$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0273e18a-79b6-4403-9312-d79d2131f061.roa File: 0273e18a-79b6-4403-9312-d79d2131f061.roa (raw, json) Hash identifier: 45RahpU1km0B6MnBdqRCK/Ls75GwFI5CsJ+1drT3dF4= Subject key identifier: 3C:19:D9:AC:42:1B:7F:21:07:0B:38:CA:7A:F6:D5:24:6D:CC:E3:5A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2A5E6FAD97B6B1870E7BA497B3FE76F3AAD2E734 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0273e18a-79b6-4403-9312-d79d2131f061.roa Signing time: Tue 12 Sep 2023 00:00:00 +0000 ROA not before: Tue 12 Sep 2023 00:00:00 +0000 ROA not after: Tue 17 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 15.197.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 Sep 2023 12:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5e:6f:ad:97:b6:b1:87:0e:7b:a4:97:b3:fe:76:f3:aa:d2:e7:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 12 00:00:00 2023 GMT Not After : Oct 17 23:59:59 2023 GMT Subject: serialNumber=afd68e226dc4c206d28e668aa556b033409ecf32f0abca8c5097d197df985043, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:60:6b:fc:2a:79:53:17:e5:ca:59:37:bd: 2c:22:77:7d:42:b1:c9:8c:b9:5b:61:b7:49:1c:1b: a3:c8:58:26:73:20:f6:11:cf:06:1f:a3:30:b5:42: 27:5f:89:d9:cb:6f:7a:71:19:8b:6b:1a:a3:3e:0f: ff:4d:c2:5d:6d:75:28:b4:c7:a0:74:1d:cc:9e:f3: f8:20:b9:5d:88:35:6e:15:10:09:bf:04:fe:be:08: 39:9c:f2:69:0e:f6:76:a0:d2:18:ef:62:d0:94:3e: 81:2b:a4:2a:77:06:2c:94:74:23:64:6f:a3:c2:3e: c4:6c:f5:60:7e:ce:68:e0:74:ff:7e:18:2a:d8:f2: a4:f5:e9:8b:cc:4e:71:9e:69:8f:72:a8:c4:21:9f: e1:b5:bf:42:64:61:41:fd:b4:45:9c:87:71:40:33: 02:72:57:c3:43:e0:0d:ae:05:cc:83:89:7a:d4:7c: fb:a4:e7:7e:ac:eb:93:6d:d5:66:eb:07:07:e3:c0: 30:c5:d7:0a:23:56:40:f1:f5:bb:eb:e3:9e:0c:31: bc:ba:83:b5:1e:a9:50:1b:96:94:f6:38:78:57:14: 22:0b:0b:cf:2f:9f:9a:fb:87:b0:5d:2d:ad:1a:21: a0:fb:dc:3c:77:0e:9f:34:a6:d8:b3:b0:75:81:c7: ca:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:19:D9:AC:42:1B:7F:21:07:0B:38:CA:7A:F6:D5:24:6D:CC:E3:5A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0273e18a-79b6-4403-9312-d79d2131f061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.197.128.0/17 Signature Algorithm: sha256WithRSAEncryption 7b:de:31:eb:4d:9a:90:3e:b8:19:b1:08:a8:49:ea:0d:7e:38: b6:f9:da:b4:da:46:39:1f:c1:9e:8a:9b:bd:a3:d1:c4:06:4f: 0e:52:4e:2c:ea:79:1a:93:e0:66:cc:13:b5:0e:09:3c:d4:e4: 1b:5b:d9:96:4f:f6:03:c4:3e:69:0c:1f:19:b1:5f:1f:5d:36: 8d:64:4d:77:c1:28:5a:c0:05:7a:f4:d8:f7:da:56:a3:92:90: 45:2a:83:df:13:42:63:a3:0c:84:7e:ea:70:f3:11:f8:90:72: 13:78:5f:ef:6d:29:af:d8:1d:e7:57:09:b9:33:f4:4e:20:9e: 0a:66:24:79:6a:dd:60:5b:c3:2a:01:e1:9c:be:e1:c3:78:ef: 6d:7e:fd:1c:eb:20:a9:11:2f:32:af:ff:67:9c:76:8a:09:60: da:06:e0:fe:7f:2e:8d:bf:93:86:64:45:91:73:48:39:21:30: 39:5e:51:9d:df:35:c9:78:a6:d2:14:54:aa:11:ae:eb:1c:a5: 4e:b6:4e:b5:42:eb:e1:b4:d5:79:cf:98:b7:6d:74:07:32:89: f3:19:3e:bb:e4:3f:c1:fa:79:36:d1:c7:21:42:15:d5:65:5b: cd:74:7a:8f:d2:f3:39:d7:41:65:22:b6:39:48:94:f4:65:79: 80:78:e4:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKl5vrZe2sYcOe6SXs/5286rS5zQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjMwOTEyMDAwMDAwWhcNMjMxMDE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmQ2OGUyMjZkYzRjMjA2ZDI4ZTY2OGFhNTU2YjAzMzQw OWVjZjMyZjBhYmNhOGM1MDk3ZDE5N2RmOTg1MDQzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCs2Br/Cp5Uxflylk3vSwid31CscmMuVtht0kcG6PIWCZz IPYRzwYfozC1QidfidnLb3pxGYtrGqM+D/9Nwl1tdSi0x6B0Hcye8/gguV2INW4V EAm/BP6+CDmc8mkO9nag0hjvYtCUPoErpCp3BiyUdCNkb6PCPsRs9WB+zmjgdP9+ GCrY8qT16YvMTnGeaY9yqMQhn+G1v0JkYUH9tEWch3FAMwJyV8ND4A2uBcyDiXrU fPuk536s65Nt1WbrBwfjwDDF1wojVkDx9bvr454MMby6g7UeqVAblpT2OHhXFCIL C88vn5r7h7BdLa0aIaD73Dx3Dp80ptizsHWBx8rdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPBnZrEIbfyEHCzjKevbVJG3M41owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAyNzNlMThhLTc5YjYtNDQwMy05MzEyLWQ3OWQyMTMxZjA2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcPxYAwDQYJKoZIhvcNAQELBQADggEBAHveMetNmpA+uBmxCKhJ6g1+OLb5 2rTaRjkfwZ6Km72j0cQGTw5STizqeRqT4GbME7UOCTzU5Btb2ZZP9gPEPmkMHxmx Xx9dNo1kTXfBKFrABXr02PfaVqOSkEUqg98TQmOjDIR+6nDzEfiQchN4X+9tKa/Y HedXCbkz9E4gngpmJHlq3WBbwyoB4Zy+4cN4721+/RzrIKkRLzKv/2ecdooJYNoG 4P5/Lo2/k4ZkRZFzSDkhMDleUZ3fNcl4ptIUVKoRruscpU62TrVC6+G01XnPmLdt dAcyifMZPrvkP8H6eTbRxyFCFdVlW810eo/S8znXQWUitjlIlPRleYB45DE= -----END CERTIFICATE-----Generated at Tue Sep 12 00:26:43 2023 by rpki-client on console-fra.rpki-client.org