$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2df1d478-efcc-4b9f-9229-2417c129969a.roa File: 2df1d478-efcc-4b9f-9229-2417c129969a.roa (raw, json) Hash identifier: +em44hthDwsNjK4Ozm+mEivuBIbWwN4BRzBw1ODhu+Q= Subject key identifier: 9D:78:7A:EE:47:C7:DE:2C:2E:43:6A:99:72:63:49:01:51:8E:EF:A8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 06CC1188165B2AAE9E35FE23C49A89491BC9DBBC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2df1d478-efcc-4b9f-9229-2417c129969a.roa Signing time: Mon 13 May 2024 00:00:00 +0000 ROA not before: Mon 13 May 2024 00:00:00 +0000 ROA not after: Mon 17 Jun 2024 23:59:59 +0000 asID: 8987 IP address blocks: 56.35.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:cc:11:88:16:5b:2a:ae:9e:35:fe:23:c4:9a:89:49:1b:c9:db:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 00:00:00 2024 GMT Not After : Jun 17 23:59:59 2024 GMT Subject: serialNumber=1f6a8bec768c3200d28d84c647c77fa81fa633da5938a03694c69b2c66fdf8e2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c6:68:e4:0b:12:f4:1b:1e:c8:35:9b:d1:d1: 0a:d1:6b:f3:65:d5:7c:17:39:91:e1:12:4d:3e:96: 86:0b:9c:af:2f:ab:84:62:cf:3b:28:a0:f4:85:2f: 44:29:57:59:ca:fe:34:20:7e:ed:40:39:d7:5f:53: 18:52:96:c4:38:5b:31:ed:2c:3e:fc:5f:71:05:1b: 9e:a6:30:96:78:2c:8e:e4:ed:7f:83:d4:2c:13:78: af:ee:e5:de:85:67:cd:a5:24:b1:f0:cb:fd:0f:0c: c8:de:24:6e:c9:2a:d4:93:54:34:c1:6d:59:bd:c4: 89:6b:ab:b9:14:43:82:52:3d:bf:e1:8d:b5:b8:d5: f9:66:3c:b2:ed:b0:99:05:a6:ab:c3:61:16:f9:00: ce:4c:75:79:15:1c:3f:5f:dc:af:1c:81:04:cb:89: 1f:d5:69:8b:32:e6:13:9e:ed:94:75:58:80:f1:b8: 0b:ce:da:b7:e3:2b:4c:de:11:64:65:4c:5f:5b:07: 04:15:73:9c:e1:78:36:d3:e7:23:46:8c:28:2a:bb: 56:e7:25:45:8a:d9:14:c9:ec:a9:c5:26:5d:8d:b7: c6:7e:3b:a8:68:66:21:74:21:95:3a:06:c8:4d:f6: bb:2b:79:b5:73:fb:ab:3f:b5:7e:ab:c4:1b:1d:cb: 02:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:78:7A:EE:47:C7:DE:2C:2E:43:6A:99:72:63:49:01:51:8E:EF:A8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2df1d478-efcc-4b9f-9229-2417c129969a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.35.0.0/16 Signature Algorithm: sha256WithRSAEncryption 43:9d:26:fe:b9:37:b8:66:9f:2b:23:46:79:bf:b9:11:b5:f4: 92:55:25:75:d6:4d:b6:2f:43:6d:5c:9d:b1:41:03:19:8f:18: 16:fe:21:c1:78:55:2a:bf:fe:13:2a:1c:f1:1a:ac:66:53:c0: b8:ba:22:3e:11:1d:07:2f:3d:00:95:f2:b8:12:50:95:48:9c: 91:33:c6:a1:f0:57:47:23:02:c1:ab:99:02:09:4a:7d:8d:7e: a2:98:09:2f:b7:b8:13:4f:b7:59:e9:05:b8:f9:4d:aa:8b:b1: f7:3e:00:6a:8f:64:9f:ef:1e:f4:83:05:d6:92:6c:2f:37:76: 8d:83:26:7d:a3:ff:51:aa:f5:c0:d2:6b:1a:b5:df:f2:f3:9a: 33:21:7d:a2:b7:7c:52:5f:31:63:fa:f8:45:e0:a6:f3:bf:77: 2a:90:4d:de:d5:95:20:88:01:34:e8:88:68:b7:46:a7:ba:9f: 00:51:30:bc:0d:44:15:bb:06:d0:bf:89:a1:ee:81:46:23:0b: 80:ac:1e:a5:3b:e1:fe:d8:b2:ab:5e:7e:0c:db:25:e7:f8:64: a1:82:7f:11:22:2f:7a:c5:94:de:0b:70:d5:c3:c5:b1:26:df: ad:93:df:a0:a7:09:a5:fa:04:d7:44:39:f1:b3:b1:e3:ea:22: bb:c8:61:b4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUBswRiBZbKq6eNf4jxJqJSRvJ27wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTEzMDAwMDAwWhcNMjQwNjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjZhOGJlYzc2OGMzMjAwZDI4ZDg0YzY0N2M3N2ZhODFm YTYzM2RhNTkzOGEwMzY5NGM2OWIyYzY2ZmRmOGUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDixmjkCxL0Gx7INZvR0QrRa/Nl1XwXOZHhEk0+loYLnK8v q4RizzsooPSFL0QpV1nK/jQgfu1AOddfUxhSlsQ4WzHtLD78X3EFG56mMJZ4LI7k 7X+D1CwTeK/u5d6FZ82lJLHwy/0PDMjeJG7JKtSTVDTBbVm9xIlrq7kUQ4JSPb/h jbW41flmPLLtsJkFpqvDYRb5AM5MdXkVHD9f3K8cgQTLiR/VaYsy5hOe7ZR1WIDx uAvO2rfjK0zeEWRlTF9bBwQVc5zheDbT5yNGjCgqu1bnJUWK2RTJ7KnFJl2Nt8Z+ O6hoZiF0IZU6BshN9rsrebVz+6s/tX6rxBsdywLNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUnXh67kfH3iwuQ2qZcmNJAVGO76gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJkZjFkNDc4LWVmY2MtNGI5Zi05MjI5LTI0MTdjMTI5OTY5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4IzANBgkqhkiG9w0BAQsFAAOCAQEAQ50m/rk3uGafKyNGeb+5EbX0klUl ddZNti9DbVydsUEDGY8YFv4hwXhVKr/+Eyoc8RqsZlPAuLoiPhEdBy89AJXyuBJQ lUickTPGofBXRyMCwauZAglKfY1+opgJL7e4E0+3WekFuPlNqoux9z4Aao9kn+8e 9IMF1pJsLzd2jYMmfaP/Uar1wNJrGrXf8vOaMyF9ord8Ul8xY/r4ReCm8793KpBN 3tWVIIgBNOiIaLdGp7qfAFEwvA1EFbsG0L+Joe6BRiMLgKwepTvh/tiyq15+DNsl 5/hkoYJ/ESIvesWU3gtw1cPFsSbfrZPfoKcJpfoE10Q58bOx4+oiu8hhtA== -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:11 2024 by rpki-client on console-ams.rpki-client.org