$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5cf6d6da-60a8-4b7b-88a8-0efcf205a596.roa File: 5cf6d6da-60a8-4b7b-88a8-0efcf205a596.roa (raw, json) Hash identifier: ptTMxRRHOcpBHrWJLiRzRh5gzpOPuu9JDEeykKs4lgk= Subject key identifier: 73:AE:86:29:80:CD:C2:55:E6:E1:8E:60:05:76:10:37:C6:28:3F:0A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 386E79CA7C4FA15211A764D7BAF26898C9187E4C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5cf6d6da-60a8-4b7b-88a8-0efcf205a596.roa Signing time: Tue 28 May 2024 00:00:00 +0000 ROA not before: Tue 28 May 2024 00:00:00 +0000 ROA not after: Tue 02 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 40.38.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6e:79:ca:7c:4f:a1:52:11:a7:64:d7:ba:f2:68:98:c9:18:7e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:00:00 2024 GMT Not After : Jul 2 23:59:59 2024 GMT Subject: serialNumber=01c85371d83382797b7a8e8b8be917838d7aad03ed7b5def8206de95b288c14d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:26:eb:2e:34:00:fd:b9:c3:3c:8a:6d:cc:9b: e7:8e:29:19:fd:81:89:91:17:c3:ef:f4:3b:df:de: 8c:e8:d9:2d:c6:65:82:07:40:60:02:5d:15:e5:fb: 08:48:ba:eb:8c:82:8a:2a:b6:33:0f:07:ad:cd:68: 51:15:52:79:33:8a:9c:7f:d9:4e:be:1c:3b:2e:d9: b9:da:47:c0:26:c8:9a:dd:22:91:26:01:47:40:6d: 03:4a:86:12:61:c2:fe:99:b7:1a:fb:d0:af:5e:a3: 49:f1:2b:ba:cf:b9:16:a2:5a:0b:a5:f4:72:39:08: 75:95:5c:52:71:19:e2:2e:a3:49:e2:a2:e7:34:de: 9d:34:16:3e:74:82:dd:9c:43:af:f5:10:3e:7b:2a: c7:0f:96:ae:3e:c1:ea:d4:f6:3c:1f:6a:63:7f:ae: 26:24:70:16:d5:03:68:e3:b4:c8:69:cb:95:4f:db: 5d:0e:ba:f5:c1:18:25:20:0f:0a:29:0f:98:44:83: 3f:34:b6:f9:cb:06:09:3f:5a:76:e6:13:51:81:36: 7f:d0:7a:f2:27:b5:37:b4:92:8e:44:d7:a3:f5:22: 5a:3a:15:d2:07:cd:65:35:58:93:ec:ae:ea:29:d4: 3c:60:59:7e:ef:86:3e:52:1b:c5:a8:1f:1f:3b:b1: 9a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AE:86:29:80:CD:C2:55:E6:E1:8E:60:05:76:10:37:C6:28:3F:0A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5cf6d6da-60a8-4b7b-88a8-0efcf205a596.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.38.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2a:d2:e5:2f:e5:ac:82:d4:7c:3e:22:c3:fe:9e:01:0a:d2:02: fc:1d:6a:90:01:d1:cc:c1:b3:98:d8:ab:7c:37:94:da:bb:1d: e8:8e:67:0a:81:c1:6b:54:87:14:ef:67:ac:7a:9c:40:dc:63: f3:f0:8c:4b:83:a9:7e:f0:83:a4:1a:a9:1e:75:a4:63:79:d5: 26:bf:b7:bf:43:3a:d1:a3:a0:c5:2e:73:f0:49:9e:dc:e1:d3: 2a:7c:74:df:41:25:a5:ab:d0:44:a8:fe:b6:11:24:06:4b:7e: cd:16:e0:1e:41:ed:50:73:3b:68:b0:29:38:10:5d:e5:59:76: b6:9d:ff:22:2b:05:3e:ec:0f:e5:34:41:16:75:82:7a:09:91: 31:55:15:4d:d7:5d:42:12:07:80:d8:29:6c:fc:f2:0b:31:38: 9d:2e:94:d5:32:58:e5:24:36:14:c4:bf:c4:9d:c7:a6:d4:d3: 9b:18:08:1e:88:d7:8e:ac:92:3b:7c:fb:cb:d5:f4:f2:a0:72: bc:ee:b3:a0:7a:4a:6d:b4:45:01:42:59:2c:36:76:46:4b:4b: 7e:f6:80:85:f0:84:8c:8f:19:7b:2d:81:cc:7b:d0:2f:76:b8: e4:e5:b0:39:7b:3c:b2:43:31:34:26:4e:3a:70:f5:df:b8:d6: bc:b3:82:36 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOG55ynxPoVIRp2TXuvJomMkYfkwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTI4MDAwMDAwWhcNMjQwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMWM4NTM3MWQ4MzM4Mjc5N2I3YThlOGI4YmU5MTc4Mzhk N2FhZDAzZWQ3YjVkZWY4MjA2ZGU5NWIyODhjMTRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeJusuNAD9ucM8im3Mm+eOKRn9gYmRF8Pv9Dvf3ozo2S3G ZYIHQGACXRXl+whIuuuMgooqtjMPB63NaFEVUnkzipx/2U6+HDsu2bnaR8AmyJrd IpEmAUdAbQNKhhJhwv6Ztxr70K9eo0nxK7rPuRaiWgul9HI5CHWVXFJxGeIuo0ni ouc03p00Fj50gt2cQ6/1ED57KscPlq4+werU9jwfamN/riYkcBbVA2jjtMhpy5VP 210OuvXBGCUgDwopD5hEgz80tvnLBgk/WnbmE1GBNn/QevIntTe0ko5E16P1Ilo6 FdIHzWU1WJPsruop1DxgWX7vhj5SG8WoHx87sZrVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUc66GKYDNwlXm4Y5gBXYQN8YoPwowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVjZjZkNmRhLTYwYTgtNGI3Yi04OGE4LTBlZmNmMjA1YTU5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAoJjANBgkqhkiG9w0BAQsFAAOCAQEAKtLlL+WsgtR8PiLD/p4BCtIC/B1q kAHRzMGzmNirfDeU2rsd6I5nCoHBa1SHFO9nrHqcQNxj8/CMS4OpfvCDpBqpHnWk Y3nVJr+3v0M60aOgxS5z8Eme3OHTKnx030ElpavQRKj+thEkBkt+zRbgHkHtUHM7 aLApOBBd5Vl2tp3/IisFPuwP5TRBFnWCegmRMVUVTdddQhIHgNgpbPzyCzE4nS6U 1TJY5SQ2FMS/xJ3HptTTmxgIHojXjqySO3z7y9X08qByvO6zoHpKbbRFAUJZLDZ2 RktLfvaAhfCEjI8Zey2BzHvQL3a45OWwOXs8skMxNCZOOnD137jWvLOCNg== -----END CERTIFICATE-----Generated at Sun Jun 2 02:06:54 2024 by rpki-client on console-fra.rpki-client.org