$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b720d5ef-eb80-4b79-9462-61a044b76b33.roa File: b720d5ef-eb80-4b79-9462-61a044b76b33.roa (raw, json) Hash identifier: J/xBZiuhyKFrutp+ae1jR++8ksyzZwgwaL2L0LVUZBs= Subject key identifier: 82:BF:1D:D4:D5:CC:44:6A:68:62:41:16:F1:9A:CE:33:4F:8B:6A:D2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 523659CE6956A5B5D0825D614C7396EEAA90987F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b720d5ef-eb80-4b79-9462-61a044b76b33.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 52.94.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:36:59:ce:69:56:a5:b5:d0:82:5d:61:4c:73:96:ee:aa:90:98:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=193ebabd598e23e7eb5ebe120d453f27e6113b14b35fd160cace5ffdb9669f19, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:fe:f3:c9:17:58:c1:dc:58:7c:7e:a4:11: 17:31:ab:ce:c2:68:17:47:81:d9:65:56:e0:55:f6: d4:54:30:fb:75:cf:8e:ab:d7:4a:2a:0a:17:92:6d: cf:ec:10:48:8b:3a:8e:9a:9a:66:32:b6:47:1c:19: 23:af:15:ac:de:69:0f:1d:f2:0d:87:0e:58:fd:8d: 19:23:be:d2:4c:2e:6d:27:8f:2a:d1:4b:0e:ef:5d: a8:19:9d:65:cf:b7:ca:84:12:be:03:b3:85:d9:c2: 72:0e:9c:00:21:2f:f8:e3:03:85:9b:a1:ca:9a:77: 6f:f1:3e:00:8a:4f:76:5b:06:d5:d7:b0:e5:1a:b7: 92:68:01:f1:78:56:8f:aa:9a:2e:ac:f2:73:6e:d1: 3e:7c:cc:fb:50:c0:69:cc:68:5e:92:3e:a9:ef:92: 5e:54:4d:88:3e:a3:b5:d5:9f:09:da:b1:e3:25:f1: b9:36:a1:12:74:fe:d2:30:5a:a3:dd:cf:9d:85:cc: b0:cd:e2:67:e8:eb:1f:08:95:96:25:59:bf:dc:ba: 8b:e4:59:77:6e:45:0e:62:c8:0d:30:f2:d9:67:0e: df:ea:0c:f3:bc:3d:0e:87:40:d8:e4:8a:22:c8:cd: c4:9f:cd:57:99:9d:5a:5d:20:5b:c6:7b:24:e5:ca: fa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BF:1D:D4:D5:CC:44:6A:68:62:41:16:F1:9A:CE:33:4F:8B:6A:D2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b720d5ef-eb80-4b79-9462-61a044b76b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.8.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:1d:bf:3a:1b:37:0a:c3:2e:43:8d:97:53:b1:ac:35:f5:5f: 85:d8:64:ea:2a:0f:da:db:4f:dc:88:ba:45:ea:83:22:ef:02: a1:20:40:c7:cf:82:60:de:fd:c3:28:a5:7b:40:e5:24:44:57: e6:79:90:4c:e4:35:2f:03:34:dd:dd:ed:b1:55:38:04:6e:46: ad:72:19:43:0e:4e:ca:c7:23:5b:af:df:b5:5f:d5:23:2f:b0: ef:32:00:6c:42:02:01:a9:2c:08:36:5f:c3:23:b6:ed:9f:8c: 18:a9:cb:a6:cb:d2:2c:0f:8b:e5:a0:7d:db:7b:be:dd:40:0e: e9:06:c2:ea:d4:a3:3c:9b:57:9a:1a:52:89:56:84:67:75:82: 65:b7:3b:86:b6:00:f9:b9:87:c2:d9:6c:f2:a7:9a:00:47:47: 2f:a3:87:14:a6:78:7c:0a:65:03:73:2b:38:52:ba:f7:1c:51: 12:a9:c2:f7:44:f3:60:34:ae:52:a8:e3:74:52:4a:06:bd:ed: c8:8e:68:3d:e9:e2:86:fc:fb:3d:da:16:f6:ed:3b:07:3c:8f: 8f:10:d5:e0:a3:2e:7c:3e:c4:61:74:cb:2c:8a:3a:2e:2f:20: c8:93:b1:ee:a1:de:76:85:b8:97:60:5e:e8:01:e4:81:91:91: f0:ce:f1:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUjZZzmlWpbXQgl1hTHOW7qqQmH8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTNlYmFiZDU5OGUyM2U3ZWI1ZWJlMTIwZDQ1M2YyN2U2 MTEzYjE0YjM1ZmQxNjBjYWNlNWZmZGI5NjY5ZjE5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0GP7zyRdYwdxYfH6kERcxq87CaBdHgdllVuBV9tRUMPt1 z46r10oqCheSbc/sEEiLOo6ammYytkccGSOvFazeaQ8d8g2HDlj9jRkjvtJMLm0n jyrRSw7vXagZnWXPt8qEEr4Ds4XZwnIOnAAhL/jjA4Wbocqad2/xPgCKT3ZbBtXX sOUat5JoAfF4Vo+qmi6s8nNu0T58zPtQwGnMaF6SPqnvkl5UTYg+o7XVnwnaseMl 8bk2oRJ0/tIwWqPdz52FzLDN4mfo6x8IlZYlWb/cuovkWXduRQ5iyA0w8tlnDt/q DPO8PQ6HQNjkiiLIzcSfzVeZnVpdIFvGeyTlyvq7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgr8d1NXMRGpoYkEW8ZrOM0+LatIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I3MjBkNWVmLWViODAtNGI3OS05NDYyLTYxYTA0NGI3NmIzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XggwDQYJKoZIhvcNAQELBQADggEBAJwdvzobNwrDLkONl1OxrDX1X4XY ZOoqD9rbT9yIukXqgyLvAqEgQMfPgmDe/cMopXtA5SREV+Z5kEzkNS8DNN3d7bFV OARuRq1yGUMOTsrHI1uv37Vf1SMvsO8yAGxCAgGpLAg2X8Mjtu2fjBipy6bL0iwP i+Wgfdt7vt1ADukGwurUozybV5oaUolWhGd1gmW3O4a2APm5h8LZbPKnmgBHRy+j hxSmeHwKZQNzKzhSuvccURKpwvdE82A0rlKo43RSSga97ciOaD3p4ob8+z3aFvbt Owc8j48Q1eCjLnw+xGF0yyyKOi4vIMiTse6h3naFuJdgXugB5IGRkfDO8eg= -----END CERTIFICATE-----Generated at Wed Apr 24 18:35:33 2024 by rpki-client on console-ams.rpki-client.org