$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b230d96-daec-45a8-966b-15cb7f2202e8.roa File: 1b230d96-daec-45a8-966b-15cb7f2202e8.roa (raw, json) Hash identifier: CmDEdUvppzoRvp+yMhooKTUFVxvCFM1DpQIkvTRH8+g= Subject key identifier: A5:42:4C:1C:15:B3:78:92:1D:ED:44:5D:56:57:D8:77:C3:52:E1:C8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 054FF214BD48E196671594041C370B5473CC29BA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b230d96-daec-45a8-966b-15cb7f2202e8.roa Signing time: Mon 01 Apr 2024 00:00:00 +0000 ROA not before: Mon 01 Apr 2024 00:00:00 +0000 ROA not after: Mon 06 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 52.94.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:4f:f2:14:bd:48:e1:96:67:15:94:04:1c:37:0b:54:73:cc:29:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 1 00:00:00 2024 GMT Not After : May 6 23:59:59 2024 GMT Subject: serialNumber=d91ec0a045698b83de887c6cb2a9ce33950d24b28fb9d9409201070f52c12685, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e1:26:76:74:65:ee:73:5d:c5:0d:9f:b7:22: d2:2f:5e:0b:df:5b:f6:bb:7d:24:f2:8a:37:86:71: 39:3a:63:99:d2:b7:e4:8c:7c:36:e1:00:dc:78:49: 4f:cc:ba:9b:ff:d7:61:90:10:5e:85:b6:72:14:50: 4e:6d:61:7c:c0:7b:b2:44:b3:cd:b3:0b:e5:b4:cc: 48:ea:53:44:fa:44:5f:1d:84:3c:11:2d:67:3e:eb: fb:d9:80:ec:76:ca:4a:7d:74:45:4d:bf:40:b8:e3: 2c:12:8f:20:87:d1:66:30:63:e9:d0:10:ae:5b:c0: 0e:ee:43:03:60:71:83:d5:96:dc:07:9e:cd:3f:e8: 19:9d:73:62:0f:4d:56:47:6b:68:6a:02:c1:81:37: 9f:ec:0d:7b:b7:e8:9a:0e:41:8b:46:3e:27:d2:2e: 23:d1:0b:9b:7d:3f:e4:eb:3b:ff:be:a3:d4:1f:73: f9:f5:25:92:bd:01:d4:e9:c8:0a:6e:1b:9a:8f:e0: 20:ba:15:ec:7f:92:ca:b8:17:21:c0:18:7b:0c:97: 8b:6b:12:dc:f4:19:d4:2d:ea:12:d0:5a:68:49:0a: 53:5b:49:34:94:48:24:9a:bd:25:2c:34:7f:3b:be: 20:0a:c3:26:da:1f:eb:8f:bf:e9:e8:d1:bd:72:0a: fc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:42:4C:1C:15:B3:78:92:1D:ED:44:5D:56:57:D8:77:C3:52:E1:C8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b230d96-daec-45a8-966b-15cb7f2202e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.124.0/22 Signature Algorithm: sha256WithRSAEncryption 44:2c:c7:fb:b1:ee:33:14:c4:14:d2:43:46:9a:43:46:67:d1: 33:6c:8e:34:81:27:21:7a:ee:38:7a:3e:26:c9:99:2e:95:56: d9:e6:91:e0:49:77:3c:8b:29:b6:06:ac:f3:0c:ad:25:22:c0: 27:30:d8:a9:81:ff:41:24:c3:79:3e:d9:66:04:53:7c:0e:d1: 0c:5a:0e:03:bb:2e:f6:56:92:b9:c7:50:05:ff:f6:97:5b:95: 77:c3:af:a9:b2:74:b5:88:2a:cf:34:2e:f9:62:5c:be:4b:e5: e8:54:e6:22:8a:a5:5c:1c:1c:a2:4f:51:e0:74:29:7c:42:b0: ee:7e:e4:c7:bb:91:7d:f3:e2:25:a6:ba:2a:6f:c9:b8:b3:6b: a1:d4:e8:81:ce:bd:2e:8c:6e:c2:3b:94:df:db:d6:c7:1b:b4: d9:f4:48:27:cd:dc:1b:ff:4d:b2:1b:6a:34:e4:03:4e:ef:ae: 67:25:05:cf:e1:31:b7:7e:71:bf:37:e5:a5:65:86:8a:34:d7: fb:a3:57:09:2b:d6:3c:54:29:42:d5:a1:68:9c:d8:bf:16:7a: 0e:d8:f0:37:40:2b:7c:2c:80:11:c8:d4:10:ca:66:df:59:2f: 23:e9:94:bf:d6:d7:90:14:9e:c7:3f:bb:c4:16:be:7b:32:90: 0e:2d:06:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBU/yFL1I4ZZnFZQEHDcLVHPMKbowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDAxMDAwMDAwWhcNMjQwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTFlYzBhMDQ1Njk4YjgzZGU4ODdjNmNiMmE5Y2UzMzk1 MGQyNGIyOGZiOWQ5NDA5MjAxMDcwZjUyYzEyNjg1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCM4SZ2dGXuc13FDZ+3ItIvXgvfW/a7fSTyijeGcTk6Y5nS t+SMfDbhANx4SU/Mupv/12GQEF6FtnIUUE5tYXzAe7JEs82zC+W0zEjqU0T6RF8d hDwRLWc+6/vZgOx2ykp9dEVNv0C44ywSjyCH0WYwY+nQEK5bwA7uQwNgcYPVltwH ns0/6Bmdc2IPTVZHa2hqAsGBN5/sDXu36JoOQYtGPifSLiPRC5t9P+TrO/++o9Qf c/n1JZK9AdTpyApuG5qP4CC6Fex/ksq4FyHAGHsMl4trEtz0GdQt6hLQWmhJClNb STSUSCSavSUsNH87viAKwybaH+uPv+no0b1yCvwVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpUJMHBWzeJId7URdVlfYd8NS4cgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFiMjMwZDk2LWRhZWMtNDVhOC05NjZiLTE1Y2I3ZjIyMDJlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0XnwwDQYJKoZIhvcNAQELBQADggEBAEQsx/ux7jMUxBTSQ0aaQ0Zn0TNs jjSBJyF67jh6PibJmS6VVtnmkeBJdzyLKbYGrPMMrSUiwCcw2KmB/0Ekw3k+2WYE U3wO0QxaDgO7LvZWkrnHUAX/9pdblXfDr6mydLWIKs80LvliXL5L5ehU5iKKpVwc HKJPUeB0KXxCsO5+5Me7kX3z4iWmuipvybiza6HU6IHOvS6MbsI7lN/b1scbtNn0 SCfN3Bv/TbIbajTkA07vrmclBc/hMbd+cb835aVlhoo01/ujVwkr1jxUKULVoWic 2L8Weg7Y8DdAK3wsgBHI1BDKZt9ZLyPplL/W15AUnsc/u8QWvnsykA4tBq8= -----END CERTIFICATE-----Generated at Wed Apr 24 01:49:39 2024 by rpki-client on console-fra.rpki-client.org