$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/babde25a-7cf7-471a-9592-7121eba5366e.roa File: babde25a-7cf7-471a-9592-7121eba5366e.roa (raw, json) Hash identifier: q5YNpwvnoLsn7SY8yZpmUcCLMrJuILzjlLafg/P5ZF0= Subject key identifier: 3B:0E:9D:05:12:07:7A:BE:57:F2:85:96:44:EF:34:8B:4C:70:FA:4B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 76DFC2C281C707324A364D770DDFD0092DDF52C0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/babde25a-7cf7-471a-9592-7121eba5366e.roa Signing time: Tue 02 Apr 2024 00:00:00 +0000 ROA not before: Tue 02 Apr 2024 00:00:00 +0000 ROA not after: Tue 07 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 54.183.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:df:c2:c2:81:c7:07:32:4a:36:4d:77:0d:df:d0:09:2d:df:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 2 00:00:00 2024 GMT Not After : May 7 23:59:59 2024 GMT Subject: serialNumber=ffa120502ed5d32200454a1926f2db8a2c70d88c1eecd7d0c3ebe985700f29b8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:89:5e:ec:87:45:f0:8f:b3:ac:a4:c0:e4:40: 0e:69:c3:05:78:ea:d0:f0:4d:b4:fd:bf:f1:32:ca: bf:2f:5c:0c:e5:5a:73:be:ed:65:51:56:ae:ba:d1: c9:27:69:1b:16:6a:86:7f:36:27:93:bf:25:ec:99: 78:5b:15:5a:c3:77:0f:c9:c1:3a:3d:ad:a9:e0:af: d0:0d:2b:4e:93:62:e6:8c:76:c3:5b:2e:75:88:76: dd:7c:28:55:c7:fb:aa:e6:ee:4d:b3:d0:86:28:04: 07:7f:8d:4d:0b:53:43:3d:14:9a:1a:fe:e1:44:22: 86:6c:df:d5:ff:24:99:24:fb:d5:4b:56:81:ac:08: e9:60:b6:10:7f:79:88:f1:cf:8c:f7:be:62:f9:d6: 05:e7:f4:a1:04:b1:fa:b7:de:3f:74:46:92:d3:36: 7f:27:7a:2a:2f:4c:28:7e:94:38:11:78:e1:40:b8: 99:d7:56:c8:18:78:78:2e:81:6e:d7:40:4b:2f:f8: c6:d1:02:64:18:5a:df:7c:f3:50:84:e9:01:56:64: 4a:b8:8f:f7:fe:de:5f:37:0c:16:8d:23:8f:a7:b3: 25:54:15:1c:58:c2:9c:a1:b4:e1:35:4a:f4:0c:85: 91:74:e3:e9:6b:17:c5:19:93:ef:5d:b3:c1:9e:4d: 88:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0E:9D:05:12:07:7A:BE:57:F2:85:96:44:EF:34:8B:4C:70:FA:4B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/babde25a-7cf7-471a-9592-7121eba5366e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.183.0.0/16 Signature Algorithm: sha256WithRSAEncryption 78:21:ea:e4:50:69:f1:39:a0:ab:ae:c2:8d:2d:86:a2:eb:2c: b3:71:9a:02:49:25:78:02:0f:eb:ff:f3:7b:5a:95:86:11:b2: af:91:31:bb:34:73:2a:48:1d:7c:6b:93:e8:ab:0a:3d:6e:b1: 09:bc:85:7a:72:df:a5:a9:5b:f3:4a:cd:ea:2b:11:68:c1:36: 4e:20:51:d3:a2:b8:65:15:ec:c3:89:60:51:d0:24:36:01:47: ed:e8:52:9b:6a:de:e9:f3:be:bb:e8:19:6a:73:b1:d7:04:b7: 85:a5:e1:d5:79:2d:96:ec:d0:83:34:99:3b:42:4a:ed:66:67: 6d:cf:50:3e:d0:96:9d:00:f3:c6:32:b5:73:6b:61:77:87:44: c7:3f:08:34:f3:d5:7a:32:36:67:94:c5:87:f2:f0:8d:e3:58: e3:0e:b8:e8:90:bc:b6:b3:eb:35:3a:ab:ee:a1:b7:b2:00:f2: 03:ae:88:b6:c0:ed:29:ed:6f:5f:fc:8d:9e:36:02:85:3e:9a: 3f:fa:65:39:ea:9c:b0:22:ce:4e:4d:b1:f5:97:1b:98:38:55: da:03:5c:32:6d:e5:63:f0:56:7d:1b:8b:32:19:a2:8d:cd:fb: 23:b5:e1:74:f9:85:53:fd:6a:62:55:31:6f:50:1d:25:3f:03: e6:5f:71:bc -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdt/CwoHHBzJKNk13Dd/QCS3fUsAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDAyMDAwMDAwWhcNMjQwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZmExMjA1MDJlZDVkMzIyMDA0NTRhMTkyNmYyZGI4YTJj NzBkODhjMWVlY2Q3ZDBjM2ViZTk4NTcwMGYyOWI4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAiV7sh0Xwj7OspMDkQA5pwwV46tDwTbT9v/Eyyr8vXAzl WnO+7WVRVq660cknaRsWaoZ/NieTvyXsmXhbFVrDdw/JwTo9rangr9ANK06TYuaM dsNbLnWIdt18KFXH+6rm7k2z0IYoBAd/jU0LU0M9FJoa/uFEIoZs39X/JJkk+9VL VoGsCOlgthB/eYjxz4z3vmL51gXn9KEEsfq33j90RpLTNn8neiovTCh+lDgReOFA uJnXVsgYeHgugW7XQEsv+MbRAmQYWt9881CE6QFWZEq4j/f+3l83DBaNI4+nsyVU FRxYwpyhtOE1SvQMhZF04+lrF8UZk+9ds8GeTYijAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUOw6dBRIHer5X8oWWRO80i0xw+kswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JhYmRlMjVhLTdjZjctNDcxYS05NTkyLTcxMjFlYmE1MzY2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2tzANBgkqhkiG9w0BAQsFAAOCAQEAeCHq5FBp8Tmgq67CjS2Gousss3Ga AkkleAIP6//ze1qVhhGyr5ExuzRzKkgdfGuT6KsKPW6xCbyFenLfpalb80rN6isR aME2TiBR06K4ZRXsw4lgUdAkNgFH7ehSm2re6fO+u+gZanOx1wS3haXh1XktluzQ gzSZO0JK7WZnbc9QPtCWnQDzxjK1c2thd4dExz8INPPVejI2Z5TFh/LwjeNY4w64 6JC8trPrNTqr7qG3sgDyA66ItsDtKe1vX/yNnjYChT6aP/plOeqcsCLOTk2x9Zcb mDhV2gNcMm3lY/BWfRuLMhmijc37I7XhdPmFU/1qYlUxb1AdJT8D5l9xvA== -----END CERTIFICATE-----Generated at Thu Apr 25 22:33:17 2024 by rpki-client on console-fra.rpki-client.org