$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9caad36d-063d-49da-a4a1-c451dbfdba52.roa File: 9caad36d-063d-49da-a4a1-c451dbfdba52.roa (raw, json) Hash identifier: e6OUU5YGz4no/muNO8brCV9vtyGAjl0dBb8E7wIisyY= Subject key identifier: 8F:9E:34:7F:CB:16:01:57:7C:35:8B:B3:8D:A9:D0:96:B7:3D:FA:BD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7B3E1C5D9A934569782D334419C7D2AF7096E17F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9caad36d-063d-49da-a4a1-c451dbfdba52.roa Signing time: Tue 29 Oct 2024 00:00:00 +0000 ROA not before: Tue 29 Oct 2024 00:00:00 +0000 ROA not after: Tue 03 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 18.72.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:3e:1c:5d:9a:93:45:69:78:2d:33:44:19:c7:d2:af:70:96:e1:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 29 00:00:00 2024 GMT Not After : Dec 3 23:59:59 2024 GMT Subject: serialNumber=d345a9fc17348ecdf0397c872c057481ebf2f2e910b6b02899b3f7a67401f1ac, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:38:77:dc:fd:81:fb:fa:e7:c9:e2:8c:83:e4: bf:2d:58:ac:7d:ef:28:80:60:72:3e:0b:59:df:57: 77:e4:0b:3a:f6:df:9a:d4:ad:78:64:39:a8:18:3e: ab:f4:14:99:bb:ea:db:52:e1:5f:21:1e:98:dd:cb: a1:76:de:d2:e0:e6:47:f2:f1:f2:3f:f5:91:a1:d7: 1c:6a:a1:ae:b6:77:08:ac:7e:74:da:b9:fd:4d:18: 9a:49:45:62:91:de:5a:57:4b:ff:d5:ab:ff:27:be: 87:ed:89:20:61:df:45:61:18:ba:28:11:0a:fc:6b: 51:26:db:c5:30:e8:66:80:40:d3:de:3c:8c:9e:86: d3:26:b0:a0:00:ca:85:ba:cf:a6:d5:9a:66:07:e9: eb:9c:fb:f6:80:79:ba:c0:3b:9b:74:99:1a:f3:e5: 6f:4c:d4:c0:83:7b:de:33:94:26:11:23:79:90:87: ae:a8:a7:18:8a:c8:43:0b:78:13:f1:ce:4e:c8:f3: f3:bb:cd:64:9e:47:3e:43:59:68:31:12:a2:46:8e: 3c:7c:5d:61:9a:d6:8b:09:8c:3c:85:47:74:f2:17: 62:23:32:b5:50:87:55:c8:c2:4e:f9:62:5b:90:af: ae:ea:56:cc:85:78:b3:ec:5f:17:44:21:59:20:3f: 84:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9E:34:7F:CB:16:01:57:7C:35:8B:B3:8D:A9:D0:96:B7:3D:FA:BD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9caad36d-063d-49da-a4a1-c451dbfdba52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.72.0.0/16 Signature Algorithm: sha256WithRSAEncryption 97:68:98:8d:3b:78:ea:2d:1a:8e:b1:73:46:03:de:e3:42:fd: db:24:ad:5b:ca:00:3b:f5:af:d2:8f:fb:4f:cd:ee:d5:70:b7: 4b:9e:80:53:b2:5c:84:45:48:ac:5e:e3:87:e8:11:d9:23:a4: fe:26:7e:57:35:dd:90:44:ee:47:45:0b:74:ba:f8:57:53:09: 18:82:cd:d0:9a:f7:37:dc:18:9b:ee:53:01:76:19:1f:0d:df: 88:a2:18:5f:ae:71:08:7b:47:eb:e9:70:4f:8b:a1:91:10:25: 9d:05:01:f5:5d:51:43:0a:25:72:8d:be:4a:b2:3f:54:4b:7e: 3e:1d:24:d2:94:e6:12:e6:d2:61:b8:b4:03:b7:33:db:f7:ea: c2:4c:95:fc:d4:ee:0d:ca:24:00:f4:59:4b:ef:a8:25:16:b1: 47:f0:e0:60:b0:d0:e5:89:d5:51:8d:03:a4:8d:cd:c8:30:af: 30:40:d6:9d:97:3e:1d:6a:55:69:2d:5b:c8:6c:9c:31:67:0d: b9:f2:ea:16:5f:ef:6c:2b:c0:0b:36:bc:1c:24:73:89:26:4c: 33:a9:94:43:39:d3:e5:0b:aa:59:cb:8c:0a:f1:3e:6c:24:3a: 68:09:1a:70:c8:80:90:29:87:f4:0f:ea:93:d9:97:54:01:5c: a8:99:86:85 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUez4cXZqTRWl4LTNEGcfSr3CW4X8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMDI5MDAwMDAwWhcNMjQxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzQ1YTlmYzE3MzQ4ZWNkZjAzOTdjODcyYzA1NzQ4MWVi ZjJmMmU5MTBiNmIwMjg5OWIzZjdhNjc0MDFmMWFjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDzOHfc/YH7+ufJ4oyD5L8tWKx97yiAYHI+C1nfV3fkCzr2 35rUrXhkOagYPqv0FJm76ttS4V8hHpjdy6F23tLg5kfy8fI/9ZGh1xxqoa62dwis fnTauf1NGJpJRWKR3lpXS//Vq/8nvoftiSBh30VhGLooEQr8a1Em28Uw6GaAQNPe PIyehtMmsKAAyoW6z6bVmmYH6euc+/aAebrAO5t0mRrz5W9M1MCDe94zlCYRI3mQ h66opxiKyEMLeBPxzk7I8/O7zWSeRz5DWWgxEqJGjjx8XWGa1osJjDyFR3TyF2Ij MrVQh1XIwk75YluQr67qVsyFeLPsXxdEIVkgP4SXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUj540f8sWAVd8NYuzjanQlrc9+r0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzljYWFkMzZkLTA2M2QtNDlkYS1hNGExLWM0NTFkYmZkYmE1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASSDANBgkqhkiG9w0BAQsFAAOCAQEAl2iYjTt46i0ajrFzRgPe40L92ySt W8oAO/Wv0o/7T83u1XC3S56AU7JchEVIrF7jh+gR2SOk/iZ+VzXdkETuR0ULdLr4 V1MJGILN0Jr3N9wYm+5TAXYZHw3fiKIYX65xCHtH6+lwT4uhkRAlnQUB9V1RQwol co2+SrI/VEt+Ph0k0pTmEubSYbi0A7cz2/fqwkyV/NTuDcokAPRZS++oJRaxR/Dg YLDQ5YnVUY0DpI3NyDCvMEDWnZc+HWpVaS1byGycMWcNufLqFl/vbCvACza8HCRz iSZMM6mUQznT5QuqWcuMCvE+bCQ6aAkacMiAkCmH9A/qk9mXVAFcqJmGhQ== -----END CERTIFICATE-----Generated at Thu Nov 21 21:41:12 2024 by rpki-client on console-ams.rpki-client.org