$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b87e5fe-3d12-4c45-ad3d-b527ee492f47.roa File: 3b87e5fe-3d12-4c45-ad3d-b527ee492f47.roa (raw, json) Hash identifier: lTi0nfATOQUiB7kx73LTxAMCNI0t+8G9PU1yqXTw5Hc= Subject key identifier: E0:89:E2:13:63:49:D5:4F:23:CD:B1:DB:5E:2E:62:CD:CA:EB:06:20 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 79CA581F3664E32CBE2D4F8C792AB5976FC6C87F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b87e5fe-3d12-4c45-ad3d-b527ee492f47.roa Signing time: Mon 01 Apr 2024 00:00:00 +0000 ROA not before: Mon 01 Apr 2024 00:00:00 +0000 ROA not after: Mon 06 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 15.248.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ca:58:1f:36:64:e3:2c:be:2d:4f:8c:79:2a:b5:97:6f:c6:c8:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 1 00:00:00 2024 GMT Not After : May 6 23:59:59 2024 GMT Subject: serialNumber=a63db6e3458b8514ace57de26031b1b0cff6af7dd167dcb140add7e9b52fbded, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:65:52:a0:fd:c8:33:77:25:36:f6:a0:f3:3d: 67:6f:15:60:e3:26:27:72:d7:b6:7f:52:4f:3e:ce: 41:fe:e2:ab:4a:42:a8:57:90:74:71:57:06:d4:59: c0:df:df:f9:d6:d3:f4:5a:f8:60:ef:bb:d8:6e:85: 2c:b6:34:2a:be:59:cc:b7:08:2c:4c:a8:56:18:fb: 02:c8:34:9d:54:7b:5f:0d:3a:d3:99:55:39:3d:f4: 54:4e:a1:71:3a:a0:fd:a7:6a:88:76:35:f7:d2:9a: 2b:67:5a:3f:70:d9:0d:c2:5f:c4:5a:bd:ae:70:c5: 24:3e:b8:60:1d:fa:ac:81:d5:4d:80:92:20:11:61: 9e:cf:0e:bd:5d:20:0a:c9:e4:b0:e2:e1:f4:84:ec: 79:a8:6d:d3:58:81:cd:e5:fd:d2:16:d0:18:8e:2d: 49:1c:ee:51:d8:06:c5:c3:4b:12:d2:fb:ce:db:68: f3:b2:92:18:89:58:95:7b:a7:d2:50:0c:43:2f:0d: 86:aa:4c:94:81:1c:d6:59:e2:48:cd:4c:0d:81:1c: 6b:24:55:d2:72:54:90:be:07:cf:62:a0:70:94:bf: 0e:c8:eb:b4:e3:4b:7b:31:6b:aa:b5:a5:e1:51:9a: c2:69:ce:a4:34:50:7f:e6:7e:e5:3f:cd:f1:af:34: 80:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:89:E2:13:63:49:D5:4F:23:CD:B1:DB:5E:2E:62:CD:CA:EB:06:20 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3b87e5fe-3d12-4c45-ad3d-b527ee492f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.248.20.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:8f:33:c8:ee:00:8d:ae:c4:a0:9e:3e:ce:48:a3:ed:52:89: de:68:34:0a:80:7c:73:7a:43:5f:45:ea:e1:fc:a0:1c:39:c8: 51:cd:de:10:50:b3:76:3c:57:7b:d9:4c:46:dc:b7:5b:c2:49: 94:bd:bf:7c:23:36:aa:d7:b9:6e:9b:d7:46:c4:88:f3:77:1b: 62:3b:40:24:ca:05:76:f2:ca:13:81:ee:e4:0f:3b:3e:e1:37: 2b:0a:2a:a1:ba:a5:17:72:b5:e9:77:f9:61:87:f9:05:a6:a3: de:d9:66:2a:f5:5e:51:9f:7f:ce:f6:90:a8:b6:8c:c6:3c:37: e4:6c:50:0a:b2:7a:52:88:9a:f0:65:7b:3f:53:2c:53:7d:4b: 06:1f:03:5b:07:15:e4:fe:ec:b2:cd:55:ee:34:6d:af:b5:e4: f8:68:19:b3:9a:48:d3:cf:fa:fd:84:a7:3e:04:27:84:37:4d: 37:bf:b8:f4:7f:48:2a:1c:86:34:8e:24:51:33:e5:f5:fe:0b: 19:e4:e8:0e:46:07:54:f0:5e:ff:7d:db:f8:9b:b7:51:1b:4b: 60:c7:36:1b:eb:4a:2c:1d:bb:cb:ce:2d:d9:9e:92:04:46:99: aa:07:fa:79:b3:59:f7:ea:2f:57:1b:4f:e3:f3:44:c0:69:24: 0a:9f:18:21 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUecpYHzZk4yy+LU+MeSq1l2/GyH8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDAxMDAwMDAwWhcNMjQwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNjNkYjZlMzQ1OGI4NTE0YWNlNTdkZTI2MDMxYjFiMGNm ZjZhZjdkZDE2N2RjYjE0MGFkZDdlOWI1MmZiZGVkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPZVKg/cgzdyU29qDzPWdvFWDjJidy17Z/Uk8+zkH+4qtK QqhXkHRxVwbUWcDf3/nW0/Ra+GDvu9huhSy2NCq+Wcy3CCxMqFYY+wLINJ1Ue18N OtOZVTk99FROoXE6oP2naoh2NffSmitnWj9w2Q3CX8Rava5wxSQ+uGAd+qyB1U2A kiARYZ7PDr1dIArJ5LDi4fSE7HmobdNYgc3l/dIW0BiOLUkc7lHYBsXDSxLS+87b aPOykhiJWJV7p9JQDEMvDYaqTJSBHNZZ4kjNTA2BHGskVdJyVJC+B89ioHCUvw7I 67TjS3sxa6q1peFRmsJpzqQ0UH/mfuU/zfGvNIBxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4IniE2NJ1U8jzbHbXi5izcrrBiAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiODdlNWZlLTNkMTItNGM0NS1hZDNkLWI1MjdlZTQ5MmY0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIP+BQwDQYJKoZIhvcNAQELBQADggEBAE6PM8juAI2uxKCePs5Io+1Sid5o NAqAfHN6Q19F6uH8oBw5yFHN3hBQs3Y8V3vZTEbct1vCSZS9v3wjNqrXuW6b10bE iPN3G2I7QCTKBXbyyhOB7uQPOz7hNysKKqG6pRdytel3+WGH+QWmo97ZZir1XlGf f872kKi2jMY8N+RsUAqyelKImvBlez9TLFN9SwYfA1sHFeT+7LLNVe40ba+15Pho GbOaSNPP+v2Epz4EJ4Q3TTe/uPR/SCochjSOJFEz5fX+Cxnk6A5GB1TwXv992/ib t1EbS2DHNhvrSiwdu8vOLdmekgRGmaoH+nmzWffqL1cbT+PzRMBpJAqfGCE= -----END CERTIFICATE-----Generated at Fri Apr 19 00:52:19 2024 by rpki-client on console-ams.rpki-client.org