$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4842686d-c01b-4b27-b79d-2d7da30784c1.roa File: 4842686d-c01b-4b27-b79d-2d7da30784c1.roa (raw, json) Hash identifier: As6e31zxM5t2yzYlgluhyZC9V1hUDc3ucsHAlU42W88= Subject key identifier: 85:45:27:D0:57:DB:6B:BF:9D:25:89:AB:08:3F:96:0C:2A:78:73:90 Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d Certificate serial: 6D8FFA81021F77F7FCE651F67E0DCF69E11EA3D6 Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4842686d-c01b-4b27-b79d-2d7da30784c1.roa Signing time: Wed 27 Dec 2023 00:00:00 +0000 ROA not before: Wed 27 Dec 2023 00:00:00 +0000 ROA not after: Wed 31 Jan 2024 23:59:59 +0000 asID: 400098 IP address blocks: 199.36.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Dec 2023 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:8f:fa:81:02:1f:77:f7:fc:e6:51:f6:7e:0d:cf:69:e1:1e:a3:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d Validity Not Before: Dec 27 00:00:00 2023 GMT Not After : Jan 31 23:59:59 2024 GMT Subject: serialNumber=90602645ab4edbd30c70db489e0e27f68f042f3182ad0af42075e471496d1a84, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cc:10:63:f2:ff:dc:73:75:e4:bc:53:ae:c4: 98:bb:f1:e8:51:58:69:b3:26:24:af:19:2d:76:79: d6:92:ba:bc:f7:63:58:f1:4e:a0:70:54:ab:59:a2: b7:80:df:14:fa:13:7b:a1:ec:b5:79:04:3a:61:37: 93:2c:b7:91:f9:70:f2:ad:3e:9e:87:cf:73:5c:59: 70:b0:8a:09:1a:e7:88:ac:f1:a2:d5:d4:51:13:6a: c9:25:35:da:a4:24:ef:c9:40:d8:ea:dc:00:ad:0e: ee:ec:4f:43:de:53:92:f2:11:24:99:1f:90:a8:61: 11:20:9b:2f:09:a4:f4:a1:06:f3:03:10:3e:f6:11: d6:fe:06:ae:db:2c:0c:fe:c1:b2:e7:76:99:57:bf: 1c:05:26:71:01:1c:16:3c:a4:ab:ae:59:ef:f4:9e: 2c:ec:f7:66:53:f3:de:78:ad:42:67:58:0a:b2:fd: f4:dd:c1:de:e8:c4:e8:8b:71:03:e8:67:aa:b6:a3: d2:0d:57:6a:a1:9c:3f:ed:eb:1b:ab:78:54:07:4e: a0:93:d3:13:ec:6d:cf:81:6d:bf:7d:d9:70:84:fc: ed:6e:0f:38:79:14:2f:1f:2e:0a:8e:db:92:13:9f: bd:3f:f6:da:7b:6b:3e:79:2d:32:d8:58:2e:3e:cd: d8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:45:27:D0:57:DB:6B:BF:9D:25:89:AB:08:3F:96:0C:2A:78:73:90 X509v3 Authority Key Identifier: keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4842686d-c01b-4b27-b79d-2d7da30784c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.36.120.0/24 Signature Algorithm: sha256WithRSAEncryption 49:f0:a5:e3:19:8a:53:1e:e6:31:2c:5f:40:f3:0a:e4:d2:a8: ac:63:f2:15:a1:53:11:6f:f3:65:4e:8a:96:aa:0a:42:ab:f8: 91:fa:5e:8a:e9:1a:3e:8b:f4:67:52:76:34:56:82:c6:84:57: 3e:0f:f4:d5:67:1e:e1:dc:50:b4:31:72:45:c2:69:d2:a6:dc: 46:6a:69:50:6d:f6:21:91:08:11:1c:d1:da:cb:9e:54:ac:dd: 28:37:e0:16:d5:85:85:cd:fd:7e:4a:94:88:f3:ef:a0:10:4f: 38:3c:18:65:bc:85:0a:20:f9:06:ce:6d:cb:7a:9b:d2:4b:8a: dc:41:8d:53:66:7d:51:c3:71:dd:bd:7e:57:c9:63:56:15:86: 5f:0f:97:00:f1:03:90:ab:b2:e3:fb:6f:d9:28:6d:0d:29:9f: 6c:64:39:3c:50:a1:98:9e:12:3c:5e:47:d8:5e:03:95:76:8c: aa:9d:c7:66:3a:72:a2:cd:0e:ef:0e:81:e4:93:5f:ad:0b:f1: b1:9e:22:d2:83:ac:9c:67:13:a6:78:73:00:1c:81:54:76:4d: 47:e7:20:a7:3e:5f:41:9f:7e:c1:f5:af:fd:75:5d:cf:31:c9: e3:10:13:29:fc:92:04:7d:25:22:bb:ea:5f:2b:0b:1f:a7:64: 90:63:8e:0b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbY/6gQIfd/f85lH2fg3PaeEeo9YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjI3MDAwMDAwWhcNMjQwMTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDYwMjY0NWFiNGVkYmQzMGM3MGRiNDg5ZTBlMjdmNjhm MDQyZjMxODJhZDBhZjQyMDc1ZTQ3MTQ5NmQxYTg0MS0wKwYDVQQDEyRjMGNlMjNl YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBzBBj8v/cc3XkvFOuxJi78ehRWGmzJiSvGS12edaSurz3 Y1jxTqBwVKtZoreA3xT6E3uh7LV5BDphN5Mst5H5cPKtPp6Hz3NcWXCwigka54is 8aLV1FETasklNdqkJO/JQNjq3ACtDu7sT0PeU5LyESSZH5CoYREgmy8JpPShBvMD ED72Edb+Bq7bLAz+wbLndplXvxwFJnEBHBY8pKuuWe/0nizs92ZT8954rUJnWAqy /fTdwd7oxOiLcQPoZ6q2o9INV2qhnD/t6xureFQHTqCT0xPsbc+Bbb992XCE/O1u Dzh5FC8fLgqO25ITn70/9tp7az55LTLYWC4+zdiDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhUUn0Ffba7+dJYmrCD+WDCp4c5AwHwYDVR0jBBgwFoAUVajdRdlEE/nR kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk ZWZhOWEwMmM2LzQ4NDI2ODZkLWMwMWItNGIyNy1iNzlkLTJkN2RhMzA3ODRjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1 LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEnwpeMZilMe5jEsX0DzCuTSqKxj 8hWhUxFv82VOipaqCkKr+JH6XorpGj6L9GdSdjRWgsaEVz4P9NVnHuHcULQxckXC adKm3EZqaVBt9iGRCBEc0drLnlSs3Sg34BbVhYXN/X5KlIjz76AQTzg8GGW8hQog +QbObct6m9JLitxBjVNmfVHDcd29flfJY1YVhl8PlwDxA5CrsuP7b9kobQ0pn2xk OTxQoZieEjxeR9heA5V2jKqdx2Y6cqLNDu8OgeSTX60L8bGeItKDrJxnE6Z4cwAc gVR2TUfnIKc+X0GffsH1r/11Xc8xyeMQEyn8kgR9JSK76l8rCx+nZJBjjgs= -----END CERTIFICATE-----Generated at Wed Dec 27 11:00:57 2023 by rpki-client on console.sobornost.net