$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1aa0d45e-6f47-4357-a466-82a14a20e940.roa File: 1aa0d45e-6f47-4357-a466-82a14a20e940.roa (raw, json) Hash identifier: iy+N2lTHvGm437aSYiyO985DZHL+1Vk6W+rcgu15Jno= Subject key identifier: D2:28:CD:A0:7F:56:18:80:A1:02:18:00:3A:6F:E7:05:CE:D4:ED:B9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2CC36E992B1DC891B71757889C1653CF79074948 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1aa0d45e-6f47-4357-a466-82a14a20e940.roa Signing time: Fri 03 May 2024 00:00:00 +0000 ROA not before: Fri 03 May 2024 00:00:00 +0000 ROA not after: Fri 07 Jun 2024 23:59:59 +0000 asID: 14618 IP address blocks: 18.144.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c3:6e:99:2b:1d:c8:91:b7:17:57:88:9c:16:53:cf:79:07:49:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 3 00:00:00 2024 GMT Not After : Jun 7 23:59:59 2024 GMT Subject: serialNumber=1f88ce905d7868938ed52a41835aaeaff379412f11fd951be2ec749148bcfd86, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:66:85:5e:75:65:b7:73:70:96:cc:c3:87: 49:63:4a:8a:95:eb:68:55:7f:9f:1d:95:36:34:2c: 0b:98:7d:0f:d4:8f:dc:b3:db:42:cd:cf:16:b8:c7: 6f:fd:85:5c:4a:0d:61:11:e9:5a:e1:cf:4d:98:ef: 63:c7:12:04:79:67:19:a8:4c:2a:69:0d:87:90:2c: 56:e7:cb:1d:80:b5:53:ca:ae:84:f1:7b:b6:69:1e: f8:cf:a3:14:a6:3a:b8:99:5a:80:53:e5:23:35:3d: 4e:dd:d1:da:7b:5d:16:c4:d5:cc:b5:9e:be:0a:75: b8:b6:a9:e9:98:4e:1d:27:a9:77:11:45:11:bd:72: e3:17:a3:33:1e:2e:d7:6d:e7:55:d8:a1:1e:55:b9: f7:f5:6f:db:b5:85:8c:8d:df:ac:ca:46:f2:52:fd: b2:91:10:9d:22:ef:3b:4c:85:f1:1f:37:8a:8d:3b: 54:77:92:d6:6c:94:98:81:4c:e4:28:b0:f2:8a:ab: cb:59:77:49:ed:e8:88:d5:62:12:68:a1:dc:74:5d: 97:b8:4a:76:e6:46:21:ba:82:03:95:72:ca:54:00: 80:8f:95:5e:fe:da:e7:a6:59:65:ac:e5:36:e2:45: 23:e0:05:97:23:a5:f6:5f:d9:24:52:42:8b:62:b8: 9f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:28:CD:A0:7F:56:18:80:A1:02:18:00:3A:6F:E7:05:CE:D4:ED:B9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1aa0d45e-6f47-4357-a466-82a14a20e940.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.144.0.0/15 Signature Algorithm: sha256WithRSAEncryption 8a:58:03:65:be:fd:15:ce:01:d0:01:73:e3:ec:b8:a2:14:46: 3b:58:b2:24:ff:35:40:34:26:58:35:3c:3c:96:ed:34:9e:8e: ef:5d:07:8d:91:77:c7:e6:71:e1:3e:1b:df:7b:09:57:d4:fd: 26:b2:d5:88:81:65:f4:36:72:66:71:cb:8e:e4:7e:d6:15:6d: fb:cf:f8:2d:8f:95:fd:05:ba:84:05:88:78:d9:3d:db:fd:5c: 61:0f:c8:ef:d2:a4:ed:5b:46:04:f0:19:76:3f:51:99:9f:89: 18:5b:fc:d6:9d:ba:17:b4:c1:71:a6:65:cb:f8:5e:cd:eb:ea: 4c:a6:94:58:95:5c:08:c4:91:70:fd:64:47:98:9c:b9:e0:4c: a1:9d:a3:28:0f:ab:ec:f6:ef:89:30:d2:44:c6:a3:2c:9d:9b: b3:0f:b0:27:fa:1d:2a:dd:6f:28:8d:5e:de:7b:31:74:6f:bb: 8e:40:74:a7:91:13:04:ee:18:06:13:20:b3:2d:03:c2:3e:83: 69:1a:f7:44:6d:c4:46:83:68:83:97:22:a3:37:d1:9a:de:ba: 79:cf:6c:72:b8:70:e7:2c:d7:31:ff:c2:da:74:61:be:d3:a8: 2b:c3:ed:f8:b9:6a:7c:1e:68:c9:09:94:a1:ec:90:ec:5e:df: 0c:24:9e:8e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULMNumSsdyJG3F1eInBZTz3kHSUgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjg4Y2U5MDVkNzg2ODkzOGVkNTJhNDE4MzVhYWVhZmYz Nzk0MTJmMTFmZDk1MWJlMmVjNzQ5MTQ4YmNmZDg2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq3maFXnVlt3NwlszDh0ljSoqV62hVf58dlTY0LAuYfQ/U j9yz20LNzxa4x2/9hVxKDWER6Vrhz02Y72PHEgR5ZxmoTCppDYeQLFbnyx2AtVPK roTxe7ZpHvjPoxSmOriZWoBT5SM1PU7d0dp7XRbE1cy1nr4Kdbi2qemYTh0nqXcR RRG9cuMXozMeLtdt51XYoR5Vuff1b9u1hYyN36zKRvJS/bKREJ0i7ztMhfEfN4qN O1R3ktZslJiBTOQosPKKq8tZd0nt6IjVYhJoodx0XZe4SnbmRiG6ggOVcspUAICP lV7+2uemWWWs5TbiRSPgBZcjpfZf2SRSQotiuJ9DAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU0ijNoH9WGIChAhgAOm/nBc7U7bkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFhYTBkNDVlLTZmNDctNDM1Ny1hNDY2LTgyYTE0YTIwZTk0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwESkDANBgkqhkiG9w0BAQsFAAOCAQEAilgDZb79Fc4B0AFz4+y4ohRGO1iy JP81QDQmWDU8PJbtNJ6O710HjZF3x+Zx4T4b33sJV9T9JrLViIFl9DZyZnHLjuR+ 1hVt+8/4LY+V/QW6hAWIeNk92/1cYQ/I79Kk7VtGBPAZdj9RmZ+JGFv81p26F7TB caZly/hezevqTKaUWJVcCMSRcP1kR5icueBMoZ2jKA+r7PbviTDSRMajLJ2bsw+w J/odKt1vKI1e3nsxdG+7jkB0p5ETBO4YBhMgsy0Dwj6DaRr3RG3ERoNog5ciozfR mt66ec9scrhw5yzXMf/C2nRhvtOoK8Pt+LlqfB5oyQmUoeyQ7F7fDCSejg== -----END CERTIFICATE-----Generated at Mon May 6 00:49:50 2024 by rpki-client on console-fra.rpki-client.org