$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92348d08-34ca-4ca2-a230-2feb401741e8.roa File: 92348d08-34ca-4ca2-a230-2feb401741e8.roa (raw, json) Hash identifier: M60nDw/4h/fn6d5ixGOK59+JFCH1qDnrOfXJ9JxSl/E= Subject key identifier: B6:41:73:D5:A5:69:80:83:4E:93:59:50:66:FB:60:16:92:EB:DB:02 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 54A96F8B187A5E4FF57D55937D511AD7D2E0E6C0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92348d08-34ca-4ca2-a230-2feb401741e8.roa Signing time: Fri 05 Apr 2024 00:00:00 +0000 ROA not before: Fri 05 Apr 2024 00:00:00 +0000 ROA not after: Fri 10 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 18.152.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a9:6f:8b:18:7a:5e:4f:f5:7d:55:93:7d:51:1a:d7:d2:e0:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 5 00:00:00 2024 GMT Not After : May 10 23:59:59 2024 GMT Subject: serialNumber=8f10a31d59ef915e0496dd8b00a3f9dc452ab8082b122a2bc26a73a624534afb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cf:18:ef:9d:63:00:65:9c:d7:8c:3c:e6:7d: 8e:02:61:86:3c:8c:1f:fc:01:e3:9c:f9:d4:c1:a2: 08:c9:95:6e:4b:8c:26:b1:6c:8c:f4:b9:2a:87:f2: be:68:ab:2e:33:b3:11:61:84:02:f9:3d:0e:f8:2b: 7e:e0:a7:06:45:e4:26:92:83:3e:be:c6:ce:14:3f: ec:6e:3a:a7:1b:7c:96:ff:a4:d2:50:ea:9e:bd:10: bb:6d:07:78:ea:32:58:ff:80:25:87:60:d0:24:67: f0:6a:4f:ed:79:e4:cf:f2:de:1e:4c:ea:40:b2:84: 00:e1:3b:3a:d2:df:81:01:de:bd:8d:39:07:08:46: c7:45:30:a3:e5:a3:be:a1:a2:e7:c4:bc:18:c0:52: 6f:d6:0e:3f:16:c4:58:f7:b7:03:8b:15:c8:21:c8: 98:8a:c3:e8:aa:17:69:c4:58:9b:a6:46:65:ca:4f: a4:1d:6d:72:ed:92:f2:74:cf:be:75:38:85:92:0b: 2d:4f:58:fb:0f:68:61:5f:e5:a1:7c:42:f1:9f:96: 48:6b:49:4e:7a:c8:f6:35:57:40:aa:b9:3b:4d:a4: 8a:13:a6:2c:8d:e2:68:84:83:20:ef:58:5b:62:91: e8:7b:5f:c3:8e:ed:41:9e:09:c9:b9:49:1e:ef:6c: 06:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:41:73:D5:A5:69:80:83:4E:93:59:50:66:FB:60:16:92:EB:DB:02 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92348d08-34ca-4ca2-a230-2feb401741e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.152.0.0/16 Signature Algorithm: sha256WithRSAEncryption 97:3c:4b:2f:72:4b:af:61:78:8c:75:69:ea:40:a4:84:89:05: b4:67:b0:d8:22:35:35:21:df:43:de:02:8e:3e:a2:13:20:23: fc:d9:be:2c:54:9b:f0:19:6a:a0:8d:e0:55:4f:75:c3:02:01: 51:d9:26:89:25:79:4d:20:57:61:38:a9:16:fa:c0:19:d2:c1: b4:d3:f2:44:ee:65:1a:3c:d7:b6:1f:75:29:43:31:82:b4:b3: 20:66:6d:dd:a9:3c:12:1f:2d:d3:7d:ca:70:5f:10:30:d6:34: c5:d0:42:1b:a9:b7:dd:85:c9:6f:f3:a9:48:ba:10:f2:b1:ae: 5b:f2:95:22:60:99:39:39:54:77:4d:65:9e:b5:86:b4:4d:83: e1:72:46:90:00:bb:da:c5:d3:cd:13:0b:26:71:e9:3e:e5:cd: 6e:1f:13:93:e3:5d:ab:14:3c:7a:36:b7:f4:cc:d1:72:be:30: 7b:1a:d2:3c:1a:6e:ef:d2:0b:a9:e2:39:d2:0e:9d:9a:9d:3d: cc:3a:dd:c3:55:dc:df:bc:10:0f:3e:b8:85:d8:ef:74:27:33: c0:c3:4c:9d:6b:aa:e6:c9:50:3e:8b:37:25:f5:91:5c:bb:0b: 12:d8:9c:0e:49:9b:27:74:0a:3b:b5:7a:e5:c4:38:39:b4:19: 28:3b:0e:0b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVKlvixh6Xk/1fVWTfVEa19Lg5sAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA1MDAwMDAwWhcNMjQwNTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZjEwYTMxZDU5ZWY5MTVlMDQ5NmRkOGIwMGEzZjlkYzQ1 MmFiODA4MmIxMjJhMmJjMjZhNzNhNjI0NTM0YWZiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyzxjvnWMAZZzXjDzmfY4CYYY8jB/8AeOc+dTBogjJlW5L jCaxbIz0uSqH8r5oqy4zsxFhhAL5PQ74K37gpwZF5CaSgz6+xs4UP+xuOqcbfJb/ pNJQ6p69ELttB3jqMlj/gCWHYNAkZ/BqT+155M/y3h5M6kCyhADhOzrS34EB3r2N OQcIRsdFMKPlo76houfEvBjAUm/WDj8WxFj3twOLFcghyJiKw+iqF2nEWJumRmXK T6QdbXLtkvJ0z751OIWSCy1PWPsPaGFf5aF8QvGflkhrSU56yPY1V0CquTtNpIoT piyN4miEgyDvWFtikeh7X8OO7UGeCcm5SR7vbAYNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUtkFz1aVpgINOk1lQZvtgFpLr2wIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkyMzQ4ZDA4LTM0Y2EtNGNhMi1hMjMwLTJmZWI0MDE3NDFlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASmDANBgkqhkiG9w0BAQsFAAOCAQEAlzxLL3JLr2F4jHVp6kCkhIkFtGew 2CI1NSHfQ94Cjj6iEyAj/Nm+LFSb8BlqoI3gVU91wwIBUdkmiSV5TSBXYTipFvrA GdLBtNPyRO5lGjzXth91KUMxgrSzIGZt3ak8Eh8t033KcF8QMNY0xdBCG6m33YXJ b/OpSLoQ8rGuW/KVImCZOTlUd01lnrWGtE2D4XJGkAC72sXTzRMLJnHpPuXNbh8T k+NdqxQ8eja39MzRcr4wexrSPBpu79ILqeI50g6dmp09zDrdw1Xc37wQDz64hdjv dCczwMNMnWuq5slQPos3JfWRXLsLEticDkmbJ3QKO7V65cQ4ObQZKDsOCw== -----END CERTIFICATE-----Generated at Wed Apr 24 18:35:33 2024 by rpki-client on console-ams.rpki-client.org