$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b272a6b5-2f31-46ca-9e2b-71e4eab05390.roa File: b272a6b5-2f31-46ca-9e2b-71e4eab05390.roa (raw, json) Hash identifier: Zf6qSsZqAzjk4NK/3IQi8LzhzUztMFTGAp+PjN58Xy4= Subject key identifier: FB:87:1F:9D:69:6B:0E:1D:B0:F2:02:31:07:82:B3:0A:C9:4E:32:7D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5B6DB152A35FE1562B0326D84B02F77D69683368 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b272a6b5-2f31-46ca-9e2b-71e4eab05390.roa Signing time: Fri 04 Oct 2024 00:00:00 +0000 ROA not before: Fri 04 Oct 2024 00:00:00 +0000 ROA not after: Fri 08 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 3.173.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:6d:b1:52:a3:5f:e1:56:2b:03:26:d8:4b:02:f7:7d:69:68:33:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 4 00:00:00 2024 GMT Not After : Nov 8 23:59:59 2024 GMT Subject: serialNumber=8dff98e11b489676b99ef91aa558c87be8cf259aef98ff19c491e50d2ae1884e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4e:bd:29:78:45:19:79:45:b8:da:3a:58:c4: 57:58:51:e3:8a:ef:8e:aa:65:4c:8e:f6:2e:c1:50: 7e:a9:35:42:e8:95:3c:84:32:9d:b5:80:f8:93:3b: f0:5e:ab:f4:0f:e9:a5:03:37:c0:ba:5b:22:42:b2: 89:f5:be:e9:bb:55:c5:eb:21:07:73:d2:1e:55:13: 14:23:2a:0d:bd:aa:c1:8b:44:17:7f:63:3b:be:90: f9:d5:c2:25:f3:dd:57:7c:5a:dd:21:33:7e:78:4e: 08:fa:56:f1:d8:b7:58:d0:bd:93:2d:75:1c:4d:a2: 87:58:2f:72:6d:d8:f0:01:c2:dc:18:7e:1d:de:ac: 27:cd:e2:95:e3:03:b3:d2:c3:d4:de:2d:de:71:4f: 75:d4:f5:52:ac:25:18:b9:49:34:0b:35:3f:e3:80: 69:5c:07:c9:3b:32:e6:a1:26:89:1c:00:26:34:45: 80:68:0b:2a:71:ba:98:a3:99:b2:b1:a0:ee:a7:5f: 0d:25:4d:07:2a:57:7f:27:70:48:f8:9e:29:40:bf: cd:a3:78:48:92:df:7c:ae:61:08:6c:19:08:a0:24: d8:05:80:4c:90:2f:3b:97:cc:d9:fa:57:64:5b:f1: bb:e9:55:30:1e:b1:52:e1:ea:ee:7a:65:d1:d9:76: 8f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:87:1F:9D:69:6B:0E:1D:B0:F2:02:31:07:82:B3:0A:C9:4E:32:7D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b272a6b5-2f31-46ca-9e2b-71e4eab05390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.173.0.0/17 Signature Algorithm: sha256WithRSAEncryption 9c:c1:64:ae:44:0b:d5:ff:61:65:c0:fd:8a:ff:f2:4e:8f:1d: 67:ff:4b:81:d9:c7:4d:af:e7:74:b4:e1:49:18:9c:56:59:9f: 77:13:a6:c1:b2:49:e0:51:c9:10:6a:10:86:3e:3f:94:2d:7c: c8:a2:0e:89:9a:46:a0:c5:34:3e:71:72:1a:57:e6:b0:f2:b0: c7:c1:4f:06:97:b7:ae:1a:c5:1d:9f:86:50:1e:83:59:de:48: ad:62:24:5a:75:c6:b5:de:a8:72:fb:ee:bc:24:d4:88:11:d6: 65:24:2f:27:f2:00:cc:32:58:cf:1d:df:c3:36:2f:75:eb:9f: a2:11:3a:2d:7d:52:59:99:e3:9b:16:10:d9:ec:bd:5c:2b:c6: e1:c3:ac:4a:d7:8a:5a:7c:a6:86:91:20:50:a2:82:5b:31:09: 7a:e6:2d:0a:2b:85:e6:2e:66:30:0a:aa:e6:cf:80:03:fe:65: d7:fc:c8:60:dd:21:54:fb:d0:df:da:56:2f:64:0e:69:8e:32: a3:f2:e8:87:39:20:e6:33:b4:6a:95:ac:8e:33:79:17:e1:f2: bb:84:a1:85:95:38:a0:39:00:8e:7d:c1:34:12:0b:50:f6:e9: 60:19:0d:17:ef:7d:e8:74:da:14:f2:02:5c:cd:5e:d2:10:9f: f4:49:e8:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW22xUqNf4VYrAybYSwL3fWloM2gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMDA0MDAwMDAwWhcNMjQxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZGZmOThlMTFiNDg5Njc2Yjk5ZWY5MWFhNTU4Yzg3YmU4 Y2YyNTlhZWY5OGZmMTljNDkxZTUwZDJhZTE4ODRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCGTr0peEUZeUW42jpYxFdYUeOK746qZUyO9i7BUH6pNULo lTyEMp21gPiTO/Beq/QP6aUDN8C6WyJCson1vum7VcXrIQdz0h5VExQjKg29qsGL RBd/Yzu+kPnVwiXz3Vd8Wt0hM354Tgj6VvHYt1jQvZMtdRxNoodYL3Jt2PABwtwY fh3erCfN4pXjA7PSw9TeLd5xT3XU9VKsJRi5STQLNT/jgGlcB8k7MuahJokcACY0 RYBoCypxupijmbKxoO6nXw0lTQcqV38ncEj4nilAv82jeEiS33yuYQhsGQigJNgF gEyQLzuXzNn6V2Rb8bvpVTAesVLh6u56ZdHZdo/hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+4cfnWlrDh2w8gIxB4KzCslOMn0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IyNzJhNmI1LTJmMzEtNDZjYS05ZTJiLTcxZTRlYWIwNTM5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcDrQAwDQYJKoZIhvcNAQELBQADggEBAJzBZK5EC9X/YWXA/Yr/8k6PHWf/ S4HZx02v53S04UkYnFZZn3cTpsGySeBRyRBqEIY+P5QtfMiiDomaRqDFND5xchpX 5rDysMfBTwaXt64axR2fhlAeg1neSK1iJFp1xrXeqHL77rwk1IgR1mUkLyfyAMwy WM8d38M2L3Xrn6IROi19UlmZ45sWENnsvVwrxuHDrErXilp8poaRIFCiglsxCXrm LQorheYuZjAKqubPgAP+Zdf8yGDdIVT70N/aVi9kDmmOMqPy6Ic5IOYztGqVrI4z eRfh8ruEoYWVOKA5AI59wTQSC1D26WAZDRfvfeh02hTyAlzNXtIQn/RJ6Lc= -----END CERTIFICATE-----Generated at Wed Oct 23 17:30:53 2024 by rpki-client on console-fra.rpki-client.org