$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2cb2a641-a341-45e5-9301-5f0881322335.roa File: 2cb2a641-a341-45e5-9301-5f0881322335.roa (raw, json) Hash identifier: 6B8sAF+RWPE0OUvLhywYYS//xIhETiPowEpPgWTxBTs= Subject key identifier: 80:FF:BE:58:33:38:31:DA:31:B2:92:70:54:B1:E9:5B:EF:76:8A:11 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 31F1F5491E97BFF5C279065D4EECEA6D5FEFC8B4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2cb2a641-a341-45e5-9301-5f0881322335.roa Signing time: Fri 05 Apr 2024 00:00:00 +0000 ROA not before: Fri 05 Apr 2024 00:00:00 +0000 ROA not after: Fri 10 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:f1:f5:49:1e:97:bf:f5:c2:79:06:5d:4e:ec:ea:6d:5f:ef:c8:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 5 00:00:00 2024 GMT Not After : May 10 23:59:59 2024 GMT Subject: serialNumber=a15d1d81904af12fc2bcff8b123d73f88aacd38ca3da37cbac8d0fc1ff909f14, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0c:be:cb:e6:f2:5a:b3:f9:c2:84:bb:cc:ea: dd:6b:4d:b4:53:68:d6:46:16:f2:60:1b:53:26:94: 23:ed:3c:a3:75:b0:51:5b:52:a7:a7:90:e7:30:4d: 34:91:37:0d:6d:e8:4e:45:72:af:f4:17:71:24:aa: a5:22:86:8a:69:56:fd:9a:4f:68:17:75:fd:d3:3c: bc:38:4c:c9:5f:78:99:dd:ee:50:c3:5c:0e:7c:c9: 80:d8:0e:1c:e5:3c:e8:c7:d3:2c:6a:27:f3:24:c5: 08:e5:0c:8c:64:18:48:dc:d9:a0:db:37:70:97:e0: 17:e9:dd:c1:db:36:f5:42:a2:3f:3d:c1:30:fc:da: ce:bf:2b:85:dd:3b:f0:34:64:82:c3:1f:0d:62:21: e3:d4:2a:d9:c6:d2:c5:40:24:23:d8:2d:6f:21:11: db:cf:c3:e3:fa:5f:0f:da:a9:ee:2f:60:8f:1e:82: dd:70:cd:05:32:ea:2d:07:13:90:25:fd:e6:a4:a7: 45:8a:e1:d7:2e:81:5a:e7:42:6c:d7:1b:d9:94:20: 15:97:ae:5d:0f:02:77:2c:b0:3e:dd:58:33:2e:60: 86:65:0b:ca:9d:f3:fc:39:eb:29:58:94:75:6a:5b: 90:a1:66:20:04:1a:69:4b:87:e9:17:f5:47:3d:02: da:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FF:BE:58:33:38:31:DA:31:B2:92:70:54:B1:E9:5B:EF:76:8A:11 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2cb2a641-a341-45e5-9301-5f0881322335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.226.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:93:31:0b:aa:36:ee:75:77:98:56:30:ed:5a:cf:35:66:db: 07:37:24:cb:62:87:15:08:72:be:a6:69:91:05:56:30:af:05: 17:ba:c3:58:27:d1:ee:f3:09:71:d8:65:ea:2c:3d:1d:2f:90: 12:cb:e0:b9:f8:d4:db:57:10:63:9a:d9:1a:46:cb:1f:52:08: b3:f0:64:db:27:3c:4d:b7:84:b6:80:7f:4d:e7:d1:91:44:b2: c9:be:1a:2e:96:f4:9f:92:41:bf:65:eb:b5:ee:5f:c7:a0:f5: 1e:35:a6:cc:d5:54:5a:19:fc:2a:dc:ff:cb:9d:36:25:81:4b: 5e:2f:01:f6:eb:75:56:69:90:21:b2:77:52:58:28:27:49:45: 20:df:55:6e:f0:8e:49:26:fc:93:3a:a7:5d:13:c2:05:75:bc: 83:fe:9c:8b:78:c0:ad:15:89:f7:6a:21:d8:1f:17:d0:d8:c4: 05:00:14:49:5b:1f:74:2f:df:16:f1:4e:17:e5:b2:55:b1:2c: a9:f6:63:83:cf:23:58:a0:75:4c:5c:92:fe:1e:7f:23:7c:88: d4:4a:6c:ed:90:ff:c5:cf:60:94:45:82:d5:2c:f6:bc:4d:7d: be:3f:25:7f:90:04:0d:63:f0:97:55:65:de:28:bf:0f:38:1f: 7f:3f:82:f4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMfH1SR6Xv/XCeQZdTuzqbV/vyLQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA1MDAwMDAwWhcNMjQwNTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTVkMWQ4MTkwNGFmMTJmYzJiY2ZmOGIxMjNkNzNmODhh YWNkMzhjYTNkYTM3Y2JhYzhkMGZjMWZmOTA5ZjE0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtDL7L5vJas/nChLvM6t1rTbRTaNZGFvJgG1MmlCPtPKN1 sFFbUqenkOcwTTSRNw1t6E5Fcq/0F3EkqqUihoppVv2aT2gXdf3TPLw4TMlfeJnd 7lDDXA58yYDYDhzlPOjH0yxqJ/MkxQjlDIxkGEjc2aDbN3CX4Bfp3cHbNvVCoj89 wTD82s6/K4XdO/A0ZILDHw1iIePUKtnG0sVAJCPYLW8hEdvPw+P6Xw/aqe4vYI8e gt1wzQUy6i0HE5Al/eakp0WK4dcugVrnQmzXG9mUIBWXrl0PAncssD7dWDMuYIZl C8qd8/w56ylYlHVqW5ChZiAEGmlLh+kX9Uc9AtppAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgP++WDM4MdoxspJwVLHpW+92ihEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJjYjJhNjQxLWEzNDEtNDVlNS05MzAxLTVmMDg4MTMyMjMzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP3OIwDQYJKoZIhvcNAQELBQADggEBAAqTMQuqNu51d5hWMO1azzVm2wc3 JMtihxUIcr6maZEFVjCvBRe6w1gn0e7zCXHYZeosPR0vkBLL4Ln41NtXEGOa2RpG yx9SCLPwZNsnPE23hLaAf03n0ZFEssm+Gi6W9J+SQb9l67XuX8eg9R41pszVVFoZ /Crc/8udNiWBS14vAfbrdVZpkCGyd1JYKCdJRSDfVW7wjkkm/JM6p10TwgV1vIP+ nIt4wK0VifdqIdgfF9DYxAUAFElbH3Qv3xbxThflslWxLKn2Y4PPI1igdUxckv4e fyN8iNRKbO2Q/8XPYJRFgtUs9rxNfb4/JX+QBA1j8JdVZd4ovw84H38/gvQ= -----END CERTIFICATE-----Generated at Fri Apr 26 11:01:01 2024 by rpki-client on console-ams.rpki-client.org