$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/920c2679-a607-4621-8630-24d2e4985cab.roa File: 920c2679-a607-4621-8630-24d2e4985cab.roa (raw, json) Hash identifier: cnUd2vXHwNILSvYbTwJrRhmfrqNhIX8rsfOal8nhS5g= Subject key identifier: D8:C9:8C:FB:92:AB:6F:32:4F:84:5D:F8:D8:8C:A2:8A:E3:F8:97:CC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6B751B09BED10CBB0CD895C55254AAF5246AA1FD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/920c2679-a607-4621-8630-24d2e4985cab.roa Signing time: Tue 10 Dec 2024 00:00:00 +0000 ROA not before: Tue 10 Dec 2024 00:00:00 +0000 ROA not after: Tue 14 Jan 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.248.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:75:1b:09:be:d1:0c:bb:0c:d8:95:c5:52:54:aa:f5:24:6a:a1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Dec 10 00:00:00 2024 GMT Not After : Jan 14 23:59:59 2025 GMT Subject: serialNumber=38bbeb1a7c816429b2f3fc9253580079aaf37c494fe1ea1896bab5bef1fc5482, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:89:63:45:be:52:56:ba:0a:ef:a9:eb:43:ac: 06:ef:7e:34:be:16:f8:4c:02:bc:9b:2c:b6:67:01: fb:e5:81:cc:30:c7:ef:b1:60:2d:15:93:0a:15:bd: 24:2b:d7:98:f4:63:e6:f8:5e:50:9d:ca:61:49:60: 13:49:c8:2d:cf:f1:2e:7f:6c:fd:54:1a:56:a2:3f: 86:1a:56:96:bf:fa:29:0b:fd:1a:c9:88:fa:bc:0e: 69:69:3c:a0:cd:96:6c:b3:54:36:c4:30:1f:37:0a: 10:86:a5:8d:18:b5:05:b5:c5:a2:cb:d2:f7:15:56: 48:f1:36:db:a5:3b:81:0c:7a:ab:5a:c8:52:96:46: 14:e5:7f:ee:dc:33:7e:b7:29:b3:73:a8:44:21:b0: 23:92:bb:8a:1b:ed:b7:e1:83:0b:03:f9:aa:13:0d: b9:7a:d7:a2:37:4f:ca:d3:ea:b0:be:08:24:45:1d: e7:17:4d:2f:4c:01:09:09:52:1f:f1:15:d5:87:ca: 93:f4:f2:46:1d:1d:9e:38:11:9a:09:3d:14:3f:6f: 9d:12:70:7b:1a:23:cf:f1:df:e4:11:68:fd:9b:c3: 0b:38:fe:88:2a:ef:5b:b5:70:ea:e0:54:5f:94:03: 13:ef:25:8d:38:0b:9f:c3:2f:64:de:70:93:9f:39: fc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C9:8C:FB:92:AB:6F:32:4F:84:5D:F8:D8:8C:A2:8A:E3:F8:97:CC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/920c2679-a607-4621-8630-24d2e4985cab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.248.0.0/16 Signature Algorithm: sha256WithRSAEncryption b0:83:84:a6:7c:d2:58:5a:25:62:a6:49:55:cb:1a:6c:7b:c7: 63:7f:4a:c4:2a:c5:e8:3e:af:36:aa:40:b3:72:5b:04:1f:ce: f7:1b:26:c1:66:a2:d2:dd:79:93:c5:d7:f9:89:7e:37:35:0c: 6b:a0:f9:e2:7b:31:d9:f8:95:e5:12:fa:ee:28:69:9e:98:ba: 48:dd:af:89:84:0e:01:88:93:51:95:ed:2f:12:1a:50:2f:95: 0d:a8:d2:fc:23:db:79:0e:f6:0b:32:c9:41:bf:e0:7b:69:d4: 38:41:65:c4:d4:8f:a8:ee:f3:58:01:48:0f:51:83:7f:49:f0: c5:e9:86:77:78:52:3f:e6:b0:21:a3:3b:b4:d1:84:60:8a:c4: ee:77:c2:84:ac:f3:10:8b:08:c7:e8:82:68:73:27:36:45:34: 02:f0:ae:ff:02:38:28:50:17:a4:b7:3e:90:5c:46:b2:98:dd: 15:46:d7:3b:1b:e3:ce:4d:ba:c9:35:95:e0:93:a9:66:a1:2a: ee:ba:db:f8:87:49:36:e1:aa:04:d9:b9:c0:62:7a:1c:f2:92: 4d:62:b3:45:56:20:7a:26:bf:b5:7e:2e:c1:15:2e:0e:b6:68: 01:94:e6:13:3a:40:3d:fc:98:87:6d:21:9e:04:ae:86:15:05: e4:ba:6b:c7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUa3UbCb7RDLsM2JXFUlSq9SRqof0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMjEwMDAwMDAwWhcNMjUwMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOGJiZWIxYTdjODE2NDI5YjJmM2ZjOTI1MzU4MDA3OWFh ZjM3YzQ5NGZlMWVhMTg5NmJhYjViZWYxZmM1NDgyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7iWNFvlJWugrvqetDrAbvfjS+FvhMArybLLZnAfvlgcww x++xYC0VkwoVvSQr15j0Y+b4XlCdymFJYBNJyC3P8S5/bP1UGlaiP4YaVpa/+ikL /RrJiPq8DmlpPKDNlmyzVDbEMB83ChCGpY0YtQW1xaLL0vcVVkjxNtulO4EMeqta yFKWRhTlf+7cM363KbNzqEQhsCOSu4ob7bfhgwsD+aoTDbl616I3T8rT6rC+CCRF HecXTS9MAQkJUh/xFdWHypP08kYdHZ44EZoJPRQ/b50ScHsaI8/x3+QRaP2bwws4 /ogq71u1cOrgVF+UAxPvJY04C5/DL2TecJOfOfzpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU2MmM+5KrbzJPhF342IyiiuP4l8wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkyMGMyNjc5LWE2MDctNDYyMS04NjMwLTI0ZDJlNDk4NWNhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP+DANBgkqhkiG9w0BAQsFAAOCAQEAsIOEpnzSWFolYqZJVcsabHvHY39K xCrF6D6vNqpAs3JbBB/O9xsmwWai0t15k8XX+Yl+NzUMa6D54nsx2fiV5RL67ihp npi6SN2viYQOAYiTUZXtLxIaUC+VDajS/CPbeQ72CzLJQb/ge2nUOEFlxNSPqO7z WAFID1GDf0nwxemGd3hSP+awIaM7tNGEYIrE7nfChKzzEIsIx+iCaHMnNkU0AvCu /wI4KFAXpLc+kFxGspjdFUbXOxvjzk26yTWV4JOpZqEq7rrb+IdJNuGqBNm5wGJ6 HPKSTWKzRVYgeia/tX4uwRUuDrZoAZTmEzpAPfyYh20hngSuhhUF5Lprxw== -----END CERTIFICATE-----Generated at Thu Dec 12 01:13:27 2024 by rpki-client on console-fra.rpki-client.org