$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdf6054a-846e-41ec-b04c-546aa6ff70df.roa File: cdf6054a-846e-41ec-b04c-546aa6ff70df.roa (raw, json) Hash identifier: b7FNXajYTRm8U+efYQkbHC3w+32Z0qCmYk3u7Sg+UAM= Subject key identifier: 89:20:09:A7:AF:64:F2:51:0E:B8:0E:6C:18:66:7C:B5:4B:68:DB:64 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6EC86196678C1785292B87EF4C67BC2F993D2BC6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdf6054a-846e-41ec-b04c-546aa6ff70df.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 150.222.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c8:61:96:67:8c:17:85:29:2b:87:ef:4c:67:bc:2f:99:3d:2b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=bdeed89efed442c5d0cfe4c46064bbc76d3b7e0844e3b649225be0fd3317bab0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:10:bb:ee:57:08:b4:29:ef:4e:32:d7:73:b3: 14:42:8d:3a:45:77:dd:23:60:12:88:b0:6f:5c:fc: 85:3b:c6:91:71:c8:51:78:09:66:68:24:38:77:aa: fd:a5:ef:f5:13:3a:cd:d2:b3:26:58:bc:b1:df:da: 4e:e4:63:ad:2e:7a:b0:0c:4e:c4:6d:0d:0d:4b:3a: 26:4a:bb:46:8e:ce:69:ed:f7:cd:8d:a6:de:18:41: e9:96:f1:6e:51:6e:b6:ad:99:34:a8:f6:b9:c2:86: 5d:0b:64:ab:ec:31:b1:71:28:bc:41:ba:b9:8c:11: 72:35:10:6a:e1:e5:e8:69:ef:82:75:f0:bd:00:ec: cf:e9:17:29:bd:fd:25:59:4a:d2:9b:28:91:12:57: 76:e9:5d:dd:52:e7:93:82:e3:50:a2:fb:8d:ec:e5: 46:92:2e:c3:b8:9e:f4:89:9d:40:44:08:3e:45:0c: 28:f7:9a:54:95:e1:68:95:84:4e:4c:d5:eb:45:27: b2:01:89:f7:f6:3a:1f:33:b1:f1:2b:8b:21:d6:18: 5c:fa:f7:22:09:ad:5f:3c:62:4b:27:06:7d:02:82: e4:26:36:7a:bc:49:85:bc:28:44:d3:35:f9:29:d9: 23:e1:bb:2c:b1:11:23:0f:ad:bd:4d:72:36:3e:a4: 5a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:20:09:A7:AF:64:F2:51:0E:B8:0E:6C:18:66:7C:B5:4B:68:DB:64 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdf6054a-846e-41ec-b04c-546aa6ff70df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.89.0/24 Signature Algorithm: sha256WithRSAEncryption 97:e8:56:c1:5c:97:da:90:ce:e3:09:41:0d:75:a6:e8:8a:f3: 97:64:2d:bf:ae:9b:19:00:28:ad:07:79:78:8b:02:dc:b6:0e: f8:fe:f2:70:e8:a4:8b:69:ae:6f:24:59:db:7f:df:bb:73:6c: d3:69:37:48:b1:7e:c1:13:4c:12:16:d2:8a:8a:d1:88:12:e9: 46:63:81:36:e4:fe:3f:c5:66:f0:0b:fa:b1:1c:1e:9f:db:83: b8:2b:69:28:c2:09:20:49:46:fd:6d:f4:75:4d:53:bf:cb:d6: e2:c5:43:22:60:94:17:8b:4e:86:f7:4a:bb:d8:1a:b8:f0:15: 0d:93:81:3a:0e:0c:9a:25:f7:ec:6d:b9:44:ad:d6:16:b3:26: 20:1e:cc:90:65:2f:f7:61:c6:66:c6:28:3d:20:ec:97:17:51: ef:e7:21:07:1c:d2:97:1d:8c:71:48:db:99:e2:eb:70:77:3e: 6c:18:9e:49:54:29:77:7c:5a:cb:8d:33:d2:31:d5:c7:d6:5c: 4f:22:99:68:93:4b:cb:29:62:cb:d5:95:76:d7:7c:a6:2a:c2: 4a:5b:81:26:9c:5d:15:b4:82:5c:ef:7d:fe:4f:e6:5a:29:72: e7:ff:e4:ad:e5:20:7c:17:71:a2:62:99:3e:de:ce:40:6e:2a: 6c:9d:fb:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbshhlmeMF4UpK4fvTGe8L5k9K8YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZGVlZDg5ZWZlZDQ0MmM1ZDBjZmU0YzQ2MDY0YmJjNzZk M2I3ZTA4NDRlM2I2NDkyMjViZTBmZDMzMTdiYWIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpELvuVwi0Ke9OMtdzsxRCjTpFd90jYBKIsG9c/IU7xpFx yFF4CWZoJDh3qv2l7/UTOs3SsyZYvLHf2k7kY60uerAMTsRtDQ1LOiZKu0aOzmnt 982Npt4YQemW8W5RbratmTSo9rnChl0LZKvsMbFxKLxBurmMEXI1EGrh5ehp74J1 8L0A7M/pFym9/SVZStKbKJESV3bpXd1S55OC41Ci+43s5UaSLsO4nvSJnUBECD5F DCj3mlSV4WiVhE5M1etFJ7IBiff2Oh8zsfEriyHWGFz69yIJrV88YksnBn0CguQm Nnq8SYW8KETTNfkp2SPhuyyxESMPrb1NcjY+pFqrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiSAJp69k8lEOuA5sGGZ8tUto22QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NkZjYwNTRhLTg0NmUtNDFlYy1iMDRjLTU0NmFhNmZmNzBkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3lkwDQYJKoZIhvcNAQELBQADggEBAJfoVsFcl9qQzuMJQQ11puiK85dk Lb+umxkAKK0HeXiLAty2Dvj+8nDopItprm8kWdt/37tzbNNpN0ixfsETTBIW0oqK 0YgS6UZjgTbk/j/FZvAL+rEcHp/bg7graSjCCSBJRv1t9HVNU7/L1uLFQyJglBeL Tob3SrvYGrjwFQ2TgToODJol9+xtuUSt1hazJiAezJBlL/dhxmbGKD0g7JcXUe/n IQcc0pcdjHFI25ni63B3PmwYnklUKXd8WsuNM9Ix1cfWXE8imWiTS8spYsvVlXbX fKYqwkpbgSacXRW0glzvff5P5lopcuf/5K3lIHwXcaJimT7ezkBuKmyd+88= -----END CERTIFICATE-----Generated at Tue Apr 23 18:31:31 2024 by rpki-client on console-fra.rpki-client.org