$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22b1124e-d347-47a9-bd3e-8c57f385b908.roa File: 22b1124e-d347-47a9-bd3e-8c57f385b908.roa (raw, json) Hash identifier: 7i8DrfDdParVRuVYdQwl4zcVOjcQ80Bmbxj+VcXMK9M= Subject key identifier: 29:0C:35:94:62:1D:B1:91:7B:69:64:24:EB:17:A3:C0:A7:51:95:D0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 26BD18E37691DE8F88DE94C437B64E0A5B820FF3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22b1124e-d347-47a9-bd3e-8c57f385b908.roa Signing time: Tue 02 Apr 2024 00:00:00 +0000 ROA not before: Tue 02 Apr 2024 00:00:00 +0000 ROA not after: Tue 07 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 52.58.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:bd:18:e3:76:91:de:8f:88:de:94:c4:37:b6:4e:0a:5b:82:0f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 2 00:00:00 2024 GMT Not After : May 7 23:59:59 2024 GMT Subject: serialNumber=88e3e5f751e2f9e99f3fb57c6e82a6a7dc2526faf3948041b3b7a3c42c5472aa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b5:09:ed:ee:4a:c8:41:16:bd:07:35:69:7a: cb:a5:9e:64:78:a4:b2:ad:3b:9c:5c:f7:36:c5:8b: 24:e0:d7:95:36:7b:4a:d0:db:ef:3f:78:53:16:7b: 4c:a1:80:c4:9b:80:17:b3:0a:74:44:d4:d3:5c:40: f7:be:3c:31:e9:05:f9:af:be:ec:b6:a0:88:9f:96: c8:9e:84:7d:5c:ef:35:3e:4f:cf:fa:6e:86:3c:4a: 41:46:7d:fb:af:ba:14:bf:67:9a:b2:7d:8f:59:ce: 97:4b:6b:54:a1:86:02:9a:4a:f8:1d:17:5d:21:c4: 4a:b3:43:1c:a3:f8:ea:0c:d4:08:d4:9b:1d:6f:d1: ae:62:08:be:e8:28:9f:fc:07:74:87:2d:e9:2d:a1: 19:71:90:6e:e1:7b:83:b6:7b:34:4e:11:a2:6f:60: 86:e0:8e:bf:5b:03:b5:b2:bd:d9:14:16:68:53:a5: 8a:9e:80:4f:34:da:2b:43:db:39:19:e5:a8:a4:5f: 1e:50:ed:bd:e3:a7:da:eb:aa:1a:53:59:67:5d:d8: c5:12:cb:30:9d:33:cc:f9:7c:c6:77:2e:bd:36:b5: 50:22:6d:5b:b1:e1:e2:d2:4d:11:14:a4:71:47:d1: 7c:04:0a:27:29:e3:b7:46:bf:75:6b:6c:3f:b5:00: ce:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0C:35:94:62:1D:B1:91:7B:69:64:24:EB:17:A3:C0:A7:51:95:D0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22b1124e-d347-47a9-bd3e-8c57f385b908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.58.0.0/15 Signature Algorithm: sha256WithRSAEncryption 0e:c4:c1:86:79:d9:3c:5c:1b:15:c2:37:d3:7c:34:e3:5d:05: e6:ba:b0:cf:ea:45:03:aa:1f:6f:a9:a7:d3:50:c8:b7:42:f0: ba:87:e1:e1:6c:91:71:c0:a2:63:b8:59:90:65:66:f2:f9:75: b2:17:cb:ff:d6:be:f0:c2:c9:7b:17:08:81:7d:dd:8b:ce:2e: 0d:e6:12:ca:8e:f5:15:cd:b8:23:94:bc:c1:54:47:af:01:42: 4a:ac:64:dc:07:00:35:b6:81:09:9f:49:49:04:5d:85:7e:f4: e3:b6:96:e1:f3:9f:d2:32:fb:5c:dd:74:17:ae:d4:a0:4c:b4: d0:8d:4a:12:90:e2:9c:f3:f4:dc:a7:4f:0b:a2:f1:70:d3:94: ab:1a:4f:49:c6:1a:81:e2:9e:fe:e5:f5:3e:d5:37:ab:3c:73: 69:08:9f:e3:4e:8e:a2:49:74:5f:3d:4b:bb:5b:e2:f0:af:ec: 4d:6f:65:30:33:1b:ed:84:c9:63:f6:9c:f2:f8:3a:6e:3d:d3: c8:5c:21:ca:25:2e:b8:47:17:c6:ea:85:9b:23:b9:e4:ed:b0: de:33:4e:d2:34:49:45:2d:82:4d:12:20:1a:91:79:a4:e7:aa: 19:47:f0:ac:83:1d:a9:ed:7c:58:57:db:df:14:ce:8e:cc:a6: 1d:b5:58:c5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJr0Y43aR3o+I3pTEN7ZOCluCD/MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDAyMDAwMDAwWhcNMjQwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OGUzZTVmNzUxZTJmOWU5OWYzZmI1N2M2ZTgyYTZhN2Rj MjUyNmZhZjM5NDgwNDFiM2I3YTNjNDJjNTQ3MmFhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLtQnt7krIQRa9BzVpesulnmR4pLKtO5xc9zbFiyTg15U2 e0rQ2+8/eFMWe0yhgMSbgBezCnRE1NNcQPe+PDHpBfmvvuy2oIiflsiehH1c7zU+ T8/6boY8SkFGffuvuhS/Z5qyfY9ZzpdLa1ShhgKaSvgdF10hxEqzQxyj+OoM1AjU mx1v0a5iCL7oKJ/8B3SHLektoRlxkG7he4O2ezROEaJvYIbgjr9bA7WyvdkUFmhT pYqegE802itD2zkZ5aikXx5Q7b3jp9rrqhpTWWdd2MUSyzCdM8z5fMZ3Lr02tVAi bVux4eLSTREUpHFH0XwECicp47dGv3VrbD+1AM7XAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUKQw1lGIdsZF7aWQk6xejwKdRldAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIyYjExMjRlLWQzNDctNDdhOS1iZDNlLThjNTdmMzg1YjkwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE0OjANBgkqhkiG9w0BAQsFAAOCAQEADsTBhnnZPFwbFcI303w0410F5rqw z+pFA6ofb6mn01DIt0Lwuofh4WyRccCiY7hZkGVm8vl1shfL/9a+8MLJexcIgX3d i84uDeYSyo71Fc24I5S8wVRHrwFCSqxk3AcANbaBCZ9JSQRdhX7047aW4fOf0jL7 XN10F67UoEy00I1KEpDinPP03KdPC6LxcNOUqxpPScYageKe/uX1PtU3qzxzaQif 406Ookl0Xz1Lu1vi8K/sTW9lMDMb7YTJY/ac8vg6bj3TyFwhyiUuuEcXxuqFmyO5 5O2w3jNO0jRJRS2CTRIgGpF5pOeqGUfwrIMdqe18WFfb3xTOjsymHbVYxQ== -----END CERTIFICATE-----Generated at Tue Apr 23 18:40:31 2024 by rpki-client on console-ams.rpki-client.org