$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/221c99b1-1a53-4257-b896-1fa0c9557e78.roa File: 221c99b1-1a53-4257-b896-1fa0c9557e78.roa (raw, json) Hash identifier: YG0otx26+2JaHW1jKu2cDBIHVmRXt8vGKyy36G0kuBk= Subject key identifier: F4:8A:17:AD:90:E1:45:D9:29:DC:A3:21:C0:31:58:8D:3E:80:A2:51 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0435B9EFE54AE0C4912C338CD9339EF47C35E303 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/221c99b1-1a53-4257-b896-1fa0c9557e78.roa Signing time: Thu 18 Apr 2024 00:00:00 +0000 ROA not before: Thu 18 Apr 2024 00:00:00 +0000 ROA not after: Thu 23 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 209.177.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:35:b9:ef:e5:4a:e0:c4:91:2c:33:8c:d9:33:9e:f4:7c:35:e3:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:00:00 2024 GMT Not After : May 23 23:59:59 2024 GMT Subject: serialNumber=c5ac2ac0ad13502910fd6b4a2b8076b31fd737c93a24f8558cb3920146258635, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3f:e7:d2:3a:10:0e:1a:7e:38:4e:8f:fd:41: 67:2a:78:4e:20:f5:94:96:ba:b1:58:58:fb:2d:9c: a3:1c:fa:1b:7e:95:6c:bc:fe:51:f6:7e:61:b0:4f: 66:04:21:a5:32:d9:30:48:59:8f:67:c3:ae:ae:96: 8a:49:14:07:f9:30:58:53:8e:a4:b3:d0:c4:b9:04: 3d:f2:d0:cb:52:de:f1:42:ce:eb:be:10:1a:85:6f: 5d:26:94:0d:2e:0c:b0:f9:6e:d8:cc:52:26:dc:2b: 2e:2c:10:39:aa:35:cb:4b:e8:10:eb:ea:1e:64:0c: f3:7a:1e:76:2b:b2:3e:fb:b7:2a:34:6f:aa:2c:8c: 6d:eb:53:a5:28:7a:9a:6b:27:c0:ce:d0:3f:7d:ea: 2e:ec:a1:d7:ee:bb:26:2d:40:8b:bd:6e:ec:b2:27: 04:9a:bf:ba:7f:e7:8e:c1:bb:f2:76:3c:b2:2f:69: 94:a2:ba:9d:bd:ee:c6:47:9c:5d:ec:13:ba:24:62: 46:64:6e:93:93:57:2c:aa:fa:76:e5:74:15:e5:29: 30:eb:34:79:a0:36:fa:66:5f:b9:82:29:fb:ec:5a: 87:2e:c4:50:08:ea:12:90:49:7d:2f:34:17:45:38: 62:2c:4d:43:87:e9:f9:8f:bb:cd:83:80:ec:a4:79: 84:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8A:17:AD:90:E1:45:D9:29:DC:A3:21:C0:31:58:8D:3E:80:A2:51 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/221c99b1-1a53-4257-b896-1fa0c9557e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.177.20.0/22 Signature Algorithm: sha256WithRSAEncryption 15:d0:6d:e4:9c:ca:67:21:c2:ec:84:93:66:af:5d:bd:50:d5: d2:b1:ba:3a:22:76:31:6b:ea:0c:ba:b3:3a:f3:7f:1d:ea:0d: b6:b0:68:22:da:0c:82:73:e4:47:1c:5d:d3:f7:14:b9:50:17: ac:a5:cb:ad:3e:40:75:b3:ae:2c:30:d2:fd:3d:e9:f4:67:82: 45:2d:b2:ca:85:39:55:44:bc:64:0b:ad:de:a8:da:17:d7:7a: 43:12:0e:52:4f:60:55:48:1a:5a:ab:7d:79:3d:31:2d:d8:ad: 64:6e:e1:58:50:7d:b5:c1:20:63:df:ce:1b:07:50:9f:a9:31: 7c:61:2c:79:5d:1c:d9:b1:ed:ca:62:2e:b5:b3:3f:ba:bb:94: a2:9e:9b:fa:6b:f9:9f:d4:80:3e:64:d0:a8:02:5c:a4:de:d1: c4:23:6f:a5:18:2f:e5:e9:10:f8:38:11:cb:5b:ef:9e:2c:ca: 1f:92:30:e1:3e:80:88:6f:5b:01:25:5e:84:4c:94:25:10:24: 98:45:35:81:5d:54:0b:a5:a8:df:4b:8a:a6:d0:8f:5b:a4:53: 02:c4:75:53:6c:12:41:39:b6:ea:0a:5d:da:c4:87:93:08:ab: e5:3d:55:21:b1:02:61:93:86:f7:2b:11:ea:67:6b:cc:14:3e: 1e:4d:78:19 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBDW57+VK4MSRLDOM2TOe9Hw14wMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE4MDAwMDAwWhcNMjQwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNWFjMmFjMGFkMTM1MDI5MTBmZDZiNGEyYjgwNzZiMzFm ZDczN2M5M2EyNGY4NTU4Y2IzOTIwMTQ2MjU4NjM1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHP+fSOhAOGn44To/9QWcqeE4g9ZSWurFYWPstnKMc+ht+ lWy8/lH2fmGwT2YEIaUy2TBIWY9nw66ulopJFAf5MFhTjqSz0MS5BD3y0MtS3vFC zuu+EBqFb10mlA0uDLD5btjMUibcKy4sEDmqNctL6BDr6h5kDPN6HnYrsj77tyo0 b6osjG3rU6UoepprJ8DO0D996i7sodfuuyYtQIu9buyyJwSav7p/547Bu/J2PLIv aZSiup297sZHnF3sE7okYkZkbpOTVyyq+nbldBXlKTDrNHmgNvpmX7mCKfvsWocu xFAI6hKQSX0vNBdFOGIsTUOH6fmPu82DgOykeYTDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9IoXrZDhRdkp3KMhwDFYjT6AolEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyMWM5OWIxLTFhNTMtNDI1Ny1iODk2LTFmYTBjOTU1N2U3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALRsRQwDQYJKoZIhvcNAQELBQADggEBABXQbeScymchwuyEk2avXb1Q1dKx ujoidjFr6gy6szrzfx3qDbawaCLaDIJz5EccXdP3FLlQF6yly60+QHWzriww0v09 6fRngkUtssqFOVVEvGQLrd6o2hfXekMSDlJPYFVIGlqrfXk9MS3YrWRu4VhQfbXB IGPfzhsHUJ+pMXxhLHldHNmx7cpiLrWzP7q7lKKem/pr+Z/UgD5k0KgCXKTe0cQj b6UYL+XpEPg4Ectb754syh+SMOE+gIhvWwElXoRMlCUQJJhFNYFdVAulqN9LiqbQ j1ukUwLEdVNsEkE5tuoKXdrEh5MIq+U9VSGxAmGThvcrEepna8wUPh5NeBk= -----END CERTIFICATE-----Generated at Mon May 6 00:46:47 2024 by rpki-client on console-ams.rpki-client.org