$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6dbd0812-c186-43dc-84c8-601c485a9246.roa File: 6dbd0812-c186-43dc-84c8-601c485a9246.roa (raw, json) Hash identifier: tyrV4FSjzTTN7R7Rs4/FPU5Qbcw7lDaHTOcUsyeULVU= Subject key identifier: 29:CC:6A:70:99:80:61:CB:13:89:43:44:87:5C:10:75:A2:EB:08:D8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 115AB324091FA41CF86EA1CE5626E042C8E91244 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6dbd0812-c186-43dc-84c8-601c485a9246.roa Signing time: Mon 01 Apr 2024 00:00:00 +0000 ROA not before: Mon 01 Apr 2024 00:00:00 +0000 ROA not after: Mon 06 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:5a:b3:24:09:1f:a4:1c:f8:6e:a1:ce:56:26:e0:42:c8:e9:12:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 1 00:00:00 2024 GMT Not After : May 6 23:59:59 2024 GMT Subject: serialNumber=bddb3cc1e60386d47486112e374fe4eae6091bee8ffaf79508e337b14aa1fca3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cc:01:e7:0a:48:5c:ce:ab:e9:c8:2f:1e:9b: 51:d2:c8:d6:3b:a1:5d:94:b8:3a:e6:8a:5c:b3:eb: ef:27:97:9d:5c:8e:35:82:48:7f:d1:6a:1c:d4:a6: 01:ad:9f:fc:bf:be:62:dd:5d:f7:56:fe:c1:3d:58: 99:1a:59:f2:66:88:34:95:a3:87:62:8d:2e:49:f9: cc:22:63:9d:94:97:bf:1a:cd:f3:31:c4:96:1c:1d: c7:ee:36:fc:2c:34:5a:5e:1e:07:5e:85:a0:f5:d7: 60:cc:28:7c:35:95:81:47:a6:4e:9b:7f:d0:26:a8: cb:87:8c:26:20:04:59:30:0d:e0:10:72:a2:ed:65: c5:e5:89:db:8c:f7:d3:37:a4:e6:e2:ba:78:82:e1: c4:00:8f:5c:d1:66:cf:55:70:f7:b2:9b:d1:0f:af: 10:03:b3:51:42:fc:6b:45:3c:07:d3:4d:6b:6b:78: 19:43:16:57:ee:62:c3:15:74:91:a1:3c:00:93:69: 94:04:dd:20:54:08:5b:77:0d:15:fc:3b:26:82:58: 92:44:7c:a2:d5:3d:3b:78:62:84:00:99:73:92:98: fa:b5:bc:27:b8:00:10:89:c6:81:a6:e3:f5:96:a8: 58:d1:42:27:ab:e4:26:e2:47:9a:59:3d:c6:41:ce: 42:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CC:6A:70:99:80:61:CB:13:89:43:44:87:5C:10:75:A2:EB:08:D8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6dbd0812-c186-43dc-84c8-601c485a9246.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.176.0/21 Signature Algorithm: sha256WithRSAEncryption 2f:28:3c:44:6f:cb:2d:fb:e0:56:8a:e7:25:15:76:77:20:9d: e3:e9:bc:9e:64:c0:db:66:8a:d1:7f:a5:a7:cc:19:a8:16:e7: 0a:23:c5:6d:e5:ae:c1:80:cd:2a:d6:cd:d5:b8:5d:8f:49:3f: 7d:38:69:1f:ba:bd:84:fe:5d:8b:ae:44:2e:5c:10:64:11:10: 35:fd:35:a6:50:65:86:a6:08:b6:08:56:36:e0:7d:8d:1a:b0: 45:fb:c2:5a:dc:00:0b:60:90:9c:70:26:6f:fc:36:45:b3:08: c7:9a:27:8f:55:91:c5:f8:90:d5:bf:be:7c:9f:2f:19:fd:07: 9e:93:04:85:ed:fc:51:fa:0e:0f:00:e3:b6:49:0b:0e:09:59: 13:4a:0a:e1:9c:89:72:e9:c7:40:70:8a:06:14:84:c6:a0:c0: 90:6f:d5:b2:92:5c:65:26:52:9d:ea:87:d7:89:99:1e:84:34: 2e:1e:4b:16:47:ce:cc:f1:26:7d:ca:0a:ae:0b:78:a7:e7:ef: 92:83:44:23:ca:c4:c3:f2:dd:83:c8:12:0c:88:9e:60:3f:7f: 0b:9c:c1:07:04:e4:ee:d5:9d:28:ca:e1:e3:e4:6b:85:8a:0e: ac:0b:ca:79:3b:5c:88:10:d3:5e:f5:ef:9f:1e:7d:bd:03:bf: 14:d9:bc:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEVqzJAkfpBz4bqHOVibgQsjpEkQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDAxMDAwMDAwWhcNMjQwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZGRiM2NjMWU2MDM4NmQ0NzQ4NjExMmUzNzRmZTRlYWU2 MDkxYmVlOGZmYWY3OTUwOGUzMzdiMTRhYTFmY2EzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZzAHnCkhczqvpyC8em1HSyNY7oV2UuDrmilyz6+8nl51c jjWCSH/RahzUpgGtn/y/vmLdXfdW/sE9WJkaWfJmiDSVo4dijS5J+cwiY52Ul78a zfMxxJYcHcfuNvwsNFpeHgdehaD112DMKHw1lYFHpk6bf9AmqMuHjCYgBFkwDeAQ cqLtZcXliduM99M3pObiuniC4cQAj1zRZs9VcPeym9EPrxADs1FC/GtFPAfTTWtr eBlDFlfuYsMVdJGhPACTaZQE3SBUCFt3DRX8OyaCWJJEfKLVPTt4YoQAmXOSmPq1 vCe4ABCJxoGm4/WWqFjRQier5CbiR5pZPcZBzkLvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKcxqcJmAYcsTiUNEh1wQdaLrCNgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZkYmQwODEyLWMxODYtNDNkYy04NGM4LTYwMWM0ODVhOTI0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMP3LAwDQYJKoZIhvcNAQELBQADggEBAC8oPERvyy374FaK5yUVdncgnePp vJ5kwNtmitF/pafMGagW5wojxW3lrsGAzSrWzdW4XY9JP304aR+6vYT+XYuuRC5c EGQREDX9NaZQZYamCLYIVjbgfY0asEX7wlrcAAtgkJxwJm/8NkWzCMeaJ49VkcX4 kNW/vnyfLxn9B56TBIXt/FH6Dg8A47ZJCw4JWRNKCuGciXLpx0BwigYUhMagwJBv 1bKSXGUmUp3qh9eJmR6ENC4eSxZHzszxJn3KCq4LeKfn75KDRCPKxMPy3YPIEgyI nmA/fwucwQcE5O7VnSjK4ePka4WKDqwLynk7XIgQ0171758efb0DvxTZvMI= -----END CERTIFICATE-----Generated at Fri Apr 26 11:01:03 2024 by rpki-client on console-ams.rpki-client.org