$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5cf3d70-d6ce-49c8-83a4-a7caefa3097b.roa File: a5cf3d70-d6ce-49c8-83a4-a7caefa3097b.roa (raw, json) Hash identifier: eHgSSbuwtPM+yY+Wdbyjer/9KBPva575ay051OQpqK8= Subject key identifier: 23:29:36:B3:B7:73:42:75:75:E9:F9:A7:BC:40:9A:34:55:E1:AD:6B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1498B715CCAFA8BA18CD8E0FE707BE5513307976 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5cf3d70-d6ce-49c8-83a4-a7caefa3097b.roa Signing time: Fri 03 May 2024 00:00:00 +0000 ROA not before: Fri 03 May 2024 00:00:00 +0000 ROA not after: Fri 07 Jun 2024 23:59:59 +0000 asID: 14618 IP address blocks: 13.124.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:98:b7:15:cc:af:a8:ba:18:cd:8e:0f:e7:07:be:55:13:30:79:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 3 00:00:00 2024 GMT Not After : Jun 7 23:59:59 2024 GMT Subject: serialNumber=23d6bf162f567008bc8c261461a3eafd62b0da746430531f3fad530fd90357f5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3d:ca:e2:b6:98:a6:ed:a0:59:e9:be:9e:b0: 69:cb:c3:26:0d:c1:06:53:52:5c:9c:a2:4e:d5:6b: af:f4:3f:6b:d4:3e:5f:ad:81:b2:99:81:9f:9d:3b: e4:1a:5d:e5:74:b6:1a:43:2f:52:a0:36:3f:c8:a3: 2b:18:b1:40:a5:6a:60:54:41:52:4e:f1:c2:80:8a: 20:27:51:9a:cb:4e:3c:0d:b1:9c:65:94:fa:47:f1: e8:3e:a6:d7:9c:d2:8e:54:6c:f7:14:ce:51:53:3c: d1:55:0b:1e:e2:25:c9:97:d8:f8:cb:2e:18:0f:0c: be:7a:97:df:68:d7:10:a0:ef:8f:39:7a:62:69:3b: 1a:1c:9a:3b:54:45:74:01:11:1b:bf:11:37:3f:bd: 2d:d9:1d:ca:bd:82:1b:4b:4f:4a:df:bc:94:9a:a5: 23:45:34:cf:ab:b6:00:b0:36:0f:25:43:5f:eb:b0: d6:08:56:dc:1a:9a:64:91:0c:95:c2:f3:89:2d:2d: 49:ba:da:b3:72:2e:d0:60:5a:08:25:38:32:82:48: 55:24:0b:4a:82:30:c4:2a:b6:fb:05:57:a7:5c:40: 1e:45:2a:f7:5a:f7:4c:8f:a0:09:44:84:9d:28:60: fa:7d:41:3f:2b:f3:99:c9:92:52:cb:17:60:ad:88: 42:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:29:36:B3:B7:73:42:75:75:E9:F9:A7:BC:40:9A:34:55:E1:AD:6B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5cf3d70-d6ce-49c8-83a4-a7caefa3097b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.124.0.0/14 Signature Algorithm: sha256WithRSAEncryption 97:a1:aa:f2:74:d3:d3:d8:21:0b:b0:f2:11:ee:f1:de:3b:49: 69:e1:2c:3e:ca:d4:5b:33:24:86:58:8a:ac:79:d4:8d:5d:ce: e0:66:04:ea:cc:69:ac:38:00:e3:e2:61:4b:b4:38:9f:10:d7: 95:91:f5:5b:d1:8e:5d:4f:d1:0a:9e:e7:fa:7d:a4:c9:90:d5: 01:1d:9e:da:2b:7a:13:4c:66:74:f3:81:89:87:68:a1:ea:31: e0:55:bd:13:8b:9e:dc:d7:4e:9b:68:8e:a1:9c:e7:30:47:e0: 30:ab:29:60:62:e2:df:9d:c2:db:64:5e:48:5a:82:03:2f:95: 67:c2:8b:3c:10:4e:62:f4:87:dc:f2:4d:6c:44:f2:3b:70:43: bd:9e:39:2e:52:73:49:85:65:bb:d5:c4:f3:dc:2c:32:63:b4: 07:b0:6e:64:f0:ab:94:1e:7e:cb:e4:32:e4:f9:24:ce:f3:9b: 67:98:59:c3:75:46:34:c2:3b:1b:48:71:90:2d:bd:b2:d2:f7: c4:82:5f:35:ff:2b:aa:07:13:fe:97:af:19:f4:0c:22:e8:da: eb:3e:3a:3a:ef:f0:19:ca:79:7d:e1:d1:f1:70:e3:99:e5:5f: 99:37:f3:0a:e4:c3:05:43:01:f3:6e:39:69:41:15:7d:43:5e: 74:8e:6a:98 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFJi3FcyvqLoYzY4P5we+VRMweXYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyM2Q2YmYxNjJmNTY3MDA4YmM4YzI2MTQ2MWEzZWFmZDYy YjBkYTc0NjQzMDUzMWYzZmFkNTMwZmQ5MDM1N2Y1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQPcritpim7aBZ6b6esGnLwyYNwQZTUlycok7Va6/0P2vU Pl+tgbKZgZ+dO+QaXeV0thpDL1KgNj/IoysYsUClamBUQVJO8cKAiiAnUZrLTjwN sZxllPpH8eg+ptec0o5UbPcUzlFTPNFVCx7iJcmX2PjLLhgPDL56l99o1xCg7485 emJpOxocmjtURXQBERu/ETc/vS3ZHcq9ghtLT0rfvJSapSNFNM+rtgCwNg8lQ1/r sNYIVtwammSRDJXC84ktLUm62rNyLtBgWgglODKCSFUkC0qCMMQqtvsFV6dcQB5F Kvda90yPoAlEhJ0oYPp9QT8r85nJklLLF2CtiEINAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUIyk2s7dzQnV16fmnvECaNFXhrWswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E1Y2YzZDcwLWQ2Y2UtNDljOC04M2E0LWE3Y2FlZmEzMDk3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwINfDANBgkqhkiG9w0BAQsFAAOCAQEAl6Gq8nTT09ghC7DyEe7x3jtJaeEs PsrUWzMkhliKrHnUjV3O4GYE6sxprDgA4+JhS7Q4nxDXlZH1W9GOXU/RCp7n+n2k yZDVAR2e2it6E0xmdPOBiYdooeox4FW9E4ue3NdOm2iOoZznMEfgMKspYGLi353C 22ReSFqCAy+VZ8KLPBBOYvSH3PJNbETyO3BDvZ45LlJzSYVlu9XE89wsMmO0B7Bu ZPCrlB5+y+Qy5PkkzvObZ5hZw3VGNMI7G0hxkC29stL3xIJfNf8rqgcT/pevGfQM Iuja6z46Ou/wGcp5feHR8XDjmeVfmTfzCuTDBUMB8245aUEVfUNedI5qmA== -----END CERTIFICATE-----Generated at Mon May 6 00:50:11 2024 by rpki-client on console-fra.rpki-client.org