$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06e0f65b-8aa5-4ac4-9262-5b7f51eac3fa.roa File: 06e0f65b-8aa5-4ac4-9262-5b7f51eac3fa.roa (raw, json) Hash identifier: MoPGx4GZ71Gd1MbCPa+hK7e9+AC7bGgbcx3C20h6RDw= Subject key identifier: 3F:2B:27:C5:98:6C:50:BE:2F:F2:FA:03:74:E0:2E:BE:D6:C0:40:4D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48742833B4DF45518FF7127EDA1BFD6A82A1F45B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06e0f65b-8aa5-4ac4-9262-5b7f51eac3fa.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 161.228.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:74:28:33:b4:df:45:51:8f:f7:12:7e:da:1b:fd:6a:82:a1:f4:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=8e27af0866a01327d3b831483d20b5a95dcb0de04211c928d02c7411309611fe, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3b:cf:ff:ae:5b:b1:36:bf:0d:27:74:f2:9f: 53:d6:03:26:1d:36:f1:3d:ea:2d:52:4e:eb:58:e1: 2f:97:57:5e:99:ec:3d:8c:d0:9d:30:30:6f:2c:b6: 92:fb:0e:bf:47:d9:8d:1d:05:fd:78:42:6b:52:22: 15:d7:75:2e:63:1a:8a:57:dc:59:d3:8b:7c:98:b7: 24:3f:30:f6:27:bd:c6:d4:3e:f1:bb:2e:b4:d5:f7: 22:bf:11:e9:ce:02:97:4f:ca:2c:f5:ed:11:77:c9: 7f:19:0a:c4:1c:3f:7c:97:82:a6:fb:33:9d:9b:ff: bd:a2:fc:3b:00:86:fa:be:8e:a9:bb:36:98:aa:c2: bd:52:ee:d3:b6:90:0e:b4:2e:1c:43:79:3b:9b:fc: e7:67:5a:4b:79:1c:37:39:99:66:83:7e:0d:8f:c8: da:7a:f7:88:41:c7:64:0b:12:2b:8f:c2:ab:ab:98: f0:b1:79:18:55:e2:50:04:e2:59:ba:d5:91:f3:3d: a7:4d:a4:be:46:51:ce:ad:9f:4a:8a:0f:ff:64:52: fb:99:2d:d7:07:b1:3d:65:e5:34:f4:c6:42:67:25: cb:6e:ef:a1:05:d3:34:55:be:dd:23:13:68:30:f5: 83:a5:df:8f:be:9a:c1:b4:d3:d4:26:d2:87:b8:ac: 10:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2B:27:C5:98:6C:50:BE:2F:F2:FA:03:74:E0:2E:BE:D6:C0:40:4D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06e0f65b-8aa5-4ac4-9262-5b7f51eac3fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.228.64.0/18 Signature Algorithm: sha256WithRSAEncryption 7a:f9:83:82:7e:42:b3:5a:ce:9a:16:a6:d6:38:23:ca:f0:b7: 91:ff:5d:16:7c:b0:e4:56:c2:81:ce:51:7a:73:d1:86:f7:c9: a1:ad:00:5d:c4:76:fd:32:09:25:1f:68:71:36:05:4b:26:ee: 8f:35:ef:9a:c3:67:31:3b:66:ef:9c:eb:4e:9a:ca:a9:fd:7a: ce:46:5b:82:a8:6b:b0:54:39:88:23:d3:89:2b:8e:ab:45:aa: 38:a6:94:51:55:78:71:a7:7d:9e:dd:86:dd:45:79:3f:85:fe: 1c:2a:7f:d8:3a:e2:50:75:95:bb:86:d3:28:c2:05:da:d8:d6: 5f:42:e2:5d:7a:d4:3c:f8:24:55:bd:1b:2d:fc:12:42:b6:da: af:6c:0d:50:5b:75:7d:4c:99:f6:c5:59:f0:c9:fc:29:c1:8f: 79:2f:37:12:48:de:af:e4:2b:07:04:df:d5:0b:c8:65:b9:15: a8:29:e3:42:69:bf:1e:d2:29:6d:89:68:c6:3a:1b:0f:c8:c1: f6:c7:cc:a2:75:e6:61:f5:b1:86:ef:9b:6d:fb:55:6d:e6:6c: e3:9b:4b:a8:18:e7:58:d1:a6:75:da:73:f6:cb:4f:12:38:e4: b9:b9:fa:05:37:75:c0:d3:5a:89:4b:0c:da:4b:3f:8a:f5:c5: 57:8e:69:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSHQoM7TfRVGP9xJ+2hv9aoKh9FswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTI3YWYwODY2YTAxMzI3ZDNiODMxNDgzZDIwYjVhOTVk Y2IwZGUwNDIxMWM5MjhkMDJjNzQxMTMwOTYxMWZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMO8//rluxNr8NJ3Tyn1PWAyYdNvE96i1STutY4S+XV16Z 7D2M0J0wMG8stpL7Dr9H2Y0dBf14QmtSIhXXdS5jGopX3FnTi3yYtyQ/MPYnvcbU PvG7LrTV9yK/EenOApdPyiz17RF3yX8ZCsQcP3yXgqb7M52b/72i/DsAhvq+jqm7 Npiqwr1S7tO2kA60LhxDeTub/OdnWkt5HDc5mWaDfg2PyNp694hBx2QLEiuPwqur mPCxeRhV4lAE4lm61ZHzPadNpL5GUc6tn0qKD/9kUvuZLdcHsT1l5TT0xkJnJctu 76EF0zRVvt0jE2gw9YOl34++msG009Qm0oe4rBBvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPysnxZhsUL4v8voDdOAuvtbAQE0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA2ZTBmNjViLThhYTUtNGFjNC05MjYyLTViN2Y1MWVhYzNmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAah5EAwDQYJKoZIhvcNAQELBQADggEBAHr5g4J+QrNazpoWptY4I8rwt5H/ XRZ8sORWwoHOUXpz0Yb3yaGtAF3Edv0yCSUfaHE2BUsm7o8175rDZzE7Zu+c606a yqn9es5GW4Koa7BUOYgj04krjqtFqjimlFFVeHGnfZ7dht1FeT+F/hwqf9g64lB1 lbuG0yjCBdrY1l9C4l161Dz4JFW9Gy38EkK22q9sDVBbdX1MmfbFWfDJ/CnBj3kv NxJI3q/kKwcE39ULyGW5Fagp40Jpvx7SKW2JaMY6Gw/IwfbHzKJ15mH1sYbvm237 VW3mbOObS6gY51jRpnXac/bLTxI45Lm5+gU3dcDTWolLDNpLP4r1xVeOaY4= -----END CERTIFICATE-----Generated at Thu May 9 01:26:05 2024 by rpki-client on console-ams.rpki-client.org