$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6fcfcee-8141-4ef5-95ca-3ea2875c3e50.roa File: b6fcfcee-8141-4ef5-95ca-3ea2875c3e50.roa (raw, json) Hash identifier: NY37yeP474xNxiV3CAh8JXQC262F60s3tRkGuhmuTog= Subject key identifier: DA:16:A6:B2:F7:09:34:7F:F8:3F:C9:5E:E4:2C:F5:D2:99:CE:77:8B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 38F9B0691DF6317DF3F88174D2EAE23325B280AD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6fcfcee-8141-4ef5-95ca-3ea2875c3e50.roa Signing time: Fri 05 Apr 2024 00:00:00 +0000 ROA not before: Fri 05 Apr 2024 00:00:00 +0000 ROA not after: Fri 10 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f9:b0:69:1d:f6:31:7d:f3:f8:81:74:d2:ea:e2:33:25:b2:80:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 5 00:00:00 2024 GMT Not After : May 10 23:59:59 2024 GMT Subject: serialNumber=3c5a2fd4bd39d996cb6b177856efae1901551249103271ed9ef881e7fe95cca5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fe:9b:55:58:85:0e:79:8d:ac:a3:a1:57:a8: 5f:23:82:47:5b:05:02:dd:30:1a:c1:d0:84:72:74: 2e:c7:2c:45:cd:ac:2b:5a:02:d3:ec:96:3a:23:75: 14:51:7e:03:b0:3a:21:35:ab:fd:88:82:a9:05:f0: 1a:88:8f:7f:bd:89:a1:76:ba:b0:8c:cf:e4:0f:ed: 83:9b:19:4b:c6:29:f9:87:1b:22:af:a6:dc:2c:63: 47:20:2a:b2:e5:ca:8e:c6:05:35:8c:18:e9:31:87: 4b:5f:0a:ad:1a:0b:0b:dd:8c:37:28:e0:91:1c:c7: 78:2e:2e:de:00:f7:e3:05:34:95:ae:49:7b:83:22: 2f:73:ec:1d:94:c0:2d:14:79:d9:16:7b:28:64:fb: 08:f6:26:00:6c:67:ea:b3:55:68:96:4e:35:53:50: d5:b9:cc:a1:87:18:c2:d6:c9:04:4e:1f:77:ac:07: 11:fb:91:38:ba:c5:01:73:31:d8:71:31:e5:3e:03: 2c:fc:8c:24:f6:cb:d9:8c:7f:97:fc:7d:d9:43:4f: dc:41:53:fd:c8:f0:5d:77:cd:ce:0a:84:84:27:cb: d6:ec:ab:c7:3a:78:66:ce:ad:f1:8d:7e:71:bb:fe: be:ae:e7:0d:36:4a:6e:19:48:76:e7:e3:a7:ee:ba: 79:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:16:A6:B2:F7:09:34:7F:F8:3F:C9:5E:E4:2C:F5:D2:99:CE:77:8B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6fcfcee-8141-4ef5-95ca-3ea2875c3e50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.40.0/24 Signature Algorithm: sha256WithRSAEncryption 08:6d:f8:b8:6f:9b:b0:ad:51:28:27:cd:1d:7a:5b:2b:9e:78: a6:8a:15:28:0b:87:81:e2:37:3d:59:bb:e5:1e:b7:1f:52:49: ac:52:6a:4d:ad:bd:aa:c0:59:f2:b4:9e:7d:c7:73:26:17:f3: 62:c5:8f:29:35:9b:84:74:67:bb:83:99:34:19:85:c0:ac:5a: 18:06:9f:1a:da:ea:83:0a:0a:80:f8:c0:1e:6f:78:24:92:76: a3:51:9a:a9:49:2c:b6:9b:bc:62:f2:05:d3:54:e7:a6:c6:05: b0:38:4e:6f:fb:6a:0f:c9:55:45:55:5c:d6:69:81:82:97:09: 07:1a:2b:05:60:33:b8:1a:4f:a8:ce:82:91:c5:3c:d1:3d:f4: ff:e9:63:8f:01:b8:19:db:4e:bf:df:47:e9:20:42:5f:39:e5: f6:98:26:d5:19:03:0c:00:42:d8:eb:b2:b9:d3:ac:c0:ce:a0: 2c:72:08:d7:1e:53:8f:03:43:3b:89:2a:dc:f0:e4:78:18:74: 0e:33:59:f0:bd:9c:0a:86:42:55:1e:be:8d:57:ff:02:bd:d0: 8f:df:78:c1:1d:f3:3c:2e:6d:d3:a1:7b:03:81:8f:91:49:dc: 51:9c:7a:61:5e:c0:94:05:67:b3:4a:2c:fa:5b:bc:66:64:ce: 37:96:ec:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOPmwaR32MX3z+IF00uriMyWygK0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA1MDAwMDAwWhcNMjQwNTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzVhMmZkNGJkMzlkOTk2Y2I2YjE3Nzg1NmVmYWUxOTAx NTUxMjQ5MTAzMjcxZWQ5ZWY4ODFlN2ZlOTVjY2E1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCS/ptVWIUOeY2so6FXqF8jgkdbBQLdMBrB0IRydC7HLEXN rCtaAtPsljojdRRRfgOwOiE1q/2IgqkF8BqIj3+9iaF2urCMz+QP7YObGUvGKfmH GyKvptwsY0cgKrLlyo7GBTWMGOkxh0tfCq0aCwvdjDco4JEcx3guLt4A9+MFNJWu SXuDIi9z7B2UwC0UedkWeyhk+wj2JgBsZ+qzVWiWTjVTUNW5zKGHGMLWyQROH3es BxH7kTi6xQFzMdhxMeU+Ayz8jCT2y9mMf5f8fdlDT9xBU/3I8F13zc4KhIQny9bs q8c6eGbOrfGNfnG7/r6u5w02Sm4ZSHbn46fuunlHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2hamsvcJNH/4P8le5Cz10pnOd4swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I2ZmNmY2VlLTgxNDEtNGVmNS05NWNhLTNlYTI4NzVjM2U1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XygwDQYJKoZIhvcNAQELBQADggEBAAht+Lhvm7CtUSgnzR16WyueeKaK FSgLh4HiNz1Zu+Uetx9SSaxSak2tvarAWfK0nn3HcyYX82LFjyk1m4R0Z7uDmTQZ hcCsWhgGnxra6oMKCoD4wB5veCSSdqNRmqlJLLabvGLyBdNU56bGBbA4Tm/7ag/J VUVVXNZpgYKXCQcaKwVgM7gaT6jOgpHFPNE99P/pY48BuBnbTr/fR+kgQl855faY JtUZAwwAQtjrsrnTrMDOoCxyCNceU48DQzuJKtzw5HgYdA4zWfC9nAqGQlUevo1X /wK90I/feMEd8zwubdOhewOBj5FJ3FGcemFewJQFZ7NKLPpbvGZkzjeW7Jg= -----END CERTIFICATE-----Generated at Wed Apr 24 16:35:41 2024 by rpki-client on console-fra.rpki-client.org