$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8a3555a-63ee-4cdb-a7e9-2bc864a13ee6.roa File: f8a3555a-63ee-4cdb-a7e9-2bc864a13ee6.roa (raw, json) Hash identifier: LliyWmWKMRtZ/QJ1g0nMnUP6w5WRkdMF1lGmDdKVxrY= Subject key identifier: A2:C8:91:15:23:73:5B:95:F7:49:3D:E1:A8:9E:10:8B:3A:FF:7E:03 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 12E130F3F9E88E5013017118E3CF70677234E46B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8a3555a-63ee-4cdb-a7e9-2bc864a13ee6.roa Signing time: Tue 08 Oct 2024 00:00:00 +0000 ROA not before: Tue 08 Oct 2024 00:00:00 +0000 ROA not after: Tue 12 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 13.248.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e1:30:f3:f9:e8:8e:50:13:01:71:18:e3:cf:70:67:72:34:e4:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 8 00:00:00 2024 GMT Not After : Nov 12 23:59:59 2024 GMT Subject: serialNumber=941fd4a79a571ecb4b274767456e757bedc724388230e2e3f8dde1699de43d9a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:0d:17:d2:20:10:b3:ca:2a:2f:57:3e:1e: 3c:e7:a5:2d:51:46:09:7c:9f:c7:7c:b7:91:30:aa: 3c:eb:2a:33:a4:9d:75:e0:e7:85:3e:c4:54:b7:a6: d9:12:44:51:3c:62:ec:21:c9:ef:49:4d:05:5f:46: ca:79:f9:fe:71:8e:0c:64:3c:53:bc:36:4f:1a:2e: 36:f4:44:98:81:c6:55:fc:60:bc:a6:b0:98:f3:a7: 25:c1:b5:18:48:b4:76:31:97:a6:7e:5e:33:d3:42: 9f:5e:b8:56:1b:9c:6e:78:2d:39:77:0b:cd:f4:7b: f4:67:bc:d2:5b:0f:1b:ca:9b:37:a3:15:11:57:83: ab:09:36:30:ba:63:b5:9e:aa:c5:98:84:01:b7:28: ea:d6:b4:7f:c6:a5:e9:31:15:6f:29:b4:44:04:a7: 8f:22:27:57:3c:ea:7d:45:cf:e6:bc:2d:85:eb:40: ef:a1:57:d0:3e:cf:78:51:15:a2:bd:3d:5f:e6:7f: 8b:e3:e2:86:91:53:61:e2:1b:49:36:8b:75:f1:91: 10:19:9c:89:bf:9a:1c:f9:9f:b9:a5:9a:96:02:3f: 68:4a:18:7e:be:bc:10:2b:a7:ae:98:c5:9a:80:ad: d1:d0:cb:b8:eb:c3:3b:07:ec:51:dc:b2:07:69:64: 96:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C8:91:15:23:73:5B:95:F7:49:3D:E1:A8:9E:10:8B:3A:FF:7E:03 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8a3555a-63ee-4cdb-a7e9-2bc864a13ee6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.248.79.0/24 Signature Algorithm: sha256WithRSAEncryption 39:65:ea:5b:8f:1e:0f:c1:28:f6:dd:ef:81:7c:7f:3c:ce:38: 87:8c:e2:76:6a:0e:d8:47:f0:9d:75:30:a6:6f:04:0a:9a:70: c1:f8:d9:29:36:98:7f:59:a1:78:a4:fb:ab:ae:a2:32:1c:c6: ba:2f:52:64:5d:ce:08:ad:f6:45:36:6f:7c:f2:00:f0:0f:f1: 6c:98:f1:48:82:5d:f7:4b:4a:9a:e5:71:d8:be:44:f3:12:af: d9:af:fe:06:56:8c:ff:d3:49:13:25:f5:dc:33:c7:52:cf:f7: bf:4c:0b:c4:92:aa:31:c4:28:42:57:90:c1:e1:bf:80:ca:a3: 26:f1:6c:9f:70:27:ee:73:19:c1:fe:36:4f:1b:3f:e3:fd:3a: 4c:7e:f3:44:d5:cd:6f:43:a3:68:73:11:e1:0f:9b:7e:50:43: f9:38:36:e8:aa:83:86:db:cc:18:6f:05:4d:d7:6c:af:1e:a3: 9f:dc:71:d0:85:ff:d8:49:73:53:1c:3f:38:48:6b:4b:54:44: c4:13:b8:24:6a:58:ca:cd:59:a4:67:ae:8e:45:ec:03:ad:f6: 22:eb:05:08:7b:fb:c0:8b:b1:87:d8:76:92:d1:5b:cd:6d:00: 25:a9:cd:50:2d:34:8b:d1:85:9d:ba:6a:ba:19:c7:55:42:43: c4:bd:25:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEuEw8/nojlATAXEY489wZ3I05GswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMDA4MDAwMDAwWhcNMjQxMTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDFmZDRhNzlhNTcxZWNiNGIyNzQ3Njc0NTZlNzU3YmVk YzcyNDM4ODIzMGUyZTNmOGRkZTE2OTlkZTQzZDlhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3Dg0X0iAQs8oqL1c+HjznpS1RRgl8n8d8t5EwqjzrKjOk nXXg54U+xFS3ptkSRFE8Yuwhye9JTQVfRsp5+f5xjgxkPFO8Nk8aLjb0RJiBxlX8 YLymsJjzpyXBtRhItHYxl6Z+XjPTQp9euFYbnG54LTl3C830e/RnvNJbDxvKmzej FRFXg6sJNjC6Y7WeqsWYhAG3KOrWtH/GpekxFW8ptEQEp48iJ1c86n1Fz+a8LYXr QO+hV9A+z3hRFaK9PV/mf4vj4oaRU2HiG0k2i3XxkRAZnIm/mhz5n7mlmpYCP2hK GH6+vBArp66YxZqArdHQy7jrwzsH7FHcsgdpZJbdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUosiRFSNzW5X3ST3hqJ4Qizr/fgMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y4YTM1NTVhLTYzZWUtNGNkYi1hN2U5LTJiYzg2NGExM2VlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+E8wDQYJKoZIhvcNAQELBQADggEBADll6luPHg/BKPbd74F8fzzOOIeM 4nZqDthH8J11MKZvBAqacMH42Sk2mH9ZoXik+6uuojIcxrovUmRdzgit9kU2b3zy APAP8WyY8UiCXfdLSprlcdi+RPMSr9mv/gZWjP/TSRMl9dwzx1LP979MC8SSqjHE KEJXkMHhv4DKoybxbJ9wJ+5zGcH+Nk8bP+P9Okx+80TVzW9Do2hzEeEPm35QQ/k4 Nuiqg4bbzBhvBU3XbK8eo5/ccdCF/9hJc1McPzhIa0tURMQTuCRqWMrNWaRnro5F 7AOt9iLrBQh7+8CLsYfYdpLRW81tACWpzVAtNIvRhZ26aroZx1VCQ8S9JUw= -----END CERTIFICATE-----Generated at Wed Oct 23 17:36:05 2024 by rpki-client on console-ams.rpki-client.org