$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34074351-34bc-4b0f-867d-67678c165ca9.roa File: 34074351-34bc-4b0f-867d-67678c165ca9.roa (raw, json) Hash identifier: nWK6t6HyFt5ndFCR6guH9njnAvah40xHAGsc6GCwguc= Subject key identifier: C7:FF:9E:2A:A4:CE:34:0D:A7:44:76:39:6E:AB:E4:73:73:E0:F8:E2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 595499ACF7F7A456F2148D258D86E00DA9AEA239 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34074351-34bc-4b0f-867d-67678c165ca9.roa Signing time: Fri 03 May 2024 00:00:00 +0000 ROA not before: Fri 03 May 2024 00:00:00 +0000 ROA not after: Fri 07 Jun 2024 23:59:59 +0000 asID: 14618 IP address blocks: 18.86.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:54:99:ac:f7:f7:a4:56:f2:14:8d:25:8d:86:e0:0d:a9:ae:a2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 3 00:00:00 2024 GMT Not After : Jun 7 23:59:59 2024 GMT Subject: serialNumber=b7f207423e76aac9f28a3e2cb89f33781c85a1e26fccc999cb7cb94a64d7e311, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d3:03:23:eb:f1:c1:62:c8:18:99:80:13:15: a8:66:c4:7c:42:b1:0e:19:ef:32:bf:66:40:3e:30: 44:a9:2d:bc:7f:f6:cf:da:73:e9:ca:81:9e:0b:77: 7d:47:17:d8:de:c2:04:44:43:73:8e:a7:4e:9b:7d: 50:5b:d9:82:a8:c3:28:f2:25:92:a7:10:b6:1d:c0: a6:4b:4e:1c:27:d3:74:d1:cd:02:25:41:ec:93:c8: b0:4c:c8:46:14:54:9a:be:e8:70:ee:f2:c8:66:d6: f6:77:1a:5d:a9:64:1e:4c:a4:61:7f:18:8a:af:9a: 40:1f:ef:0f:ef:5d:cb:7c:d5:b3:1f:ab:46:8c:69: ad:8e:3f:04:90:80:c1:60:c1:22:22:1d:a2:b0:08: d6:c9:ac:53:2e:8e:8f:b9:5a:00:be:d2:47:22:ad: 07:6f:c2:1b:01:ae:c9:a9:aa:4e:b7:e9:05:54:13: 5f:f3:4d:f3:c7:09:6a:db:6b:fb:8a:ae:5e:15:4d: 69:43:af:7d:38:e5:c9:db:d4:d6:67:9e:94:55:56: e0:40:41:8a:86:cb:53:a9:af:d4:8f:25:2b:9e:28: 7a:fd:70:56:1a:4f:cb:9f:ef:d5:2d:c4:3a:52:2e: e9:06:45:a0:33:53:ec:b3:ce:9f:70:ae:89:d7:23: 9c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FF:9E:2A:A4:CE:34:0D:A7:44:76:39:6E:AB:E4:73:73:E0:F8:E2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34074351-34bc-4b0f-867d-67678c165ca9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.86.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6a:4b:9a:6b:9c:e7:2e:5d:ee:4f:65:56:9e:09:2b:2e:46:98: 9f:bb:8c:43:ac:ad:90:b3:fd:55:0a:02:9a:8b:97:59:ac:8d: 44:cb:e1:62:ef:cb:9b:61:df:62:cc:d8:e8:17:81:43:75:3f: 96:aa:ea:4b:5e:e1:6c:78:9e:a8:98:5e:17:3d:2d:90:7a:31: 4d:33:e2:c4:eb:23:8f:16:4b:00:fd:92:55:78:6d:a0:a5:9b: 8d:fe:0d:d3:d9:9a:e8:c8:3a:dd:cc:b0:e9:1d:ba:66:32:18: 48:51:16:1d:b6:50:1d:0f:52:5e:93:43:59:0f:16:98:a5:66: d5:17:00:27:a1:c2:6c:a6:66:12:83:37:a1:74:3b:1a:3b:e1: 23:8a:6f:0e:98:a1:d4:b9:45:2d:f0:17:87:30:29:21:49:8f: 51:3b:e6:39:30:e7:f0:97:b8:7e:83:62:71:af:1d:11:1c:61: ad:d2:15:40:76:38:f0:16:5c:49:cb:6a:6b:d0:43:d8:cf:37: 44:83:a0:80:ce:4e:39:ea:b4:b7:8b:b1:58:12:56:b5:1e:b7: cf:63:0d:42:1f:a9:ac:ce:b7:b5:e6:11:27:8a:04:da:c1:49: d0:3c:d7:07:00:b5:13:42:62:49:57:45:9e:a6:ff:84:8c:6c: d4:03:ee:eb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWVSZrPf3pFbyFI0ljYbgDamuojkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiN2YyMDc0MjNlNzZhYWM5ZjI4YTNlMmNiODlmMzM3ODFj ODVhMWUyNmZjY2M5OTljYjdjYjk0YTY0ZDdlMzExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx0wMj6/HBYsgYmYATFahmxHxCsQ4Z7zK/ZkA+MESpLbx/ 9s/ac+nKgZ4Ld31HF9jewgREQ3OOp06bfVBb2YKowyjyJZKnELYdwKZLThwn03TR zQIlQeyTyLBMyEYUVJq+6HDu8shm1vZ3Gl2pZB5MpGF/GIqvmkAf7w/vXct81bMf q0aMaa2OPwSQgMFgwSIiHaKwCNbJrFMujo+5WgC+0kcirQdvwhsBrsmpqk636QVU E1/zTfPHCWrba/uKrl4VTWlDr3045cnb1NZnnpRVVuBAQYqGy1Opr9SPJSueKHr9 cFYaT8uf79UtxDpSLukGRaAzU+yzzp9wronXI5z/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUx/+eKqTONA2nRHY5bqvkc3Pg+OIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM0MDc0MzUxLTM0YmMtNGIwZi04NjdkLTY3Njc4YzE2NWNhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASVjANBgkqhkiG9w0BAQsFAAOCAQEAakuaa5znLl3uT2VWngkrLkaYn7uM Q6ytkLP9VQoCmouXWayNRMvhYu/Lm2HfYszY6BeBQ3U/lqrqS17hbHieqJheFz0t kHoxTTPixOsjjxZLAP2SVXhtoKWbjf4N09ma6Mg63cyw6R26ZjIYSFEWHbZQHQ9S XpNDWQ8WmKVm1RcAJ6HCbKZmEoM3oXQ7GjvhI4pvDpih1LlFLfAXhzApIUmPUTvm OTDn8Je4foNica8dERxhrdIVQHY48BZcSctqa9BD2M83RIOggM5OOeq0t4uxWBJW tR63z2MNQh+prM63teYRJ4oE2sFJ0DzXBwC1E0JiSVdFnqb/hIxs1APu6w== -----END CERTIFICATE-----Generated at Mon May 6 00:49:54 2024 by rpki-client on console-fra.rpki-client.org