$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c38ce135-295e-45e8-86e5-c595b588285e.roa File: c38ce135-295e-45e8-86e5-c595b588285e.roa (raw, json) Hash identifier: rhQ4znfgOQuUj5IQrI/5bzD5HSvbsY+N0nwt2HIvmRc= Subject key identifier: 96:63:86:1F:AB:3F:1E:C0:CD:86:BB:28:B4:07:70:2D:4A:1C:52:04 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 04955CD4DAF2F0C9A7557E028A40A2AFB2058C2F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c38ce135-295e-45e8-86e5-c595b588285e.roa Signing time: Fri 15 Nov 2024 00:00:00 +0000 ROA not before: Fri 15 Nov 2024 00:00:00 +0000 ROA not after: Fri 20 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 52.94.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:95:5c:d4:da:f2:f0:c9:a7:55:7e:02:8a:40:a2:af:b2:05:8c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 15 00:00:00 2024 GMT Not After : Dec 20 23:59:59 2024 GMT Subject: serialNumber=389d397be72d1da76e6986adb5823c99b3e70e35ffdf5cee6c93b299d613086b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:23:56:44:3c:fb:c0:60:73:80:6c:eb:94: ad:c8:55:77:7c:7f:fe:38:3d:cc:5f:3c:15:28:40: 18:d7:98:9b:2e:39:58:68:60:36:9c:b0:f3:80:dd: 25:2c:f4:fe:26:ed:fb:ef:b2:a4:ef:5a:46:58:a5: 32:01:5b:e9:7f:22:f9:1e:8e:e2:d6:10:cd:c9:95: f5:ab:e0:37:0c:37:c5:f9:ae:42:cd:e3:48:21:8b: e1:12:b5:c2:97:90:77:92:75:ae:8c:ca:74:6a:f4: 45:2e:66:7e:ca:80:ba:35:c8:e7:a6:84:00:fd:76: 15:91:b4:51:8f:17:ae:5e:68:00:30:60:07:8b:1d: 38:76:78:88:79:d0:64:a9:51:c6:1d:07:2c:56:1a: b4:0d:68:c6:47:c3:1d:1e:44:ee:73:0f:34:f3:7d: 02:96:69:ca:8b:2a:44:29:9a:fa:37:8a:30:d4:50: 8a:32:d8:21:3b:54:99:a8:f0:e1:5e:fd:7a:02:96: 05:31:fa:ad:b3:ec:a2:13:69:f0:ea:c2:e4:fe:36: de:ea:21:57:fb:c0:b9:43:3a:22:18:ed:9f:63:ad: b8:c4:ea:1a:44:e8:ee:0d:46:a4:f1:40:32:2e:0e: 21:d9:56:5d:74:3d:1d:8c:ac:ff:8f:62:99:8d:8b: 68:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:63:86:1F:AB:3F:1E:C0:CD:86:BB:28:B4:07:70:2D:4A:1C:52:04 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c38ce135-295e-45e8-86e5-c595b588285e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.252.0/23 Signature Algorithm: sha256WithRSAEncryption 09:36:52:26:fe:63:cd:c1:2c:73:6b:9b:e1:de:4e:45:58:15: 73:b9:e8:d8:b8:30:09:1f:a7:c7:19:f2:7e:32:a0:fa:e6:c8: 69:23:2e:ee:5a:f8:67:be:d6:28:8e:cf:de:37:a4:9e:7d:45: c4:c6:2f:98:98:7c:06:e9:13:a0:a5:07:ff:ad:47:b4:41:58: e7:4d:a4:0c:ce:90:24:77:e0:32:ab:0d:f6:33:a9:cb:69:5f: b8:c7:dd:57:67:86:1b:f9:69:cd:94:78:e3:8f:f1:a0:2d:d0: ef:68:2f:92:71:32:0e:fc:34:96:fc:78:0f:1f:43:8e:67:5d: cd:1c:29:d5:bc:55:98:b7:13:e6:b7:80:63:73:9b:e9:ad:bf: 2a:bd:77:0e:18:29:d9:33:ad:f7:fe:c7:3c:1c:b0:8a:ed:fa: 8b:97:11:b8:6d:43:8b:d3:8b:b2:13:e1:9c:7d:79:a8:09:38: f6:0d:32:44:95:3d:23:08:08:42:05:d5:d1:af:98:39:80:1d: be:f2:17:8d:78:db:39:78:9f:c0:44:2a:8c:14:c8:3e:24:af: c7:88:0f:c2:ac:24:78:d9:75:68:99:c4:f7:9c:74:18:c9:1c: be:82:96:88:0d:da:79:35:bb:17:97:33:5c:ae:59:d6:fe:80: f8:5b:86:9a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBJVc1Nry8MmnVX4CikCir7IFjC8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMTE1MDAwMDAwWhcNMjQxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzODlkMzk3YmU3MmQxZGE3NmU2OTg2YWRiNTgyM2M5OWIz ZTcwZTM1ZmZkZjVjZWU2YzkzYjI5OWQ2MTMwODZiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4aiNWRDz7wGBzgGzrlK3IVXd8f/44PcxfPBUoQBjXmJsu OVhoYDacsPOA3SUs9P4m7fvvsqTvWkZYpTIBW+l/IvkejuLWEM3JlfWr4DcMN8X5 rkLN40ghi+EStcKXkHeSda6MynRq9EUuZn7KgLo1yOemhAD9dhWRtFGPF65eaAAw YAeLHTh2eIh50GSpUcYdByxWGrQNaMZHwx0eRO5zDzTzfQKWacqLKkQpmvo3ijDU UIoy2CE7VJmo8OFe/XoClgUx+q2z7KITafDqwuT+Nt7qIVf7wLlDOiIY7Z9jrbjE 6hpE6O4NRqTxQDIuDiHZVl10PR2MrP+PYpmNi2jDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlmOGH6s/HsDNhrsotAdwLUocUgQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MzOGNlMTM1LTI5NWUtNDVlOC04NmU1LWM1OTViNTg4Mjg1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0XvwwDQYJKoZIhvcNAQELBQADggEBAAk2Uib+Y83BLHNrm+HeTkVYFXO5 6Ni4MAkfp8cZ8n4yoPrmyGkjLu5a+Ge+1iiOz943pJ59RcTGL5iYfAbpE6ClB/+t R7RBWOdNpAzOkCR34DKrDfYzqctpX7jH3Vdnhhv5ac2UeOOP8aAt0O9oL5JxMg78 NJb8eA8fQ45nXc0cKdW8VZi3E+a3gGNzm+mtvyq9dw4YKdkzrff+xzwcsIrt+ouX EbhtQ4vTi7IT4Zx9eagJOPYNMkSVPSMICEIF1dGvmDmAHb7yF4142zl4n8BEKowU yD4kr8eID8KsJHjZdWiZxPecdBjJHL6ClogN2nk1uxeXM1yuWdb+gPhbhpo= -----END CERTIFICATE-----Generated at Sun Nov 24 21:44:42 2024 by rpki-client on console-ams.rpki-client.org