$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f10744ac-1b12-4593-8d6e-6a180986b2e7.roa File: f10744ac-1b12-4593-8d6e-6a180986b2e7.roa (raw, json) Hash identifier: k7CljVSte8UQ5z1dGIyLGymxGTJ7IrzewwpvwEWivOI= Subject key identifier: 8F:2E:3A:59:22:22:59:BE:00:A4:6A:F3:78:F6:36:8A:52:B6:31:9F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 64879830736F0B768A32C062DD1E4C132280586B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f10744ac-1b12-4593-8d6e-6a180986b2e7.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 18.252.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:87:98:30:73:6f:0b:76:8a:32:c0:62:dd:1e:4c:13:22:80:58:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=4d2e74a905ed791f33cf08cabaca22d5234a6401b30fad29f4f8385c4f75fcd4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c9:8e:ec:0e:04:cb:8d:5b:7a:65:92:62:ec: c5:d4:a0:23:df:ac:7c:26:a3:6a:3c:cc:0d:65:8e: c6:06:49:ed:dd:1b:55:e0:f9:89:3f:bd:b3:5d:df: 0c:9e:2f:89:1d:c6:54:b4:ed:97:de:cd:8c:e6:c5: df:f3:43:53:9d:43:cc:14:ed:ac:94:a2:e5:b3:3c: 66:97:a9:cf:ff:b3:d6:bb:9b:de:bc:c8:0b:2c:c1: e9:e5:d5:09:47:7c:9c:c2:b8:ec:ca:28:96:87:da: e3:f7:ed:ed:04:4c:ae:85:31:88:2a:fd:ab:8f:30: 05:0e:9b:d7:4b:da:e7:c0:0e:8b:da:37:a6:fd:ef: d5:3f:57:f1:38:43:03:32:f5:78:84:5a:bd:6b:13: 5a:a2:e1:61:f6:d6:0c:ff:b4:b5:83:66:88:90:05: 63:60:75:24:07:b4:42:b9:e5:99:8c:25:eb:e3:83: 26:e5:65:b0:a9:33:f2:4e:0c:30:41:b6:4b:84:66: f0:c6:63:7a:21:f1:82:33:03:87:d2:9a:b5:36:c1: 16:ec:4c:8c:9b:6d:fe:25:93:3f:dc:61:d3:81:f9: 5c:9c:3c:71:2c:de:d9:a5:c6:9a:a7:d2:91:a2:39: f3:df:fd:75:6b:bb:0c:e7:70:0b:4c:83:40:ab:83: 9b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2E:3A:59:22:22:59:BE:00:A4:6A:F3:78:F6:36:8A:52:B6:31:9F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f10744ac-1b12-4593-8d6e-6a180986b2e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.252.0.0/16 Signature Algorithm: sha256WithRSAEncryption 72:5c:93:95:d6:98:f3:d9:e4:11:8b:0a:67:a2:b5:99:88:77: 1d:5c:c6:02:ad:ca:86:72:14:da:8c:8d:b5:8a:d5:06:1f:10: e0:21:b3:09:f6:96:5f:85:74:73:e3:a0:35:3a:7f:18:b6:52: 9a:d2:52:df:30:0a:38:98:f6:a5:e6:60:23:79:1c:6d:b6:c5: e6:16:ba:ec:01:97:c9:a2:a6:fc:eb:9c:81:ff:8a:33:4a:f8: 11:25:88:01:e5:59:0f:97:4b:46:fb:44:c4:65:e9:11:88:49: 58:e5:36:56:ff:2d:18:1d:20:c3:46:08:31:ab:53:82:93:e4: 1d:83:bf:19:36:34:c1:46:20:b3:d7:65:80:fd:3b:be:04:1d: cf:27:1a:a2:af:4a:8c:97:6f:ce:ad:29:0c:72:50:72:33:45: 40:9b:c1:c1:b2:8c:e2:53:fe:0c:ee:b6:17:10:c4:c0:e2:ec: aa:2d:d0:c8:a8:06:0b:33:57:9f:65:6c:ff:74:87:c9:5e:e2: 03:20:2d:b1:da:07:fc:61:44:41:f5:6b:ef:2e:5a:90:4e:25: 6d:99:b1:66:d5:f1:32:2b:b1:eb:ce:d3:5f:38:35:0f:9c:01: 45:12:5b:a4:95:1a:ce:28:0a:67:f2:cd:2d:98:e2:59:10:cb: c2:3e:0b:7d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZIeYMHNvC3aKMsBi3R5MEyKAWGswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZDJlNzRhOTA1ZWQ3OTFmMzNjZjA4Y2FiYWNhMjJkNTIz NGE2NDAxYjMwZmFkMjlmNGY4Mzg1YzRmNzVmY2Q0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkyY7sDgTLjVt6ZZJi7MXUoCPfrHwmo2o8zA1ljsYGSe3d G1Xg+Yk/vbNd3wyeL4kdxlS07ZfezYzmxd/zQ1OdQ8wU7ayUouWzPGaXqc//s9a7 m968yAsswenl1QlHfJzCuOzKKJaH2uP37e0ETK6FMYgq/auPMAUOm9dL2ufADova N6b979U/V/E4QwMy9XiEWr1rE1qi4WH21gz/tLWDZoiQBWNgdSQHtEK55ZmMJevj gyblZbCpM/JODDBBtkuEZvDGY3oh8YIzA4fSmrU2wRbsTIybbf4lkz/cYdOB+Vyc PHEs3tmlxpqn0pGiOfPf/XVruwzncAtMg0Crg5tZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUjy46WSIiWb4ApGrzePY2ilK2MZ8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YxMDc0NGFjLTFiMTItNDU5My04ZDZlLTZhMTgwOTg2YjJlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAS/DANBgkqhkiG9w0BAQsFAAOCAQEAclyTldaY89nkEYsKZ6K1mYh3HVzG Aq3KhnIU2oyNtYrVBh8Q4CGzCfaWX4V0c+OgNTp/GLZSmtJS3zAKOJj2peZgI3kc bbbF5ha67AGXyaKm/Oucgf+KM0r4ESWIAeVZD5dLRvtExGXpEYhJWOU2Vv8tGB0g w0YIMatTgpPkHYO/GTY0wUYgs9dlgP07vgQdzycaoq9KjJdvzq0pDHJQcjNFQJvB wbKM4lP+DO62FxDEwOLsqi3QyKgGCzNXn2Vs/3SHyV7iAyAtsdoH/GFEQfVr7y5a kE4lbZmxZtXxMiux687TXzg1D5wBRRJbpJUazigKZ/LNLZjiWRDLwj4LfQ== -----END CERTIFICATE-----Generated at Wed May 1 20:49:13 2024 by rpki-client on console-ams.rpki-client.org