$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5be3fee-5249-40e3-a57f-f67e4d2c6c9a.roa File: d5be3fee-5249-40e3-a57f-f67e4d2c6c9a.roa (raw, json) Hash identifier: 46+h1NoosjQTH240Jg4nLI9KBgFzoNSRY3c72FaQZes= Subject key identifier: D7:AF:AD:7C:CD:60:E8:1F:B9:55:B5:34:74:D3:80:B5:EE:51:11:1D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 34D0176C61FF0CAC58D4078C27F9788AEAD2AAF9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5be3fee-5249-40e3-a57f-f67e4d2c6c9a.roa Signing time: Fri 05 Apr 2024 00:00:00 +0000 ROA not before: Fri 05 Apr 2024 00:00:00 +0000 ROA not after: Fri 10 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 52.93.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d0:17:6c:61:ff:0c:ac:58:d4:07:8c:27:f9:78:8a:ea:d2:aa:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 5 00:00:00 2024 GMT Not After : May 10 23:59:59 2024 GMT Subject: serialNumber=a89ca60bf203d947c79fd58e3d1dd6d3b61677f892dba1f357de6ba3a743227b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:eb:7e:9a:9d:be:62:06:08:c3:36:08:8a:62: 18:a6:e2:9e:cb:6e:09:39:0b:48:d3:75:66:3c:d6: c4:74:0d:62:60:ca:9d:45:9b:01:ea:9e:76:0f:d5: e1:a4:da:5b:39:88:87:3c:d3:93:30:7d:2c:25:96: 79:51:12:09:48:5c:11:d4:ce:bc:f5:5a:05:fd:bd: ae:e3:d0:93:c8:c4:6f:05:be:8e:f8:fb:3a:f1:f8: bc:30:6f:bf:d5:1e:4e:dc:e8:11:ce:f2:13:9d:3e: 7f:99:c4:6a:4b:9e:d6:29:5d:9e:bb:90:cc:18:b9: f6:8c:f1:8e:27:e3:fb:9a:c1:5e:d1:30:3f:db:a2: 77:68:c6:8b:47:ee:eb:c7:91:e3:77:05:51:95:f7: 04:6e:7b:0b:d9:97:a5:c3:26:10:64:23:41:4f:ae: a1:ff:ec:e8:ee:22:eb:5d:2d:c7:5c:30:40:34:29: 1b:0d:48:40:2c:bf:98:90:98:96:d0:a0:df:61:49: fd:21:32:58:56:c2:4f:d5:51:15:ef:0d:aa:0d:de: d7:e6:b1:3a:12:2d:cb:44:c3:bf:ef:1a:40:da:81: 20:37:af:c4:92:b4:96:61:d3:ff:2d:bc:ab:cd:6d: 78:10:c1:c0:b7:ee:8a:2d:90:c7:76:e0:2e:3c:75: 54:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AF:AD:7C:CD:60:E8:1F:B9:55:B5:34:74:D3:80:B5:EE:51:11:1D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5be3fee-5249-40e3-a57f-f67e4d2c6c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.59.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:bf:b8:50:df:46:5c:ed:f0:73:ac:06:a5:90:ad:79:00:30: 6d:16:17:47:07:cf:09:ec:9f:8a:0c:23:94:0b:0d:25:86:93: 6d:57:17:5d:3b:f9:3b:2f:43:3a:5e:1e:3b:26:b8:0c:2a:51: 24:b4:4b:a1:53:1b:0c:72:5a:de:70:dc:02:d7:fe:3c:ba:06: 0f:bc:4c:d6:a2:28:68:2e:29:df:38:59:03:d6:3f:aa:b1:5f: 0b:f1:8d:af:98:34:2d:87:03:94:90:d7:a8:b7:56:bf:c5:f3: e7:b8:87:96:d9:12:07:f8:de:86:e0:41:ce:ee:46:9c:77:39: f5:c8:b4:bb:9a:97:61:c3:5f:bf:44:4f:b7:95:4e:87:ff:69: fd:a3:29:70:d5:ea:e0:88:d8:95:3a:cf:9c:b5:4c:92:53:84: e9:0e:11:3c:66:ed:0c:8f:36:dd:54:fc:d0:c9:62:07:0b:00: 0a:0e:ac:de:7f:07:c0:a9:fc:e7:c5:59:70:54:54:f4:c4:cb: 3e:06:be:33:16:5d:c0:1f:cd:f0:c3:81:e4:a0:27:0d:a9:5f: 66:51:04:6f:17:3f:b7:cf:b5:eb:e6:c6:f1:10:cb:8c:47:23: 19:73:1c:4d:dd:03:ab:0f:9e:06:40:fa:16:d0:a6:95:aa:0a: 2a:53:a6:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNNAXbGH/DKxY1AeMJ/l4iurSqvkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA1MDAwMDAwWhcNMjQwNTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhODljYTYwYmYyMDNkOTQ3Yzc5ZmQ1OGUzZDFkZDZkM2I2 MTY3N2Y4OTJkYmExZjM1N2RlNmJhM2E3NDMyMjdiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3636anb5iBgjDNgiKYhim4p7Lbgk5C0jTdWY81sR0DWJg yp1FmwHqnnYP1eGk2ls5iIc805MwfSwllnlREglIXBHUzrz1WgX9va7j0JPIxG8F vo74+zrx+Lwwb7/VHk7c6BHO8hOdPn+ZxGpLntYpXZ67kMwYufaM8Y4n4/uawV7R MD/bondoxotH7uvHkeN3BVGV9wRuewvZl6XDJhBkI0FPrqH/7OjuIutdLcdcMEA0 KRsNSEAsv5iQmJbQoN9hSf0hMlhWwk/VURXvDaoN3tfmsToSLctEw7/vGkDagSA3 r8SStJZh0/8tvKvNbXgQwcC37ootkMd24C48dVQdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU16+tfM1g6B+5VbU0dNOAte5RER0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q1YmUzZmVlLTUyNDktNDBlMy1hNTdmLWY2N2U0ZDJjNmM5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XTswDQYJKoZIhvcNAQELBQADggEBAAq/uFDfRlzt8HOsBqWQrXkAMG0W F0cHzwnsn4oMI5QLDSWGk21XF107+TsvQzpeHjsmuAwqUSS0S6FTGwxyWt5w3ALX /jy6Bg+8TNaiKGguKd84WQPWP6qxXwvxja+YNC2HA5SQ16i3Vr/F8+e4h5bZEgf4 3obgQc7uRpx3OfXItLual2HDX79ET7eVTof/af2jKXDV6uCI2JU6z5y1TJJThOkO ETxm7QyPNt1U/NDJYgcLAAoOrN5/B8Cp/OfFWXBUVPTEyz4GvjMWXcAfzfDDgeSg Jw2pX2ZRBG8XP7fPtevmxvEQy4xHIxlzHE3dA6sPngZA+hbQppWqCipTprs= -----END CERTIFICATE-----Generated at Fri Apr 26 11:01:07 2024 by rpki-client on console-ams.rpki-client.org