$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddd1b6d8-c9d9-4d20-8c99-2e4bcf0538b3.roa File: ddd1b6d8-c9d9-4d20-8c99-2e4bcf0538b3.roa (raw, json) Hash identifier: sawx3eJW6fgDKx8GKVAOaxqeGSH83rhFl0s8i2r+hjU= Subject key identifier: 0B:E2:FF:DE:0B:26:8B:A8:42:64:99:F9:D2:79:1D:ED:0B:5C:89:39 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3DE2F74926223F57433E0BB8F2CE0D4F1D3C328E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddd1b6d8-c9d9-4d20-8c99-2e4bcf0538b3.roa Signing time: Mon 30 Sep 2024 00:00:00 +0000 ROA not before: Mon 30 Sep 2024 00:00:00 +0000 ROA not after: Mon 04 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 3.32.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e2:f7:49:26:22:3f:57:43:3e:0b:b8:f2:ce:0d:4f:1d:3c:32:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 30 00:00:00 2024 GMT Not After : Nov 4 23:59:59 2024 GMT Subject: serialNumber=ddec208a70aaa6a8274d8cf4848d5257dc8b9153ea77793ee984c99649a2b14c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:88:ab:72:d0:19:c5:0a:e7:4a:0a:a1:71:69: 39:dd:b9:e6:16:44:75:1f:9e:2b:db:52:52:58:c5: 8e:f5:28:be:01:05:cb:89:e0:a6:15:28:36:39:9a: 4f:6a:b4:39:ee:3c:34:ad:01:21:5a:82:80:ec:6f: d1:7f:53:65:c8:44:30:8f:dd:e5:e3:40:cb:e8:51: 75:19:02:b0:ea:ab:65:93:31:fe:dc:96:2d:0d:d9: 3c:09:40:95:e7:97:93:80:31:58:a5:51:c3:76:06: 18:ba:d1:14:f3:e3:ee:54:c2:b8:6f:76:82:37:5c: 96:d3:a0:bb:6f:1b:94:aa:2c:b4:66:83:bf:25:1f: ad:be:68:f4:c8:26:75:5a:12:9a:b2:26:05:8c:61: eb:54:4f:7b:9d:20:6d:85:e7:79:0e:e5:ce:5f:a0: 8c:5c:e4:7f:e2:49:8a:56:ec:42:5c:0f:3d:2b:e5: ea:2b:43:34:51:7a:02:4f:67:87:2b:30:ec:0e:cd: 8e:ff:d8:42:48:25:e0:0d:f1:e5:b5:70:ee:25:41: ca:3e:7d:ce:61:c2:c6:eb:6b:a3:64:70:70:3d:21: 04:0e:96:43:ba:d4:6a:21:9c:06:bf:74:e7:6f:f0: 1e:ae:37:3e:27:65:50:11:c5:4d:b9:d2:c0:9d:9a: a5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E2:FF:DE:0B:26:8B:A8:42:64:99:F9:D2:79:1D:ED:0B:5C:89:39 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddd1b6d8-c9d9-4d20-8c99-2e4bcf0538b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.32.0.0/16 Signature Algorithm: sha256WithRSAEncryption 64:0c:5d:5b:d5:0c:11:2a:95:fa:ce:3b:18:18:4e:18:ae:8a: 37:0a:79:05:09:1c:10:0f:fb:73:63:27:d2:ed:31:c6:56:72: a3:e7:aa:4d:aa:8b:cd:08:a6:7d:fe:5e:9a:8c:ac:e0:b4:68: 7d:77:c8:7c:87:41:bd:5d:b5:a6:b4:42:cb:50:a3:2e:5d:ec: 23:de:bb:03:77:5d:00:00:cc:f6:7b:1c:69:c8:42:18:46:1b: 1a:59:60:f4:fb:9b:17:db:e8:57:d4:3a:56:b6:dd:51:9e:3d: e0:09:df:9e:10:e9:5e:6a:31:23:3f:98:f4:3e:8f:31:cf:86: d5:18:b2:a4:5a:4c:39:26:c6:67:8a:12:18:96:43:60:2a:e8: c5:5d:a3:11:98:8f:b7:69:ab:54:94:3d:06:0c:95:4e:32:25: c2:57:dd:1f:66:d6:3d:03:e2:07:84:0b:bb:ba:a7:0b:a6:8d: 17:d3:df:77:e2:c3:4c:47:ca:3b:ed:84:6f:bb:91:66:bb:7c: c0:49:7d:bb:14:33:da:e3:e0:26:1c:a3:88:c0:35:88:b2:e8: 3c:8a:15:49:f9:89:ed:a6:84:25:33:25:9c:b8:1a:58:2e:f8: 7e:2d:4a:b1:6e:75:bf:19:21:4c:44:28:0f:d0:c3:fc:d4:24: 85:e2:4b:06 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPeL3SSYiP1dDPgu48s4NTx08Mo4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwOTMwMDAwMDAwWhcNMjQxMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGVjMjA4YTcwYWFhNmE4Mjc0ZDhjZjQ4NDhkNTI1N2Rj OGI5MTUzZWE3Nzc5M2VlOTg0Yzk5NjQ5YTJiMTRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhiKty0BnFCudKCqFxaTndueYWRHUfnivbUlJYxY71KL4B BcuJ4KYVKDY5mk9qtDnuPDStASFagoDsb9F/U2XIRDCP3eXjQMvoUXUZArDqq2WT Mf7cli0N2TwJQJXnl5OAMVilUcN2Bhi60RTz4+5UwrhvdoI3XJbToLtvG5SqLLRm g78lH62+aPTIJnVaEpqyJgWMYetUT3udIG2F53kO5c5foIxc5H/iSYpW7EJcDz0r 5eorQzRRegJPZ4crMOwOzY7/2EJIJeAN8eW1cO4lQco+fc5hwsbra6NkcHA9IQQO lkO61GohnAa/dOdv8B6uNz4nZVARxU250sCdmqUNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUC+L/3gsmi6hCZJn50nkd7QtciTkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RkZDFiNmQ4LWM5ZDktNGQyMC04Yzk5LTJlNGJjZjA1MzhiMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwADIDANBgkqhkiG9w0BAQsFAAOCAQEAZAxdW9UMESqV+s47GBhOGK6KNwp5 BQkcEA/7c2Mn0u0xxlZyo+eqTaqLzQimff5emoys4LRofXfIfIdBvV21prRCy1Cj Ll3sI967A3ddAADM9nscachCGEYbGllg9PubF9voV9Q6VrbdUZ494AnfnhDpXmox Iz+Y9D6PMc+G1RiypFpMOSbGZ4oSGJZDYCroxV2jEZiPt2mrVJQ9BgyVTjIlwlfd H2bWPQPiB4QLu7qnC6aNF9Pfd+LDTEfKO+2Eb7uRZrt8wEl9uxQz2uPgJhyjiMA1 iLLoPIoVSfmJ7aaEJTMlnLgaWC74fi1KsW51vxkhTEQoD9DD/NQkheJLBg== -----END CERTIFICATE-----Generated at Wed Oct 23 17:30:57 2024 by rpki-client on console-fra.rpki-client.org