$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d32fb484-0594-46b9-8c2b-95bac579c029.roa File: d32fb484-0594-46b9-8c2b-95bac579c029.roa (raw, json) Hash identifier: l2cXt/qeqBzLtcj30ULXxwBqZdiWfDf5nTMrnl+K01M= Subject key identifier: 4F:D0:77:BF:F0:66:EC:96:55:A4:C9:41:E7:E7:E7:A2:66:00:08:50 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1C15B7F7C0EB459FD185E9EBB3889FD6B037BE8C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d32fb484-0594-46b9-8c2b-95bac579c029.roa Signing time: Sat 24 Aug 2024 00:00:00 +0000 ROA not before: Sat 24 Aug 2024 00:00:00 +0000 ROA not after: Sat 28 Sep 2024 23:59:59 +0000 asID: 14618 IP address blocks: 18.96.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Sep 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:15:b7:f7:c0:eb:45:9f:d1:85:e9:eb:b3:88:9f:d6:b0:37:be:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 24 00:00:00 2024 GMT Not After : Sep 28 23:59:59 2024 GMT Subject: serialNumber=6133e9afcca5bf24426efc3c249f29cda80c2f47f9238f919d769448f9713181, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:57:67:49:03:2e:6e:ae:2e:fe:d8:16:71:fd: 89:b5:56:1e:b4:23:00:09:25:8e:ce:49:e1:a7:fd: ee:60:c8:12:26:36:d6:61:ed:34:ce:e3:3f:cf:2f: 29:03:46:b9:38:cf:10:03:4c:ae:98:e7:16:5e:38: aa:56:39:73:54:de:73:45:77:d6:ca:25:45:56:cc: 2c:f6:78:28:93:20:15:85:fa:a3:e9:6b:46:89:a5: be:fb:38:28:c2:f8:3a:91:cc:8d:4f:cb:68:91:19: 87:74:be:21:bc:1e:b1:ee:2b:4e:b1:ce:54:3c:55: 09:51:7e:ef:6c:95:ab:fd:e1:c5:68:d5:36:88:a9: a6:a3:d9:eb:c3:34:81:68:52:7f:e2:e6:e3:11:40: c0:7f:7b:5e:d0:fb:7f:58:f0:71:d8:99:e8:75:6b: 97:15:3a:22:f7:08:23:b6:7c:ed:0b:cd:70:d5:97: 31:4d:40:c1:6c:79:e9:d4:a5:34:19:29:33:ab:21: d7:6c:d4:ab:a9:96:31:5d:17:e4:99:44:14:9c:e7: 21:51:2a:58:7d:5d:b6:b1:f8:4e:ae:e3:93:ab:71: e5:75:8c:ce:5c:41:83:d5:9e:24:72:78:a8:b4:67: b6:0b:60:e8:61:63:87:92:59:60:70:c9:80:02:d7: 1d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D0:77:BF:F0:66:EC:96:55:A4:C9:41:E7:E7:E7:A2:66:00:08:50 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d32fb484-0594-46b9-8c2b-95bac579c029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.96.1.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:ee:8b:61:eb:ad:34:f0:fd:63:81:75:34:e3:bd:7d:4d:df: c5:b0:97:ea:cf:69:07:35:ce:ad:32:94:dc:ca:aa:19:8d:fd: 69:35:0d:89:0c:9c:7c:13:1a:3f:84:43:a9:32:64:a7:c7:c0: 18:d8:04:fc:9a:f2:ee:b9:23:a2:22:7b:3c:61:fd:a2:2a:70: d7:18:7e:f3:9c:fc:88:4b:b0:e3:00:92:05:fe:40:5b:9f:77: df:e0:2e:98:f5:f9:35:a6:a6:11:79:0a:66:ae:67:a8:a3:6c: 82:7b:c8:38:df:5e:17:10:b4:20:f4:bc:d0:37:65:8c:c8:75: 8a:19:b1:e0:d0:af:9d:11:28:e1:8f:d4:49:1d:99:c5:f0:d4: a3:50:ac:7c:13:e2:2d:6e:2b:bc:54:5a:34:14:a4:0c:91:a6: f5:4e:94:4d:ae:36:4e:c9:61:7f:96:b6:ca:e1:27:6b:c1:e0: 6e:c3:42:6e:e4:1c:e8:52:84:19:39:8d:4c:02:08:7f:2e:c1: 40:a2:d9:e9:00:c5:d0:19:ad:04:37:00:82:0b:fa:c8:fc:75: 78:23:f1:cc:ba:22:9d:39:d7:74:89:66:e1:05:78:50:8c:a9: 53:05:fb:5a:fe:54:8c:70:06:cb:4e:ae:2c:53:d8:e5:a9:4e: 56:57:82:bd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHBW398DrRZ/Rhenrs4if1rA3vowwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwODI0MDAwMDAwWhcNMjQwOTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTMzZTlhZmNjYTViZjI0NDI2ZWZjM2MyNDlmMjljZGE4 MGMyZjQ3ZjkyMzhmOTE5ZDc2OTQ0OGY5NzEzMTgxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgV2dJAy5uri7+2BZx/Ym1Vh60IwAJJY7OSeGn/e5gyBIm NtZh7TTO4z/PLykDRrk4zxADTK6Y5xZeOKpWOXNU3nNFd9bKJUVWzCz2eCiTIBWF +qPpa0aJpb77OCjC+DqRzI1Py2iRGYd0viG8HrHuK06xzlQ8VQlRfu9slav94cVo 1TaIqaaj2evDNIFoUn/i5uMRQMB/e17Q+39Y8HHYmeh1a5cVOiL3CCO2fO0LzXDV lzFNQMFseenUpTQZKTOrIdds1KupljFdF+SZRBSc5yFRKlh9Xbax+E6u45OrceV1 jM5cQYPVniRyeKi0Z7YLYOhhY4eSWWBwyYAC1x0XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUT9B3v/Bm7JZVpMlB5+fnomYACFAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QzMmZiNDg0LTA1OTQtNDZiOS04YzJiLTk1YmFjNTc5YzAyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASYAEwDQYJKoZIhvcNAQELBQADggEBADrui2HrrTTw/WOBdTTjvX1N38Ww l+rPaQc1zq0ylNzKqhmN/Wk1DYkMnHwTGj+EQ6kyZKfHwBjYBPya8u65I6Iiezxh /aIqcNcYfvOc/IhLsOMAkgX+QFufd9/gLpj1+TWmphF5CmauZ6ijbIJ7yDjfXhcQ tCD0vNA3ZYzIdYoZseDQr50RKOGP1EkdmcXw1KNQrHwT4i1uK7xUWjQUpAyRpvVO lE2uNk7JYX+WtsrhJ2vB4G7DQm7kHOhShBk5jUwCCH8uwUCi2ekAxdAZrQQ3AIIL +sj8dXgj8cy6Ip0513SJZuEFeFCMqVMF+1r+VIxwBstOrixT2OWpTlZXgr0= -----END CERTIFICATE-----Generated at Sat Sep 7 00:40:22 2024 by rpki-client on console-fra.rpki-client.org