$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d5d42bc-66a3-41cf-a198-9a3e8127a776.roa File: 3d5d42bc-66a3-41cf-a198-9a3e8127a776.roa (raw, json) Hash identifier: Dd0nmLf3dJqhVISjbKgppdEXzEwzz/dVqM8Oe2NqOLU= Subject key identifier: 69:CF:67:0F:61:69:2C:BA:B8:E8:21:92:D8:5F:28:F7:27:2D:59:7D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0AA870BCC99F05DB75F9D92865DF55047F388F7C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d5d42bc-66a3-41cf-a198-9a3e8127a776.roa Signing time: Mon 29 Apr 2024 00:00:00 +0000 ROA not before: Mon 29 Apr 2024 00:00:00 +0000 ROA not after: Mon 03 Jun 2024 23:59:59 +0000 asID: 14618 IP address blocks: 15.129.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a8:70:bc:c9:9f:05:db:75:f9:d9:28:65:df:55:04:7f:38:8f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 29 00:00:00 2024 GMT Not After : Jun 3 23:59:59 2024 GMT Subject: serialNumber=fe3b7a961b32b0a21b673b38750a363cc20197d82b4d33044e78dd42f7e5c3b4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:de:c5:cd:f1:73:0c:f6:50:76:41:06:a9:77: aa:56:17:86:9d:a6:31:f9:5e:a9:12:cb:fa:b1:ce: 8c:98:2f:79:09:a4:82:03:5f:26:64:43:2d:3a:14: 7d:9c:6b:b8:ce:1e:c6:9e:f3:43:e4:f1:ca:ac:7f: 93:4d:bc:9d:9f:4a:28:b3:b3:26:d2:d8:a3:b3:b5: 26:19:b9:e4:f5:31:a4:fb:6e:6d:ab:54:1b:2d:a5: 0e:21:3f:5a:7f:16:38:65:d3:f6:b8:a4:96:76:50: e2:76:2a:65:bc:93:70:2a:f4:6e:01:56:25:43:ee: 15:6c:ca:f1:f2:8d:fe:6d:44:46:67:1d:ca:f7:09: 50:a2:e4:d6:84:b2:87:46:f7:7b:9c:e5:3e:7b:96: 4e:ec:05:86:91:7c:db:0d:bb:a9:11:34:32:bd:1c: 05:ae:81:73:b9:cb:23:ef:48:b6:d4:9a:51:b8:2b: 42:c8:fd:01:a7:b3:c4:66:18:3d:c9:64:37:0c:fc: 7a:4e:18:ba:d7:95:50:33:5a:fd:1d:4d:76:c5:d5: 05:96:da:65:a8:8d:c5:ae:ba:00:de:bf:53:17:9a: c1:63:68:3f:1b:87:2c:38:aa:3c:bc:2d:cb:6c:70: a5:5c:6b:95:8a:52:67:1d:e3:57:5b:5b:d6:4f:f2: 2e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CF:67:0F:61:69:2C:BA:B8:E8:21:92:D8:5F:28:F7:27:2D:59:7D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d5d42bc-66a3-41cf-a198-9a3e8127a776.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.129.0.0/16 Signature Algorithm: sha256WithRSAEncryption 66:4a:ad:d8:34:a3:61:bc:cd:90:97:6d:b0:9b:19:bc:e8:c3: 5f:07:7f:f1:96:8e:17:9b:be:3d:30:06:9c:0a:32:d2:d3:5f: 9f:0d:ed:e7:f5:10:2d:d5:92:0b:a0:da:d2:57:4e:3e:6c:48: e3:2e:ac:36:0e:02:65:de:65:c9:1f:88:f2:50:9a:04:b0:cd: a9:f8:2a:14:1f:20:29:d1:23:de:10:e9:37:cd:1a:0d:3b:5c: ef:cb:0e:63:bc:53:23:4d:ba:9c:05:fa:1c:9f:a0:30:7b:cd: d4:b9:67:59:6f:e5:4c:b7:0a:08:2c:9b:f0:fa:ae:d0:5c:43: d5:be:03:c1:73:c5:05:17:5c:29:70:7c:ab:ed:52:51:9b:66: ef:b3:ab:96:66:4b:3d:06:8f:bb:06:83:25:b6:58:ee:8f:f3: 5c:f5:a9:57:e5:ad:7d:0f:90:31:dd:9f:fe:09:80:9e:9f:9b: 2d:89:21:8d:7d:bc:cc:c9:ff:2d:37:5b:b1:90:5e:d3:e3:89: eb:19:1a:24:79:e9:5e:ad:b6:a7:5c:d1:c0:7b:f4:71:84:c5: ee:01:be:a9:76:69:9c:1b:50:a5:ed:bb:a2:6a:d5:f6:ba:f5: e3:6c:c2:a4:54:f2:89:d1:d8:31:c7:20:40:51:3d:78:f1:75: 65:bc:a1:d5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCqhwvMmfBdt1+dkoZd9VBH84j3wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDI5MDAwMDAwWhcNMjQwNjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTNiN2E5NjFiMzJiMGEyMWI2NzNiMzg3NTBhMzYzY2My MDE5N2Q4MmI0ZDMzMDQ0ZTc4ZGQ0MmY3ZTVjM2I0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ3sXN8XMM9lB2QQapd6pWF4adpjH5XqkSy/qxzoyYL3kJ pIIDXyZkQy06FH2ca7jOHsae80Pk8cqsf5NNvJ2fSiizsybS2KOztSYZueT1MaT7 bm2rVBstpQ4hP1p/Fjhl0/a4pJZ2UOJ2KmW8k3Aq9G4BViVD7hVsyvHyjf5tREZn Hcr3CVCi5NaEsodG93uc5T57lk7sBYaRfNsNu6kRNDK9HAWugXO5yyPvSLbUmlG4 K0LI/QGns8RmGD3JZDcM/HpOGLrXlVAzWv0dTXbF1QWW2mWojcWuugDev1MXmsFj aD8bhyw4qjy8LctscKVca5WKUmcd41dbW9ZP8i7ZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUac9nD2FpLLq46CGS2F8o9yctWX0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNkNWQ0MmJjLTY2YTMtNDFjZi1hMTk4LTlhM2U4MTI3YTc3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPgTANBgkqhkiG9w0BAQsFAAOCAQEAZkqt2DSjYbzNkJdtsJsZvOjDXwd/ 8ZaOF5u+PTAGnAoy0tNfnw3t5/UQLdWSC6Da0ldOPmxI4y6sNg4CZd5lyR+I8lCa BLDNqfgqFB8gKdEj3hDpN80aDTtc78sOY7xTI026nAX6HJ+gMHvN1LlnWW/lTLcK CCyb8Pqu0FxD1b4DwXPFBRdcKXB8q+1SUZtm77OrlmZLPQaPuwaDJbZY7o/zXPWp V+WtfQ+QMd2f/gmAnp+bLYkhjX28zMn/LTdbsZBe0+OJ6xkaJHnpXq22p1zRwHv0 cYTF7gG+qXZpnBtQpe27omrV9rr142zCpFTyidHYMccgQFE9ePF1Zbyh1Q== -----END CERTIFICATE-----Generated at Mon May 6 00:49:56 2024 by rpki-client on console-fra.rpki-client.org