$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c488d19b-cac4-4dd0-9dec-193517f2d909.roa File: c488d19b-cac4-4dd0-9dec-193517f2d909.roa (raw, json) Hash identifier: Grx6flZ4QYqoXoaTLO2DNG+bQvYpnsztTMz7+kCxVGA= Subject key identifier: 37:09:33:00:FC:3E:60:C1:3A:76:C5:B3:F5:F3:07:A1:B2:56:90:E2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6810B2640C2F4945BF20E7D27417116C9498BB06 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c488d19b-cac4-4dd0-9dec-193517f2d909.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 13.126.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:10:b2:64:0c:2f:49:45:bf:20:e7:d2:74:17:11:6c:94:98:bb:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=6934e1fad5c658f66c72afe4d72fcbe490e32afd00d44f49ea21e6d4d7b597eb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d3:19:1b:8f:d6:97:d7:6f:24:8e:ce:dd:57: 21:94:4b:61:98:08:7c:e8:cd:35:1d:41:48:5e:99: 15:83:9b:ce:7f:5f:d5:19:d8:0c:19:8d:cb:cf:3f: 79:ae:88:dd:97:a6:88:ce:24:a7:7f:6b:3f:4f:bb: 70:5a:f4:15:95:23:0f:44:2e:8a:39:9b:2a:71:b4: 1a:0a:29:14:37:a8:54:80:0c:4d:6f:41:66:1e:20: 51:1e:28:23:24:b2:07:f8:c1:e6:f9:2a:5e:1c:c2: 61:ec:dd:d8:bc:a3:ef:6b:ac:17:a2:ff:40:73:ae: 91:18:1a:47:7a:88:1a:b6:1e:f2:9f:87:89:c3:53: 42:db:a6:33:92:95:56:27:9e:48:94:e7:78:7e:cd: 9f:ad:33:3d:35:ba:ca:66:f6:b5:b0:f4:55:a2:f6: c8:35:f2:4b:80:5b:21:f8:28:ef:2f:76:32:77:92: da:9b:bf:ce:4b:92:63:4b:6e:fe:01:78:da:3c:d8: e8:14:79:fa:f3:fe:2f:bf:49:69:e1:8b:fb:fe:cb: 9f:8e:bf:8f:bd:aa:fd:74:11:a8:12:84:51:f4:a0: 6f:3a:6f:68:b2:ce:db:07:8b:45:ed:03:05:db:d7: 46:17:de:cf:1d:63:57:d8:33:14:0d:a4:aa:48:a1: 89:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:09:33:00:FC:3E:60:C1:3A:76:C5:B3:F5:F3:07:A1:B2:56:90:E2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c488d19b-cac4-4dd0-9dec-193517f2d909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.126.0.0/15 Signature Algorithm: sha256WithRSAEncryption 79:35:56:f5:3a:2e:fa:d7:d1:e6:a3:b1:27:98:fd:84:82:fa: 63:08:a2:65:e6:3a:18:b2:2d:37:44:d2:a1:8e:32:5f:20:a4: 96:fc:8d:1a:84:b1:5d:7c:97:16:ec:b3:96:79:b9:88:f7:1e: a0:e7:37:45:f6:cc:39:a1:67:ca:fa:13:b6:04:07:e3:91:e6: 73:1d:b0:28:16:68:2a:29:84:07:40:b0:23:66:a0:08:a1:a9: c3:8c:a9:46:09:f2:3b:00:f7:22:ce:2d:20:0a:07:f3:e4:92: c5:a7:4c:87:ab:c5:98:61:e7:9b:c3:7b:c7:2d:89:ad:00:99: ce:c3:fd:05:81:bc:2c:96:05:83:9c:c7:f5:cb:78:4b:b1:18: 19:a5:28:a7:01:38:6a:40:f8:b7:64:53:85:24:34:1d:b6:66: 55:c7:a1:28:cc:a7:30:e3:a8:ab:95:89:51:80:6d:db:d1:f1: 35:d5:1c:32:2f:de:78:03:bf:f9:b9:73:7e:18:d6:de:ce:d4: 82:31:1e:54:b9:4e:df:b5:cf:46:3a:62:ab:5e:89:1f:2a:b1: c6:2b:90:db:cf:ae:c0:09:1f:f6:f2:d5:94:c3:28:44:16:ca: 96:8d:ae:89:64:c6:9c:8d:08:e2:f3:98:56:22:a2:44:84:1b: 58:a0:b4:bb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUaBCyZAwvSUW/IOfSdBcRbJSYuwYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMTE5MDAwMDAwWhcNMjQxMjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTM0ZTFmYWQ1YzY1OGY2NmM3MmFmZTRkNzJmY2JlNDkw ZTMyYWZkMDBkNDRmNDllYTIxZTZkNGQ3YjU5N2ViMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCW0xkbj9aX128kjs7dVyGUS2GYCHzozTUdQUhemRWDm85/ X9UZ2AwZjcvPP3muiN2XpojOJKd/az9Pu3Ba9BWVIw9ELoo5mypxtBoKKRQ3qFSA DE1vQWYeIFEeKCMksgf4web5Kl4cwmHs3di8o+9rrBei/0BzrpEYGkd6iBq2HvKf h4nDU0LbpjOSlVYnnkiU53h+zZ+tMz01uspm9rWw9FWi9sg18kuAWyH4KO8vdjJ3 ktqbv85LkmNLbv4BeNo82OgUefrz/i+/SWnhi/v+y5+Ov4+9qv10EagShFH0oG86 b2iyztsHi0XtAwXb10YX3s8dY1fYMxQNpKpIoYnJAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUNwkzAPw+YME6dsWz9fMHobJWkOIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M0ODhkMTliLWNhYzQtNGRkMC05ZGVjLTE5MzUxN2YyZDkwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwENfjANBgkqhkiG9w0BAQsFAAOCAQEAeTVW9Tou+tfR5qOxJ5j9hIL6Ywii ZeY6GLItN0TSoY4yXyCklvyNGoSxXXyXFuyzlnm5iPceoOc3RfbMOaFnyvoTtgQH 45Hmcx2wKBZoKimEB0CwI2agCKGpw4ypRgnyOwD3Is4tIAoH8+SSxadMh6vFmGHn m8N7xy2JrQCZzsP9BYG8LJYFg5zH9ct4S7EYGaUopwE4akD4t2RThSQ0HbZmVceh KMynMOOoq5WJUYBt29HxNdUcMi/eeAO/+blzfhjW3s7UgjEeVLlO37XPRjpiq16J HyqxxiuQ28+uwAkf9vLVlMMoRBbKlo2uiWTGnI0I4vOYViKiRIQbWKC0uw== -----END CERTIFICATE-----Generated at Thu Nov 21 21:04:15 2024 by rpki-client on console-fra.rpki-client.org