: sha256WithRSAEncryption 77:5f:8e:4b:ed:ca:03:0e:68:30:09:7a:bd:9e:33:b1:0b:34: 89:76:a7:3c:d4:b8:1f:9c:44:d5:a5:3c:ef:ce:8d:9a:24:d1: 69:8a:dd:49:af:e3:19:d9:2f:2d:51:2e:54:ea:bb:33:86:b0: 36:50:f7:92:89:b3:e4:e2:d9:61:9a:80:7c:7b:12:11:a7:71: 54:64:01:86:04:96:4b:b5:94:35:4d:8c:af:f5:7d:a3:1d:a5: a6:ff:7a:00:5c:f2:3a:57:36:17:02:f0:0a:cc:82:fc:33:f4: 6a:90:b1:b4:87:92:9a:d7:9f:0d:16:de:ba:cf:93:25:54:a5: 5f:db:68:58:2d:78:82:fb:a3:9c:a0:7b:25:36:37:bf:7d:6d: 7a:fb:59:36:0d:df:c7:94:08:1c:db:85:d0:80:42:bd:48:c1: 95:e6:7d:95:29:30:e2:d9:d6:3b:7d:d1:7c:ca:ce:6d:9a:71: ee:19:db:86:31:cf:c8:4d:b3:53:fc:17:df:45:d1:62:fd:65: 89:3a:f9:08:20:93:1a:ab:b9:9e:76:54:f3:c4:54:b5:bd:54: 08:c7:44:e9:d3:77:c9:73:f8:41:bb:96:5a:3c:7a:03:ae:31: e1:94:db:5d:2b:e3:51:e4:09:58:1a:99:9a:dc:3a:36:e7:2c: 96:5b:6a:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUclW33QxG0ePcecMhoc0P+KmdCswwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwOTAyMDAwMDAwWhcNMjQxMDA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzN2M4NWY1YzMxMjU4MzE2MmE0MzU4NmY1MTEwMjBkZGZi NTBhNWFhOThhYTZjMTRlN2ZjMzM4YzdlODVjYzFhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7SOoRmnTAt6yZY5JXRxuuxFy2Dj9GqH87azUSLtyHgVRJ SsQWPh7gI9b3NfNecY+YqvPhqYPiznqorv+jHbEkbPgE2gM37CGLPmCXe9pvzuT5 MRmAqMj0ykHTaToUmZZ2LbJ7EA7zowK+z7K13fU49Fqm13HNgGB2LeKX4EXVWA/S 7zS9gMfkxf8eOc5yqpoyjhre0dp7iuAty5pE85GazW5Xm0yDZqAoNmhq3ejFxc5w NV9Zm5Svip3y62HdDxQmKQQPMs52rx4B0nEX7EAtBtLpxNthlark4hFIlBQa+4Ki bUr3v6Zwon7dqPf6dVY3GhUYooJaHK8or9VLYtmLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6ygdaLhyJ1LbliGnUwHjjm1mBCYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg2YWUxOWE2LTc4MmEtNGQ3ZC05ZTdhLWIwMTRmMzFlNzgyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIP3OQwDQYJKoZIhvcNAQELBQADggEBAHdfjkvtygMOaDAJer2eM7ELNIl2 pzzUuB+cRNWlPO/OjZok0WmK3Umv4xnZLy1RLlTquzOGsDZQ95KJs+Ti2WGagHx7 EhGncVRkAYYElku1lDVNjK/1faMdpab/egBc8jpXNhcC8ArMgvwz9GqQsbSHkprX nw0W3rrPkyVUpV/baFgteIL7o5ygeyU2N799bXr7WTYN38eUCBzbhdCAQr1IwZXm fZUpMOLZ1jt90XzKzm2ace4Z24Yxz8hNs1P8F99F0WL9ZYk6+QggkxqruZ52VPPE VLW9VAjHROnTd8lz+EG7llo8egOuMeGU210r41HkCVgamZrcOjbnLJZbauc= -----END CERTIFICATE-----Generated at Sat Sep 7 00:40:13 2024 by rpki-client on console-fra.rpki-client.org