$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0bf0d288-03a1-4fba-a50d-867744844590.roa File: 0bf0d288-03a1-4fba-a50d-867744844590.roa (raw, json) Hash identifier: +IONn29HR2psCNFY+gr3sCFHEzVRI7Gzm8J8C2+VqYM= Subject key identifier: 08:CE:A2:96:2D:A6:95:47:89:04:F8:F7:F4:D9:96:F3:CE:FC:74:14 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 70F9B9F55853169FFEC67A06AC320D85D20F446A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0bf0d288-03a1-4fba-a50d-867744844590.roa Signing time: Sat 13 Apr 2024 00:00:00 +0000 ROA not before: Sat 13 Apr 2024 00:00:00 +0000 ROA not after: Sat 18 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 52.219.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f9:b9:f5:58:53:16:9f:fe:c6:7a:06:ac:32:0d:85:d2:0f:44:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 13 00:00:00 2024 GMT Not After : May 18 23:59:59 2024 GMT Subject: serialNumber=f481a8d31999d1eaa79c5e579cadac2616cf4d6f69a5dfac30239bfd4e4e993b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:7e:dd:15:7b:27:a2:56:0f:99:44:99:ef:10: 68:48:64:fd:44:45:80:37:3d:1a:d7:f2:64:b5:ab: 80:c7:cb:9d:ec:9d:5f:6e:17:79:b4:f1:cd:3d:e1: 3d:20:7b:2b:51:a7:b4:ab:4c:ec:75:67:ab:b4:3d: 3c:0c:29:66:23:ef:74:45:8f:45:e6:ba:e0:d8:6a: ac:12:d5:ca:c2:3f:15:eb:a1:88:51:ae:ec:f4:ad: 9d:5e:54:10:cc:55:5c:e8:61:73:0f:de:14:83:98: f4:39:50:2d:71:f3:89:b5:34:e5:5d:1c:f6:a8:b3: e6:20:a6:bd:16:54:56:91:46:95:2e:a3:20:27:0b: db:d0:28:8d:1f:2b:7b:d7:d6:ab:d9:ec:9d:a0:a2: 59:dd:f5:e8:91:22:8f:32:0a:16:88:14:2d:61:fa: 82:eb:5b:84:bc:64:99:4a:15:db:95:6e:64:c5:f5: 54:d4:b4:2a:47:1f:fc:85:6d:c5:88:bc:37:d5:b4: 06:24:18:31:50:f1:cf:1f:d3:b0:50:09:6f:1b:5f: ca:82:d8:ab:30:c6:cf:10:65:ac:c1:89:fe:e6:d8: c0:72:c3:b7:a1:0b:57:38:60:98:b6:aa:4d:ba:22: 13:8a:78:34:81:8d:cd:63:fa:09:26:58:fc:f1:64: 5c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CE:A2:96:2D:A6:95:47:89:04:F8:F7:F4:D9:96:F3:CE:FC:74:14 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0bf0d288-03a1-4fba-a50d-867744844590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.219.253.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:35:e7:35:14:3c:b2:37:10:4a:e8:68:f3:05:dc:04:e9:75: 03:1f:8e:12:8a:a4:5d:52:70:26:a8:d9:45:0f:94:f4:81:cb: 83:6b:dc:77:80:b1:16:9c:de:7c:40:3f:d3:0d:d8:65:5b:a6: 82:7b:bf:ca:ff:17:bd:87:ba:b4:67:61:0e:b3:03:47:fd:ec: 80:ce:81:94:45:f2:81:b7:0a:15:a1:02:4d:de:cb:c9:4a:85: 60:93:0f:db:5e:67:c5:18:9a:31:70:20:6c:c5:7d:ce:36:dd: 76:c5:1a:77:b0:bb:3a:81:0e:65:d4:b3:61:7e:98:00:73:47: d7:4b:08:ac:a6:58:42:b7:51:75:cf:c5:5f:cc:ef:d9:0b:a0: 41:5c:51:4b:30:56:12:75:4b:94:4d:bd:ef:25:dd:2b:84:48: 11:29:c4:c5:cd:08:92:bb:69:9a:6c:c2:82:43:f4:b3:c3:a5: 45:e7:4b:6d:47:81:fe:b7:61:40:7d:75:8b:d4:22:77:77:87: 45:0e:05:73:59:55:06:25:83:d2:28:e6:6e:99:af:05:64:a8: 2c:18:c1:ff:31:0e:19:45:17:8c:6f:a9:7c:5b:51:8e:f0:4e: 01:82:4e:82:16:09:fb:3a:d6:86:7a:30:a1:44:a0:35:d9:d1: d2:ee:3d:f5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcPm59VhTFp/+xnoGrDINhdIPRGowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDEzMDAwMDAwWhcNMjQwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNDgxYThkMzE5OTlkMWVhYTc5YzVlNTc5Y2FkYWMyNjE2 Y2Y0ZDZmNjlhNWRmYWMzMDIzOWJmZDRlNGU5OTNiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwft0VeyeiVg+ZRJnvEGhIZP1ERYA3PRrX8mS1q4DHy53s nV9uF3m08c094T0geytRp7SrTOx1Z6u0PTwMKWYj73RFj0XmuuDYaqwS1crCPxXr oYhRruz0rZ1eVBDMVVzoYXMP3hSDmPQ5UC1x84m1NOVdHPaos+Ygpr0WVFaRRpUu oyAnC9vQKI0fK3vX1qvZ7J2golnd9eiRIo8yChaIFC1h+oLrW4S8ZJlKFduVbmTF 9VTUtCpHH/yFbcWIvDfVtAYkGDFQ8c8f07BQCW8bX8qC2Kswxs8QZazBif7m2MBy w7ehC1c4YJi2qk26IhOKeDSBjc1j+gkmWPzxZFz3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCM6ili2mlUeJBPj39NmW8878dBQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBiZjBkMjg4LTAzYTEtNGZiYS1hNTBkLTg2Nzc0NDg0NDU5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA02/0wDQYJKoZIhvcNAQELBQADggEBAEo15zUUPLI3EEroaPMF3ATpdQMf jhKKpF1ScCao2UUPlPSBy4Nr3HeAsRac3nxAP9MN2GVbpoJ7v8r/F72HurRnYQ6z A0f97IDOgZRF8oG3ChWhAk3ey8lKhWCTD9teZ8UYmjFwIGzFfc423XbFGnewuzqB DmXUs2F+mABzR9dLCKymWEK3UXXPxV/M79kLoEFcUUswVhJ1S5RNve8l3SuESBEp xMXNCJK7aZpswoJD9LPDpUXnS21Hgf63YUB9dYvUInd3h0UOBXNZVQYlg9Io5m6Z rwVkqCwYwf8xDhlFF4xvqXxbUY7wTgGCToIWCfs61oZ6MKFEoDXZ0dLuPfU= -----END CERTIFICATE-----Generated at Fri Apr 19 00:52:18 2024 by rpki-client on console-ams.rpki-client.org