$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c0317cf-869e-4053-9803-4af1f02c348f.roa File: 3c0317cf-869e-4053-9803-4af1f02c348f.roa (raw, json) Hash identifier: vTr7+Vx2l0JoPu1I0fufFw+c5N1cIX7BYwDX/V3zLNY= Subject key identifier: BF:7B:69:87:2E:16:F9:19:09:08:90:C0:B6:08:AD:CE:8D:1E:2A:60 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1C819AB0DB7B1B0F51004E6B2D5C55A42DB56A20 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c0317cf-869e-4053-9803-4af1f02c348f.roa Signing time: Fri 03 May 2024 00:00:00 +0000 ROA not before: Fri 03 May 2024 00:00:00 +0000 ROA not after: Fri 07 Jun 2024 23:59:59 +0000 asID: 14618 IP address blocks: 13.112.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:81:9a:b0:db:7b:1b:0f:51:00:4e:6b:2d:5c:55:a4:2d:b5:6a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 3 00:00:00 2024 GMT Not After : Jun 7 23:59:59 2024 GMT Subject: serialNumber=b3bf14dc02a738bb3aa25b2db274e99ff7a182e9276aff28d731810ab26d7b11, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:29:c6:88:31:93:4a:9c:bc:c8:9f:c7:94: a9:df:52:6b:02:b9:34:93:8a:15:44:25:23:93:e1: 36:1c:6b:5b:fd:29:8f:1c:87:3e:3b:04:b6:ef:f2: 61:2f:c1:74:96:e9:cc:25:44:43:2a:eb:81:b9:b6: 1a:06:24:84:e1:66:a6:0c:1a:c0:bb:30:2a:d6:68: 77:c1:cb:3d:22:b1:6d:c7:dd:d0:7d:c1:8f:55:19: 2d:8a:ac:4a:6b:7b:c3:67:1e:6a:5c:cc:85:52:e3: 46:ad:39:a2:9b:57:e8:e5:fd:fb:00:02:a7:ec:18: c2:d0:36:c4:b7:b9:b1:82:88:f5:ca:bf:0a:5d:72: 00:24:f0:4a:2c:d3:71:9e:cb:d5:27:c7:5a:58:62: 57:65:b4:6f:a4:d6:db:0a:f2:86:56:f0:4f:9a:bb: d3:ba:5d:d3:14:62:f8:3c:d6:81:8a:9a:09:c3:5b: 8f:7d:d8:11:cb:41:a0:d5:a4:0f:d7:b2:9b:47:37: 78:a5:5d:cb:50:23:b1:1e:0c:d6:6c:9b:18:6f:44: 4e:c8:de:3d:b5:9f:96:af:21:ac:96:ce:fd:25:ad: f8:71:17:f7:4a:38:7e:bd:26:06:54:00:9f:a5:a0: a6:79:12:0d:fd:c4:37:75:61:91:6b:1b:77:2c:ce: ba:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7B:69:87:2E:16:F9:19:09:08:90:C0:B6:08:AD:CE:8D:1E:2A:60 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c0317cf-869e-4053-9803-4af1f02c348f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.112.0.0/14 Signature Algorithm: sha256WithRSAEncryption 2d:d3:87:d3:69:0a:a3:86:2c:a6:7f:0b:23:f3:6f:cc:e3:86: 13:e2:3a:b3:c3:96:23:ed:08:a4:d3:47:5b:bf:84:e8:8e:80: 1d:23:9e:08:cf:3d:13:9e:aa:e4:6f:d7:12:c4:58:06:02:03: 99:90:6a:0d:ef:26:f0:2d:51:42:70:b0:5c:f9:d0:22:79:1d: 72:7b:26:17:45:1b:64:4f:18:52:40:82:2c:e5:1f:8b:9b:7c: 47:30:68:c0:34:3e:3f:48:70:63:eb:6a:39:9c:04:86:75:a4: 6a:4f:f9:69:3f:87:20:7a:30:b1:d0:0e:c3:58:b6:8c:8b:7c: 8c:7a:b1:88:b7:9e:80:4c:a4:dc:f3:86:3e:98:49:fa:f3:67: cf:b0:f6:51:d7:ee:e7:29:98:b1:11:ff:43:2a:d1:b0:3d:21: 37:bf:f6:49:46:2e:12:2a:13:d0:79:20:54:06:ab:75:3d:30: 4d:a7:56:7f:03:3a:f3:e1:2d:aa:fd:a0:14:13:d8:ef:1d:5e: 7d:32:99:a9:9c:bc:ec:66:e1:b1:b1:77:d5:f4:59:30:38:a3: 3d:f0:24:05:08:0d:d7:6d:44:c7:d8:7b:11:d9:8e:64:41:98: cb:99:66:f7:84:b6:b8:af:7b:a8:a4:73:bf:bd:db:68:c0:f5: 47:8d:f8:68 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHIGasNt7Gw9RAE5rLVxVpC21aiAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiM2JmMTRkYzAyYTczOGJiM2FhMjViMmRiMjc0ZTk5ZmY3 YTE4MmU5Mjc2YWZmMjhkNzMxODEwYWIyNmQ3YjExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwrCnGiDGTSpy8yJ/HlKnfUmsCuTSTihVEJSOT4TYca1v9 KY8chz47BLbv8mEvwXSW6cwlREMq64G5thoGJIThZqYMGsC7MCrWaHfByz0isW3H 3dB9wY9VGS2KrEpre8NnHmpczIVS40atOaKbV+jl/fsAAqfsGMLQNsS3ubGCiPXK vwpdcgAk8Eos03Gey9Unx1pYYldltG+k1tsK8oZW8E+au9O6XdMUYvg81oGKmgnD W4992BHLQaDVpA/XsptHN3ilXctQI7EeDNZsmxhvRE7I3j21n5avIayWzv0lrfhx F/dKOH69JgZUAJ+loKZ5Eg39xDd1YZFrG3cszrpHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUv3tphy4W+RkJCJDAtgitzo0eKmAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNjMDMxN2NmLTg2OWUtNDA1My05ODAzLTRhZjFmMDJjMzQ4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwINcDANBgkqhkiG9w0BAQsFAAOCAQEALdOH02kKo4Yspn8LI/NvzOOGE+I6 s8OWI+0IpNNHW7+E6I6AHSOeCM89E56q5G/XEsRYBgIDmZBqDe8m8C1RQnCwXPnQ InkdcnsmF0UbZE8YUkCCLOUfi5t8RzBowDQ+P0hwY+tqOZwEhnWkak/5aT+HIHow sdAOw1i2jIt8jHqxiLeegEyk3POGPphJ+vNnz7D2Udfu5ymYsRH/QyrRsD0hN7/2 SUYuEioT0HkgVAardT0wTadWfwM68+Etqv2gFBPY7x1efTKZqZy87GbhsbF31fRZ MDijPfAkBQgN121Ex9h7EdmOZEGYy5lm94S2uK97qKRzv73baMD1R434aA== -----END CERTIFICATE-----Generated at Mon May 6 00:49:56 2024 by rpki-client on console-fra.rpki-client.org