$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd8be25a-763d-44f9-92eb-e559bd28b7cd.roa File: bd8be25a-763d-44f9-92eb-e559bd28b7cd.roa (raw, json) Hash identifier: K5rHowSFo8KutrOUy44Wnr92KUoc6iHYyDktiYfBQJQ= Subject key identifier: 83:46:6A:4D:99:8E:FE:97:0D:7D:68:2E:21:42:7D:99:16:76:78:9F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6B893934DD932FF7130A2952F088A1F8219FD3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd8be25a-763d-44f9-92eb-e559bd28b7cd.roa Signing time: Fri 22 Nov 2024 00:00:00 +0000 ROA not before: Fri 22 Nov 2024 00:00:00 +0000 ROA not after: Fri 27 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 15.230.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:89:39:34:dd:93:2f:f7:13:0a:29:52:f0:88:a1:f8:21:9f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 22 00:00:00 2024 GMT Not After : Dec 27 23:59:59 2024 GMT Subject: serialNumber=00e1578e4da3dc0b5b60cb6e817c4cdf806ba2d2c9c32b4048b3f12dbf5e6765, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:23:5a:37:13:96:0c:98:e8:76:a7:ec:e4:86: 91:b2:07:f3:13:8f:1b:92:27:44:b0:bc:bd:e6:1c: f0:a6:1a:9e:32:f2:c7:b4:f9:ad:63:ce:26:4c:eb: ec:35:21:7f:ea:02:ce:21:76:cc:f4:8e:46:4c:df: 93:56:46:92:6d:f0:02:14:61:81:ab:59:7e:72:54: 76:a6:86:d9:b6:9d:a7:f1:a5:f5:97:9d:84:67:cc: e1:c2:48:2e:e2:5a:a0:f0:e2:39:a5:e9:84:f7:db: 75:63:85:9a:b4:b3:d9:67:7e:d7:eb:be:55:64:3b: 96:00:d5:41:36:61:6f:4d:fe:e7:44:11:7b:f1:ed: 22:cd:29:9d:90:f3:ed:32:3c:60:d7:a9:1e:f5:ff: e7:dd:b2:eb:ba:db:6d:d9:ef:75:03:24:21:98:7e: fa:30:da:c8:2e:81:17:20:92:43:55:d2:45:83:66: 2e:69:5c:cf:a7:f4:8a:f1:29:c9:90:6b:00:0e:13: 46:3d:e1:75:db:e9:85:18:70:d6:71:d6:90:1a:aa: a2:da:6c:78:f6:7c:6e:9b:fc:b5:e5:67:fd:98:08: 02:36:e8:51:7c:a1:b2:5f:39:bf:40:b4:5f:b8:38: 96:f3:f5:87:3c:0e:55:da:3c:40:44:18:99:9a:74: 81:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:46:6A:4D:99:8E:FE:97:0D:7D:68:2E:21:42:7D:99:16:76:78:9F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd8be25a-763d-44f9-92eb-e559bd28b7cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.230.60.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:24:e6:3f:50:43:2a:43:dc:81:af:18:66:5e:d8:1f:3c:d5: cd:51:66:c5:03:7f:02:cc:8e:c7:44:35:28:d4:ee:ac:af:d5: e0:b0:60:09:0c:6d:81:f5:d6:99:5f:69:57:75:94:f3:af:c2: 52:73:40:56:6a:1f:b9:2b:09:88:8f:34:2c:8f:59:20:69:27: e3:3f:ad:ce:9e:bf:01:98:7f:aa:2b:d1:13:70:b0:40:63:a7: 0a:9e:3f:be:92:8f:41:b0:34:9b:85:f3:9c:44:a6:e6:99:6e: c0:40:d1:8d:b5:58:86:d3:34:63:95:93:d5:59:02:26:8f:a0: a1:24:a8:5f:bb:9f:60:ab:24:5e:80:b3:50:94:59:e8:49:65: 64:ff:d7:f1:a6:fa:18:ec:0b:f7:d2:09:2b:2a:f6:2f:ea:27: c6:b9:cc:35:79:a5:1a:79:0e:1a:12:39:ac:2e:3d:e7:99:a3: 45:87:51:7b:e7:c5:10:78:d9:4c:93:14:84:24:a4:1a:b5:2d: 10:a6:17:03:15:86:42:0a:6e:ac:5e:28:f6:50:77:3b:05:b0: 1d:f8:f8:57:f5:bc:a3:1a:1c:95:21:94:8b:8e:32:47:db:ba: 52:37:1e:23:3d:71:ce:e0:85:14:27:54:e8:6f:ba:61:5c:22: a4:53:96:74 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITa4k5NN2TL/cTCilS8Iih+CGf0zANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNDExMjIwMDAwMDBaFw0yNDEyMjcyMzU5NTla MHoxSTBHBgNVBAUTQDAwZTE1NzhlNGRhM2RjMGI1YjYwY2I2ZTgxN2M0Y2RmODA2 YmEyZDJjOWMzMmI0MDQ4YjNmMTJkYmY1ZTY3NjUxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAL4jWjcTlgyY6Han7OSGkbIH8xOPG5InRLC8veYc8KYanjLy x7T5rWPOJkzr7DUhf+oCziF2zPSORkzfk1ZGkm3wAhRhgatZfnJUdqaG2badp/Gl 9ZedhGfM4cJILuJaoPDiOaXphPfbdWOFmrSz2Wd+1+u+VWQ7lgDVQTZhb03+50QR e/HtIs0pnZDz7TI8YNepHvX/592y67rbbdnvdQMkIZh++jDayC6BFyCSQ1XSRYNm Lmlcz6f0ivEpyZBrAA4TRj3hddvphRhw1nHWkBqqotpsePZ8bpv8teVn/ZgIAjbo UXyhsl85v0C0X7g4lvP1hzwOVdo8QEQYmZp0gYUCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSDRmpNmY7+lw19aC4hQn2ZFnZ4nzAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvYmQ4YmUyNWEtNzYzZC00NGY5LTkyZWItZTU1OWJkMjhiN2NkLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAA/mPDANBgkqhkiG9w0BAQsFAAOCAQEASiTmP1BDKkPcga8YZl7YHzzVzVFm xQN/AsyOx0Q1KNTurK/V4LBgCQxtgfXWmV9pV3WU86/CUnNAVmofuSsJiI80LI9Z IGkn4z+tzp6/AZh/qivRE3CwQGOnCp4/vpKPQbA0m4XznESm5pluwEDRjbVYhtM0 Y5WT1VkCJo+goSSoX7ufYKskXoCzUJRZ6EllZP/X8ab6GOwL99IJKyr2L+onxrnM NXmlGnkOGhI5rC4955mjRYdRe+fFEHjZTJMUhCSkGrUtEKYXAxWGQgpurF4o9lB3 OwWwHfj4V/W8oxoclSGUi44yR9u6UjceIz1xzuCFFCdU6G+6YVwipFOWdA== -----END CERTIFICATE-----Generated at Sun Nov 24 21:44:40 2024 by rpki-client on console-ams.rpki-client.org