$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aadb441c-3789-44fe-9cf1-d64df59113ec.roa File: aadb441c-3789-44fe-9cf1-d64df59113ec.roa (raw, json) Hash identifier: 98l98Fxu0Hkz+E3YzClK4Kp8JcfG3WQeB+Ihf9rl/J0= Subject key identifier: 5D:29:38:BB:02:4E:57:DC:8A:95:9E:F5:E7:E4:46:8D:8E:31:F5:60 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 04F55D55A01A67E9402EA7EF0B8B519A599E836C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aadb441c-3789-44fe-9cf1-d64df59113ec.roa Signing time: Sat 31 Aug 2024 00:00:00 +0000 ROA not before: Sat 31 Aug 2024 00:00:00 +0000 ROA not after: Sat 05 Oct 2024 23:59:59 +0000 asID: 16509 IP address blocks: 54.230.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Sep 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f5:5d:55:a0:1a:67:e9:40:2e:a7:ef:0b:8b:51:9a:59:9e:83:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 31 00:00:00 2024 GMT Not After : Oct 5 23:59:59 2024 GMT Subject: serialNumber=3cb1ea6ad9e318dbc5086e5e85b438d03262ee08d861aea567ff0dbcbb53aa8b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:21:51:ac:ea:ea:b3:62:8c:82:1d:fa:d7:92: b4:ed:10:f9:54:49:52:80:19:36:31:69:67:87:99: 53:a1:20:2c:dc:45:ca:56:fb:1b:a2:c7:8c:d8:61: 53:de:e5:61:24:ae:49:56:7d:d7:18:f0:48:27:cb: 72:0f:ea:1d:29:ff:4f:6e:6d:18:10:51:47:ef:c5: 4b:a9:f2:01:df:ac:01:11:17:27:dc:98:49:c1:76: df:2b:38:0f:61:df:e1:6b:96:4e:da:46:c4:f6:a9: f6:2c:88:7a:53:90:e2:ce:fe:61:c2:46:84:a5:3f: 63:3d:5e:24:7c:f5:47:03:a4:52:a2:35:e2:93:ec: f1:3e:30:79:74:51:70:6b:e3:05:6e:9e:13:dd:39: ca:58:f6:3b:be:1d:71:f2:08:31:82:d0:5b:4c:72: 22:88:47:dc:24:8d:b5:c4:4d:9a:c1:a9:8a:29:72: d2:fd:ad:c9:d2:57:05:d9:81:d6:ff:59:82:50:5f: 86:fa:cc:02:f4:bf:a5:a4:72:01:57:88:15:67:46: 30:4c:62:fa:55:c1:61:4a:fd:eb:c4:2c:76:a4:e7: 76:92:f8:d9:b0:fc:5d:59:8b:97:6d:ca:db:92:cb: f9:be:43:47:81:84:50:a3:32:23:62:43:a9:af:66: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:29:38:BB:02:4E:57:DC:8A:95:9E:F5:E7:E4:46:8D:8E:31:F5:60 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aadb441c-3789-44fe-9cf1-d64df59113ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.230.0.0/17 Signature Algorithm: sha256WithRSAEncryption 50:cb:ff:58:16:2b:fb:f3:e1:11:6e:78:d1:81:43:9c:d3:03: b4:47:fc:ea:97:a3:72:f7:7f:f7:fb:b5:b1:f5:b3:13:98:1f: 4f:c3:ef:bd:37:18:4a:f1:c1:34:95:a3:f7:05:40:ab:38:8d: 4e:53:e9:5a:09:23:33:cc:90:19:13:b6:71:a6:2e:0e:d5:dc: d5:be:54:39:8e:0b:2b:72:65:a4:59:ff:9c:f3:ac:02:0b:5b: ca:54:69:ae:65:ea:07:30:f6:d2:92:15:94:9d:76:8c:76:9d: af:e3:93:94:eb:b1:47:c0:50:b7:dd:51:76:58:6c:7b:c0:5a: 89:2a:f7:be:7a:a6:55:e3:8f:74:b2:2b:db:94:aa:74:2f:e0: a9:1c:4c:23:e9:47:eb:95:d8:5b:21:da:91:f1:0d:77:97:ed: 04:0b:40:b8:83:ee:74:3d:60:01:42:e1:a0:d4:90:f6:18:21: 39:00:c5:16:e7:ae:75:7f:da:aa:51:c2:d4:b0:4e:bc:f5:29: c5:2c:b2:76:72:0d:72:7e:53:9e:b2:76:4f:7e:5d:f7:01:24: f1:15:50:13:fb:91:26:fa:14:58:97:6d:f6:56:29:24:2e:be: 69:76:89:21:b0:27:92:e4:de:02:87:28:f7:7f:0a:15:f8:f8: 07:29:2f:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBPVdVaAaZ+lALqfvC4tRmlmeg2wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwODMxMDAwMDAwWhcNMjQxMDA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzY2IxZWE2YWQ5ZTMxOGRiYzUwODZlNWU4NWI0MzhkMDMy NjJlZTA4ZDg2MWFlYTU2N2ZmMGRiY2JiNTNhYThiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQIVGs6uqzYoyCHfrXkrTtEPlUSVKAGTYxaWeHmVOhICzc RcpW+xuix4zYYVPe5WEkrklWfdcY8Egny3IP6h0p/09ubRgQUUfvxUup8gHfrAER FyfcmEnBdt8rOA9h3+Frlk7aRsT2qfYsiHpTkOLO/mHCRoSlP2M9XiR89UcDpFKi NeKT7PE+MHl0UXBr4wVunhPdOcpY9ju+HXHyCDGC0FtMciKIR9wkjbXETZrBqYop ctL9rcnSVwXZgdb/WYJQX4b6zAL0v6WkcgFXiBVnRjBMYvpVwWFK/evELHak53aS +Nmw/F1Zi5dtytuSy/m+Q0eBhFCjMiNiQ6mvZtp/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXSk4uwJOV9yKlZ715+RGjY4x9WAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FhZGI0NDFjLTM3ODktNDRmZS05Y2YxLWQ2NGRmNTkxMTNlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc25gAwDQYJKoZIhvcNAQELBQADggEBAFDL/1gWK/vz4RFueNGBQ5zTA7RH /OqXo3L3f/f7tbH1sxOYH0/D7703GErxwTSVo/cFQKs4jU5T6VoJIzPMkBkTtnGm Lg7V3NW+VDmOCytyZaRZ/5zzrAILW8pUaa5l6gcw9tKSFZSddox2na/jk5TrsUfA ULfdUXZYbHvAWokq9756plXjj3SyK9uUqnQv4KkcTCPpR+uV2Fsh2pHxDXeX7QQL QLiD7nQ9YAFC4aDUkPYYITkAxRbnrnV/2qpRwtSwTrz1KcUssnZyDXJ+U56ydk9+ XfcBJPEVUBP7kSb6FFiXbfZWKSQuvml2iSGwJ5Lk3gKHKPd/ChX4+AcpL24= -----END CERTIFICATE-----Generated at Sat Sep 7 00:40:17 2024 by rpki-client on console-fra.rpki-client.org