$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4799eda0-6585-4e8e-99ac-171e2f5c5066.roa File: 4799eda0-6585-4e8e-99ac-171e2f5c5066.roa (raw, json) Hash identifier: p8SiLKGK29i8rdHKM4oWA/X2IYlVnsasM+3XU8qeu/Q= Subject key identifier: 66:5B:23:52:79:75:28:FF:85:F5:37:A9:41:7A:A6:4F:49:21:07:72 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0CA286222C9019337A902B40979380F4556F59C7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4799eda0-6585-4e8e-99ac-171e2f5c5066.roa Signing time: Fri 10 May 2024 00:00:00 +0000 ROA not before: Fri 10 May 2024 00:00:00 +0000 ROA not after: Fri 14 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a2:86:22:2c:90:19:33:7a:90:2b:40:97:93:80:f4:55:6f:59:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:00:00 2024 GMT Not After : Jun 14 23:59:59 2024 GMT Subject: serialNumber=2ec560d4aaff33cba38ccb279f1297863da776e88540be0fa44005f1de8501b1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:88:9b:a4:c5:f8:76:7f:b4:71:b3:5e:55:8b: b1:25:92:e6:33:9a:24:c9:14:fc:dd:69:1b:a2:d7: 72:04:04:e7:c1:16:52:d3:da:7a:b5:8f:c1:21:37: b2:c1:99:8f:d8:b8:8e:7c:08:7f:e7:69:e3:de:bd: ac:f5:06:6d:63:3f:4b:d5:c9:05:88:6e:4e:c3:8e: 74:7e:68:ce:4e:a3:ae:f8:38:ca:5c:89:a1:1b:16: d2:57:47:6d:27:59:e9:b8:d4:9c:bc:af:b8:23:64: 45:2b:76:5a:77:a3:55:b2:33:82:62:46:85:cb:b3: 5b:a2:20:ff:b7:17:0f:1d:4b:b0:be:fe:5d:aa:82: b0:bd:1c:29:ea:18:d2:50:0c:5a:4f:e3:e4:b1:ca: d4:af:fa:2f:d1:4c:eb:28:44:46:4d:07:dc:bb:b0: 6b:60:0f:4b:df:b5:be:00:2e:93:fb:09:8c:ed:6e: 40:53:81:01:24:19:4c:9f:36:b9:b0:d6:b3:95:67: da:9b:1b:bd:3e:bd:1e:9f:50:36:1b:4b:ed:31:da: a2:d1:10:58:ac:1b:e0:3b:03:b5:e1:80:91:39:ed: 6d:5b:82:fd:21:62:18:50:18:db:a5:1c:d7:4f:6b: 39:40:48:40:3b:d3:3b:e4:ef:c4:a7:38:e6:de:b2: 18:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5B:23:52:79:75:28:FF:85:F5:37:A9:41:7A:A6:4F:49:21:07:72 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4799eda0-6585-4e8e-99ac-171e2f5c5066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.96.0/21 Signature Algorithm: sha256WithRSAEncryption b6:95:8b:f8:4a:fa:28:c1:11:0a:c7:38:a2:eb:d1:90:36:a4: 96:2c:d4:bf:86:e3:24:f9:c0:e5:62:fe:94:6f:85:c3:62:01: 79:7d:46:5e:28:a0:09:c6:e5:3c:0f:fc:7e:15:f6:30:1d:da: 80:eb:ac:db:ac:b1:ca:4b:99:f3:e2:57:97:b3:59:34:ef:dd: ac:e6:43:6c:4b:a5:ea:68:6a:79:c2:b5:aa:be:d4:1d:c8:1a: c0:28:97:bf:80:12:d1:d6:7a:dd:27:ed:a3:9f:6a:7e:d2:e7: 2e:23:5c:41:36:ae:d2:77:f3:6f:9a:18:c4:e6:32:05:2e:6c: 3a:c5:93:c1:f1:37:2c:3f:f9:42:43:9f:2b:a3:81:69:57:43: 3b:d4:c5:ef:4d:d3:93:74:22:c7:4f:85:79:ab:54:27:69:f8: ac:d0:24:6a:8b:d4:29:52:f8:bc:fc:6f:c4:20:49:13:8f:5a: 08:08:f0:3d:b5:b3:70:2a:36:10:64:1b:93:60:68:d7:1a:19: 2f:cf:06:1d:33:e1:cb:2d:06:77:6a:f5:e0:90:b1:a4:39:51: ba:be:b2:e6:8d:44:56:24:7b:a3:4b:a9:75:28:1c:c2:93:ab: 3e:7a:13:53:7d:aa:5f:4e:be:ad:5c:66:36:b6:56:49:96:eb: ff:ae:53:f6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDKKGIiyQGTN6kCtAl5OA9FVvWccwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTEwMDAwMDAwWhcNMjQwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZWM1NjBkNGFhZmYzM2NiYTM4Y2NiMjc5ZjEyOTc4NjNk YTc3NmU4ODU0MGJlMGZhNDQwMDVmMWRlODUwMWIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWiJukxfh2f7Rxs15Vi7ElkuYzmiTJFPzdaRui13IEBOfB FlLT2nq1j8EhN7LBmY/YuI58CH/naePevaz1Bm1jP0vVyQWIbk7DjnR+aM5Oo674 OMpciaEbFtJXR20nWem41Jy8r7gjZEUrdlp3o1WyM4JiRoXLs1uiIP+3Fw8dS7C+ /l2qgrC9HCnqGNJQDFpP4+SxytSv+i/RTOsoREZNB9y7sGtgD0vftb4ALpP7CYzt bkBTgQEkGUyfNrmw1rOVZ9qbG70+vR6fUDYbS+0x2qLREFisG+A7A7XhgJE57W1b gv0hYhhQGNulHNdPazlASEA70zvk78SnOObeshi1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZlsjUnl1KP+F9TepQXqmT0khB3IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ3OTllZGEwLTY1ODUtNGU4ZS05OWFjLTE3MWUyZjVjNTA2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjlmAwDQYJKoZIhvcNAQELBQADggEBALaVi/hK+ijBEQrHOKLr0ZA2pJYs 1L+G4yT5wOVi/pRvhcNiAXl9Rl4ooAnG5TwP/H4V9jAd2oDrrNusscpLmfPiV5ez WTTv3azmQ2xLpepoannCtaq+1B3IGsAol7+AEtHWet0n7aOfan7S5y4jXEE2rtJ3 82+aGMTmMgUubDrFk8HxNyw/+UJDnyujgWlXQzvUxe9N05N0IsdPhXmrVCdp+KzQ JGqL1ClS+Lz8b8QgSROPWggI8D21s3AqNhBkG5NgaNcaGS/PBh0z4cstBndq9eCQ saQ5Ubq+suaNRFYke6NLqXUoHMKTqz56E1N9ql9Ovq1cZja2VkmW6/+uU/Y= -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:15 2024 by rpki-client on console-ams.rpki-client.org