$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a77b9b01-29c2-4491-a2dd-b8a78231d458.roa File: a77b9b01-29c2-4491-a2dd-b8a78231d458.roa (raw, json) Hash identifier: FT0FAErULY8JowvBaTiI1xrpE9XvtP6rEDfKs69cGXU= Subject key identifier: E1:23:CC:60:49:5D:FB:CE:6C:19:6A:40:58:92:55:33:22:F2:81:BE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 16E993AF0BC7054ADE5EFC30036C5D1A9AC63CBD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a77b9b01-29c2-4491-a2dd-b8a78231d458.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 18.224.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e9:93:af:0b:c7:05:4a:de:5e:fc:30:03:6c:5d:1a:9a:c6:3c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=afeda83929f44eeae26cd93aa8b0468da9178aa615c6162ddfc9fdf769743aad, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7c:d8:8c:e1:29:d2:5f:5b:f5:52:99:e2:8c: b2:dc:d2:4f:f6:15:c9:44:8f:55:48:c4:d9:36:e2: 64:06:d9:33:98:fa:c5:ba:c5:23:18:02:2c:74:f7: 44:21:a9:8d:40:b8:ba:d8:43:0c:53:a3:ce:5f:b0: be:76:f0:55:17:ea:5f:a3:77:72:ec:2d:de:01:d9: e6:9e:e4:e1:ca:cd:bb:92:42:8b:a4:df:d7:eb:ca: c2:09:90:2e:07:11:87:6d:39:3c:1b:00:9e:ce:31: e9:0f:f2:e9:2c:a8:33:11:27:2e:6d:fb:0a:72:d9: e7:ac:4f:c6:e2:00:00:89:8f:59:84:22:d3:4d:ec: e9:32:1e:54:cd:66:e2:ee:4d:8c:00:b6:73:50:fb: 22:27:2c:1a:24:ea:69:3e:47:99:c8:8c:ea:6e:61: d5:7d:1f:d3:ba:d9:f9:5e:51:f5:eb:f4:d6:f5:f0: f1:fa:df:47:31:23:71:b7:11:4d:25:2f:39:66:11: 7f:64:48:b0:ed:83:c6:50:83:c9:32:82:71:3c:92: 86:4f:dd:39:46:2d:c0:6c:08:e1:a5:c0:98:c4:d3: 7a:bf:16:ce:b9:ff:b1:6e:6f:5a:7a:ec:b4:a8:0c: 6f:d9:f3:fc:53:83:4a:e2:88:c7:dc:8c:0c:55:6b: 4b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:23:CC:60:49:5D:FB:CE:6C:19:6A:40:58:92:55:33:22:F2:81:BE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a77b9b01-29c2-4491-a2dd-b8a78231d458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.224.0.0/14 Signature Algorithm: sha256WithRSAEncryption 8e:cd:55:6a:d8:d1:c0:57:d1:b1:09:98:5d:5a:63:d5:ef:e8: 0d:4d:59:f8:f0:ee:83:70:f5:88:cb:ef:0e:26:65:95:33:3f: e9:e0:10:3e:c8:56:0d:91:e7:c5:33:0b:fc:b5:04:ef:3d:40: d6:0f:40:b0:bf:23:8d:c0:c7:57:2a:80:49:d4:c2:f5:50:9c: 47:6f:63:64:fd:3d:f1:84:3d:29:f1:36:7f:90:97:ce:df:ae: 60:f3:50:ec:97:63:01:cb:af:cd:0d:2e:bc:4b:48:63:4d:f9: d5:b1:78:25:d4:9d:5d:5f:82:13:ab:fd:6a:2c:4d:37:89:bf: ec:72:ed:8c:05:a9:5c:16:09:c4:27:ae:03:a3:b0:e3:25:a9: f1:52:d1:c5:60:b6:77:cc:25:a5:ab:cd:fe:33:9a:e6:e6:b3: e8:f6:28:8d:b1:9a:9b:48:04:66:42:7c:f0:37:0f:a8:4b:45: 2b:ca:50:b5:07:a2:c6:a3:9f:31:3a:9f:9d:80:8c:93:5b:27: b7:3c:da:fb:cb:36:b8:48:17:a4:f8:bb:01:8d:00:dc:46:95: 45:ba:a4:d1:0f:83:de:9c:5b:07:8f:c3:de:5b:f5:c4:4c:c3: bb:ff:ee:ab:74:dc:01:92:53:cf:f2:1b:67:be:0f:4b:b3:7f: 6c:28:1a:51 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFumTrwvHBUreXvwwA2xdGprGPL0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmVkYTgzOTI5ZjQ0ZWVhZTI2Y2Q5M2FhOGIwNDY4ZGE5 MTc4YWE2MTVjNjE2MmRkZmM5ZmRmNzY5NzQzYWFkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmfNiM4SnSX1v1UpnijLLc0k/2FclEj1VIxNk24mQG2TOY +sW6xSMYAix090QhqY1AuLrYQwxTo85fsL528FUX6l+jd3LsLd4B2eae5OHKzbuS Qouk39frysIJkC4HEYdtOTwbAJ7OMekP8uksqDMRJy5t+wpy2eesT8biAACJj1mE ItNN7OkyHlTNZuLuTYwAtnNQ+yInLBok6mk+R5nIjOpuYdV9H9O62fleUfXr9Nb1 8PH630cxI3G3EU0lLzlmEX9kSLDtg8ZQg8kygnE8koZP3TlGLcBsCOGlwJjE03q/ Fs65/7Fub1p67LSoDG/Z8/xTg0riiMfcjAxVa0uRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU4SPMYEld+85sGWpAWJJVMyLygb4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E3N2I5YjAxLTI5YzItNDQ5MS1hMmRkLWI4YTc4MjMxZDQ1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIS4DANBgkqhkiG9w0BAQsFAAOCAQEAjs1VatjRwFfRsQmYXVpj1e/oDU1Z +PDug3D1iMvvDiZllTM/6eAQPshWDZHnxTML/LUE7z1A1g9AsL8jjcDHVyqASdTC 9VCcR29jZP098YQ9KfE2f5CXzt+uYPNQ7JdjAcuvzQ0uvEtIY0351bF4JdSdXV+C E6v9aixNN4m/7HLtjAWpXBYJxCeuA6Ow4yWp8VLRxWC2d8wlpavN/jOa5uaz6PYo jbGam0gEZkJ88DcPqEtFK8pQtQeixqOfMTqfnYCMk1sntzza+8s2uEgXpPi7AY0A 3EaVRbqk0Q+D3pxbB4/D3lv1xEzDu//uq3TcAZJTz/IbZ74PS7N/bCgaUQ== -----END CERTIFICATE-----Generated at Sat Apr 20 01:02:37 2024 by rpki-client on console-fra.rpki-client.org