$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ba9e87c-2b84-4653-bf73-3327bddab985.roa File: 3ba9e87c-2b84-4653-bf73-3327bddab985.roa (raw, json) Hash identifier: ETD/CAGsb5TWfdCSjo79sNP5z8dX3cjPB8P2CT07ucc= Subject key identifier: 36:04:5F:70:B8:53:67:F3:07:38:63:23:2A:93:14:D6:D3:6A:01:13 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0CE142D5A85FD5A01DFEA1A98A4B599C2AC107D1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ba9e87c-2b84-4653-bf73-3327bddab985.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 18.36.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e1:42:d5:a8:5f:d5:a0:1d:fe:a1:a9:8a:4b:59:9c:2a:c1:07:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=d61035b6c2cf7445be041cbbd87a82862f3b37aa72fa2b1f80f940e1993d5735, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:07:df:d6:0b:23:a6:02:44:96:3c:28:4c:ce: f9:a9:33:3f:d4:c2:4e:03:54:e5:4b:63:ce:3a:21: a5:d2:da:c9:a7:e6:96:7c:a4:b0:f2:08:10:b4:47: 1d:c8:69:21:39:7e:fd:60:8a:30:da:30:78:5f:d3: 24:e7:92:55:ce:93:00:59:c1:62:b6:db:6d:10:73: d6:ce:91:8e:d0:ee:b7:13:b6:cb:37:38:e8:fa:a5: 0c:4e:da:6e:62:4f:c5:96:37:f6:20:f6:aa:12:a3: 73:98:d3:ca:f0:b5:ce:11:2f:cd:92:81:e9:aa:10: 2f:f2:ba:8f:12:3b:fa:b1:94:92:12:af:b2:0d:84: 94:8d:65:78:31:e2:f0:80:2c:43:d6:87:18:4b:da: 24:0e:60:e8:17:a8:7a:2d:27:1a:6e:97:e6:0e:e5: 4c:fd:90:dd:c8:a4:95:8b:07:6f:75:20:71:60:69: d3:6c:2a:85:0a:4e:a3:0f:66:7f:8a:55:d0:37:f9: a4:65:be:23:ca:21:cf:6c:43:e8:c3:98:47:38:b0: 23:9e:3f:5f:43:14:1e:4e:4e:01:fa:f5:59:a9:09: 33:f6:b0:82:08:ce:67:16:ea:37:2d:c8:e0:81:f6: 56:07:97:52:78:a7:ea:b9:61:4c:dc:52:a7:fd:63: 35:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:04:5F:70:B8:53:67:F3:07:38:63:23:2A:93:14:D6:D3:6A:01:13 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ba9e87c-2b84-4653-bf73-3327bddab985.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.36.0.0/15 Signature Algorithm: sha256WithRSAEncryption 5d:60:2f:12:bf:e5:58:a0:55:a4:14:1d:3b:46:f2:6e:55:38: 8b:b6:b3:f9:a1:75:3e:95:ed:1b:31:87:aa:aa:5b:a2:6a:e9: fa:9e:2e:ee:a5:5c:2c:9e:8f:0b:aa:12:9e:c9:e0:f2:ae:d0: 9a:fa:69:92:0f:54:66:dc:7d:03:af:60:bc:17:98:37:06:7c: ad:ff:9c:e5:87:a1:2c:bc:60:ae:a6:9a:cf:ff:f9:1e:6c:ce: ca:86:5b:f2:99:df:4d:28:7f:09:b5:61:28:bd:e3:ba:ee:f7: 58:33:5d:f2:9b:f9:cd:19:fc:ad:ef:38:a3:b9:93:27:d3:50: d0:8f:80:84:0e:ee:00:13:83:bf:f1:d0:a0:0c:58:15:1e:29: 05:77:99:13:61:c9:c6:5c:7d:70:02:a4:07:93:6b:23:12:99: 1c:3b:f4:3c:84:1e:49:fd:3f:f8:1d:de:8f:54:d8:d5:ce:de: 20:41:7a:db:26:d7:4a:ee:6f:ec:63:a8:fb:81:c5:31:cc:f0: b1:b5:54:00:c9:7a:7a:db:8a:d7:96:67:8b:dc:0a:3e:c8:35: b8:32:04:2f:c0:5c:af:aa:01:9e:4c:cd:c8:4e:69:39:11:90: ab:80:96:5f:b5:73:cf:7d:9f:00:d5:a1:2c:a0:60:79:be:2f: de:6d:21:08 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDOFC1ahf1aAd/qGpiktZnCrBB9EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjEwMzViNmMyY2Y3NDQ1YmUwNDFjYmJkODdhODI4NjJm M2IzN2FhNzJmYTJiMWY4MGY5NDBlMTk5M2Q1NzM1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtB9/WCyOmAkSWPChMzvmpMz/Uwk4DVOVLY846IaXS2smn 5pZ8pLDyCBC0Rx3IaSE5fv1gijDaMHhf0yTnklXOkwBZwWK2220Qc9bOkY7Q7rcT tss3OOj6pQxO2m5iT8WWN/Yg9qoSo3OY08rwtc4RL82SgemqEC/yuo8SO/qxlJIS r7INhJSNZXgx4vCALEPWhxhL2iQOYOgXqHotJxpul+YO5Uz9kN3IpJWLB291IHFg adNsKoUKTqMPZn+KVdA3+aRlviPKIc9sQ+jDmEc4sCOeP19DFB5OTgH69VmpCTP2 sIIIzmcW6jctyOCB9lYHl1J4p+q5YUzcUqf9YzVZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUNgRfcLhTZ/MHOGMjKpMU1tNqARMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiYTllODdjLTJiODQtNDY1My1iZjczLTMzMjdiZGRhYjk4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwESJDANBgkqhkiG9w0BAQsFAAOCAQEAXWAvEr/lWKBVpBQdO0byblU4i7az +aF1PpXtGzGHqqpbomrp+p4u7qVcLJ6PC6oSnsng8q7Qmvppkg9UZtx9A69gvBeY NwZ8rf+c5YehLLxgrqaaz//5HmzOyoZb8pnfTSh/CbVhKL3juu73WDNd8pv5zRn8 re84o7mTJ9NQ0I+AhA7uABODv/HQoAxYFR4pBXeZE2HJxlx9cAKkB5NrIxKZHDv0 PIQeSf0/+B3ej1TY1c7eIEF62ybXSu5v7GOo+4HFMczwsbVUAMl6etuK15Zni9wK Psg1uDIEL8Bcr6oBnkzNyE5pORGQq4CWX7Vzz32fANWhLKBgeb4v3m0hCA== -----END CERTIFICATE-----Generated at Fri Apr 19 00:52:19 2024 by rpki-client on console-ams.rpki-client.org