$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92aed9e1-9741-4d05-a6f4-8e3cafdf2a4d.roa File: 92aed9e1-9741-4d05-a6f4-8e3cafdf2a4d.roa (raw, json) Hash identifier: x30EhnoY5YGN/iaHVv/iYqu8qp3JjRuzbc6xE+5sHVs= Subject key identifier: 7B:F5:BA:EB:15:09:00:2C:3B:62:2C:DA:04:45:76:FF:2D:D0:EB:21 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2955DA4BCF1501D1FA013EC1D7512ABA8BAE0B17 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92aed9e1-9741-4d05-a6f4-8e3cafdf2a4d.roa Signing time: Mon 28 Oct 2024 00:00:00 +0000 ROA not before: Mon 28 Oct 2024 00:00:00 +0000 ROA not after: Mon 02 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 3.2.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:55:da:4b:cf:15:01:d1:fa:01:3e:c1:d7:51:2a:ba:8b:ae:0b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 28 00:00:00 2024 GMT Not After : Dec 2 23:59:59 2024 GMT Subject: serialNumber=3ffc0ddfd160b6e4eef6411e55bee931e9a4f7d2a562ec5493c384edbc762166, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:64:8e:a7:bc:ba:85:85:b8:5e:84:a8:c5:24: 59:f6:bf:aa:c7:71:a0:21:0b:82:d3:82:ab:92:f2: 5d:93:c4:cb:3f:ee:93:0d:4d:dc:f6:09:1d:37:92: a5:52:9e:12:26:ae:cd:0d:68:46:a9:0e:1b:de:44: 44:d5:eb:40:e8:e0:a4:00:fb:3e:3f:0c:fa:76:d3: a2:44:5a:26:fa:20:cd:45:26:92:34:cb:ca:94:7d: c8:50:23:8d:61:61:76:c8:b5:fa:99:94:9b:fc:98: 9d:cd:da:d8:1e:85:c5:74:1c:8d:0e:a2:66:a0:35: a6:5b:63:b2:9c:09:60:77:de:4f:8e:50:4b:5d:46: cd:65:16:46:b5:48:96:b2:51:a5:5b:4d:50:a1:fb: 0a:e4:62:37:43:5c:c7:e7:30:90:4e:63:ae:54:4e: 49:3b:41:aa:63:04:e7:46:a1:fc:51:07:2d:1b:d0: 35:65:47:1a:55:9e:46:c3:73:d5:24:69:42:4d:ae: 8a:11:43:2b:d6:47:ed:d3:e4:ad:be:96:43:aa:91: 92:f0:e5:fc:a4:3d:80:fc:c6:c2:0d:fe:59:e0:6d: 4b:cb:9e:09:c2:b8:1e:e5:20:51:22:78:d9:7c:51: e8:a2:c4:8e:92:64:33:ca:62:6b:47:3f:98:29:16: eb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F5:BA:EB:15:09:00:2C:3B:62:2C:DA:04:45:76:FF:2D:D0:EB:21 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92aed9e1-9741-4d05-a6f4-8e3cafdf2a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.52.0/24 Signature Algorithm: sha256WithRSAEncryption 56:3a:cc:bf:78:9f:e6:1a:32:4d:75:ea:b0:1d:16:2d:91:01: 6a:85:24:37:f3:2a:3f:76:ec:25:1d:5d:a4:b2:a6:23:1e:e3: e2:67:07:b8:0d:65:db:09:06:5a:56:da:5e:1a:ae:f1:df:3e: 74:ef:23:8e:62:ee:43:6b:c4:95:69:b5:ed:fc:19:b2:2f:ec: 7e:19:28:cc:5e:fd:36:05:2d:d4:5b:23:42:db:a8:28:f1:84: 0e:49:bd:2a:91:01:bc:41:3f:bf:e8:80:d1:18:28:22:42:66: e2:1b:2f:b0:12:45:5b:15:d7:c5:af:b2:ae:0e:78:cc:6d:28: 43:62:40:b5:f7:e3:8a:99:a6:af:01:2a:0f:19:50:2f:bb:9e: e0:1e:ce:49:a9:91:2a:83:c7:09:ff:9d:55:38:aa:90:3e:87: 5e:5b:89:5e:6a:cf:e5:b5:07:db:0e:2c:37:fe:7c:ef:f1:c7: 7d:10:46:12:12:e7:a1:d5:39:4a:67:1f:76:62:6f:88:69:5c: d9:ee:ee:3d:db:a1:2f:b8:be:aa:12:16:2b:4b:b7:20:a2:a0: 10:40:23:79:f2:20:b3:dc:e2:40:d3:a5:72:71:57:35:1d:82: 8d:86:be:73:8c:03:62:ce:e5:59:8a:22:23:33:60:6b:c9:bc: 84:0f:b8:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKVXaS88VAdH6AT7B11EquouuCxcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMDI4MDAwMDAwWhcNMjQxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZmZjMGRkZmQxNjBiNmU0ZWVmNjQxMWU1NWJlZTkzMWU5 YTRmN2QyYTU2MmVjNTQ5M2MzODRlZGJjNzYyMTY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClZI6nvLqFhbhehKjFJFn2v6rHcaAhC4LTgquS8l2TxMs/ 7pMNTdz2CR03kqVSnhImrs0NaEapDhveRETV60Do4KQA+z4/DPp206JEWib6IM1F JpI0y8qUfchQI41hYXbItfqZlJv8mJ3N2tgehcV0HI0OomagNaZbY7KcCWB33k+O UEtdRs1lFka1SJayUaVbTVCh+wrkYjdDXMfnMJBOY65UTkk7QapjBOdGofxRBy0b 0DVlRxpVnkbDc9UkaUJNrooRQyvWR+3T5K2+lkOqkZLw5fykPYD8xsIN/lngbUvL ngnCuB7lIFEieNl8UeiixI6SZDPKYmtHP5gpFut7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUe/W66xUJACw7YizaBEV2/y3Q6yEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkyYWVkOWUxLTk3NDEtNGQwNS1hNmY0LThlM2NhZmRmMmE0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAjQwDQYJKoZIhvcNAQELBQADggEBAFY6zL94n+YaMk116rAdFi2RAWqF JDfzKj927CUdXaSypiMe4+JnB7gNZdsJBlpW2l4arvHfPnTvI45i7kNrxJVpte38 GbIv7H4ZKMxe/TYFLdRbI0LbqCjxhA5JvSqRAbxBP7/ogNEYKCJCZuIbL7ASRVsV 18Wvsq4OeMxtKENiQLX344qZpq8BKg8ZUC+7nuAezkmpkSqDxwn/nVU4qpA+h15b iV5qz+W1B9sOLDf+fO/xx30QRhIS56HVOUpnH3Zib4hpXNnu7j3boS+4vqoSFitL tyCioBBAI3nyILPc4kDTpXJxVzUdgo2GvnOMA2LO5VmKIiMzYGvJvIQPuLM= -----END CERTIFICATE-----Generated at Thu Nov 21 21:04:05 2024 by rpki-client on console-fra.rpki-client.org