$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d1e791b-0b38-49c5-8065-92c771f9038a.roa File: 6d1e791b-0b38-49c5-8065-92c771f9038a.roa (raw, json) Hash identifier: jgS3wJlBqIByvzmEqVvLO7bc2ijkwcWmnhFP7XZkKg0= Subject key identifier: D4:F2:27:78:6C:A0:3C:F1:9A:50:12:76:31:E5:4F:3B:09:D7:A5:2B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 69A5EBF50DA9A5D0CD3AD72B5BEAB10D59FF48F4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d1e791b-0b38-49c5-8065-92c771f9038a.roa Signing time: Tue 02 Apr 2024 00:00:00 +0000 ROA not before: Tue 02 Apr 2024 00:00:00 +0000 ROA not after: Tue 07 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a5:eb:f5:0d:a9:a5:d0:cd:3a:d7:2b:5b:ea:b1:0d:59:ff:48:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 2 00:00:00 2024 GMT Not After : May 7 23:59:59 2024 GMT Subject: serialNumber=695784d12b5760f721ed452e2f2b8638a05eaac94896aa5c95441495df2c6263, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e9:0a:87:52:c4:ad:31:27:2b:21:47:93:33: ba:4a:80:62:75:81:6e:96:f3:0e:78:d4:39:c8:47: 1c:d9:c8:a1:81:ac:d8:ba:7c:a1:76:4f:4e:7f:5c: 40:cd:47:df:23:2e:3b:03:d4:70:90:92:04:55:bb: 43:06:7f:4b:e3:95:26:ef:26:e5:c5:f2:64:8b:37: 7a:2d:de:cd:56:80:b6:cf:92:bf:87:04:d7:6c:c7: f6:e4:d4:ec:9d:7f:4a:1e:d4:4b:9a:28:b3:dc:73: 37:9b:70:d1:44:ae:eb:86:e8:c1:e6:52:47:7d:bd: 5d:1a:b2:39:43:d2:42:10:d6:94:7f:37:21:99:a4: fa:88:cc:c8:26:00:09:c1:5b:29:6b:fe:f7:f6:cb: b9:4e:30:df:1f:f6:85:5c:5b:2c:3c:8a:f3:85:ae: 8e:4b:02:8d:4c:86:d1:d0:2b:a5:62:fd:8b:c6:d0: d4:a5:6c:9b:6a:db:ad:ac:59:ed:eb:1e:37:a8:7b: ba:73:8d:9a:b7:a0:41:85:9c:8f:6d:52:73:17:04: 1c:71:6a:7e:5b:22:1a:15:4f:1d:14:c2:5d:3f:78: 4c:41:b3:d0:dd:3e:39:a5:fa:76:92:68:f0:c8:1c: 30:35:c3:bd:b1:58:04:fe:bb:63:d3:b5:11:97:fb: f8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F2:27:78:6C:A0:3C:F1:9A:50:12:76:31:E5:4F:3B:09:D7:A5:2B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d1e791b-0b38-49c5-8065-92c771f9038a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.98.0/23 Signature Algorithm: sha256WithRSAEncryption 22:6c:32:6c:bc:d7:da:dc:1a:9d:e9:f2:1e:34:2f:e7:0f:b2: 8e:ad:5c:33:65:ae:09:63:d0:ed:f6:23:7a:0e:49:6e:a6:0c: 7d:2f:1f:81:45:7f:bf:f9:dd:69:71:d4:f7:b7:e3:37:0d:ff: bb:80:74:62:48:07:98:c6:53:af:58:f9:22:51:cb:da:71:a7: 55:cb:e4:db:5a:53:b5:3c:5e:36:c6:61:2c:bd:d2:bf:6d:80: 12:28:61:dd:a7:44:4c:a5:8a:a6:57:05:00:21:f1:86:fe:27: 3d:03:d4:b8:cc:04:2e:5d:16:3d:e2:5e:d2:1d:d8:b0:79:fe: 13:9d:0f:63:7f:e6:03:a7:af:69:70:56:dd:77:3f:64:86:55: 5b:29:7a:2f:0e:b3:5f:50:3a:b4:01:b6:37:3a:fc:64:8c:d4: 11:90:42:2b:93:e7:22:6d:35:89:98:b1:d5:b5:d2:99:01:b8: 48:e3:bc:49:c7:74:23:1e:41:70:68:2d:ea:0f:41:57:ec:09: d8:4a:6d:5d:74:02:54:49:53:2a:aa:6b:e9:17:5a:c9:bb:a8: d3:b4:f5:4c:51:f9:17:85:53:ba:41:98:d3:fd:6b:8c:59:f9: 72:41:8e:65:2a:9b:69:ba:43:02:cc:31:74:68:04:d0:82:93: 1a:ff:f1:b9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaaXr9Q2ppdDNOtcrW+qxDVn/SPQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDAyMDAwMDAwWhcNMjQwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTU3ODRkMTJiNTc2MGY3MjFlZDQ1MmUyZjJiODYzOGEw NWVhYWM5NDg5NmFhNWM5NTQ0MTQ5NWRmMmM2MjYzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu6QqHUsStMScrIUeTM7pKgGJ1gW6W8w541DnIRxzZyKGB rNi6fKF2T05/XEDNR98jLjsD1HCQkgRVu0MGf0vjlSbvJuXF8mSLN3ot3s1WgLbP kr+HBNdsx/bk1Oydf0oe1EuaKLPcczebcNFEruuG6MHmUkd9vV0asjlD0kIQ1pR/ NyGZpPqIzMgmAAnBWylr/vf2y7lOMN8f9oVcWyw8ivOFro5LAo1MhtHQK6Vi/YvG 0NSlbJtq262sWe3rHjeoe7pzjZq3oEGFnI9tUnMXBBxxan5bIhoVTx0Uwl0/eExB s9DdPjml+naSaPDIHDA1w72xWAT+u2PTtRGX+/h9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1PIneGygPPGaUBJ2MeVPOwnXpSswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZkMWU3OTFiLTBiMzgtNDljNS04MDY1LTkyYzc3MWY5MDM4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE28GIwDQYJKoZIhvcNAQELBQADggEBACJsMmy819rcGp3p8h40L+cPso6t XDNlrglj0O32I3oOSW6mDH0vH4FFf7/53Wlx1Pe34zcN/7uAdGJIB5jGU69Y+SJR y9pxp1XL5NtaU7U8XjbGYSy90r9tgBIoYd2nREyliqZXBQAh8Yb+Jz0D1LjMBC5d Fj3iXtId2LB5/hOdD2N/5gOnr2lwVt13P2SGVVspei8Os19QOrQBtjc6/GSM1BGQ QiuT5yJtNYmYsdW10pkBuEjjvEnHdCMeQXBoLeoPQVfsCdhKbV10AlRJUyqqa+kX Wsm7qNO09UxR+ReFU7pBmNP9a4xZ+XJBjmUqm2m6QwLMMXRoBNCCkxr/8bk= -----END CERTIFICATE-----Generated at Fri Apr 19 00:32:22 2024 by rpki-client on console-fra.rpki-client.org