$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f7243a5-a0c5-4cab-8e68-ef5d96a4a232.roa File: 3f7243a5-a0c5-4cab-8e68-ef5d96a4a232.roa (raw, json) Hash identifier: QhvTSQqR8DWMrxIUswJZ/W1vqB0DeCGrjpJoqEc/6ro= Subject key identifier: BC:1B:0B:66:0C:5E:B2:A9:C4:67:3D:1F:34:7E:DB:61:E0:0B:3F:FB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7F87AB79F0D3D64CA6F8CE3A0F0C2748166487D0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f7243a5-a0c5-4cab-8e68-ef5d96a4a232.roa Signing time: Tue 12 Mar 2024 00:00:00 +0000 ROA not before: Tue 12 Mar 2024 00:00:00 +0000 ROA not after: Tue 16 Apr 2024 23:59:59 +0000 asID: 8987 IP address blocks: 35.112.0.0/12 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 Mar 2024 12:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:87:ab:79:f0:d3:d6:4c:a6:f8:ce:3a:0f:0c:27:48:16:64:87:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Mar 12 00:00:00 2024 GMT Not After : Apr 16 23:59:59 2024 GMT Subject: serialNumber=9bc19f5500e8044d495bfab160c7e4fabaf6fe363c0bd5ad2ee475100461564e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:12:c7:88:b4:2b:33:86:bf:d2:d7:e1:44:8f: be:66:ba:a5:23:e7:c5:b8:44:d1:aa:d7:80:af:ca: 9e:4a:af:4d:f9:b1:63:4c:fc:db:0c:c0:35:79:ea: 86:bb:b8:24:14:1b:6d:89:99:a1:96:44:29:d5:82: 5a:9d:d4:52:8f:22:eb:37:fc:98:0e:68:16:a3:b4: 36:a4:99:2f:1d:5a:bc:bd:48:00:a9:1e:1e:cd:68: 79:81:ae:8c:fc:76:b8:37:fd:06:d5:ff:1d:ac:b9: 21:1d:31:a1:9b:c8:a0:c2:57:67:2b:86:47:05:36: 1f:be:28:53:53:55:00:5c:9a:5f:a1:29:d2:aa:ca: 12:22:af:cf:2a:47:78:9e:9f:d9:75:58:65:7d:0f: fa:12:f5:28:c4:79:b7:18:54:07:58:ef:e3:1c:77: 99:e3:ae:0e:72:88:39:b9:e7:9a:93:94:72:09:ea: e3:01:c7:cb:b1:c4:73:4c:01:f1:a8:d6:e7:90:f1: f6:e2:0c:f4:c3:2a:77:0d:76:ec:9e:ff:ec:f7:a9: 36:7e:83:bc:f1:86:fc:20:6c:7e:29:8b:07:30:34: b4:c5:33:8e:24:0c:c9:1c:d3:96:d1:74:83:37:71: 7a:ef:9c:c8:ed:ba:ba:30:24:ae:18:2d:39:75:4b: c9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1B:0B:66:0C:5E:B2:A9:C4:67:3D:1F:34:7E:DB:61:E0:0B:3F:FB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f7243a5-a0c5-4cab-8e68-ef5d96a4a232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.112.0.0/12 Signature Algorithm: sha256WithRSAEncryption 3d:a4:83:4c:1b:80:dc:1c:42:7f:70:17:4e:03:5d:fc:77:05: 85:05:ca:ea:f5:5d:14:4d:bf:82:a9:3a:82:01:24:c1:0d:23: 3b:bc:83:b8:5d:e4:17:46:86:1c:bf:aa:43:16:f8:f4:02:e6: af:51:33:1f:bd:a1:c8:15:66:31:1c:2a:1d:08:28:8c:61:98: e8:77:fa:a9:d5:4a:55:db:6c:2b:28:68:58:e7:17:a3:e3:b3: f0:5f:a1:93:43:87:80:57:4c:d2:2d:e2:86:f2:18:ae:ec:c8: aa:d9:e6:de:a9:73:1e:c3:8f:e6:9f:6c:8f:95:1d:bd:4e:6c: 21:40:a4:e8:06:ed:6a:18:1c:6c:2a:e0:f4:7a:16:6a:e4:9b: 04:87:fa:2e:35:ec:0f:20:1a:50:9c:1a:44:d6:fb:e5:3d:cb: 85:49:0f:63:92:5e:e3:ec:4f:5e:20:60:1b:2a:d3:8c:84:56: 5e:c4:00:10:96:9e:a7:16:d1:63:41:5a:26:a7:42:2e:bd:b1: 9f:eb:c2:a1:1c:f8:ca:26:0a:db:3b:4b:3b:83:32:f9:b5:0d: ab:ef:51:7a:88:6a:37:b5:b8:9a:1c:40:f6:f8:f7:92:db:f6: 9b:2e:c4:e0:df:8c:52:6f:8b:7c:d1:30:79:54:eb:6f:9e:de: 39:92:e2:02 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUf4erefDT1kym+M46DwwnSBZkh9AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwMzEyMDAwMDAwWhcNMjQwNDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YmMxOWY1NTAwZTgwNDRkNDk1YmZhYjE2MGM3ZTRmYWJh ZjZmZTM2M2MwYmQ1YWQyZWU0NzUxMDA0NjE1NjRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmEseItCszhr/S1+FEj75muqUj58W4RNGq14Cvyp5Kr035 sWNM/NsMwDV56oa7uCQUG22JmaGWRCnVglqd1FKPIus3/JgOaBajtDakmS8dWry9 SACpHh7NaHmBroz8drg3/QbV/x2suSEdMaGbyKDCV2crhkcFNh++KFNTVQBcml+h KdKqyhIir88qR3ien9l1WGV9D/oS9SjEebcYVAdY7+Mcd5njrg5yiDm555qTlHIJ 6uMBx8uxxHNMAfGo1ueQ8fbiDPTDKncNduye/+z3qTZ+g7zxhvwgbH4piwcwNLTF M44kDMkc05bRdIM3cXrvnMjturowJK4YLTl1S8nfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUvBsLZgxesqnEZz0fNH7bYeALP/swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNmNzI0M2E1LWEwYzUtNGNhYi04ZTY4LWVmNWQ5NmE0YTIzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwQjcDANBgkqhkiG9w0BAQsFAAOCAQEAPaSDTBuA3BxCf3AXTgNd/HcFhQXK 6vVdFE2/gqk6ggEkwQ0jO7yDuF3kF0aGHL+qQxb49ALmr1EzH72hyBVmMRwqHQgo jGGY6Hf6qdVKVdtsKyhoWOcXo+Oz8F+hk0OHgFdM0i3ihvIYruzIqtnm3qlzHsOP 5p9sj5UdvU5sIUCk6AbtahgcbCrg9HoWauSbBIf6LjXsDyAaUJwaRNb75T3LhUkP Y5Je4+xPXiBgGyrTjIRWXsQAEJaepxbRY0FaJqdCLr2xn+vCoRz4yiYK2ztLO4My +bUNq+9ReohqN7W4mhxA9vj3ktv2my7E4N+MUm+LfNEweVTrb57eOZLiAg== -----END CERTIFICATE-----Generated at Thu Mar 28 02:06:46 2024 by rpki-client on console-ams.rpki-client.org