$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca097cde-40d3-4a62-9993-89e364b3bdd3.roa File: ca097cde-40d3-4a62-9993-89e364b3bdd3.roa (raw, json) Hash identifier: KMNWqtUosk7CkZ/XcZhdBGhYK+W/SUMbSiVHVP9LkHg= Subject key identifier: 5E:31:E0:70:17:D0:35:C4:60:D0:E4:15:FC:87:91:EC:DF:B5:B0:8C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4D84ACA5BFCB30E6F8EF1E146015E62E3FC26A80 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca097cde-40d3-4a62-9993-89e364b3bdd3.roa Signing time: Tue 29 Oct 2024 00:00:00 +0000 ROA not before: Tue 29 Oct 2024 00:00:00 +0000 ROA not after: Tue 03 Dec 2024 23:59:59 +0000 asID: 6167 IP address blocks: 155.146.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:84:ac:a5:bf:cb:30:e6:f8:ef:1e:14:60:15:e6:2e:3f:c2:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 29 00:00:00 2024 GMT Not After : Dec 3 23:59:59 2024 GMT Subject: serialNumber=33f22b1612f968e5dad8a96ea4bda2a7e57ea07268a11b636c802049bda870b6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:86:ba:98:2c:0c:a6:ac:64:c4:dd:5c:be:a5: d8:77:13:01:10:ae:10:52:c3:57:e8:06:e1:bc:af: c1:a7:be:01:e0:f9:45:19:86:56:be:0b:19:b7:2d: 3c:43:05:09:d0:e9:11:f2:db:e6:ec:3a:71:c0:28: c2:52:9b:dd:66:e2:00:b8:43:a1:c0:c3:e6:12:7e: dd:e9:27:41:64:be:fc:21:3e:a4:fa:90:ea:5e:6c: 27:8f:d9:f4:6b:8b:fe:01:0c:a6:bd:56:52:ac:cc: 04:18:64:b8:e5:c4:7d:e1:6d:99:bc:98:25:a9:25: f9:71:b9:64:00:02:0c:2f:d9:5e:72:fc:67:e7:03: a4:87:b0:09:cc:b9:34:33:25:21:9a:ea:3e:36:37: 19:b9:bb:bc:54:4a:47:cd:17:ee:38:f0:29:e3:b7: 0a:28:78:ba:65:c7:30:06:b2:a4:dd:3a:07:5e:4f: 7d:21:19:36:67:b4:b3:4c:ca:9d:b5:8c:08:7d:e0: ca:bc:0f:e8:45:d3:3b:bc:58:6b:35:a3:0d:3f:22: b5:4f:e8:ee:46:a0:74:fc:71:30:11:bc:b6:29:52: 1b:01:5b:5d:53:19:cd:28:8f:cc:31:f4:da:a4:70: 2f:44:ab:0c:1c:85:09:05:7c:4d:3b:04:c4:26:30: 13:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:31:E0:70:17:D0:35:C4:60:D0:E4:15:FC:87:91:EC:DF:B5:B0:8C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca097cde-40d3-4a62-9993-89e364b3bdd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.146.48.0/20 Signature Algorithm: sha256WithRSAEncryption b4:e1:6b:bf:f4:03:ec:9b:69:4b:be:83:59:6a:d0:f3:1c:35: 5a:59:b9:21:ba:83:a9:31:cb:07:bc:87:f7:72:96:4f:40:61: c2:e8:49:0a:c5:45:e7:39:3c:91:d4:62:4f:6a:24:0f:7c:16: 18:8b:cb:52:26:38:39:95:96:6c:a2:f0:b5:1c:85:2d:a0:c6: ed:0d:6d:78:f8:57:91:98:f2:23:e4:d7:2f:f0:c0:51:9f:d9: 0e:e2:09:6e:24:8c:aa:ea:fb:c4:ce:d6:dc:28:5f:d2:52:ee: ef:80:d9:36:02:09:5f:d1:4b:e8:38:6b:65:9f:77:30:fc:e4: a3:fc:01:a3:ba:3f:4d:78:81:b4:63:bd:d0:f4:c6:fe:d4:50: 7b:35:5e:c6:77:7e:15:04:d4:19:25:e3:40:30:55:5d:03:f8: a4:0b:b4:e4:be:70:6c:f7:8e:04:c9:f7:85:dc:d4:d8:c9:e3: 3a:66:a3:7c:32:6b:7c:ad:c6:a2:88:c4:be:5d:c4:ac:2a:3e: 7e:e2:f5:5f:a8:03:19:a6:bf:70:0e:50:99:61:52:b8:30:08: 25:9c:d7:15:72:bd:de:65:fd:58:40:01:82:69:8a:04:2e:fd: 8b:72:88:6b:40:f1:52:90:99:4f:35:1a:08:8a:81:eb:d3:7f: d2:92:4b:48 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTYSspb/LMOb47x4UYBXmLj/CaoAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMDI5MDAwMDAwWhcNMjQxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzM2YyMmIxNjEyZjk2OGU1ZGFkOGE5NmVhNGJkYTJhN2U1 N2VhMDcyNjhhMTFiNjM2YzgwMjA0OWJkYTg3MGI2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEhrqYLAymrGTE3Vy+pdh3EwEQrhBSw1foBuG8r8GnvgHg +UUZhla+Cxm3LTxDBQnQ6RHy2+bsOnHAKMJSm91m4gC4Q6HAw+YSft3pJ0Fkvvwh PqT6kOpebCeP2fRri/4BDKa9VlKszAQYZLjlxH3hbZm8mCWpJflxuWQAAgwv2V5y /GfnA6SHsAnMuTQzJSGa6j42Nxm5u7xUSkfNF+448CnjtwooeLplxzAGsqTdOgde T30hGTZntLNMyp21jAh94Mq8D+hF0zu8WGs1ow0/IrVP6O5GoHT8cTARvLYpUhsB W11TGc0oj8wx9NqkcC9EqwwchQkFfE07BMQmMBPZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXjHgcBfQNcRg0OQV/IeR7N+1sIwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NhMDk3Y2RlLTQwZDMtNGE2Mi05OTkzLTg5ZTM2NGIzYmRkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASbkjAwDQYJKoZIhvcNAQELBQADggEBALTha7/0A+ybaUu+g1lq0PMcNVpZ uSG6g6kxywe8h/dylk9AYcLoSQrFRec5PJHUYk9qJA98FhiLy1ImODmVlmyi8LUc hS2gxu0NbXj4V5GY8iPk1y/wwFGf2Q7iCW4kjKrq+8TO1twoX9JS7u+A2TYCCV/R S+g4a2WfdzD85KP8AaO6P014gbRjvdD0xv7UUHs1XsZ3fhUE1Bkl40AwVV0D+KQL tOS+cGz3jgTJ94Xc1NjJ4zpmo3wya3ytxqKIxL5dxKwqPn7i9V+oAxmmv3AOUJlh UrgwCCWc1xVyvd5l/VhAAYJpigQu/YtyiGtA8VKQmU81GgiKgevTf9KSS0g= -----END CERTIFICATE-----Generated at Thu Nov 21 21:04:17 2024 by rpki-client on console-fra.rpki-client.org