$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/28579aa5-44d3-4441-8326-695384f00ca8.roa File: 28579aa5-44d3-4441-8326-695384f00ca8.roa (raw, json) Hash identifier: yzBtN8Tz5+ShEaMrUWQY9GJmtG4p7s3WRaPHE6QfoSg= Subject key identifier: 9B:C2:BE:62:13:A4:17:6C:78:DF:D3:1E:A4:6F:B6:81:90:B8:5E:EA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2970EF6FB0676614828BF54BD096ABB8E806B585 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/28579aa5-44d3-4441-8326-695384f00ca8.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 34.192.0.0/10 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:70:ef:6f:b0:67:66:14:82:8b:f5:4b:d0:96:ab:b8:e8:06:b5:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=d215a2a1c84061f8392395179190dc0a1a185b8a45b67ae74d126659897d66d4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d8:5a:3b:f8:e7:39:84:f4:4f:76:11:79:64: 18:65:d2:ac:36:f0:a9:94:14:08:7f:f4:3d:9c:8e: 5a:4b:ed:45:ce:19:77:58:8d:c9:b3:3b:dd:15:85: 71:6c:ef:48:57:10:71:47:f9:c5:2a:db:cb:ba:55: f7:de:8c:b9:a7:f8:31:8f:5e:20:84:7b:35:e4:c0: 05:c4:59:51:86:28:8a:da:79:66:e4:1d:9e:cc:ad: 10:53:65:9a:53:eb:52:6a:72:3c:92:45:6e:8f:40: 65:b0:dd:82:4f:8a:f6:68:e0:38:c8:9c:6a:6d:6b: ad:44:a9:a8:9c:25:97:53:fd:51:c6:98:d8:e0:98: c0:10:0e:34:15:ea:5a:26:df:e5:e0:27:b0:00:73: 29:16:d6:86:fc:db:b2:ad:ab:ac:43:2b:42:37:75: 7e:68:5c:02:68:3f:2b:8d:1d:da:18:9a:cf:a3:7c: ca:34:85:fa:f8:69:c3:79:24:83:0b:c5:4c:90:04: 52:9a:5e:a4:c0:ab:51:3e:d1:4c:52:0e:ab:97:65: d8:02:7c:8b:06:07:74:73:6c:32:1c:1c:c9:ae:3d: 06:1b:ac:d2:08:9a:50:94:a6:7a:f8:00:9c:59:a8: 21:54:f6:db:d4:22:93:b1:8e:5d:89:b9:d3:43:98: 24:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C2:BE:62:13:A4:17:6C:78:DF:D3:1E:A4:6F:B6:81:90:B8:5E:EA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/28579aa5-44d3-4441-8326-695384f00ca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 34.192.0.0/10 Signature Algorithm: sha256WithRSAEncryption 11:4f:32:10:ab:4e:ba:4c:e2:d1:00:40:7a:49:5f:2f:24:35: 45:43:15:be:e7:d7:60:29:89:2a:51:d1:d1:82:81:92:39:e6: 81:f4:43:ae:0b:0a:b7:9c:63:cf:d3:e6:cd:76:8d:e7:d5:55: df:2c:87:3f:29:e3:15:68:2a:09:ae:86:c9:d0:ee:ce:89:f9: fa:3b:a2:bd:8b:59:31:4c:a8:17:62:fa:cc:b6:71:ef:51:a4: 12:4d:e1:0f:45:17:79:07:4c:1f:2d:03:fa:2e:f3:e8:d8:59: 44:7c:25:40:78:7d:46:42:3d:8d:73:bd:11:0a:6d:a0:94:5b: 0e:6e:4a:5e:51:c2:a8:d2:fe:26:b5:de:96:f8:50:88:54:30: 58:07:64:f7:b0:52:d3:85:e3:97:c9:24:91:ba:d7:93:da:d1: 0b:a9:1f:26:68:b9:51:3a:bb:bd:2a:b8:16:63:a6:49:a1:5a: 3d:07:65:9a:5d:1d:1a:73:a1:31:4e:80:91:1e:97:40:a2:1f: aa:45:63:82:51:05:3f:d6:74:04:d8:57:6f:b9:d3:b5:b5:e4: e0:6a:e2:04:07:0e:98:c1:f8:32:e0:6f:59:01:c7:44:0e:73: 76:23:61:6c:b0:df:1d:88:b7:7f:8a:40:fb:ef:8b:04:eb:ed: 1b:28:20:10 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKXDvb7BnZhSCi/VL0JaruOgGtYUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjE1YTJhMWM4NDA2MWY4MzkyMzk1MTc5MTkwZGMwYTFh MTg1YjhhNDViNjdhZTc0ZDEyNjY1OTg5N2Q2NmQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz2Fo7+Oc5hPRPdhF5ZBhl0qw28KmUFAh/9D2cjlpL7UXO GXdYjcmzO90VhXFs70hXEHFH+cUq28u6VffejLmn+DGPXiCEezXkwAXEWVGGKIra eWbkHZ7MrRBTZZpT61JqcjySRW6PQGWw3YJPivZo4DjInGpta61EqaicJZdT/VHG mNjgmMAQDjQV6lom3+XgJ7AAcykW1ob827Ktq6xDK0I3dX5oXAJoPyuNHdoYms+j fMo0hfr4acN5JIMLxUyQBFKaXqTAq1E+0UxSDquXZdgCfIsGB3RzbDIcHMmuPQYb rNIImlCUpnr4AJxZqCFU9tvUIpOxjl2JudNDmCQNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUm8K+YhOkF2x439MepG+2gZC4XuowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI4NTc5YWE1LTQ0ZDMtNDQ0MS04MzI2LTY5NTM4NGYwMGNhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwYiwDANBgkqhkiG9w0BAQsFAAOCAQEAEU8yEKtOukzi0QBAeklfLyQ1RUMV vufXYCmJKlHR0YKBkjnmgfRDrgsKt5xjz9PmzXaN59VV3yyHPynjFWgqCa6GydDu zon5+juivYtZMUyoF2L6zLZx71GkEk3hD0UXeQdMHy0D+i7z6NhZRHwlQHh9RkI9 jXO9EQptoJRbDm5KXlHCqNL+JrXelvhQiFQwWAdk97BS04Xjl8kkkbrXk9rRC6kf Jmi5UTq7vSq4FmOmSaFaPQdlml0dGnOhMU6AkR6XQKIfqkVjglEFP9Z0BNhXb7nT tbXk4GriBAcOmMH4MuBvWQHHRA5zdiNhbLDfHYi3f4pA+++LBOvtGyggEA== -----END CERTIFICATE-----Generated at Thu Apr 25 22:33:13 2024 by rpki-client on console-fra.rpki-client.org