$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd831c0e-255c-4316-ab9c-2f03bd80db6e.roa File: bd831c0e-255c-4316-ab9c-2f03bd80db6e.roa (raw, json) Hash identifier: X69H0XancyXUFwoy3srEBQH947tzlyErS+zUeeSfwII= Subject key identifier: 12:DF:A3:D3:57:BE:08:89:4A:FD:B3:2F:FE:C6:8F:6F:4D:90:B9:FC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2297FA9CD266EA8A41420936908C756DDEF3CD4D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd831c0e-255c-4316-ab9c-2f03bd80db6e.roa Signing time: Wed 03 Apr 2024 00:00:00 +0000 ROA not before: Wed 03 Apr 2024 00:00:00 +0000 ROA not after: Wed 08 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 18.244.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:97:fa:9c:d2:66:ea:8a:41:42:09:36:90:8c:75:6d:de:f3:cd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 3 00:00:00 2024 GMT Not After : May 8 23:59:59 2024 GMT Subject: serialNumber=40688a8d7f66670838162d39dcde841c1173b640dbc38057137f853416bc7abf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4d:31:1c:9c:ad:b3:88:68:c4:8f:db:33:24: 8e:5b:71:5b:e1:00:4a:7f:08:a9:89:63:95:57:e9: 1e:0f:ed:45:90:eb:af:98:9f:9d:c5:03:75:11:35: 02:83:a8:92:ee:6a:90:e7:42:52:47:f8:f1:f2:5a: 23:eb:ff:bc:e7:cb:ab:68:e5:ac:55:bb:cd:71:bb: 36:1f:fe:19:a3:b6:81:77:fa:35:82:0f:5f:ab:13: 1f:c4:eb:5f:f7:96:3e:83:f1:06:d8:26:6a:2a:e0: 25:2e:ae:af:d6:0e:9d:ad:96:fa:d6:3f:1e:8e:d9: 1d:1a:a4:d5:ed:32:bd:c1:ce:6e:d9:16:b3:8a:51: 30:a9:34:bd:b3:39:ea:ec:0d:fc:68:27:79:d2:ac: 2e:32:f6:28:eb:7f:3e:71:8a:5c:86:60:30:1b:3a: f0:d9:69:a1:01:b6:fb:79:d2:4d:75:bb:6d:08:74: 3f:47:d0:2b:fb:ff:ae:87:2b:b8:bd:0b:94:77:67: 83:23:f2:5a:50:05:2d:ce:ed:a9:34:6a:32:f8:52: 7c:d9:ad:d8:48:a5:0d:dd:ad:4b:f4:fb:42:f0:60: ff:d5:5a:fa:2b:98:ac:3c:63:fc:a7:cb:22:84:92: b7:5d:f8:1d:65:1b:7c:18:30:f1:7e:1a:51:7d:4f: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DF:A3:D3:57:BE:08:89:4A:FD:B3:2F:FE:C6:8F:6F:4D:90:B9:FC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd831c0e-255c-4316-ab9c-2f03bd80db6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.0.0/15 Signature Algorithm: sha256WithRSAEncryption 60:07:9e:02:a5:99:c2:52:32:a8:7b:d3:fc:d7:e2:7f:db:b4: 04:d2:80:80:f9:76:9d:56:5d:c2:ff:ae:65:c1:a4:7a:81:84: 20:b9:dc:42:e7:5b:36:55:3f:fe:bb:de:81:72:b0:28:4c:12: 60:cd:a7:66:5c:8d:f8:67:68:6b:d9:7d:96:99:52:00:00:ab: 63:99:99:cf:9f:a3:e3:54:e6:45:db:69:77:d1:c5:f7:3f:62: db:34:7d:8b:5a:8c:16:ae:25:3c:b1:36:8b:e6:b2:ec:24:e5: 69:c2:ae:08:35:f6:9e:18:78:76:18:71:ee:7c:c9:1c:95:db: 10:1d:3f:eb:96:ad:fb:33:b6:fd:5f:6e:92:44:02:50:f8:d4: 6e:cb:a0:97:9b:a0:73:da:22:47:d1:6f:9b:23:9d:ef:6c:f6: c5:75:7b:65:ec:92:1f:31:92:5b:19:8c:cb:bc:9a:24:f9:7f: bb:d9:6d:83:e6:56:ed:a5:2f:48:2b:43:aa:3e:6d:9f:14:f1: be:53:3e:10:39:5a:77:f8:75:86:6c:65:5b:a5:f8:d8:15:f7: 9d:24:9f:bf:07:5d:ec:9c:ab:74:29:5e:7b:65:0d:59:65:92: df:06:b0:3c:5e:92:36:61:6c:ca:c3:8b:cc:75:9e:a7:51:30: 97:f7:02:df -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIpf6nNJm6opBQgk2kIx1bd7zzU0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDAzMDAwMDAwWhcNMjQwNTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDY4OGE4ZDdmNjY2NzA4MzgxNjJkMzlkY2RlODQxYzEx NzNiNjQwZGJjMzgwNTcxMzdmODUzNDE2YmM3YWJmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPTTEcnK2ziGjEj9szJI5bcVvhAEp/CKmJY5VX6R4P7UWQ 66+Yn53FA3URNQKDqJLuapDnQlJH+PHyWiPr/7zny6to5axVu81xuzYf/hmjtoF3 +jWCD1+rEx/E61/3lj6D8QbYJmoq4CUurq/WDp2tlvrWPx6O2R0apNXtMr3Bzm7Z FrOKUTCpNL2zOersDfxoJ3nSrC4y9ijrfz5xilyGYDAbOvDZaaEBtvt50k11u20I dD9H0Cv7/66HK7i9C5R3Z4Mj8lpQBS3O7ak0ajL4UnzZrdhIpQ3drUv0+0LwYP/V WvormKw8Y/ynyyKEkrdd+B1lG3wYMPF+GlF9T4ZVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUEt+j01e+CIlK/bMv/saPb02QufwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JkODMxYzBlLTI1NWMtNDMxNi1hYjljLTJmMDNiZDgwZGI2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwES9DANBgkqhkiG9w0BAQsFAAOCAQEAYAeeAqWZwlIyqHvT/Nfif9u0BNKA gPl2nVZdwv+uZcGkeoGEILncQudbNlU//rvegXKwKEwSYM2nZlyN+Gdoa9l9lplS AACrY5mZz5+j41TmRdtpd9HF9z9i2zR9i1qMFq4lPLE2i+ay7CTlacKuCDX2nhh4 dhhx7nzJHJXbEB0/65at+zO2/V9ukkQCUPjUbsugl5ugc9oiR9FvmyOd72z2xXV7 ZeySHzGSWxmMy7yaJPl/u9ltg+ZW7aUvSCtDqj5tnxTxvlM+EDlad/h1hmxlW6X4 2BX3nSSfvwdd7JyrdClee2UNWWWS3wawPF6SNmFsysOLzHWep1Ewl/cC3w== -----END CERTIFICATE-----Generated at Fri Apr 26 11:01:06 2024 by rpki-client on console-ams.rpki-client.org