$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2ad3121-7e1e-4e90-b0a2-3352c5db99e1.roa File: f2ad3121-7e1e-4e90-b0a2-3352c5db99e1.roa (raw, json) Hash identifier: KGaHRQGsoZYMiHBixD1YLFZ+nkhAYc7nVmUWRji+gj8= Subject key identifier: E0:CF:E3:96:AA:0A:E5:E3:80:E5:AB:66:2B:28:4F:0B:7D:C4:16:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 35DDC6E0A07320E6530539BDE2C4E0F88890161E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2ad3121-7e1e-4e90-b0a2-3352c5db99e1.roa Signing time: Fri 10 May 2024 00:00:00 +0000 ROA not before: Fri 10 May 2024 00:00:00 +0000 ROA not after: Fri 14 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 209.54.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:dd:c6:e0:a0:73:20:e6:53:05:39:bd:e2:c4:e0:f8:88:90:16:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:00:00 2024 GMT Not After : Jun 14 23:59:59 2024 GMT Subject: serialNumber=ad1c825090d87b84530722f349b4397d099b1b8c8c59f970e08f1e810d880e4b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ea:7d:fd:44:c8:f8:bc:c6:d6:eb:11:e3:68: 90:03:68:8d:1c:52:b0:3c:7f:06:c6:86:c9:d2:6c: 42:22:e5:eb:ba:86:14:5d:c2:7d:3f:a1:93:c6:ab: 05:ab:d6:7b:37:d2:3c:31:d2:dd:8d:26:c2:50:0e: 6c:79:6e:14:90:e9:a9:ff:aa:52:b6:11:cb:35:9a: c1:27:5a:f3:8a:d9:d3:86:53:6c:0e:e7:01:08:ea: e9:44:33:61:5f:18:a4:10:26:7f:c3:36:ff:50:be: 0d:ba:f4:62:08:4d:44:d5:5a:6c:77:c7:bc:89:17: d9:c1:d7:88:6c:f1:a5:6c:68:bc:ce:e1:34:ab:57: b7:40:81:bc:01:26:d1:2d:bb:41:de:43:f5:14:ce: 9c:2b:cc:68:f4:6d:09:91:f6:39:a9:19:81:27:09: b9:c4:8b:3c:c4:34:bc:a4:31:af:d8:cb:5f:4c:6b: 8c:f4:c9:0c:69:f3:e3:6d:09:e1:32:4e:ce:b4:20: be:f2:24:84:3a:e2:71:e4:cb:cf:5a:67:e7:bb:34: 5c:b7:01:74:90:6b:e7:93:4c:d3:59:a7:bc:11:b2: da:78:f7:3e:a1:75:93:7a:f3:e1:15:0a:a5:f3:79: a9:72:7f:0e:4c:81:83:54:5a:66:93:36:26:b5:85: 7e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CF:E3:96:AA:0A:E5:E3:80:E5:AB:66:2B:28:4F:0B:7D:C4:16:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2ad3121-7e1e-4e90-b0a2-3352c5db99e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.54.176.0/21 Signature Algorithm: sha256WithRSAEncryption ae:bf:c6:11:a2:0e:8b:e3:ba:0f:53:4c:63:60:8f:db:f4:67: 71:3a:d3:11:c4:8b:21:57:5a:c5:74:83:16:9b:5b:52:06:8e: 8d:a6:57:50:4a:c1:f2:c6:5b:7a:ba:23:e2:30:e7:19:70:e9: 1a:a3:b1:bc:02:de:ad:98:04:09:4a:72:11:67:1a:84:5b:78: 3d:ba:d6:76:63:d2:07:72:58:00:79:d7:b0:dd:72:bf:e0:63: f7:e0:c2:69:dc:08:aa:c8:61:4e:0c:d3:8c:32:51:29:6e:78: d9:04:ad:22:f3:a1:86:c5:85:31:c8:a3:8c:a1:b2:61:f3:03: 2d:2c:59:12:89:a4:10:09:5d:88:f5:26:29:95:05:40:ca:0c: f9:ae:06:aa:4f:05:88:ba:69:4b:47:b4:66:ac:78:cc:de:cb: bb:b3:f7:69:79:c7:76:d7:63:1b:5b:bc:2d:a9:ce:59:de:ed: 4b:0d:b3:ca:c6:80:07:b3:54:6e:b1:1f:b6:9a:57:ad:76:d9: fe:da:1a:1c:79:e2:2a:1b:32:54:a3:9e:b3:b9:69:77:c4:53: d2:de:32:b2:61:fb:36:20:d0:0b:c0:66:2c:aa:e7:7b:27:79: a3:2d:b6:2f:31:22:46:11:8f:3b:d8:68:7d:8a:9b:07:b6:fd: bd:22:6f:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNd3G4KBzIOZTBTm94sTg+IiQFh4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTEwMDAwMDAwWhcNMjQwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZDFjODI1MDkwZDg3Yjg0NTMwNzIyZjM0OWI0Mzk3ZDA5 OWIxYjhjOGM1OWY5NzBlMDhmMWU4MTBkODgwZTRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCU6n39RMj4vMbW6xHjaJADaI0cUrA8fwbGhsnSbEIi5eu6 hhRdwn0/oZPGqwWr1ns30jwx0t2NJsJQDmx5bhSQ6an/qlK2Ecs1msEnWvOK2dOG U2wO5wEI6ulEM2FfGKQQJn/DNv9Qvg269GIITUTVWmx3x7yJF9nB14hs8aVsaLzO 4TSrV7dAgbwBJtEtu0HeQ/UUzpwrzGj0bQmR9jmpGYEnCbnEizzENLykMa/Yy19M a4z0yQxp8+NtCeEyTs60IL7yJIQ64nHky89aZ+e7NFy3AXSQa+eTTNNZp7wRstp4 9z6hdZN68+EVCqXzealyfw5MgYNUWmaTNia1hX7XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4M/jlqoK5eOA5atmKyhPC33EFpEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyYWQzMTIxLTdlMWUtNGU5MC1iMGEyLTMzNTJjNWRiOTllMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPRNrAwDQYJKoZIhvcNAQELBQADggEBAK6/xhGiDovjug9TTGNgj9v0Z3E6 0xHEiyFXWsV0gxabW1IGjo2mV1BKwfLGW3q6I+Iw5xlw6RqjsbwC3q2YBAlKchFn GoRbeD261nZj0gdyWAB517Ddcr/gY/fgwmncCKrIYU4M04wyUSlueNkErSLzoYbF hTHIo4yhsmHzAy0sWRKJpBAJXYj1JimVBUDKDPmuBqpPBYi6aUtHtGaseMzey7uz 92l5x3bXYxtbvC2pzlne7UsNs8rGgAezVG6xH7aaV6122f7aGhx54iobMlSjnrO5 aXfEU9LeMrJh+zYg0AvAZiyq53sneaMtti8xIkYRjzvYaH2Kmwe2/b0ib+g= -----END CERTIFICATE-----Generated at Sun Jun 2 02:07:07 2024 by rpki-client on console-fra.rpki-client.org