$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bde15d85-111b-4cf4-bf07-26adaaa26605.roa File: bde15d85-111b-4cf4-bf07-26adaaa26605.roa (raw, json) Hash identifier: IeAKA0YnRbexHKy+YnxBhODfX0NRNmIh9xGDUlfbq1w= Subject key identifier: 24:63:09:7E:B8:02:17:02:FE:67:4B:69:CC:BB:79:4D:BD:B2:3E:7D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 65699E0B0B29DDE313ED9ADDEC60011803637678 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bde15d85-111b-4cf4-bf07-26adaaa26605.roa Signing time: Tue 22 Oct 2024 00:00:00 +0000 ROA not before: Tue 22 Oct 2024 00:00:00 +0000 ROA not after: Tue 26 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:69:9e:0b:0b:29:dd:e3:13:ed:9a:dd:ec:60:01:18:03:63:76:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 22 00:00:00 2024 GMT Not After : Nov 26 23:59:59 2024 GMT Subject: serialNumber=e7f047edf69bcbd1445c7636e1e4fa14726e512d026b96d40ab2ea244d7c2c4e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f3:ca:0b:ec:b2:ed:70:44:0a:5f:aa:a5:45: 6b:40:fa:11:2a:08:6a:37:d2:3e:1f:ce:1c:92:b0: c1:9f:8f:9c:a2:22:a4:3e:5b:f3:30:37:93:30:c1: 38:7b:b9:e7:ce:80:95:cf:35:da:e2:de:4c:ad:21: 35:30:0c:3c:61:b3:78:04:24:64:d0:06:4b:9f:99: 97:33:29:cc:52:a0:2d:18:d8:b7:6d:a1:d8:8c:87: 41:89:38:8b:fd:7a:dc:b1:22:77:db:e7:c9:20:2a: c0:8e:6a:1a:12:bf:36:3d:46:1b:70:eb:a6:bf:cf: 32:c0:9b:1a:ab:33:f3:2e:f7:02:46:8d:89:82:bc: 94:9a:b1:51:28:73:6d:36:1f:df:8a:e6:6a:4c:6f: 5b:d3:82:e5:90:ec:e0:96:20:fc:f5:45:c7:13:4c: 1e:2a:28:0a:a3:98:96:24:90:7d:c5:8f:cf:87:df: f3:c8:d3:44:98:7d:48:73:a1:83:f9:07:9a:e9:59: 42:7f:86:74:81:69:0a:68:54:f9:82:79:c8:ac:53: 26:49:04:fc:1a:ef:69:78:f6:c8:37:02:60:1d:b7: 51:6c:4a:4d:d5:0e:ec:9a:b2:e9:57:9c:0e:aa:f7: d4:33:56:e9:f7:c8:ea:ac:c5:9b:c4:3a:83:56:05: 4d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:63:09:7E:B8:02:17:02:FE:67:4B:69:CC:BB:79:4D:BD:B2:3E:7D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bde15d85-111b-4cf4-bf07-26adaaa26605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.224.0/20 Signature Algorithm: sha256WithRSAEncryption 21:e8:e2:3c:84:b9:32:0c:8c:fa:7d:45:df:24:2a:65:3c:cf: 7f:0a:c3:8e:86:93:a3:03:f8:6e:63:e0:cc:76:56:d1:2d:54: 42:d0:f5:8f:92:cd:5f:47:b1:db:cf:12:d7:2e:ae:1f:33:8d: 4a:15:bd:be:24:20:cd:22:d5:56:41:51:4c:c5:96:27:64:45: 8f:b5:ad:5a:69:f1:ac:03:7e:5f:4d:63:4c:0e:cb:68:e6:51: 42:66:3c:8c:1f:a5:04:c8:10:a3:92:a7:d8:76:ea:1c:ab:51: 0d:5a:bf:26:c3:ba:6f:ba:bb:11:b1:32:19:10:fb:73:0c:29: cc:01:e3:bf:97:4d:8e:bd:ff:22:71:9c:ef:51:ab:bf:6b:d7: a9:2b:ed:73:e2:38:62:a4:ba:53:1d:40:dc:00:43:fa:d8:8e: 85:c2:92:28:3f:5d:97:eb:5f:60:19:3d:90:d0:dd:93:38:91: 9a:be:95:9d:5e:fe:b1:ee:ec:52:c8:ae:e7:ff:be:86:76:05: cb:28:66:1b:62:60:fb:b7:dd:18:86:07:bb:7b:05:ec:e8:8b: 8b:ed:c6:8b:e5:a3:3c:70:97:e4:06:70:90:11:9b:4f:8c:71: f9:7d:b8:ed:b9:de:77:ab:3d:c9:bf:36:2d:a8:9b:ce:49:18: e9:a8:cb:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZWmeCwsp3eMT7Zrd7GABGANjdngwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMDIyMDAwMDAwWhcNMjQxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlN2YwNDdlZGY2OWJjYmQxNDQ1Yzc2MzZlMWU0ZmExNDcy NmU1MTJkMDI2Yjk2ZDQwYWIyZWEyNDRkN2MyYzRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDs88oL7LLtcEQKX6qlRWtA+hEqCGo30j4fzhySsMGfj5yi IqQ+W/MwN5MwwTh7uefOgJXPNdri3kytITUwDDxhs3gEJGTQBkufmZczKcxSoC0Y 2LdtodiMh0GJOIv9etyxInfb58kgKsCOahoSvzY9Rhtw66a/zzLAmxqrM/Mu9wJG jYmCvJSasVEoc202H9+K5mpMb1vTguWQ7OCWIPz1RccTTB4qKAqjmJYkkH3Fj8+H 3/PI00SYfUhzoYP5B5rpWUJ/hnSBaQpoVPmCecisUyZJBPwa72l49sg3AmAdt1Fs Sk3VDuyasulXnA6q99QzVun3yOqsxZvEOoNWBU2hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJGMJfrgCFwL+Z0tpzLt5Tb2yPn0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JkZTE1ZDg1LTExMWItNGNmNC1iZjA3LTI2YWRhYWEyNjYwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ0LuAwDQYJKoZIhvcNAQELBQADggEBACHo4jyEuTIMjPp9Rd8kKmU8z38K w46Gk6MD+G5j4Mx2VtEtVELQ9Y+SzV9HsdvPEtcurh8zjUoVvb4kIM0i1VZBUUzF lidkRY+1rVpp8awDfl9NY0wOy2jmUUJmPIwfpQTIEKOSp9h26hyrUQ1avybDum+6 uxGxMhkQ+3MMKcwB47+XTY69/yJxnO9Rq79r16kr7XPiOGKkulMdQNwAQ/rYjoXC kig/XZfrX2AZPZDQ3ZM4kZq+lZ1e/rHu7FLIruf/voZ2BcsoZhtiYPu33RiGB7t7 Bezoi4vtxovlozxwl+QGcJARm0+Mcfl9uO253nerPcm/Ni2om85JGOmoyzk= -----END CERTIFICATE-----Generated at Wed Oct 23 17:35:49 2024 by rpki-client on console-ams.rpki-client.org