$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d851a357-86cc-4fe6-b155-d32f5acae997.roa File: d851a357-86cc-4fe6-b155-d32f5acae997.roa (raw, json) Hash identifier: ERMU13xZrR9kqCExxwpmzg2YVxj5F5BrKcV9LHx4tqk= Subject key identifier: BC:FC:17:5F:DD:E6:1B:6B:22:87:9A:75:A5:8D:63:E3:56:32:64:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4CD205921B3EBDFEF8E6C434EA23F711DAA82CAA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d851a357-86cc-4fe6-b155-d32f5acae997.roa Signing time: Fri 03 May 2024 00:00:00 +0000 ROA not before: Fri 03 May 2024 00:00:00 +0000 ROA not after: Fri 07 Jun 2024 23:59:59 +0000 asID: 14618 IP address blocks: 56.208.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d2:05:92:1b:3e:bd:fe:f8:e6:c4:34:ea:23:f7:11:da:a8:2c:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:00:00 2024 GMT Not After : Jun 7 23:59:59 2024 GMT Subject: serialNumber=f13fb77e4cbc823156042dcb9d5fb3b15b25358af5653c751fe05ff8902b9fd7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:be:0c:ad:90:06:ef:b5:f9:f4:b0:4e:b8:5f: 3d:61:52:c5:fc:cd:42:97:b1:59:33:7a:41:c5:d6: 05:e1:35:e5:5f:d7:db:1e:58:0a:50:bd:9d:c3:27: 77:c3:6f:af:d1:72:a5:a3:08:99:99:00:46:e3:b5: 59:ff:6c:21:0d:fb:e7:7c:db:a0:b0:98:95:72:16: ce:0a:6c:8e:01:81:21:48:96:7a:34:b8:69:62:85: 46:a7:da:be:14:d9:4e:71:0c:6b:59:51:8c:21:65: d7:88:a4:af:c4:93:97:bd:d3:93:13:c6:42:b1:12: 7e:bd:a6:0b:7a:dd:5e:fc:b9:08:1c:6f:0b:ab:80: 7e:1b:a3:03:dc:37:30:19:17:b2:fc:62:41:ac:76: 5f:9c:8f:ed:a2:9a:55:d3:6c:52:c0:ae:cb:ac:2d: aa:63:7e:eb:d7:be:e8:4a:72:9a:05:af:fb:5c:9b: 21:1a:01:2f:5a:b6:c7:c7:ff:a9:30:d6:b8:af:2b: 1d:d1:ef:3f:3b:50:84:88:1c:9e:a5:bc:be:96:1a: c7:f7:ed:86:6d:50:8a:84:74:34:2f:73:e2:3a:b8: fe:53:8e:ce:17:a4:f4:ed:61:cc:11:58:b6:4d:e0: a5:0f:e5:df:ca:db:7c:9c:72:6b:4b:57:27:8a:65: f5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FC:17:5F:DD:E6:1B:6B:22:87:9A:75:A5:8D:63:E3:56:32:64:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d851a357-86cc-4fe6-b155-d32f5acae997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.208.0.0/16 Signature Algorithm: sha256WithRSAEncryption 91:72:5b:45:38:c3:7c:66:52:0f:4d:d5:0a:52:1c:3c:f4:ee: 92:d2:c8:99:61:9f:50:4c:ef:41:9b:c6:34:aa:43:88:1e:c0: 29:23:72:34:e1:c5:58:ff:6b:78:ee:f3:29:d8:24:c9:52:14: d2:38:ae:48:01:94:c6:b4:7e:43:12:3d:b1:e4:1f:46:08:6f: fc:ea:a7:bf:86:84:bd:69:c9:ec:cc:5c:46:b2:81:4a:f9:05: 27:5a:7c:9e:0d:d3:5b:4a:44:b4:e2:58:9b:bc:5d:f2:77:c0: f0:77:ce:00:48:36:5b:4d:73:90:8e:47:80:57:94:2d:ee:21: 59:99:fe:34:20:37:59:5c:33:41:58:9d:38:69:c2:a6:df:02: 78:ff:31:5f:15:9e:86:8f:b0:b3:e2:e3:fc:b6:17:c0:49:da: 87:74:ab:76:38:a1:e7:18:98:b1:6c:25:59:14:44:d8:b2:3a: 70:ac:a5:8c:bd:29:6d:7a:3f:b9:38:1c:ea:bd:1e:b6:be:94: 57:33:32:70:00:91:4b:59:a0:b9:c0:bf:a8:de:f6:40:1a:df: b5:bd:9d:bd:21:fa:81:a3:ca:91:40:86:a7:f0:88:3a:26:75: ef:bd:1b:6d:6e:80:dd:2c:d9:55:0e:40:1a:db:ca:1d:1d:4a: 0a:f0:a8:df -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTNIFkhs+vf745sQ06iP3EdqoLKowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTNmYjc3ZTRjYmM4MjMxNTYwNDJkY2I5ZDVmYjNiMTVi MjUzNThhZjU2NTNjNzUxZmUwNWZmODkwMmI5ZmQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDivgytkAbvtfn0sE64Xz1hUsX8zUKXsVkzekHF1gXhNeVf 19seWApQvZ3DJ3fDb6/RcqWjCJmZAEbjtVn/bCEN++d826CwmJVyFs4KbI4BgSFI lno0uGlihUan2r4U2U5xDGtZUYwhZdeIpK/Ek5e905MTxkKxEn69pgt63V78uQgc bwurgH4bowPcNzAZF7L8YkGsdl+cj+2imlXTbFLArsusLapjfuvXvuhKcpoFr/tc myEaAS9atsfH/6kw1rivKx3R7z87UISIHJ6lvL6WGsf37YZtUIqEdDQvc+I6uP5T js4XpPTtYcwRWLZN4KUP5d/K23yccmtLVyeKZfWzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUvPwXX93mG2sih5p1pY1j41YyZH4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4NTFhMzU3LTg2Y2MtNGZlNi1iMTU1LWQzMmY1YWNhZTk5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA40DANBgkqhkiG9w0BAQsFAAOCAQEAkXJbRTjDfGZSD03VClIcPPTuktLI mWGfUEzvQZvGNKpDiB7AKSNyNOHFWP9reO7zKdgkyVIU0jiuSAGUxrR+QxI9seQf Rghv/Oqnv4aEvWnJ7MxcRrKBSvkFJ1p8ng3TW0pEtOJYm7xd8nfA8HfOAEg2W01z kI5HgFeULe4hWZn+NCA3WVwzQVidOGnCpt8CeP8xXxWeho+ws+Lj/LYXwEnah3Sr djih5xiYsWwlWRRE2LI6cKyljL0pbXo/uTgc6r0etr6UVzMycACRS1mgucC/qN72 QBrftb2dvSH6gaPKkUCGp/CIOiZ1770bbW6A3SzZVQ5AGtvKHR1KCvCo3w== -----END CERTIFICATE-----Generated at Sun May 5 01:20:43 2024 by rpki-client on console-fra.rpki-client.org