$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/814145e8-de24-4865-86b4-acd1c9db28f0.roa File: 814145e8-de24-4865-86b4-acd1c9db28f0.roa (raw, json) Hash identifier: viSdxiCuB5jnqqZVW3A6Zyotrbosw/Sa+plwANGkiKA= Subject key identifier: 03:CB:BE:43:5F:FF:34:B5:FE:6A:37:AE:43:1E:7A:A2:06:08:F4:0F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1AEC51C7BDE4EF3D06DDA41677FEDC0D27FB98A8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/814145e8-de24-4865-86b4-acd1c9db28f0.roa Signing time: Tue 13 Aug 2024 00:00:00 +0000 ROA not before: Tue 13 Aug 2024 00:00:00 +0000 ROA not after: Tue 17 Sep 2024 23:59:59 +0000 asID: 16509 IP address blocks: 52.223.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Sep 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ec:51:c7:bd:e4:ef:3d:06:dd:a4:16:77:fe:dc:0d:27:fb:98:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 13 00:00:00 2024 GMT Not After : Sep 17 23:59:59 2024 GMT Subject: serialNumber=44dea5298f5286c318a2ffb075117818c83153e5f6e25823658530e4bbbbdb21, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:75:b1:15:41:99:21:61:10:af:e1:7e:cc:b9: 7f:d5:cf:fe:a3:12:3d:68:f7:09:ab:6f:03:a2:01: 3c:14:50:f8:f8:05:c5:85:80:dd:93:5e:0e:fd:cb: ae:5f:dd:cb:cf:80:28:fd:5a:9f:1b:47:6a:6d:65: 61:7d:79:21:73:77:ff:78:2c:a2:0d:bd:9e:83:ba: 7e:ad:ae:7b:a3:c0:6b:0e:36:fb:ba:f1:f6:07:54: 4d:60:23:76:1c:aa:07:d4:97:70:19:8c:a6:7a:c5: e9:cc:c2:52:70:06:3f:25:b6:9b:51:10:44:81:7d: 7e:89:e3:a5:2e:04:eb:2f:22:02:00:e8:2b:a0:b8: 36:81:03:be:8c:f9:43:48:b1:5b:40:5e:9e:49:43: 27:bd:5a:8a:95:15:41:29:fc:11:03:c0:18:6f:9e: e9:ee:ba:d3:78:8a:de:b1:d3:c1:0e:42:08:fe:e9: 78:50:27:d3:06:a7:38:c5:7c:87:0a:82:fe:6d:fd: 6d:1b:d6:01:2d:1f:7b:e9:a0:64:34:53:3f:20:bf: 30:b6:aa:82:f2:31:1d:0b:dc:1f:93:6f:1d:45:0e: 6f:76:ce:27:6f:30:95:3f:97:b5:31:00:b6:89:7e: 1d:c7:ec:92:7b:70:38:4a:fc:e9:f1:43:78:b6:b8: 52:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CB:BE:43:5F:FF:34:B5:FE:6A:37:AE:43:1E:7A:A2:06:08:F4:0F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/814145e8-de24-4865-86b4-acd1c9db28f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.223.128.0/18 Signature Algorithm: sha256WithRSAEncryption a1:6f:9f:ed:4d:db:79:66:ca:5c:54:15:d6:4e:f5:a3:1b:4f: 22:4d:ba:85:99:4d:98:82:f5:45:69:bd:c3:99:e0:0f:47:00: 8d:ad:40:aa:2c:e9:5f:1b:81:00:71:52:58:e7:54:bf:aa:7d: b7:49:8a:76:82:96:83:52:bb:81:95:ae:ea:07:9a:7f:30:2c: d0:a1:1c:6d:b7:a1:61:10:3c:3e:80:98:f6:da:47:d2:d6:e7: bc:bd:0f:6c:5f:b1:18:0e:9d:17:b9:a7:b4:54:0d:3a:61:e9: dc:94:cd:68:43:58:03:0c:24:e7:a7:0c:cc:c5:d6:81:93:9e: 30:9c:0a:9c:69:1f:72:d6:6d:93:c8:19:0e:37:5d:0f:f5:08: 11:5c:3f:d1:f7:0a:d6:a2:2e:f5:39:24:d5:91:58:1e:79:f1: be:8d:ec:84:b2:0f:81:aa:eb:de:16:2d:6b:f1:da:90:7c:34: 51:ff:a6:f2:f1:93:98:ca:f4:95:d3:85:15:75:25:5e:d1:ec: 3f:60:02:a3:14:7e:5b:bc:f5:ba:c0:44:9f:f1:fd:2a:b3:af: ab:1e:98:68:eb:72:e6:11:06:16:3d:18:ac:f6:b0:7c:74:c0: 97:2c:59:8d:f5:f9:5b:da:f4:ea:45:c5:e0:d1:6d:b4:6b:14: 5d:f3:f5:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGuxRx73k7z0G3aQWd/7cDSf7mKgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwODEzMDAwMDAwWhcNMjQwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NGRlYTUyOThmNTI4NmMzMThhMmZmYjA3NTExNzgxOGM4 MzE1M2U1ZjZlMjU4MjM2NTg1MzBlNGJiYmJkYjIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRdbEVQZkhYRCv4X7MuX/Vz/6jEj1o9wmrbwOiATwUUPj4 BcWFgN2TXg79y65f3cvPgCj9Wp8bR2ptZWF9eSFzd/94LKINvZ6Dun6trnujwGsO Nvu68fYHVE1gI3YcqgfUl3AZjKZ6xenMwlJwBj8ltptREESBfX6J46UuBOsvIgIA 6CuguDaBA76M+UNIsVtAXp5JQye9WoqVFUEp/BEDwBhvnunuutN4it6x08EOQgj+ 6XhQJ9MGpzjFfIcKgv5t/W0b1gEtH3vpoGQ0Uz8gvzC2qoLyMR0L3B+Tbx1FDm92 zidvMJU/l7UxALaJfh3H7JJ7cDhK/OnxQ3i2uFKjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUA8u+Q1//NLX+ajeuQx56ogYI9A8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgxNDE0NWU4LWRlMjQtNDg2NS04NmI0LWFjZDFjOWRiMjhmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY034AwDQYJKoZIhvcNAQELBQADggEBAKFvn+1N23lmylxUFdZO9aMbTyJN uoWZTZiC9UVpvcOZ4A9HAI2tQKos6V8bgQBxUljnVL+qfbdJinaCloNSu4GVruoH mn8wLNChHG23oWEQPD6AmPbaR9LW57y9D2xfsRgOnRe5p7RUDTph6dyUzWhDWAMM JOenDMzF1oGTnjCcCpxpH3LWbZPIGQ43XQ/1CBFcP9H3CtaiLvU5JNWRWB558b6N 7ISyD4Gq694WLWvx2pB8NFH/pvLxk5jK9JXThRV1JV7R7D9gAqMUflu89brARJ/x /Sqzr6semGjrcuYRBhY9GKz2sHx0wJcsWY31+Vva9OpFxeDRbbRrFF3z9bs= -----END CERTIFICATE-----Generated at Sat Sep 7 01:40:13 2024 by rpki-client on console-ams.rpki-client.org