$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3958d8cc-b49d-47bf-a39f-3ab7a7f5feb5.roa File: 3958d8cc-b49d-47bf-a39f-3ab7a7f5feb5.roa (raw, json) Hash identifier: v4BO+d3AujgRCghp01BvaV4DeWgEDobK3/IGAGGdeE8= Subject key identifier: 1C:46:2A:EB:72:1B:42:E2:63:D1:20:63:9F:D6:67:32:40:63:47:1C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5D242D1D0B398EC33DFA8C4DB4F9D0B61EAADE13 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3958d8cc-b49d-47bf-a39f-3ab7a7f5feb5.roa Signing time: Fri 05 Apr 2024 00:00:00 +0000 ROA not before: Fri 05 Apr 2024 00:00:00 +0000 ROA not after: Fri 10 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:24:2d:1d:0b:39:8e:c3:3d:fa:8c:4d:b4:f9:d0:b6:1e:aa:de:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 5 00:00:00 2024 GMT Not After : May 10 23:59:59 2024 GMT Subject: serialNumber=3ac0fe521814a06955aa71520ab4ea49d319eb99aaebc8357f8c42b8fb02ed73, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:b6:fd:95:1d:42:e7:2e:86:06:47:48:6f: 87:45:61:17:27:d8:3c:0d:7b:cd:33:b0:ad:21:e6: 6d:ad:17:8c:37:e4:68:4c:ef:85:61:89:0b:47:1f: b8:a6:b9:03:d8:35:5e:91:94:d1:39:1d:a6:95:11: 93:ab:6d:f6:cd:d3:43:81:57:93:bf:4c:fd:2c:f5: dd:aa:58:18:54:82:87:46:09:d0:22:0c:8d:42:9b: f4:23:61:7d:57:32:47:d7:b3:e3:cf:65:74:21:80: 94:dc:b8:b0:ce:91:c5:d5:b9:a5:d2:16:82:ac:6a: b7:44:84:8d:f5:d7:61:21:b8:0f:41:e8:fc:42:23: b0:1f:e2:7d:5f:51:b5:b8:1a:21:92:89:b8:25:be: a3:02:7b:2e:51:3b:d8:e7:23:5f:e1:20:7a:c1:57: 1d:e8:a1:23:cc:e5:64:87:72:73:3f:09:48:71:48: 01:8b:7d:76:b2:cb:a5:21:b7:9b:a3:f5:cf:e9:c9: ef:38:e1:4a:db:ba:a6:2a:75:15:96:ef:66:59:1e: 47:07:a1:bd:4c:14:cc:ab:81:d7:a5:cd:03:25:35: 8d:9b:c4:51:44:69:9e:bc:65:1c:29:18:2f:93:87: 32:e5:5c:77:ea:f3:b0:62:2c:49:7d:d1:00:cf:8c: 89:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:46:2A:EB:72:1B:42:E2:63:D1:20:63:9F:D6:67:32:40:63:47:1C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3958d8cc-b49d-47bf-a39f-3ab7a7f5feb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.208.0/22 Signature Algorithm: sha256WithRSAEncryption a7:24:aa:3d:8a:26:e5:32:be:72:27:15:a7:b0:2d:e9:ac:d4: ae:35:99:60:20:10:52:55:ac:70:5a:2c:68:9d:42:5e:c9:18: 7f:d9:cd:0d:1a:28:1a:5a:ac:79:fb:77:d5:d5:0a:36:9c:04: 04:10:41:88:98:68:31:81:da:17:8d:d6:25:a0:36:b6:f5:03: b7:11:4b:24:a1:b5:07:b0:35:4d:cc:f9:fa:f4:83:0c:ff:67: f5:86:ce:56:46:99:d7:68:33:82:f3:44:be:58:91:39:36:a7: 0a:08:eb:c5:b0:cb:d8:88:c2:f2:c0:6d:04:7d:66:53:4c:24: 61:8e:25:61:ea:e7:ac:9c:2c:36:72:b6:c6:5f:3d:ba:7e:96: 5a:e8:7b:11:3f:70:da:ae:80:19:6b:16:87:34:aa:b2:9e:40: f5:15:bf:42:6b:e6:3a:b1:48:7a:e0:b5:a3:99:07:40:1b:4e: 44:85:27:c3:bd:7c:c1:cb:31:d3:f8:d2:7d:61:80:c5:d0:98: c8:b4:42:74:21:5d:d4:ac:c4:4a:68:f3:40:ef:9d:d3:07:ac: eb:03:d6:27:06:bc:51:0e:7a:a5:31:2a:40:1e:4d:71:de:90: 50:7c:60:a6:46:93:0f:aa:ce:6f:82:f7:da:c1:db:a5:3a:97: b6:6b:d0:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXSQtHQs5jsM9+oxNtPnQth6q3hMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA1MDAwMDAwWhcNMjQwNTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYWMwZmU1MjE4MTRhMDY5NTVhYTcxNTIwYWI0ZWE0OWQz MTllYjk5YWFlYmM4MzU3ZjhjNDJiOGZiMDJlZDczMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKybb9lR1C5y6GBkdIb4dFYRcn2DwNe80zsK0h5m2tF4w3 5GhM74VhiQtHH7imuQPYNV6RlNE5HaaVEZOrbfbN00OBV5O/TP0s9d2qWBhUgodG CdAiDI1Cm/QjYX1XMkfXs+PPZXQhgJTcuLDOkcXVuaXSFoKsardEhI3112EhuA9B 6PxCI7Af4n1fUbW4GiGSibglvqMCey5RO9jnI1/hIHrBVx3ooSPM5WSHcnM/CUhx SAGLfXayy6Uht5uj9c/pye844UrbuqYqdRWW72ZZHkcHob1MFMyrgdelzQMlNY2b xFFEaZ68ZRwpGC+ThzLlXHfq87BiLEl90QDPjIkbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHEYq63IbQuJj0SBjn9ZnMkBjRxwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM5NThkOGNjLWI0OWQtNDdiZi1hMzlmLTNhYjdhN2Y1ZmViNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0X9AwDQYJKoZIhvcNAQELBQADggEBAKckqj2KJuUyvnInFaewLems1K41 mWAgEFJVrHBaLGidQl7JGH/ZzQ0aKBparHn7d9XVCjacBAQQQYiYaDGB2heN1iWg Nrb1A7cRSyShtQewNU3M+fr0gwz/Z/WGzlZGmddoM4LzRL5YkTk2pwoI68Wwy9iI wvLAbQR9ZlNMJGGOJWHq56ycLDZytsZfPbp+llroexE/cNqugBlrFoc0qrKeQPUV v0Jr5jqxSHrgtaOZB0AbTkSFJ8O9fMHLMdP40n1hgMXQmMi0QnQhXdSsxEpo80Dv ndMHrOsD1icGvFEOeqUxKkAeTXHekFB8YKZGkw+qzm+C99rB26U6l7Zr0JI= -----END CERTIFICATE-----Generated at Thu Apr 25 22:33:14 2024 by rpki-client on console-fra.rpki-client.org