$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec36f18a-acab-4304-929a-364f227c720a.roa File: ec36f18a-acab-4304-929a-364f227c720a.roa (raw, json) Hash identifier: FBa8A4Nz/DmyJpSz2j9/sgDeZId27MuUevfIV5NxpXc= Subject key identifier: AC:F3:8E:C1:7A:94:67:C0:F4:2B:6E:1F:0B:67:25:57:34:C8:3D:9E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 793AC5D73E7AB7AFBE2A50E2F55413CDD8B45B8F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec36f18a-acab-4304-929a-364f227c720a.roa Signing time: Tue 02 Apr 2024 00:00:00 +0000 ROA not before: Tue 02 Apr 2024 00:00:00 +0000 ROA not after: Tue 07 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 150.222.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:3a:c5:d7:3e:7a:b7:af:be:2a:50:e2:f5:54:13:cd:d8:b4:5b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 2 00:00:00 2024 GMT Not After : May 7 23:59:59 2024 GMT Subject: serialNumber=6bf7c683260db59257b291d305b9514b405071aacad0475231ef67604490fc97, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7d:9d:a9:9b:a3:df:38:fa:f0:05:b6:c2:7b: 50:6d:3f:45:33:d3:18:89:d5:d0:7b:99:2f:df:0f: 92:75:b6:77:89:62:86:07:91:f7:81:b5:5f:98:90: 46:e3:a8:4c:74:d3:cf:c4:cd:06:f8:d1:0d:c4:6e: ea:99:62:a0:23:89:4c:c9:18:8a:87:e9:21:85:69: 41:5e:51:5d:93:06:71:4c:5b:96:a4:0a:51:47:ca: 42:6b:b6:9f:cf:5a:7e:50:b2:be:a9:2a:da:97:e2: 99:57:fe:e0:ea:72:bf:8f:27:13:f2:48:4d:83:d3: 4a:2a:0e:24:e3:e2:f3:3d:d1:00:e0:97:e6:4a:37: 11:00:87:91:28:68:77:42:a1:ad:13:a0:70:4d:04: 87:eb:93:38:5f:dd:d0:36:af:88:56:27:55:bb:8c: b2:42:f9:60:b0:3a:86:09:6c:9d:bc:4c:80:f4:79: ed:1f:8e:e6:8b:5e:8e:c0:6b:b1:f9:0f:d0:e8:18: 97:f6:8a:0f:1b:a3:66:50:2a:36:a3:e7:46:4e:08: fa:d1:65:81:6a:83:e4:b4:bb:ba:62:21:04:c4:66: 40:76:c6:f2:85:fd:2c:21:f8:a0:df:e1:e6:9b:71: 1a:b8:f6:07:c5:74:59:9c:26:32:a5:7d:af:23:b1: d1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F3:8E:C1:7A:94:67:C0:F4:2B:6E:1F:0B:67:25:57:34:C8:3D:9E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec36f18a-acab-4304-929a-364f227c720a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.7.0/24 Signature Algorithm: sha256WithRSAEncryption 52:67:9a:93:da:31:0b:d7:6f:65:37:27:49:1a:64:17:64:3b: 70:d5:a3:da:ab:6f:73:13:e2:6d:70:89:fb:08:64:1a:95:74: c8:68:64:00:56:2b:ff:23:37:89:ce:ba:3b:e0:7a:c0:6e:d5: df:9b:93:4c:ef:aa:41:c5:19:ed:97:16:4a:d2:97:61:fa:07: 97:7e:1d:87:d1:6b:67:71:f6:1f:39:ff:be:d2:c4:8b:9b:0e: cb:c6:b7:c3:b6:3b:da:6f:eb:4e:9a:69:1c:07:16:43:d9:ee: c3:a6:ba:97:dd:46:0b:65:26:64:8a:19:f8:98:18:59:e5:9c: 8f:f6:84:4c:e4:70:db:4f:8e:90:6e:1a:c9:5f:04:94:49:a8: 29:3a:4e:ef:20:42:c2:e0:5a:3b:0d:42:7a:24:ed:bc:ba:75: 1e:61:0f:52:b9:39:27:1c:2c:e1:9d:c5:89:10:93:06:2a:51: 9c:29:40:2a:a2:ac:de:21:da:be:a2:8d:3a:a4:58:bd:86:24: 23:0f:6f:9a:92:2f:b3:2d:51:23:99:02:bd:74:10:e7:34:d5: b0:3e:a6:92:ac:e0:10:76:fd:37:38:a3:60:63:e2:ed:7e:36: 4b:ad:90:01:02:88:4f:75:ae:0c:d2:42:50:ed:6c:4d:22:8d: 43:7d:3d:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeTrF1z56t6++KlDi9VQTzdi0W48wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDAyMDAwMDAwWhcNMjQwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YmY3YzY4MzI2MGRiNTkyNTdiMjkxZDMwNWI5NTE0YjQw NTA3MWFhY2FkMDQ3NTIzMWVmNjc2MDQ0OTBmYzk3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqfZ2pm6PfOPrwBbbCe1BtP0Uz0xiJ1dB7mS/fD5J1tneJ YoYHkfeBtV+YkEbjqEx008/EzQb40Q3EbuqZYqAjiUzJGIqH6SGFaUFeUV2TBnFM W5akClFHykJrtp/PWn5Qsr6pKtqX4plX/uDqcr+PJxPySE2D00oqDiTj4vM90QDg l+ZKNxEAh5EoaHdCoa0ToHBNBIfrkzhf3dA2r4hWJ1W7jLJC+WCwOoYJbJ28TID0 ee0fjuaLXo7Aa7H5D9DoGJf2ig8bo2ZQKjaj50ZOCPrRZYFqg+S0u7piIQTEZkB2 xvKF/Swh+KDf4eabcRq49gfFdFmcJjKlfa8jsdEbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrPOOwXqUZ8D0K24fC2clVzTIPZ4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VjMzZmMThhLWFjYWItNDMwNC05MjlhLTM2NGYyMjdjNzIwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3gcwDQYJKoZIhvcNAQELBQADggEBAFJnmpPaMQvXb2U3J0kaZBdkO3DV o9qrb3MT4m1wifsIZBqVdMhoZABWK/8jN4nOujvgesBu1d+bk0zvqkHFGe2XFkrS l2H6B5d+HYfRa2dx9h85/77SxIubDsvGt8O2O9pv606aaRwHFkPZ7sOmupfdRgtl JmSKGfiYGFnlnI/2hEzkcNtPjpBuGslfBJRJqCk6Tu8gQsLgWjsNQnok7by6dR5h D1K5OSccLOGdxYkQkwYqUZwpQCqirN4h2r6ijTqkWL2GJCMPb5qSL7MtUSOZAr10 EOc01bA+ppKs4BB2/Tc4o2Bj4u1+NkutkAECiE91rgzSQlDtbE0ijUN9PT0= -----END CERTIFICATE-----Generated at Fri Apr 26 11:01:07 2024 by rpki-client on console-ams.rpki-client.org