$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4761120-69c1-45fc-82cb-495d98b4f438.roa File: a4761120-69c1-45fc-82cb-495d98b4f438.roa (raw, json) Hash identifier: XKdLrjjJOFmr6p1Q6Gg4HnguOw4Jt9U95hsTmKxZjRk= Subject key identifier: 8B:0A:00:59:58:05:D6:9B:FB:75:60:41:5E:D6:EC:02:4E:6D:45:A1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 218593C17C19DE9739EA31F8578292783A2F6772 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4761120-69c1-45fc-82cb-495d98b4f438.roa Signing time: Tue 30 Apr 2024 00:00:00 +0000 ROA not before: Tue 30 Apr 2024 00:00:00 +0000 ROA not after: Tue 04 Jun 2024 23:59:59 +0000 asID: 14618 IP address blocks: 18.54.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:85:93:c1:7c:19:de:97:39:ea:31:f8:57:82:92:78:3a:2f:67:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 30 00:00:00 2024 GMT Not After : Jun 4 23:59:59 2024 GMT Subject: serialNumber=c6fc33c8a4f6e1f81bba9dcf56e7729cab28cb1c762bfb8bc6457502b7d970a9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:96:eb:48:f6:b9:60:31:06:b9:14:fe:0b:ce: 9b:7a:5b:97:6a:d9:18:a9:cb:dc:57:75:c4:d5:10: 4a:83:4a:58:e3:e9:84:84:7e:d5:0d:d8:1a:99:da: c8:64:97:0c:13:ad:42:0d:f9:00:d1:cd:b4:2a:b3: 66:fd:05:57:af:ba:c4:0e:a5:e9:9d:a8:a4:ab:80: e7:dc:ae:8f:f3:5f:86:1d:bd:ba:2d:03:60:0a:37: 2d:87:cc:d3:2c:a9:86:78:5e:4d:3e:c8:9a:c3:93: ba:eb:61:36:51:e6:fd:bb:1c:e4:18:b3:36:e7:0d: 6d:b7:8d:a5:f8:8e:0d:18:d0:5f:6f:25:0b:3f:7d: b8:94:6f:d2:b4:e1:f9:ad:87:0f:5e:da:1d:c9:e3: b0:60:fb:3a:4b:2e:71:b8:53:63:ee:1a:91:ce:c3: 31:6d:4b:bc:97:f7:67:14:16:9e:3c:1c:35:32:20: e5:ae:bb:bd:f4:a9:19:ad:f3:9b:40:36:59:57:f6: 09:0b:90:ab:e1:b3:16:6f:29:4d:43:f4:30:6a:13: ca:bd:94:de:89:59:91:08:80:99:fa:7f:d9:6c:34: 56:c4:f8:20:4a:23:a6:b9:20:2e:d3:20:7e:a2:a5: fd:b1:1a:76:99:f8:cb:f9:a1:f5:7e:cf:f4:8f:44: 36:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0A:00:59:58:05:D6:9B:FB:75:60:41:5E:D6:EC:02:4E:6D:45:A1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4761120-69c1-45fc-82cb-495d98b4f438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.54.0.0/15 Signature Algorithm: sha256WithRSAEncryption 70:f5:86:07:4a:20:a2:6e:a8:67:9a:16:29:8e:17:e5:5d:4f: 2f:5e:69:96:51:56:7c:46:ce:47:3b:ba:ca:e0:e0:c1:a6:73: a7:7e:39:c8:6d:57:ac:25:c2:d6:fe:5d:3a:11:7d:01:c0:27: 36:03:e6:ec:6e:37:18:f8:88:5b:c6:6b:71:0c:3d:d4:a7:75: 6a:d2:a0:ba:ac:ac:f4:57:cf:70:3c:0a:aa:58:19:78:21:d2: b1:79:20:2e:f8:da:6f:5d:5b:6b:60:9b:2e:f9:66:7c:c4:6f: f4:3a:7a:9e:40:25:bc:ff:79:3e:8f:9d:e4:a3:61:d3:5e:ac: 5d:3f:f1:a8:68:a1:c5:93:d7:e8:99:d4:b7:8b:2f:16:9b:dc: 1f:0b:b9:55:2e:7c:43:25:3b:a7:3a:25:e2:f5:0a:8f:66:63: c9:f9:33:93:16:a1:69:d8:48:d4:c4:6b:5a:72:18:3c:ba:d5: d4:db:88:4f:44:00:f7:db:08:b8:41:35:44:56:b5:da:eb:88: 84:85:2a:70:3c:9d:95:db:a7:01:13:57:5f:4d:17:90:78:d0: e1:38:8f:59:a6:2d:9c:3d:ca:5c:8a:e0:08:61:f2:d7:34:bd: c7:8d:4a:82:ce:6d:8b:33:28:ab:6a:d6:a3:65:77:f4:5f:12: fb:43:45:53 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIYWTwXwZ3pc56jH4V4KSeDovZ3IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDMwMDAwMDAwWhcNMjQwNjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNmZjMzNjOGE0ZjZlMWY4MWJiYTlkY2Y1NmU3NzI5Y2Fi MjhjYjFjNzYyYmZiOGJjNjQ1NzUwMmI3ZDk3MGE5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZlutI9rlgMQa5FP4Lzpt6W5dq2Ripy9xXdcTVEEqDSljj 6YSEftUN2BqZ2shklwwTrUIN+QDRzbQqs2b9BVevusQOpemdqKSrgOfcro/zX4Yd vbotA2AKNy2HzNMsqYZ4Xk0+yJrDk7rrYTZR5v27HOQYszbnDW23jaX4jg0Y0F9v JQs/fbiUb9K04fmthw9e2h3J47Bg+zpLLnG4U2PuGpHOwzFtS7yX92cUFp48HDUy IOWuu730qRmt85tANllX9gkLkKvhsxZvKU1D9DBqE8q9lN6JWZEIgJn6f9lsNFbE +CBKI6a5IC7TIH6ipf2xGnaZ+Mv5ofV+z/SPRDYtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUiwoAWVgF1pv7dWBBXtbsAk5tRaEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E0NzYxMTIwLTY5YzEtNDVmYy04MmNiLTQ5NWQ5OGI0ZjQzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwESNjANBgkqhkiG9w0BAQsFAAOCAQEAcPWGB0ogom6oZ5oWKY4X5V1PL15p llFWfEbORzu6yuDgwaZzp345yG1XrCXC1v5dOhF9AcAnNgPm7G43GPiIW8ZrcQw9 1Kd1atKguqys9FfPcDwKqlgZeCHSsXkgLvjab11ba2CbLvlmfMRv9Dp6nkAlvP95 Po+d5KNh016sXT/xqGihxZPX6JnUt4svFpvcHwu5VS58QyU7pzol4vUKj2Zjyfkz kxahadhI1MRrWnIYPLrV1NuIT0QA99sIuEE1RFa12uuIhIUqcDydldunARNXX00X kHjQ4TiPWaYtnD3KXIrgCGHy1zS9x41Kgs5tizMoq2rWo2V39F8S+0NFUw== -----END CERTIFICATE-----Generated at Mon May 6 00:50:11 2024 by rpki-client on console-fra.rpki-client.org