$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da37b88f-f8e8-4601-b9f8-7396c546a739.roa File: da37b88f-f8e8-4601-b9f8-7396c546a739.roa (raw, json) Hash identifier: MUUrg2AYYDVTmyE4+fP5TLoFhOvc6mP/Go+OmyXpBiI= Subject key identifier: B4:67:E9:88:71:93:B9:20:45:AD:18:6F:3E:FC:CE:EC:2D:CC:44:D8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4F3FBD3C00F4AE7F9C3779D4CF778CE9D824B853 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da37b88f-f8e8-4601-b9f8-7396c546a739.roa Signing time: Fri 10 May 2024 00:00:00 +0000 ROA not before: Fri 10 May 2024 00:00:00 +0000 ROA not after: Fri 14 Jun 2024 23:59:59 +0000 asID: 8987 IP address blocks: 45.57.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3f:bd:3c:00:f4:ae:7f:9c:37:79:d4:cf:77:8c:e9:d8:24:b8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:00:00 2024 GMT Not After : Jun 14 23:59:59 2024 GMT Subject: serialNumber=ed59b14a18cad330fed94bf5de99236b3b34f9341c68e64564b8ae60f0685beb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1f:68:15:e6:22:a1:fb:a1:40:f4:5a:a5:a0: bc:7c:05:b0:e7:7a:d9:c8:75:70:96:8d:08:8d:89: 67:b2:83:40:7a:0f:07:df:21:47:13:2a:63:60:48: 53:d7:af:7c:44:68:1b:fe:6f:88:9d:b0:80:10:1f: b2:f5:9b:22:6a:96:ab:56:ee:e8:4a:69:b5:a2:29: 65:4a:62:c1:65:33:b3:76:bb:31:fe:e0:80:06:b8: cd:36:53:32:16:ed:79:25:b8:ce:58:f9:d2:38:a5: 28:50:88:d3:06:f5:af:a3:1e:a5:5f:c3:39:7d:46: bd:a6:b5:5d:00:d8:dc:95:91:c3:a9:1e:86:d6:04: 5d:89:58:66:62:ac:11:31:a3:59:55:69:bb:77:c1: 2d:06:b6:8c:5c:55:bc:f0:80:c7:8f:c3:5c:e6:31: 03:e9:92:7f:9f:6e:64:ce:7c:49:b5:bc:f7:30:6c: 63:06:c3:f8:3d:3e:f2:ff:38:f8:6e:cb:54:42:35: 1d:51:56:23:e7:4e:45:6e:a0:52:d5:22:4b:b4:21: da:ce:7a:4e:14:a8:69:20:17:4c:62:b9:46:eb:0c: 7f:fd:9e:2d:28:6f:d0:57:b3:a5:f8:0e:ce:bb:91: d6:7d:41:a1:74:39:44:5b:d7:77:29:c5:f8:bc:a7: a3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:67:E9:88:71:93:B9:20:45:AD:18:6F:3E:FC:CE:EC:2D:CC:44:D8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da37b88f-f8e8-4601-b9f8-7396c546a739.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.57.128.0/17 Signature Algorithm: sha256WithRSAEncryption b2:14:72:7f:d2:76:6b:47:b8:36:1c:11:fb:fd:4d:2c:76:bf: 9d:bd:82:a5:05:6a:20:8b:44:cf:49:65:de:dc:dd:30:14:62: 13:b9:04:19:6d:6f:f5:a5:60:d0:53:20:f6:bd:87:1e:ca:ba: 57:45:23:00:73:8c:69:d7:d3:1b:27:20:96:29:54:d4:59:7e: 4c:98:40:ea:b1:12:5e:b4:c6:c9:fe:bc:45:2a:53:aa:d3:bc: 31:0d:8d:c4:56:4b:c3:7f:2a:7c:28:96:56:53:43:fa:29:4d: 8e:4b:3b:7e:3c:a2:7b:8c:43:98:f3:0d:33:25:d4:3b:af:02: cc:b6:a0:46:80:e2:83:86:ce:30:4c:52:37:d5:5f:7e:7b:50: 53:27:82:77:8e:0f:78:a0:76:c3:e0:79:4e:38:90:5b:1a:60: 84:58:6c:1a:d7:b1:9a:7c:62:f7:3b:2e:d4:7a:5f:5b:da:28: 3c:e9:87:fe:cc:47:06:b9:c1:95:30:73:78:fc:38:46:73:81: f3:29:21:9e:89:f6:b8:e7:38:dd:30:e7:29:08:c5:94:0d:07: 1f:27:4f:95:0c:b7:40:19:20:fa:a6:56:94:5e:96:8d:2a:ed: 15:8a:32:f7:51:40:9c:7f:d1:31:80:23:c5:0b:76:d5:6b:24: 99:8a:57:50 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTz+9PAD0rn+cN3nUz3eM6dgkuFMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTEwMDAwMDAwWhcNMjQwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZDU5YjE0YTE4Y2FkMzMwZmVkOTRiZjVkZTk5MjM2YjNi MzRmOTM0MWM2OGU2NDU2NGI4YWU2MGYwNjg1YmViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPH2gV5iKh+6FA9FqloLx8BbDnetnIdXCWjQiNiWeyg0B6 DwffIUcTKmNgSFPXr3xEaBv+b4idsIAQH7L1myJqlqtW7uhKabWiKWVKYsFlM7N2 uzH+4IAGuM02UzIW7XkluM5Y+dI4pShQiNMG9a+jHqVfwzl9Rr2mtV0A2NyVkcOp HobWBF2JWGZirBExo1lVabt3wS0GtoxcVbzwgMePw1zmMQPpkn+fbmTOfEm1vPcw bGMGw/g9PvL/OPhuy1RCNR1RViPnTkVuoFLVIku0IdrOek4UqGkgF0xiuUbrDH/9 ni0ob9BXs6X4Ds67kdZ9QaF0OURb13cpxfi8p6PJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtGfpiHGTuSBFrRhvPvzO7C3MRNgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RhMzdiODhmLWY4ZTgtNDYwMS1iOWY4LTczOTZjNTQ2YTczOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBActOYAwDQYJKoZIhvcNAQELBQADggEBALIUcn/SdmtHuDYcEfv9TSx2v529 gqUFaiCLRM9JZd7c3TAUYhO5BBltb/WlYNBTIPa9hx7KuldFIwBzjGnX0xsnIJYp VNRZfkyYQOqxEl60xsn+vEUqU6rTvDENjcRWS8N/KnwollZTQ/opTY5LO348onuM Q5jzDTMl1DuvAsy2oEaA4oOGzjBMUjfVX357UFMngneOD3igdsPgeU44kFsaYIRY bBrXsZp8Yvc7LtR6X1vaKDzph/7MRwa5wZUwc3j8OEZzgfMpIZ6J9rjnON0w5ykI xZQNBx8nT5UMt0AZIPqmVpRelo0q7RWKMvdRQJx/0TGAI8ULdtVrJJmKV1A= -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:41 2024 by rpki-client on console-ams.rpki-client.org