$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02a08a41-ef8e-46bd-b886-81016dc70aeb.roa File: 02a08a41-ef8e-46bd-b886-81016dc70aeb.roa (raw, json) Hash identifier: +h23pNRAJdZi/H9JSBc84OBu/R2D9jcvc1vbL8Y7cXM= Subject key identifier: B7:D8:85:A7:7F:DA:1A:32:D1:22:07:65:C3:E1:64:89:73:4E:2E:4D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 37EFB85A5E6300B71AE2DE908D5E8971BA7D9098 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02a08a41-ef8e-46bd-b886-81016dc70aeb.roa Signing time: Fri 15 Sep 2023 00:00:00 +0000 ROA not before: Fri 15 Sep 2023 00:00:00 +0000 ROA not after: Fri 20 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 18.247.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 16 Sep 2023 12:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ef:b8:5a:5e:63:00:b7:1a:e2:de:90:8d:5e:89:71:ba:7d:90:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 15 00:00:00 2023 GMT Not After : Oct 20 23:59:59 2023 GMT Subject: serialNumber=88372315013b414265ed22a5fc97bf3ff40b7c104bc1873415c95e445f19c269, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:02:2c:19:c8:92:b1:1b:f6:7e:c0:4b:b2:fc: d1:da:25:dd:96:8b:bd:c5:11:de:c2:33:b4:f4:b7: b5:62:78:89:91:50:1d:d4:23:27:a2:2b:0f:d7:57: 01:9a:9c:86:2c:cc:17:be:d2:6f:e6:43:3f:19:44: da:f7:98:49:b7:2c:21:0b:1b:4a:7c:8a:ca:23:c2: 83:dd:c9:2e:6d:85:f9:5e:c5:ec:0b:40:87:2f:ca: 76:64:04:77:b9:cc:5e:62:6d:78:5e:58:05:f7:42: 6a:dd:d3:fb:d9:a2:ac:60:db:b1:b4:9e:47:00:dc: a5:ce:4f:81:e0:a0:40:24:9b:0e:88:5a:1d:9c:6d: 83:bf:0b:ec:e8:e9:48:e0:33:9f:17:1a:b1:2b:05: c8:bf:a5:ee:1d:bc:02:62:bf:2e:d9:e3:a6:01:d5: 23:7b:af:82:ae:75:b6:69:6b:c4:0b:8d:66:2b:4b: 7a:0a:aa:e3:26:56:f0:87:80:b9:f4:fe:93:06:30: 98:33:a0:cb:7d:ab:b7:55:0b:f8:61:10:31:31:a9: e9:8a:26:f9:ca:82:63:f0:1f:5b:47:d8:d8:81:df: 61:3d:d4:61:5b:3c:59:c3:02:d4:4a:b2:59:a6:ba: 6c:89:6b:3c:a2:19:ec:1b:34:c0:c2:11:83:49:41: 32:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D8:85:A7:7F:DA:1A:32:D1:22:07:65:C3:E1:64:89:73:4E:2E:4D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02a08a41-ef8e-46bd-b886-81016dc70aeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.247.0.0/16 Signature Algorithm: sha256WithRSAEncryption 58:d8:86:3d:b0:28:22:6d:f3:f9:40:5c:fa:c0:a4:73:e5:8f: 44:5f:da:a4:a5:8d:e2:1a:f2:1e:d4:be:fa:6b:9d:d6:ef:20: f2:df:f9:d3:ab:38:8e:66:2e:93:31:0e:18:b1:6c:e5:14:dc: 12:75:82:ee:90:5d:3a:36:35:16:a3:73:61:fb:db:0c:47:90: e8:53:b0:10:68:4f:31:78:3e:15:0a:ba:83:61:3f:d5:bd:95: b7:76:40:e5:1f:8e:5d:99:8c:b3:ac:51:28:a4:8a:d4:53:ee: 7d:80:76:29:c8:6b:57:7a:b2:86:bd:93:cd:23:e4:a0:b8:0f: 77:cd:19:09:07:6d:7f:af:01:fe:3c:35:9c:7c:9a:39:b4:45: a0:15:79:91:c0:d5:e9:c2:97:96:e9:13:04:89:2b:2f:25:d7: a4:a1:7c:7e:a3:a3:1f:a4:b3:c3:f3:68:13:ef:8e:f0:d3:5d: c5:8f:00:13:86:f8:71:1f:a4:28:cc:52:b5:9c:dc:7b:fe:8a: 3e:08:b1:d7:f3:87:4f:4e:f3:02:54:22:1b:e4:70:2e:00:7c: 69:9c:6a:c7:a8:18:8d:b0:8a:b7:04:d8:71:4e:ca:da:00:1f: 04:62:ec:aa:12:44:a4:f5:b0:08:c0:52:fc:d5:ec:14:d0:25: 08:2f:9a:30 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUN++4Wl5jALca4t6QjV6Jcbp9kJgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjMwOTE1MDAwMDAwWhcNMjMxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ODM3MjMxNTAxM2I0MTQyNjVlZDIyYTVmYzk3YmYzZmY0 MGI3YzEwNGJjMTg3MzQxNWM5NWU0NDVmMTljMjY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFAiwZyJKxG/Z+wEuy/NHaJd2Wi73FEd7CM7T0t7VieImR UB3UIyeiKw/XVwGanIYszBe+0m/mQz8ZRNr3mEm3LCELG0p8isojwoPdyS5thfle xewLQIcvynZkBHe5zF5ibXheWAX3Qmrd0/vZoqxg27G0nkcA3KXOT4HgoEAkmw6I Wh2cbYO/C+zo6UjgM58XGrErBci/pe4dvAJivy7Z46YB1SN7r4KudbZpa8QLjWYr S3oKquMmVvCHgLn0/pMGMJgzoMt9q7dVC/hhEDExqemKJvnKgmPwH1tH2NiB32E9 1GFbPFnDAtRKslmmumyJazyiGewbNMDCEYNJQTLnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUt9iFp3/aGjLRIgdlw+FkiXNOLk0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAyYTA4YTQxLWVmOGUtNDZiZC1iODg2LTgxMDE2ZGM3MGFlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAS9zANBgkqhkiG9w0BAQsFAAOCAQEAWNiGPbAoIm3z+UBc+sCkc+WPRF/a pKWN4hryHtS++mud1u8g8t/506s4jmYukzEOGLFs5RTcEnWC7pBdOjY1FqNzYfvb DEeQ6FOwEGhPMXg+FQq6g2E/1b2Vt3ZA5R+OXZmMs6xRKKSK1FPufYB2KchrV3qy hr2TzSPkoLgPd80ZCQdtf68B/jw1nHyaObRFoBV5kcDV6cKXlukTBIkrLyXXpKF8 fqOjH6Szw/NoE++O8NNdxY8AE4b4cR+kKMxStZzce/6KPgix1/OHT07zAlQiG+Rw LgB8aZxqx6gYjbCKtwTYcU7K2gAfBGLsqhJEpPWwCMBS/NXsFNAlCC+aMA== -----END CERTIFICATE-----Generated at Fri Sep 15 00:48:29 2023 by rpki-client on console-ams.rpki-client.org