$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24c0fbb0-0e93-4198-b812-7bf705255f70.roa File: 24c0fbb0-0e93-4198-b812-7bf705255f70.roa (raw, json) Hash identifier: gukYn9h+XRcaVzg+srytFgdnOYK4NB8S18Kg9fnRD7E= Subject key identifier: D3:C1:20:18:F6:23:16:3F:6A:C1:17:B0:70:DF:00:95:B7:53:6C:29 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 50CF4044729796264C84A8199426488C9AA5C935 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24c0fbb0-0e93-4198-b812-7bf705255f70.roa Signing time: Fri 03 May 2024 00:00:00 +0000 ROA not before: Fri 03 May 2024 00:00:00 +0000 ROA not after: Fri 07 Jun 2024 23:59:59 +0000 asID: 14618 IP address blocks: 146.65.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:cf:40:44:72:97:96:26:4c:84:a8:19:94:26:48:8c:9a:a5:c9:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 3 00:00:00 2024 GMT Not After : Jun 7 23:59:59 2024 GMT Subject: serialNumber=1722fa1f9691ef3cdbcdcdcac0f5555041c0468314ef941783e2b08c163143c9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ae:16:f2:7d:d2:aa:5e:9e:fc:95:15:c8:53: f7:ae:be:68:79:d6:5d:de:5d:fa:a6:09:e6:7d:fd: ef:1e:88:0c:f8:02:f0:e9:8d:90:2a:22:57:92:f2: 8d:43:99:16:43:72:ed:86:b2:c3:4b:b3:9c:e2:e5: 37:54:87:f0:46:4b:c1:aa:42:f1:5f:58:d0:90:1d: 92:c8:58:0d:32:d5:c7:d6:4f:16:11:2a:58:62:41: 39:64:7a:be:5a:c7:bd:85:1b:a9:6b:a2:24:e7:4b: 08:2b:f5:b2:8a:93:84:72:25:8f:b9:92:ed:25:c9: 31:c3:40:c6:af:f3:c1:d9:64:dd:4e:10:dc:c3:b0: 8b:18:09:f7:fb:06:31:5d:e3:52:4f:ba:2f:1f:e8: 49:e6:8f:b2:2a:a8:05:59:05:33:91:42:ea:e4:d2: d0:54:31:7d:2a:07:bc:ad:d7:bf:00:75:7c:85:f1: d7:d3:bd:92:28:c2:14:fa:e8:6b:7f:6a:a7:e3:30: 36:ba:35:eb:9d:e4:61:f8:06:03:4d:3f:8a:da:59: ea:84:18:93:24:a7:3f:d1:95:3f:89:8c:4a:2e:3c: 9f:48:dd:db:2d:65:7d:a4:f9:51:c3:0b:1d:08:54: da:ea:0f:8c:7b:fa:bd:53:e1:d8:d7:78:db:71:1c: 77:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C1:20:18:F6:23:16:3F:6A:C1:17:B0:70:DF:00:95:B7:53:6C:29 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24c0fbb0-0e93-4198-b812-7bf705255f70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.65.0.0/16 Signature Algorithm: sha256WithRSAEncryption 95:24:d3:18:bb:2d:77:a2:71:f5:2e:2a:bd:56:2a:c1:0c:0d: 42:c0:16:0d:4e:67:c0:7b:68:6d:b6:27:26:45:4b:21:9b:00: 6c:99:e7:fb:a5:f7:85:d0:72:39:32:09:d9:45:d6:f1:21:fc: 4c:a8:b6:c8:8b:13:8d:a9:58:2e:84:3d:4b:fb:88:fb:de:ff: 60:09:e7:dc:70:a5:92:5a:0b:56:b0:a7:15:60:9b:a6:79:1e: d3:ab:fb:16:af:f8:5c:04:65:9a:f3:2f:cd:98:4c:4e:77:74: 04:bd:06:75:bc:df:82:d9:f8:9e:14:8a:e3:7b:4d:9d:a3:c4: 6f:f1:5b:69:f2:f3:0d:00:fc:2e:51:3d:4e:8e:4c:db:ed:76: 76:0d:9d:83:78:cf:83:e1:5d:44:ba:98:0d:c6:70:a3:35:e2: f1:f5:8e:06:30:c0:c8:93:9e:e8:37:dc:fa:e7:58:73:34:3e: 9a:01:33:a5:90:4a:19:08:fb:a3:b4:13:2f:76:a4:2d:cd:96: 1c:b6:2d:6b:f6:82:7a:15:c5:ef:44:ff:02:7c:51:5a:1a:c0: 23:6a:5a:bc:59:6c:ed:af:98:36:33:d9:46:cd:16:78:25:f6: 92:1e:48:f4:21:a8:7c:ad:85:0b:78:0e:ac:e9:c8:e3:5b:78: 02:5f:b6:1e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUM9ARHKXliZMhKgZlCZIjJqlyTUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNzIyZmExZjk2OTFlZjNjZGJjZGNkY2FjMGY1NTU1MDQx YzA0NjgzMTRlZjk0MTc4M2UyYjA4YzE2MzE0M2M5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDrhbyfdKqXp78lRXIU/euvmh51l3eXfqmCeZ9/e8eiAz4 AvDpjZAqIleS8o1DmRZDcu2GssNLs5zi5TdUh/BGS8GqQvFfWNCQHZLIWA0y1cfW TxYRKlhiQTlker5ax72FG6lroiTnSwgr9bKKk4RyJY+5ku0lyTHDQMav88HZZN1O ENzDsIsYCff7BjFd41JPui8f6Enmj7IqqAVZBTORQurk0tBUMX0qB7yt178AdXyF 8dfTvZIowhT66Gt/aqfjMDa6Neud5GH4BgNNP4raWeqEGJMkpz/RlT+JjEouPJ9I 3dstZX2k+VHDCx0IVNrqD4x7+r1T4djXeNtxHHdJAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU08EgGPYjFj9qwRewcN8AlbdTbCkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI0YzBmYmIwLTBlOTMtNDE5OC1iODEyLTdiZjcwNTI1NWY3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCSQTANBgkqhkiG9w0BAQsFAAOCAQEAlSTTGLstd6Jx9S4qvVYqwQwNQsAW DU5nwHtobbYnJkVLIZsAbJnn+6X3hdByOTIJ2UXW8SH8TKi2yIsTjalYLoQ9S/uI +97/YAnn3HClkloLVrCnFWCbpnke06v7Fq/4XARlmvMvzZhMTnd0BL0Gdbzfgtn4 nhSK43tNnaPEb/FbafLzDQD8LlE9To5M2+12dg2dg3jPg+FdRLqYDcZwozXi8fWO BjDAyJOe6Dfc+udYczQ+mgEzpZBKGQj7o7QTL3akLc2WHLYta/aCehXF70T/AnxR WhrAI2pavFls7a+YNjPZRs0WeCX2kh5I9CGofK2FC3gOrOnI41t4Al+2Hg== -----END CERTIFICATE-----Generated at Mon May 6 00:49:52 2024 by rpki-client on console-fra.rpki-client.org