$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05d7f342-6157-48d6-afa9-e8e77d622676.roa File: 05d7f342-6157-48d6-afa9-e8e77d622676.roa (raw, json) Hash identifier: Nl8bja4ZMNBwgBB/cVjOBbc/CEmV6bKh7CjT97lIr0w= Subject key identifier: 62:D9:CD:E5:1C:08:A0:37:14:05:EB:37:0B:24:A0:73:EE:E0:20:C1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 05FF5F3C5AC72467363809EDF8391BE7862447F8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05d7f342-6157-48d6-afa9-e8e77d622676.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ff:5f:3c:5a:c7:24:67:36:38:09:ed:f8:39:1b:e7:86:24:47:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=cc60578ca0897cf334ae5b61567bfaa81d268b815cf1d59adac55b097c0d17af, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:d2:61:8a:a8:7d:3d:d1:b9:63:79:2a:ce: 72:bb:93:ca:be:23:c2:00:22:f3:4b:21:b2:cd:2f: 8c:18:11:c0:06:b3:46:3b:ab:1e:56:b7:6b:eb:b2: b9:e7:7e:3a:64:0d:03:40:0e:5e:8d:76:73:ee:89: a4:c8:fc:85:5e:56:c7:6d:89:75:f1:20:f8:98:30: 50:f0:89:b4:26:ea:4c:4c:52:eb:79:c5:77:4e:83: 10:a6:eb:86:9a:06:b9:77:a4:5f:9e:af:74:3a:bb: 1d:16:17:d9:a7:16:c9:cb:a0:78:9a:0b:48:8b:39: d9:cc:3e:e5:f6:6f:64:dc:89:de:58:4d:2b:d1:70: 0d:d8:12:f1:eb:ea:cb:bc:c8:ab:10:a3:ec:72:57: 6d:4d:3c:24:86:1c:ad:65:6f:a2:2e:dd:a9:a6:d8: 4f:11:cd:2f:e6:53:82:54:d1:af:66:b5:05:3f:b7: cd:50:52:a6:3c:9d:82:24:b3:33:4c:d5:1b:38:4b: 97:ef:b7:16:a9:f1:59:ca:fd:d6:00:e9:43:f4:11: 2e:d3:5d:8b:ea:c3:1e:4a:b8:e4:80:86:4a:5e:9b: 45:54:33:46:42:08:d9:19:2b:f7:2f:7f:a7:0f:5f: c6:eb:10:fe:82:b0:2c:85:1f:e7:41:ad:21:5d:82: c3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D9:CD:E5:1C:08:A0:37:14:05:EB:37:0B:24:A0:73:EE:E0:20:C1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05d7f342-6157-48d6-afa9-e8e77d622676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.52.0/22 Signature Algorithm: sha256WithRSAEncryption 54:5c:d3:26:bc:d2:4f:ed:ff:81:a1:e5:d9:4e:a2:64:26:58: fb:59:bc:4a:dd:f8:6e:e3:c3:14:8b:57:0f:16:47:d5:a6:88: 38:9e:8e:6d:9e:f3:d6:41:7d:aa:de:c4:0b:e5:97:c6:bc:77: a0:d6:90:ba:53:a4:f1:1b:4e:e3:4b:71:53:db:7a:1c:c4:fb: c9:1a:dc:8b:b1:38:27:fc:05:50:30:f8:f8:11:59:8a:a9:95: cd:38:c9:b9:77:86:85:36:22:e6:36:f7:2f:f3:e7:f8:51:d6: c0:f7:e2:e6:ac:51:6b:d4:12:ee:f4:65:cb:cb:a0:62:2a:af: c0:cd:dd:83:0d:4b:ba:92:1d:34:b6:be:bc:a6:b3:07:66:dd: c6:dc:6c:89:40:fa:91:89:6a:e4:62:94:39:c7:b7:bf:a7:24: 5c:07:d7:18:73:7c:7c:5d:a3:09:1c:82:a3:07:53:25:4b:63: 20:56:8b:2a:45:de:e9:3d:cd:46:47:5a:ee:2a:4f:7b:b1:9e: d4:bd:e5:fb:4b:c7:6f:ab:fd:52:26:c9:cc:53:03:36:bd:37: bf:69:58:61:e5:fa:62:6f:0f:93:c2:e4:44:07:be:01:19:98: 09:44:fe:90:25:80:2e:8b:99:1f:66:5b:7c:0a:b7:57:a4:f5: 16:c1:90:65 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBf9fPFrHJGc2OAnt+Dkb54YkR/gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzYwNTc4Y2EwODk3Y2YzMzRhZTViNjE1NjdiZmFhODFk MjY4YjgxNWNmMWQ1OWFkYWM1NWIwOTdjMGQxN2FmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx/9Jhiqh9PdG5Y3kqznK7k8q+I8IAIvNLIbLNL4wYEcAG s0Y7qx5Wt2vrsrnnfjpkDQNADl6NdnPuiaTI/IVeVsdtiXXxIPiYMFDwibQm6kxM Uut5xXdOgxCm64aaBrl3pF+er3Q6ux0WF9mnFsnLoHiaC0iLOdnMPuX2b2Tcid5Y TSvRcA3YEvHr6su8yKsQo+xyV21NPCSGHK1lb6Iu3amm2E8RzS/mU4JU0a9mtQU/ t81QUqY8nYIkszNM1Rs4S5fvtxap8VnK/dYA6UP0ES7TXYvqwx5KuOSAhkpem0VU M0ZCCNkZK/cvf6cPX8brEP6CsCyFH+dBrSFdgsOFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYtnN5RwIoDcUBes3CySgc+7gIMEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1ZDdmMzQyLTYxNTctNDhkNi1hZmE5LWU4ZTc3ZDYyMjY3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKIEjQwDQYJKoZIhvcNAQELBQADggEBAFRc0ya80k/t/4Gh5dlOomQmWPtZ vErd+G7jwxSLVw8WR9WmiDiejm2e89ZBfarexAvll8a8d6DWkLpTpPEbTuNLcVPb ehzE+8ka3IuxOCf8BVAw+PgRWYqplc04ybl3hoU2IuY29y/z5/hR1sD34uasUWvU Eu70ZcvLoGIqr8DN3YMNS7qSHTS2vrymswdm3cbcbIlA+pGJauRilDnHt7+nJFwH 1xhzfHxdowkcgqMHUyVLYyBWiypF3uk9zUZHWu4qT3uxntS95ftLx2+r/VImycxT Aza9N79pWGHl+mJvD5PC5EQHvgEZmAlE/pAlgC6LmR9mW3wKt1ek9RbBkGU= -----END CERTIFICATE-----Generated at Wed Apr 17 01:00:33 2024 by rpki-client on console-fra.rpki-client.org