$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/971f1382-ba85-4ff7-89e9-023f32803698.roa File: 971f1382-ba85-4ff7-89e9-023f32803698.roa (raw, json) Hash identifier: Sf2ZPcVL9hWqZtfB0iltZmihGrrOwa4yUb3739guWC8= Subject key identifier: 25:AD:CE:BD:FF:21:EA:30:82:11:04:AB:50:E6:DA:45:76:48:CB:CE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 78141A59A961466658F77766C61AA8217B920009 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/971f1382-ba85-4ff7-89e9-023f32803698.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:14:1a:59:a9:61:46:66:58:f7:77:66:c6:1a:a8:21:7b:92:00:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=dde36848f3377c9d0d9b31b576bdf63ae8cd63c90978df364f7fec7d60ed6cd2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b2:7b:ea:be:46:83:a0:67:7c:66:d5:5f:5c: 19:59:99:08:50:0e:b8:a4:3e:16:e7:e1:e0:e1:cf: 0b:39:ed:18:ac:8f:d0:ff:ba:ab:c5:28:2f:9b:36: 2d:ec:a1:2b:8b:e6:59:a8:d9:86:3b:4b:8f:da:92: 3f:2e:46:3c:6e:e4:f9:cd:30:48:c4:b0:87:59:fd: b5:2d:14:10:54:1f:20:cf:11:4e:96:55:06:15:1d: 13:fb:c5:f8:ef:af:e4:55:4c:07:92:5a:3f:59:db: 56:1e:f5:66:3a:32:3c:cc:18:27:8f:f4:0f:57:ae: 08:a8:ba:b0:78:5d:0d:ad:39:8e:ee:3a:0e:06:72: 56:20:c1:6b:3a:43:af:e2:d4:0d:37:47:a9:e5:b5: c7:21:4c:28:80:88:f9:9e:1e:b5:4e:45:4e:cb:7d: 52:9f:ce:b2:8f:23:f2:dc:8d:1a:6c:53:ca:89:95: 8d:46:e0:97:d3:1d:6c:d2:5c:73:60:31:99:12:b1: b8:a8:29:ef:9f:3a:5f:ee:41:f7:62:e3:5a:af:ae: c4:cd:d5:30:95:89:ed:0e:4d:31:f5:70:0c:ea:33: 17:11:cd:c0:eb:8f:ac:46:8b:52:8a:0c:80:cf:4d: 13:38:aa:2a:b0:ab:7f:5d:18:cf:20:84:dc:6e:4c: 15:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AD:CE:BD:FF:21:EA:30:82:11:04:AB:50:E6:DA:45:76:48:CB:CE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/971f1382-ba85-4ff7-89e9-023f32803698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.235.0/24 Signature Algorithm: sha256WithRSAEncryption a2:2c:db:de:93:a4:b6:b1:99:b7:64:be:db:9e:be:4b:5e:d5: d4:1a:70:8c:65:71:e4:fd:89:9e:2f:d6:db:14:e0:2b:56:81: f1:18:82:13:00:21:99:97:b1:d5:e1:d1:f8:a7:36:c6:df:5e: 5b:34:82:6b:11:11:c7:d9:d5:ea:6a:0e:30:66:9a:46:4b:56: 2a:2d:db:c3:b9:e7:22:59:07:35:8d:db:06:e7:3f:8e:46:26: 68:5c:76:5f:c7:55:35:94:92:ea:50:dc:b0:a0:c9:2c:e0:45: 41:6e:51:20:36:51:33:22:43:7c:b8:62:16:63:24:21:8d:d8: 58:ac:8e:14:fd:2a:a5:9e:1f:86:e8:4c:54:e7:fe:cb:ea:f8: 20:91:1c:62:09:2e:3d:92:7f:9f:1e:6e:1a:a6:22:d7:50:6f: dd:db:67:d1:84:2d:e8:d2:de:43:74:54:b1:40:5d:c3:a2:d4: 22:c2:36:fe:e1:cf:67:74:a1:d6:33:17:2f:3b:cc:30:ea:bb: 2d:2a:d9:dd:e8:41:58:9d:10:77:97:61:90:a8:8f:a9:25:56: c8:79:8f:0c:50:ee:f1:70:1b:07:ac:be:dd:54:9c:58:fb:cd: de:f7:94:4f:d5:cd:3a:3f:92:3a:b9:71:37:1c:97:48:a3:0b: 25:4d:16:64 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeBQaWalhRmZY93dmxhqoIXuSAAkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMTE5MDAwMDAwWhcNMjQxMjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGUzNjg0OGYzMzc3YzlkMGQ5YjMxYjU3NmJkZjYzYWU4 Y2Q2M2M5MDk3OGRmMzY0ZjdmZWM3ZDYwZWQ2Y2QyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBsnvqvkaDoGd8ZtVfXBlZmQhQDrikPhbn4eDhzws57Ris j9D/uqvFKC+bNi3soSuL5lmo2YY7S4/akj8uRjxu5PnNMEjEsIdZ/bUtFBBUHyDP EU6WVQYVHRP7xfjvr+RVTAeSWj9Z21Ye9WY6MjzMGCeP9A9XrgiourB4XQ2tOY7u Og4GclYgwWs6Q6/i1A03R6nltcchTCiAiPmeHrVORU7LfVKfzrKPI/LcjRpsU8qJ lY1G4JfTHWzSXHNgMZkSsbioKe+fOl/uQfdi41qvrsTN1TCVie0OTTH1cAzqMxcR zcDrj6xGi1KKDIDPTRM4qiqwq39dGM8ghNxuTBXjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJa3Ovf8h6jCCEQSrUObaRXZIy84wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk3MWYxMzgyLWJhODUtNGZmNy04OWU5LTAyM2YzMjgwMzY5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0X+swDQYJKoZIhvcNAQELBQADggEBAKIs296TpLaxmbdkvtuevkte1dQa cIxlceT9iZ4v1tsU4CtWgfEYghMAIZmXsdXh0finNsbfXls0gmsREcfZ1epqDjBm mkZLViot28O55yJZBzWN2wbnP45GJmhcdl/HVTWUkupQ3LCgySzgRUFuUSA2UTMi Q3y4YhZjJCGN2FisjhT9KqWeH4boTFTn/svq+CCRHGIJLj2Sf58ebhqmItdQb93b Z9GELejS3kN0VLFAXcOi1CLCNv7hz2d0odYzFy87zDDquy0q2d3oQVidEHeXYZCo j6klVsh5jwxQ7vFwGwesvt1UnFj7zd73lE/VzTo/kjq5cTccl0ijCyVNFmQ= -----END CERTIFICATE-----Generated at Sun Nov 24 22:11:30 2024 by rpki-client on console-fra.rpki-client.org