$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a065b782-6745-4a74-b481-57654058a510.roa File: a065b782-6745-4a74-b481-57654058a510.roa (raw, json) Hash identifier: LYFtWF6pvHGh8LyD0oeHMz85lzY1QVhUmxje+iYmSOQ= Subject key identifier: AC:DA:54:99:65:D1:CF:7E:6E:56:EE:D8:E7:2D:51:1C:DE:4F:97:28 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4FCB5DEEAB999A07D345F51BB8FD8F39FA3FDBBA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a065b782-6745-4a74-b481-57654058a510.roa Signing time: Thu 18 Apr 2024 00:00:00 +0000 ROA not before: Thu 18 Apr 2024 00:00:00 +0000 ROA not after: Thu 23 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 206.217.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:cb:5d:ee:ab:99:9a:07:d3:45:f5:1b:b8:fd:8f:39:fa:3f:db:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:00:00 2024 GMT Not After : May 23 23:59:59 2024 GMT Subject: serialNumber=d4a7ecad23c9cc097f57c53209d4c18925aae696f4e5786a0b430e569ac47364, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:35:c0:63:69:83:f4:f7:ac:b0:b5:d5:b2:56: d7:62:5c:41:81:98:d6:20:1f:ed:a5:d4:ac:ea:2c: 03:a5:72:c5:7b:ea:7e:95:e6:39:4f:4d:0b:37:85: 17:c0:4c:58:32:17:cf:45:de:67:3d:64:95:20:94: c1:6e:9f:20:15:35:ef:3e:d7:93:62:0e:e6:f2:b2: be:6e:a7:43:91:e9:10:5d:30:58:c8:a7:f4:b8:08: e4:ad:05:4b:44:4f:78:c1:f3:ee:37:6f:16:59:d4: a9:d8:34:c9:fa:13:a0:e7:22:55:d5:82:d9:54:00: 7b:be:d9:6d:99:20:a2:81:9e:37:f0:a5:b5:81:2f: 39:df:34:24:7d:55:eb:52:4b:c2:fc:80:c2:36:46: 35:60:05:f3:7c:df:e0:cf:0d:30:14:73:0d:f6:81: a0:8c:69:ce:f9:50:57:4a:ff:56:8b:18:f0:25:5e: 84:42:17:5b:02:7f:7f:2b:92:be:c5:7e:2b:e9:e0: cc:8c:b5:7d:f2:05:ad:78:6e:4e:3e:76:57:41:be: 3a:7a:ba:87:63:c1:89:32:da:9d:03:b1:1b:05:e9: 3a:6a:a5:15:4c:73:c5:da:18:9e:58:46:0f:d0:15: a9:5c:d6:e6:a6:a0:b8:b9:8f:e2:a7:8b:43:20:3f: d3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DA:54:99:65:D1:CF:7E:6E:56:EE:D8:E7:2D:51:1C:DE:4F:97:28 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a065b782-6745-4a74-b481-57654058a510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.217.32.0/19 Signature Algorithm: sha256WithRSAEncryption 2e:f7:37:c4:f8:37:ae:a8:17:24:e6:9a:ff:0d:89:8a:7c:2b: c8:99:78:a7:6b:d8:40:18:17:08:c5:a3:f2:1d:3b:39:89:8f: b8:4f:e9:0b:7d:f9:11:e0:5b:2c:ec:d1:94:06:9e:91:f6:88: 8d:cf:d2:e9:0a:de:1b:c1:b7:1a:5f:f2:84:0f:71:41:23:9c: 62:ad:a7:6e:32:27:13:1f:2d:e4:e2:0d:3e:48:e6:45:49:a0: 44:69:45:4d:53:29:a8:ed:12:28:99:3e:1d:41:6e:d3:37:7d: 1d:0e:19:e2:2f:9a:2b:1a:92:92:7d:95:ae:4b:27:ef:a4:25: 19:c0:c7:5d:fa:a3:af:76:22:f3:33:70:ee:1d:db:76:07:01: d5:7e:03:f4:cf:6a:a9:c4:ea:ee:a3:c7:4c:c3:3f:8c:18:b6: 11:27:b0:d6:09:5e:56:36:2d:81:68:d6:8a:32:3a:9e:5c:df: 93:7f:80:09:58:c1:98:3a:8f:36:f4:98:68:3e:96:76:26:7a: 43:83:2e:be:51:80:c3:60:d9:f6:00:e5:1c:0f:b6:73:87:84: 07:81:2d:7b:d3:91:d6:99:20:29:39:88:13:db:a4:0e:ac:c7: 36:9c:8b:bd:a9:30:b2:fb:6c:15:ec:b4:97:93:3b:8d:7c:07: 8b:3c:62:c4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT8td7quZmgfTRfUbuP2POfo/27owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE4MDAwMDAwWhcNMjQwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGE3ZWNhZDIzYzljYzA5N2Y1N2M1MzIwOWQ0YzE4OTI1 YWFlNjk2ZjRlNTc4NmEwYjQzMGU1NjlhYzQ3MzY0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtNcBjaYP096ywtdWyVtdiXEGBmNYgH+2l1KzqLAOlcsV7 6n6V5jlPTQs3hRfATFgyF89F3mc9ZJUglMFunyAVNe8+15NiDubysr5up0OR6RBd MFjIp/S4COStBUtET3jB8+43bxZZ1KnYNMn6E6DnIlXVgtlUAHu+2W2ZIKKBnjfw pbWBLznfNCR9VetSS8L8gMI2RjVgBfN83+DPDTAUcw32gaCMac75UFdK/1aLGPAl XoRCF1sCf38rkr7Ffivp4MyMtX3yBa14bk4+dldBvjp6uodjwYky2p0DsRsF6Tpq pRVMc8XaGJ5YRg/QFalc1uamoLi5j+Kni0MgP9M7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrNpUmWXRz35uVu7Y5y1RHN5PlygwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EwNjViNzgyLTY3NDUtNGE3NC1iNDgxLTU3NjU0MDU4YTUxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXO2SAwDQYJKoZIhvcNAQELBQADggEBAC73N8T4N66oFyTmmv8NiYp8K8iZ eKdr2EAYFwjFo/IdOzmJj7hP6Qt9+RHgWyzs0ZQGnpH2iI3P0ukK3hvBtxpf8oQP cUEjnGKtp24yJxMfLeTiDT5I5kVJoERpRU1TKajtEiiZPh1BbtM3fR0OGeIvmisa kpJ9la5LJ++kJRnAx136o692IvMzcO4d23YHAdV+A/TPaqnE6u6jx0zDP4wYthEn sNYJXlY2LYFo1ooyOp5c35N/gAlYwZg6jzb0mGg+lnYmekODLr5RgMNg2fYA5RwP tnOHhAeBLXvTkdaZICk5iBPbpA6sxzaci72pMLL7bBXstJeTO418B4s8YsQ= -----END CERTIFICATE-----Generated at Mon May 6 00:48:52 2024 by rpki-client on console-fra.rpki-client.org