$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2667128-87e5-4c98-b10b-686ae9edc501.roa File: c2667128-87e5-4c98-b10b-686ae9edc501.roa (raw, json) Hash identifier: 0S5co+mNKeCNBd+z57Bx4sWlWRyYXbPjmMTopyFVeH0= Subject key identifier: AB:AC:32:47:07:84:F3:CF:3B:9D:66:18:76:63:E3:CB:51:97:72:1C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7714CE790A7D5AA3D452B116C5A998A14D1ECA99 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2667128-87e5-4c98-b10b-686ae9edc501.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 15.168.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:14:ce:79:0a:7d:5a:a3:d4:52:b1:16:c5:a9:98:a1:4d:1e:ca:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=0c9a7757d3e6867f53a94efb04686891bd6da420f80c495bce6e56a365e45191, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:44:fa:49:d2:16:0c:c7:74:f2:56:81:d5:da: d2:e4:eb:f5:ae:fe:ac:89:44:37:e1:5c:5e:51:08: 3d:ed:cb:21:b0:d6:99:aa:8d:2e:25:ac:96:8e:17: a6:ce:18:fc:82:3b:04:7b:06:0c:70:01:29:58:a0: 1c:d6:cb:9c:8b:15:52:d3:5a:f1:da:e6:96:85:99: 07:90:9f:73:d6:05:4e:a7:a0:2d:47:7e:8e:9a:37: 6a:2b:86:dc:15:41:59:87:4a:7e:e5:b7:46:53:0d: 55:da:da:2b:74:a1:32:b1:80:ec:3a:70:e6:e8:18: ae:84:61:b7:62:aa:90:f5:0f:7d:a4:76:f6:39:3f: 72:08:26:d9:e9:6b:54:7d:41:0c:36:20:32:dd:93: ad:be:90:84:ea:d9:c9:be:76:c8:95:5a:f6:e3:ea: 59:17:32:e8:ba:cf:f2:61:d3:eb:9b:a3:53:6d:e6: d1:d0:b7:8c:9c:d9:4f:03:2c:36:c2:a8:29:0f:19: 47:2e:b0:ff:3d:8a:41:a9:7a:de:93:32:b4:e7:2d: 57:89:82:e5:71:27:ae:df:b8:91:52:43:d3:e3:3f: 80:5f:43:ba:22:73:f2:70:76:1e:03:cf:79:8a:2c: 70:b9:f2:35:35:51:bd:99:f4:bf:bc:5a:2f:bd:3b: 65:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AC:32:47:07:84:F3:CF:3B:9D:66:18:76:63:E3:CB:51:97:72:1C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2667128-87e5-4c98-b10b-686ae9edc501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.168.0.0/16 Signature Algorithm: sha256WithRSAEncryption 61:95:41:e7:33:b2:3b:9a:e7:c1:7d:68:6e:b8:06:aa:67:e5: 06:e8:18:ba:f1:38:9b:12:f5:e2:3d:c6:4b:c2:5c:7e:fd:fb: a2:00:89:8c:78:90:57:fd:75:59:19:17:73:54:ae:85:c4:14: 9a:8d:b3:58:9e:57:c8:5b:a1:49:c6:eb:4b:2b:86:55:9d:df: 9a:ea:ce:b2:4d:83:84:e4:55:d2:cc:f7:f8:d5:94:47:49:ef: 71:63:82:fc:d8:33:86:da:58:2f:8e:87:02:bc:c5:78:15:f5: cf:23:26:8c:95:17:6b:aa:d9:70:a1:dd:f0:76:ec:96:34:a9: 15:cb:38:73:36:81:c6:22:e8:b6:53:95:d5:ed:87:0d:cd:1b: 9c:89:07:a7:85:c9:3d:92:7e:b7:44:44:52:74:53:67:40:7c: ef:e9:1d:c6:52:0e:1d:ef:78:41:0b:ea:84:ec:8a:36:a5:e0: 59:0c:fd:4d:33:93:3d:fd:7b:b4:81:9b:d0:58:6e:a0:f5:54: c8:f1:90:12:6e:24:02:21:50:dd:4e:34:fb:f7:fc:1e:c2:61: 05:24:9c:a4:44:82:db:3f:55:b0:95:64:a0:9c:a2:e0:c7:05: f6:3c:45:95:d8:80:5d:16:53:b9:c7:3e:ff:e3:90:ee:08:02: 5e:d4:66:2f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdxTOeQp9WqPUUrEWxamYoU0eypkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzlhNzc1N2QzZTY4NjdmNTNhOTRlZmIwNDY4Njg5MWJk NmRhNDIwZjgwYzQ5NWJjZTZlNTZhMzY1ZTQ1MTkxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgRPpJ0hYMx3TyVoHV2tLk6/Wu/qyJRDfhXF5RCD3tyyGw 1pmqjS4lrJaOF6bOGPyCOwR7BgxwASlYoBzWy5yLFVLTWvHa5paFmQeQn3PWBU6n oC1Hfo6aN2orhtwVQVmHSn7lt0ZTDVXa2it0oTKxgOw6cOboGK6EYbdiqpD1D32k dvY5P3IIJtnpa1R9QQw2IDLdk62+kITq2cm+dsiVWvbj6lkXMui6z/Jh0+ubo1Nt 5tHQt4yc2U8DLDbCqCkPGUcusP89ikGpet6TMrTnLVeJguVxJ67fuJFSQ9PjP4Bf Q7oic/Jwdh4Dz3mKLHC58jU1Ub2Z9L+8Wi+9O2UjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUq6wyRweE8887nWYYdmPjy1GXchwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MyNjY3MTI4LTg3ZTUtNGM5OC1iMTBiLTY4NmFlOWVkYzUwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPqDANBgkqhkiG9w0BAQsFAAOCAQEAYZVB5zOyO5rnwX1obrgGqmflBugY uvE4mxL14j3GS8Jcfv37ogCJjHiQV/11WRkXc1SuhcQUmo2zWJ5XyFuhScbrSyuG VZ3fmurOsk2DhORV0sz3+NWUR0nvcWOC/NgzhtpYL46HArzFeBX1zyMmjJUXa6rZ cKHd8HbsljSpFcs4czaBxiLotlOV1e2HDc0bnIkHp4XJPZJ+t0REUnRTZ0B87+kd xlIOHe94QQvqhOyKNqXgWQz9TTOTPf17tIGb0FhuoPVUyPGQEm4kAiFQ3U40+/f8 HsJhBSScpESC2z9VsJVkoJyi4McF9jxFldiAXRZTucc+/+OQ7ggCXtRmLw== -----END CERTIFICATE-----Generated at Wed Apr 24 16:35:41 2024 by rpki-client on console-fra.rpki-client.org