$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d20a4bff-f419-46d5-b2fd-602043f6d100.roa File: d20a4bff-f419-46d5-b2fd-602043f6d100.roa (raw, json) Hash identifier: hOckuto4AMCsGT3LDRClQICiSFuX8xcklM3CSoJe0IE= Subject key identifier: 84:DF:56:35:A6:E4:34:9F:02:F5:9B:C4:06:3E:E0:F1:11:EE:8E:86 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 49ABEF6E734476D24843A192DF350EDC2059B7C4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d20a4bff-f419-46d5-b2fd-602043f6d100.roa Signing time: Tue 12 Nov 2024 00:00:00 +0000 ROA not before: Tue 12 Nov 2024 00:00:00 +0000 ROA not after: Tue 17 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 18.99.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ab:ef:6e:73:44:76:d2:48:43:a1:92:df:35:0e:dc:20:59:b7:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 12 00:00:00 2024 GMT Not After : Dec 17 23:59:59 2024 GMT Subject: serialNumber=8adde9f076e149bffc57aa9fb606af4ec43cc07fc75ed012115871a25eae6f8b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fd:ea:c2:b6:b9:8e:61:61:46:12:1e:6c:7f: 93:3a:ac:ed:26:d4:52:dd:9b:ff:27:13:d7:81:6a: 4c:9d:46:cd:25:d6:9a:aa:03:96:fc:90:cc:5c:21: aa:01:f2:d8:67:d0:ef:eb:11:52:13:c6:c7:0a:d5: c0:a0:8e:93:11:12:53:cd:57:80:7a:a1:75:1e:bd: d0:46:9c:9e:5e:f6:4e:71:9c:04:a7:98:39:26:e7: 6d:3f:c2:48:a8:73:4c:2b:ee:66:30:8c:b5:78:0a: 6b:34:95:30:e0:27:8d:b3:a7:47:c3:16:d7:fc:70: 9b:14:01:72:e5:c7:3e:23:42:80:49:53:cd:a0:0e: d1:d1:5d:b0:0b:a3:58:0b:87:b8:f5:4a:ec:c8:a1: cd:f7:37:39:9b:7c:39:9b:27:0f:bc:4a:1e:ac:69: dc:64:cd:85:52:76:76:df:1e:1f:5e:76:0e:93:98: 9b:0f:9c:6e:eb:bb:cb:ac:fe:da:9c:e3:f1:57:16: c1:e9:41:94:db:6a:83:22:41:c2:00:32:c5:e5:70: 5b:3a:65:47:c3:dc:3c:44:d9:65:37:94:bc:cb:c4: 26:43:1a:a2:5b:a5:40:e9:39:ca:8c:7a:0d:c3:5a: de:0c:11:7b:6e:57:5c:9a:e6:20:b5:65:49:6c:b6: 2d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DF:56:35:A6:E4:34:9F:02:F5:9B:C4:06:3E:E0:F1:11:EE:8E:86 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d20a4bff-f419-46d5-b2fd-602043f6d100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.99.96.0/20 Signature Algorithm: sha256WithRSAEncryption 50:a9:69:4b:bf:3d:2e:bb:87:b2:0c:9b:b9:49:b1:b1:31:1f: 96:b6:2c:66:3b:f9:c6:08:5b:e5:b7:b7:e8:21:a8:fc:4a:bf: 33:62:bb:dc:2c:79:be:cb:9e:a8:b3:b3:6b:45:50:b9:c1:f8: 22:97:3c:06:27:ab:50:74:99:f8:27:1a:71:a4:1e:d4:01:19: d2:fd:11:01:36:bf:93:80:6a:19:aa:aa:20:ee:99:2d:1e:14: 11:c2:9f:22:f1:91:e2:62:a2:d3:c3:b4:60:45:a0:94:16:a0: 91:2f:2c:29:af:e2:f8:b8:32:e5:93:33:ff:c4:67:38:40:4c: 13:f9:66:f5:3b:3b:83:02:ca:38:1a:20:46:da:6a:ad:2a:33: 26:d0:dd:1f:89:7c:03:e3:f5:ef:cc:80:3c:9b:70:aa:16:c0: 2c:24:20:c1:ab:cc:87:78:59:98:d5:4d:08:bc:37:fb:91:69: c6:96:2d:b2:3c:0b:d8:0e:19:3c:7c:d0:9a:a7:9d:5e:7c:70: e2:bf:60:cb:9f:83:32:a6:93:2e:4f:88:83:10:88:21:c8:b2: 6a:c7:93:20:7f:d7:d2:fe:88:c8:f8:cb:0a:97:ac:46:be:ef: 30:d9:5b:d4:6b:3d:62:dd:15:ee:4e:de:a4:da:37:e0:7f:64: b8:73:31:63 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSavvbnNEdtJIQ6GS3zUO3CBZt8QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMTEyMDAwMDAwWhcNMjQxMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YWRkZTlmMDc2ZTE0OWJmZmM1N2FhOWZiNjA2YWY0ZWM0 M2NjMDdmYzc1ZWQwMTIxMTU4NzFhMjVlYWU2ZjhiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK/erCtrmOYWFGEh5sf5M6rO0m1FLdm/8nE9eBakydRs0l 1pqqA5b8kMxcIaoB8thn0O/rEVITxscK1cCgjpMRElPNV4B6oXUevdBGnJ5e9k5x nASnmDkm520/wkioc0wr7mYwjLV4Cms0lTDgJ42zp0fDFtf8cJsUAXLlxz4jQoBJ U82gDtHRXbALo1gLh7j1SuzIoc33NzmbfDmbJw+8Sh6sadxkzYVSdnbfHh9edg6T mJsPnG7ru8us/tqc4/FXFsHpQZTbaoMiQcIAMsXlcFs6ZUfD3DxE2WU3lLzLxCZD GqJbpUDpOcqMeg3DWt4MEXtuV1ya5iC1ZUlsti19AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhN9WNabkNJ8C9ZvEBj7g8RHujoYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QyMGE0YmZmLWY0MTktNDZkNS1iMmZkLTYwMjA0M2Y2ZDEwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQSY2AwDQYJKoZIhvcNAQELBQADggEBAFCpaUu/PS67h7IMm7lJsbExH5a2 LGY7+cYIW+W3t+ghqPxKvzNiu9wseb7Lnqizs2tFULnB+CKXPAYnq1B0mfgnGnGk HtQBGdL9EQE2v5OAahmqqiDumS0eFBHCnyLxkeJiotPDtGBFoJQWoJEvLCmv4vi4 MuWTM//EZzhATBP5ZvU7O4MCyjgaIEbaaq0qMybQ3R+JfAPj9e/MgDybcKoWwCwk IMGrzId4WZjVTQi8N/uRacaWLbI8C9gOGTx80JqnnV58cOK/YMufgzKmky5PiIMQ iCHIsmrHkyB/19L+iMj4ywqXrEa+7zDZW9RrPWLdFe5O3qTaN+B/ZLhzMWM= -----END CERTIFICATE-----Generated at Sun Nov 24 22:11:44 2024 by rpki-client on console-fra.rpki-client.org