$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf4d229a-6c43-4411-87ff-fd32d22797b4.roa File: cf4d229a-6c43-4411-87ff-fd32d22797b4.roa (raw, json) Hash identifier: YOw5984v9rsp9mUUNxYE3qoc18tNmF4wNns9e7aMmrg= Subject key identifier: 52:1B:8C:2D:3F:54:11:50:2D:F2:2B:B6:B7:E8:D0:E2:A9:E0:86:43 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7813E29F1EA8A8DE41861E4572F4D1F3F9772434 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf4d229a-6c43-4411-87ff-fd32d22797b4.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:13:e2:9f:1e:a8:a8:de:41:86:1e:45:72:f4:d1:f3:f9:77:24:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=858ed802b11ec80cae450644e64c640d1858fb9a51c00d37843f9c94c75a110b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:69:df:f3:6b:e6:75:04:5c:05:71:72:2a:b8: 0e:7d:95:21:2f:16:4f:75:e1:44:79:c5:7f:5b:95: b9:1f:00:9f:d5:b7:b0:63:41:62:0d:7b:7b:4e:6e: d9:b1:fc:9e:ff:68:be:4b:7a:dc:a4:af:f9:c5:c4: cc:f0:63:2e:23:08:d9:1c:8c:64:57:85:11:d0:ee: 00:e5:89:d6:70:0d:9a:1c:4a:29:f7:7a:f8:ed:82: 09:cb:f8:7a:e8:eb:5a:6a:8b:f9:0f:b7:92:03:57: c4:47:2f:86:46:e5:fb:37:f0:a1:5e:ec:0c:f9:de: fd:eb:a4:8e:67:a2:41:14:bc:5d:19:80:db:3f:01: 33:75:1e:da:76:51:30:88:a4:82:cf:27:32:29:62: 35:4e:8c:d2:a3:83:15:3b:95:f3:8a:5d:e0:47:2f: fa:cc:4c:2a:2d:57:de:1b:b3:e6:b2:c2:bd:a6:5b: 67:76:34:78:b7:26:1a:60:f3:61:1d:31:92:4c:dc: 95:51:a3:9d:4d:5d:00:14:57:39:0a:ad:19:51:6d: b0:45:f2:3e:83:84:50:7f:16:49:00:fd:cb:ff:bc: 02:ff:ab:13:37:e6:63:69:0a:73:51:19:1c:b8:30: a6:96:a9:7e:50:48:e3:7a:35:c0:10:1d:3f:94:9a: 3b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1B:8C:2D:3F:54:11:50:2D:F2:2B:B6:B7:E8:D0:E2:A9:E0:86:43 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf4d229a-6c43-4411-87ff-fd32d22797b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.230.0/23 Signature Algorithm: sha256WithRSAEncryption 96:c1:5b:e7:43:db:28:30:1f:1e:9f:e9:4d:32:e9:36:e0:07: 27:16:11:60:f1:8c:54:98:72:cd:f1:2d:67:a8:7a:79:fb:e9: 22:ee:7e:6b:97:ec:23:6f:78:7d:f6:b9:d7:ec:8c:72:d2:7e: ed:73:95:69:29:ab:cb:87:a3:f2:c4:5a:9c:2b:6f:29:08:66: 25:2d:b3:9e:bf:f7:68:3e:f5:ea:a2:e6:58:0d:75:84:d6:ac: 83:98:ea:5c:38:aa:14:2a:8b:c5:47:c2:14:ba:4e:c4:f9:f8: fd:d0:57:f6:fd:72:c1:47:3c:ec:1a:ec:63:db:84:a0:f5:59: bf:47:ae:75:42:4f:01:7c:b6:75:3c:1c:85:42:dc:47:21:be: 8f:fb:1b:cb:88:2a:b3:bb:8c:3b:3e:62:df:72:85:d2:8b:c0: d1:db:56:a8:56:66:04:d8:7f:68:cf:42:8e:26:94:a4:99:14: 40:30:f2:23:06:50:67:02:a8:30:2e:42:e5:9f:f6:d8:bb:6e: 52:7a:48:7a:e7:bc:5a:44:9f:2c:7d:44:a4:e9:b5:da:00:ee: 70:00:fd:0e:af:09:d9:95:8d:d1:68:82:47:87:18:51:ba:f9: 78:ce:0d:c7:3b:68:99:8c:db:1f:26:76:c8:74:0e:b2:bd:ed: a9:19:c1:57 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeBPinx6oqN5Bhh5FcvTR8/l3JDQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NThlZDgwMmIxMWVjODBjYWU0NTA2NDRlNjRjNjQwZDE4 NThmYjlhNTFjMDBkMzc4NDNmOWM5NGM3NWExMTBiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAad/za+Z1BFwFcXIquA59lSEvFk914UR5xX9blbkfAJ/V t7BjQWINe3tObtmx/J7/aL5Letykr/nFxMzwYy4jCNkcjGRXhRHQ7gDlidZwDZoc Sin3evjtggnL+Hro61pqi/kPt5IDV8RHL4ZG5fs38KFe7Az53v3rpI5nokEUvF0Z gNs/ATN1Htp2UTCIpILPJzIpYjVOjNKjgxU7lfOKXeBHL/rMTCotV94bs+aywr2m W2d2NHi3Jhpg82EdMZJM3JVRo51NXQAUVzkKrRlRbbBF8j6DhFB/FkkA/cv/vAL/ qxM35mNpCnNRGRy4MKaWqX5QSON6NcAQHT+UmjvfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUhuMLT9UEVAt8iu2t+jQ4qnghkMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NmNGQyMjlhLTZjNDMtNDQxMS04N2ZmLWZkMzJkMjI3OTdiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE28OYwDQYJKoZIhvcNAQELBQADggEBAJbBW+dD2ygwHx6f6U0y6TbgBycW EWDxjFSYcs3xLWeoenn76SLufmuX7CNveH32udfsjHLSfu1zlWkpq8uHo/LEWpwr bykIZiUts56/92g+9eqi5lgNdYTWrIOY6lw4qhQqi8VHwhS6TsT5+P3QV/b9csFH POwa7GPbhKD1Wb9HrnVCTwF8tnU8HIVC3Echvo/7G8uIKrO7jDs+Yt9yhdKLwNHb VqhWZgTYf2jPQo4mlKSZFEAw8iMGUGcCqDAuQuWf9ti7blJ6SHrnvFpEnyx9RKTp tdoA7nAA/Q6vCdmVjdFogkeHGFG6+XjODcc7aJmM2x8mdsh0DrK97akZwVc= -----END CERTIFICATE-----Generated at Fri Apr 19 00:32:25 2024 by rpki-client on console-fra.rpki-client.org