$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbee3387-191f-4ec5-b433-d257eb203929.roa File: bbee3387-191f-4ec5-b433-d257eb203929.roa (raw, json) Hash identifier: J/ydzDQOZBmcuMO/5oktSafSSnGD5SCnWX3s5jCDhks= Subject key identifier: 11:9C:40:94:F6:D8:7C:38:83:D0:05:05:7C:13:24:61:66:FC:17:92 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5CEFA570A21BAA04A1DE33CD9181BE2385D679CE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbee3387-191f-4ec5-b433-d257eb203929.roa Signing time: Fri 05 Apr 2024 00:00:00 +0000 ROA not before: Fri 05 Apr 2024 00:00:00 +0000 ROA not after: Fri 10 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 18.35.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ef:a5:70:a2:1b:aa:04:a1:de:33:cd:91:81:be:23:85:d6:79:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 5 00:00:00 2024 GMT Not After : May 10 23:59:59 2024 GMT Subject: serialNumber=321b25a14e58a231a846157c955f52e04f7f0008449b7f735105fb1bb2ddc624, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:be:3f:dc:1c:74:35:44:2c:71:70:a9:b0:4a: c5:59:6c:1a:9e:97:05:7f:f3:68:70:2b:91:b8:47: f8:d8:f8:29:ae:ce:f7:a9:45:1b:e5:12:8b:0d:99: 40:d9:bd:46:7e:c6:59:3c:68:23:44:5e:63:89:9f: eb:53:cf:bb:54:e4:12:b1:7c:fe:48:74:e7:85:04: e3:d3:33:da:70:27:55:85:19:b1:37:db:92:e3:fc: d3:0d:59:cf:a2:15:c5:57:a5:32:dd:ad:b8:0a:04: 6b:b1:26:cd:9f:89:8c:ec:93:66:c3:39:c0:e7:80: 15:0e:76:f3:7a:71:a4:9d:7b:df:a7:54:1e:d6:14: 92:4c:cd:61:d6:e0:63:8d:cc:c9:a0:bd:1e:41:d0: ec:bb:92:47:bb:f1:e8:ac:17:df:d6:c6:52:19:22: 77:f5:72:74:9a:bc:78:31:16:65:bc:af:0e:c3:ba: f2:9d:d2:55:8c:d6:60:ef:a5:ab:12:3b:5a:1e:91: d5:0a:8b:f9:25:be:20:72:1e:d6:31:5e:ab:f1:04: 35:82:6e:21:c0:69:93:be:e3:4d:92:87:2e:eb:e8: 4d:72:21:37:47:29:9f:03:65:f2:90:bd:0d:0e:6b: 59:cf:10:c1:7e:34:c5:70:10:75:6c:ef:00:76:87: ce:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9C:40:94:F6:D8:7C:38:83:D0:05:05:7C:13:24:61:66:FC:17:92 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbee3387-191f-4ec5-b433-d257eb203929.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.35.248.0/22 Signature Algorithm: sha256WithRSAEncryption 28:0d:7b:7c:26:85:0c:cf:68:48:e7:26:22:86:33:1f:18:2b: 5c:d1:05:5d:90:de:9b:3b:58:d6:a7:bb:d4:25:84:63:d8:ee: e7:1e:fc:f6:f0:95:79:34:65:c7:ba:87:7a:c1:25:68:a7:bc: 1d:52:89:5d:a4:71:e0:84:f3:af:be:c8:de:20:d4:d0:fe:98: 7b:07:c7:8f:86:c9:be:a2:64:b2:b0:c7:5a:c4:a8:04:e2:54: 18:ae:1b:d1:3f:15:15:d0:2c:5e:2e:60:9a:af:43:92:e6:f7: 80:3c:61:1e:fd:b4:88:c1:cb:11:ad:dd:b1:23:54:5e:ce:93: 5a:3b:48:2f:05:ad:42:56:8c:ab:0b:7e:e1:43:7d:79:9f:72: 4d:db:0b:d4:48:e7:eb:4f:5d:c8:0d:a4:05:14:31:8f:49:d6: d8:f5:f7:b2:87:d6:e4:6b:84:11:9b:00:2b:08:31:75:ca:fa: ae:d5:09:13:fe:3d:63:71:61:9d:a4:16:2a:9a:ec:dc:a3:17: da:86:62:88:4b:3b:51:cd:2b:d7:20:ce:8a:51:60:a7:c2:e2: 7f:83:09:36:e2:ee:61:51:cb:17:f7:a3:16:52:d3:1d:69:f8: 32:86:2b:9b:87:a0:1e:f3:98:7f:2d:b1:e7:76:b0:4f:41:6b: 27:f4:63:0c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXO+lcKIbqgSh3jPNkYG+I4XWec4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA1MDAwMDAwWhcNMjQwNTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjFiMjVhMTRlNThhMjMxYTg0NjE1N2M5NTVmNTJlMDRm N2YwMDA4NDQ5YjdmNzM1MTA1ZmIxYmIyZGRjNjI0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJvj/cHHQ1RCxxcKmwSsVZbBqelwV/82hwK5G4R/jY+Cmu zvepRRvlEosNmUDZvUZ+xlk8aCNEXmOJn+tTz7tU5BKxfP5IdOeFBOPTM9pwJ1WF GbE325Lj/NMNWc+iFcVXpTLdrbgKBGuxJs2fiYzsk2bDOcDngBUOdvN6caSde9+n VB7WFJJMzWHW4GONzMmgvR5B0Oy7kke78eisF9/WxlIZInf1cnSavHgxFmW8rw7D uvKd0lWM1mDvpasSO1oekdUKi/klviByHtYxXqvxBDWCbiHAaZO+402Shy7r6E1y ITdHKZ8DZfKQvQ0Oa1nPEMF+NMVwEHVs7wB2h87PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEZxAlPbYfDiD0AUFfBMkYWb8F5IwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JiZWUzMzg3LTE5MWYtNGVjNS1iNDMzLWQyNTdlYjIwMzkyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISI/gwDQYJKoZIhvcNAQELBQADggEBACgNe3wmhQzPaEjnJiKGMx8YK1zR BV2Q3ps7WNanu9QlhGPY7uce/PbwlXk0Zce6h3rBJWinvB1SiV2kceCE86++yN4g 1ND+mHsHx4+Gyb6iZLKwx1rEqATiVBiuG9E/FRXQLF4uYJqvQ5Lm94A8YR79tIjB yxGt3bEjVF7Ok1o7SC8FrUJWjKsLfuFDfXmfck3bC9RI5+tPXcgNpAUUMY9J1tj1 97KH1uRrhBGbACsIMXXK+q7VCRP+PWNxYZ2kFiqa7NyjF9qGYohLO1HNK9cgzopR YKfC4n+DCTbi7mFRyxf3oxZS0x1p+DKGK5uHoB7zmH8tsed2sE9Bayf0Yww= -----END CERTIFICATE-----Generated at Fri Apr 19 00:52:23 2024 by rpki-client on console-ams.rpki-client.org