$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0a3f1e9-c05d-40d7-9e25-b25dbd8781e7.roa File: a0a3f1e9-c05d-40d7-9e25-b25dbd8781e7.roa (raw, json) Hash identifier: 5yJdPP6zSOK8PuLwpry0XtKEgFutgTQvt6lZ9Ln0KUo= Subject key identifier: 1D:31:58:6A:D5:3C:60:3C:B0:DC:DE:81:A8:59:24:BF:2A:41:9D:96 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 72C2A9FEE97C8CE2BE321D4E545C26B80F8EB40D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0a3f1e9-c05d-40d7-9e25-b25dbd8781e7.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 52.94.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c2:a9:fe:e9:7c:8c:e2:be:32:1d:4e:54:5c:26:b8:0f:8e:b4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=fc6a83ce0a64291711b2a6ed4c4158e07c13214851f5648c125dd335f11b9db2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:87:82:9f:5e:99:ff:b0:c1:ff:29:7f:10:a2: 35:79:fb:26:04:3f:ef:09:20:4d:ad:50:b0:cb:2f: 13:80:e6:74:a1:c2:d3:bb:f4:50:1c:f5:2b:81:ed: 16:3b:07:06:68:68:9a:cf:6d:17:fe:52:63:5d:3f: 78:3c:77:11:66:4a:63:d2:c7:f8:3e:48:59:81:31: c6:cf:06:c7:a2:8e:2e:88:e7:61:19:95:46:8f:ec: 9f:2d:86:b6:7f:f8:15:eb:96:3e:69:43:3e:d6:29: 60:e5:ab:c8:bb:f2:9f:3a:67:48:96:23:5f:e9:17: f2:ef:4a:f7:7b:f3:4c:f2:a5:55:0b:4d:89:32:8e: 99:d4:c7:db:dd:9a:24:7e:06:02:52:b0:20:74:21: 60:c1:a4:22:c4:ee:fd:c0:f3:54:c3:fd:73:dc:c2: e9:41:d3:52:da:00:53:c3:59:9b:a3:1a:5e:de:83: 7d:6e:dd:c6:02:62:c8:cb:af:dc:f8:bc:5d:57:71: 14:26:60:09:6a:d0:4a:fc:34:b9:6b:e7:a3:0f:ae: da:99:05:5f:51:fb:78:0e:e9:52:50:c6:60:5f:a1: 5d:be:cf:e9:58:f0:43:10:34:1d:b4:95:12:be:e1: b9:27:62:01:21:19:f5:ba:4c:80:f3:57:f7:f1:d5: f3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:31:58:6A:D5:3C:60:3C:B0:DC:DE:81:A8:59:24:BF:2A:41:9D:96 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0a3f1e9-c05d-40d7-9e25-b25dbd8781e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.200.0/24 Signature Algorithm: sha256WithRSAEncryption 10:95:d7:f8:d7:97:3d:2d:84:c1:83:e3:d9:f7:d4:93:4f:21: b4:f5:74:da:63:a5:fa:67:67:a1:f3:ef:bc:b7:af:f8:dd:2f: 74:2c:d0:d8:87:7a:aa:55:b4:9d:1f:8f:9f:7e:0f:ad:2c:e5: 65:20:dc:63:ac:48:9a:7c:58:99:12:7a:65:8a:3c:23:db:d2: 66:ab:b8:75:f9:2c:cd:fa:17:56:e7:e2:73:4d:e8:e3:50:d8: a7:d8:f8:80:8e:c4:3d:66:05:f8:f7:a2:0e:34:b0:4c:a4:7b: 5f:73:e0:42:75:41:7b:da:2a:23:60:15:4e:09:2b:5a:26:04: 8c:21:0d:aa:ed:4f:31:93:31:43:03:2d:23:c2:92:15:3d:f3: b7:38:f6:1c:38:cb:81:fa:68:cf:ed:4a:f1:95:a3:bc:3d:62: 7d:f1:55:76:6b:46:9b:2e:dc:14:13:83:0a:1b:62:ce:cf:7d: fd:18:94:74:a9:70:77:8a:e9:18:b5:55:39:4d:42:81:4b:d9: 71:03:f5:2b:9c:50:02:bc:60:32:c0:5a:85:7f:b1:49:ea:1b: af:68:33:3d:52:d8:69:fd:61:e9:a7:86:fc:ee:7e:63:b6:ae: 53:5c:4f:11:62:15:00:36:41:c5:60:3d:b7:0b:a7:dc:b9:50: e4:95:1d:96 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcsKp/ul8jOK+Mh1OVFwmuA+OtA0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMTE5MDAwMDAwWhcNMjQxMjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzZhODNjZTBhNjQyOTE3MTFiMmE2ZWQ0YzQxNThlMDdj MTMyMTQ4NTFmNTY0OGMxMjVkZDMzNWYxMWI5ZGIyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqh4KfXpn/sMH/KX8QojV5+yYEP+8JIE2tULDLLxOA5nSh wtO79FAc9SuB7RY7BwZoaJrPbRf+UmNdP3g8dxFmSmPSx/g+SFmBMcbPBseiji6I 52EZlUaP7J8thrZ/+BXrlj5pQz7WKWDlq8i78p86Z0iWI1/pF/LvSvd780zypVUL TYkyjpnUx9vdmiR+BgJSsCB0IWDBpCLE7v3A81TD/XPcwulB01LaAFPDWZujGl7e g31u3cYCYsjLr9z4vF1XcRQmYAlq0Er8NLlr56MPrtqZBV9R+3gO6VJQxmBfoV2+ z+lY8EMQNB20lRK+4bknYgEhGfW6TIDzV/fx1fMTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHTFYatU8YDyw3N6BqFkkvypBnZYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EwYTNmMWU5LWMwNWQtNDBkNy05ZTI1LWIyNWRiZDg3ODFlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XsgwDQYJKoZIhvcNAQELBQADggEBABCV1/jXlz0thMGD49n31JNPIbT1 dNpjpfpnZ6Hz77y3r/jdL3Qs0NiHeqpVtJ0fj59+D60s5WUg3GOsSJp8WJkSemWK PCPb0maruHX5LM36F1bn4nNN6ONQ2KfY+ICOxD1mBfj3og40sEyke19z4EJ1QXva KiNgFU4JK1omBIwhDartTzGTMUMDLSPCkhU987c49hw4y4H6aM/tSvGVo7w9Yn3x VXZrRpsu3BQTgwobYs7Pff0YlHSpcHeK6Ri1VTlNQoFL2XED9SucUAK8YDLAWoV/ sUnqG69oMz1S2Gn9YemnhvzufmO2rlNcTxFiFQA2QcVgPbcLp9y5UOSVHZY= -----END CERTIFICATE-----Generated at Sun Nov 24 22:11:32 2024 by rpki-client on console-fra.rpki-client.org