$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6da61cc-cdfd-4d97-b00b-453553d166de.roa File: b6da61cc-cdfd-4d97-b00b-453553d166de.roa (raw, json) Hash identifier: /XSk0laoj4CWfnUfd3i1exxLk7KlJeYmmzm/dJIw+5U= Subject key identifier: 1E:FB:33:3C:A7:2B:4B:0A:02:B5:A4:26:E7:84:91:90:89:25:06:76 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 015CA6635F6985AEA0DCD5E717CE35C4A5836CEA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6da61cc-cdfd-4d97-b00b-453553d166de.roa Signing time: Mon 01 Apr 2024 00:00:00 +0000 ROA not before: Mon 01 Apr 2024 00:00:00 +0000 ROA not after: Mon 06 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 52.93.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:5c:a6:63:5f:69:85:ae:a0:dc:d5:e7:17:ce:35:c4:a5:83:6c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 1 00:00:00 2024 GMT Not After : May 6 23:59:59 2024 GMT Subject: serialNumber=1cff9482e54beab270ce74f783ffe901fd3226ba76d007bc422eea1fc9144925, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c2:ee:77:23:04:2d:ed:38:fb:49:bb:fc:aa: cd:6d:ed:aa:97:09:d6:84:ac:ee:17:ea:90:a8:a1: 91:0f:0a:b1:58:e2:e8:d3:34:5f:62:07:e7:e3:16: 25:db:cf:78:15:f0:ea:32:42:2c:ca:fa:4e:69:8d: 9c:1e:d3:a0:ba:80:a2:61:ef:6c:79:f7:bb:01:4f: d2:53:ef:68:0c:23:8f:a5:a3:90:89:81:98:c6:b7: 48:cb:24:e3:c0:c0:7f:08:ea:59:10:9f:8d:f4:1a: 0d:dd:f6:99:9e:e6:46:39:15:92:47:d4:75:82:c3: 64:40:d0:3e:b2:65:c4:bd:26:ac:e4:70:85:96:ef: a0:5a:22:38:b0:ac:ce:90:5c:b8:45:38:27:de:58: cf:9a:3a:3a:02:06:1f:45:fa:8e:f8:cf:4e:ad:9d: 80:f1:d6:62:25:b7:40:bc:35:94:3b:2c:50:6b:83: 96:07:2b:38:16:d6:c1:a1:8d:d2:4e:4d:aa:ab:97: 38:6e:dd:ca:d0:3e:05:c3:84:f4:ea:e0:91:5b:ad: 45:f3:48:28:69:8d:4a:d1:c8:07:43:17:f9:1b:0f: 74:27:15:05:48:79:50:69:cd:48:ae:73:a5:6c:3b: 50:33:40:3d:f3:6f:07:6a:07:0a:6a:2f:38:88:6c: 12:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FB:33:3C:A7:2B:4B:0A:02:B5:A4:26:E7:84:91:90:89:25:06:76 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6da61cc-cdfd-4d97-b00b-453553d166de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.8.0/22 Signature Algorithm: sha256WithRSAEncryption ac:82:fd:91:b1:52:81:0f:06:92:ba:76:4f:02:38:82:6c:23: 28:62:a3:60:38:3a:57:bf:04:98:e6:a3:97:8b:b7:fc:d3:20: ab:18:8c:93:b7:92:79:df:3d:64:61:d8:68:ab:fa:9c:48:e0: 6b:ec:98:bf:fd:31:06:ab:c7:9c:df:e9:ae:a9:4b:a7:e4:c3: 5a:09:a2:65:b2:b4:19:d7:19:9d:2d:1b:b1:48:d1:79:65:07: 97:9f:1a:12:e8:5f:e6:30:ee:a9:dc:88:f3:12:4f:b5:9a:7a: 51:a6:d6:ac:41:0c:4c:73:2d:75:bb:1d:cc:db:70:d5:a5:2b: d6:a0:b3:6b:34:82:42:5a:00:c0:e8:7e:d0:55:6c:e4:dc:f2: 5a:63:21:d5:2b:97:ab:f0:0c:8e:61:af:ae:33:d2:6f:36:1c: d8:8b:b5:3c:1b:c4:14:70:39:d2:b4:ab:28:f8:a8:72:06:f7: fd:44:1d:f5:36:07:da:1a:ed:e6:7b:79:fd:15:80:88:f3:48: 46:85:70:04:a6:96:d0:6a:87:67:ff:9b:a8:a2:c3:b6:e5:dd: 58:e4:d5:c4:c6:4b:ba:c7:fa:53:90:b9:46:85:65:2e:bb:d3: 99:94:9e:14:99:2e:c4:12:d3:23:3b:df:bc:aa:f0:76:e7:98: b5:79:e9:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAVymY19pha6g3NXnF841xKWDbOowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDAxMDAwMDAwWhcNMjQwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxY2ZmOTQ4MmU1NGJlYWIyNzBjZTc0Zjc4M2ZmZTkwMWZk MzIyNmJhNzZkMDA3YmM0MjJlZWExZmM5MTQ0OTI1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNwu53IwQt7Tj7Sbv8qs1t7aqXCdaErO4X6pCooZEPCrFY 4ujTNF9iB+fjFiXbz3gV8OoyQizK+k5pjZwe06C6gKJh72x597sBT9JT72gMI4+l o5CJgZjGt0jLJOPAwH8I6lkQn430Gg3d9pme5kY5FZJH1HWCw2RA0D6yZcS9Jqzk cIWW76BaIjiwrM6QXLhFOCfeWM+aOjoCBh9F+o74z06tnYDx1mIlt0C8NZQ7LFBr g5YHKzgW1sGhjdJOTaqrlzhu3crQPgXDhPTq4JFbrUXzSChpjUrRyAdDF/kbD3Qn FQVIeVBpzUiuc6VsO1AzQD3zbwdqBwpqLziIbBJpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHvszPKcrSwoCtaQm54SRkIklBnYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I2ZGE2MWNjLWNkZmQtNGQ5Ny1iMDBiLTQ1MzU1M2QxNjZkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0XQgwDQYJKoZIhvcNAQELBQADggEBAKyC/ZGxUoEPBpK6dk8COIJsIyhi o2A4Ole/BJjmo5eLt/zTIKsYjJO3knnfPWRh2Gir+pxI4GvsmL/9MQarx5zf6a6p S6fkw1oJomWytBnXGZ0tG7FI0XllB5efGhLoX+Yw7qnciPMST7WaelGm1qxBDExz LXW7HczbcNWlK9ags2s0gkJaAMDoftBVbOTc8lpjIdUrl6vwDI5hr64z0m82HNiL tTwbxBRwOdK0qyj4qHIG9/1EHfU2B9oa7eZ7ef0VgIjzSEaFcASmltBqh2f/m6ii w7bl3Vjk1cTGS7rH+lOQuUaFZS6705mUnhSZLsQS0yM737yq8HbnmLV56eM= -----END CERTIFICATE-----Generated at Fri Apr 19 00:52:23 2024 by rpki-client on console-ams.rpki-client.org