$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/077f59a6-be05-4dd8-a514-122ed50e1722.roa File: 077f59a6-be05-4dd8-a514-122ed50e1722.roa (raw, json) Hash identifier: Vi8yz54Z6Ge2fyrJQSq4+YRBKn/wLsuxOlTY6LlROyA= Subject key identifier: DA:2B:12:DD:4E:D6:8D:F5:00:E2:D1:3A:7D:E2:E0:E2:00:5A:07:EB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3BB0316E84D8EB4D70DC5F9A7C48D74DAF37A237 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/077f59a6-be05-4dd8-a514-122ed50e1722.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 149.177.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Apr 2024 12:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b0:31:6e:84:d8:eb:4d:70:dc:5f:9a:7c:48:d7:4d:af:37:a2:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=aa97b6e2feffe6d891a86e4b8b360afe8ee02a865e4c090b080a7d58df39ddcc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:df:df:05:0f:44:51:48:e9:fb:fa:f5:f5:14: c4:40:df:22:1c:2a:08:a0:49:ee:0f:0d:82:e0:1d: 35:7b:0c:cf:2b:59:01:3d:73:74:4c:7e:65:33:f1: a1:49:f9:e5:58:8a:38:cd:7e:a2:c9:c4:e6:15:3b: 8b:b5:26:cd:53:0d:0d:c1:e5:1c:02:61:2b:6b:01: 87:59:2d:cf:a2:89:de:5e:3f:2a:79:c0:7b:7e:8a: a9:6a:3e:78:ec:c3:c1:3f:cb:1c:3c:6a:3c:ea:af: 1e:1f:ec:c2:8a:ba:27:6a:d0:0d:e0:30:5b:88:c3: 49:57:20:22:ba:ee:33:4b:db:9b:06:3b:33:0e:35: f0:ca:56:84:35:c7:6f:4d:d0:84:33:ac:61:eb:df: b4:6f:81:31:51:a1:fc:81:e7:a0:6f:a9:48:44:d8: 03:db:28:60:43:ae:2f:1c:01:85:11:6e:13:a3:2a: c8:5a:90:fa:3f:d2:02:42:25:04:1c:a1:82:2a:27: f1:36:56:ec:60:d1:5b:9a:e4:c6:e4:d7:50:c0:9b: 98:be:26:83:b1:09:64:6e:f1:c0:23:e7:2d:56:bc: 3b:9e:dd:77:41:53:f1:dd:fa:43:27:74:12:9a:14: d9:f7:b4:39:d8:2d:5b:ee:5e:88:fd:0e:2a:59:71: 82:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2B:12:DD:4E:D6:8D:F5:00:E2:D1:3A:7D:E2:E0:E2:00:5A:07:EB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/077f59a6-be05-4dd8-a514-122ed50e1722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.177.0.0/17 Signature Algorithm: sha256WithRSAEncryption 0d:4d:86:4e:fc:51:4d:0c:f4:bf:7d:89:19:d3:36:a3:6c:23: d2:b0:76:2c:16:71:6c:ec:da:27:45:a8:3d:2f:ff:d1:0b:ed: e1:52:12:e9:4a:8b:3c:cd:ea:02:cc:26:88:9a:b9:c7:cd:81: 71:9b:17:8c:4f:5b:81:4e:77:00:e7:0b:3e:69:af:98:ad:87: b9:a9:69:ec:65:ab:e7:74:c8:91:5e:d4:1f:4b:d0:c5:e5:f6: ff:04:a2:2f:04:6e:69:66:5b:79:16:a3:00:76:6f:16:d2:62: a1:ab:48:6c:03:1f:30:82:6f:df:5d:cd:5c:cd:12:f0:d2:dc: 4d:7c:74:f1:da:f8:85:0a:a2:1f:39:65:a2:95:48:37:5f:f1: 42:f6:9c:45:2b:28:32:28:b7:2c:8b:38:ff:c4:d9:9d:21:63: 42:f9:cb:f5:5d:ac:05:cb:29:29:3a:74:e9:d5:72:d5:29:3e: 8f:77:15:33:a2:1d:80:61:a2:76:37:be:41:08:1c:53:51:20: 7b:fd:04:5b:7c:52:82:2b:c3:89:eb:06:e3:8b:70:72:4c:3b: f9:d0:33:3b:ea:a2:46:4f:d4:3c:3e:c7:12:e3:7f:24:0f:bf: 0b:57:90:6a:a6:9c:65:92:b9:64:d9:a0:35:23:de:08:e7:e3: 5c:8e:8b:d1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO7AxboTY601w3F+afEjXTa83ojcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTk3YjZlMmZlZmZlNmQ4OTFhODZlNGI4YjM2MGFmZThl ZTAyYTg2NWU0YzA5MGIwODBhN2Q1OGRmMzlkZGNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw398FD0RRSOn7+vX1FMRA3yIcKgigSe4PDYLgHTV7DM8r WQE9c3RMfmUz8aFJ+eVYijjNfqLJxOYVO4u1Js1TDQ3B5RwCYStrAYdZLc+iid5e Pyp5wHt+iqlqPnjsw8E/yxw8ajzqrx4f7MKKuidq0A3gMFuIw0lXICK67jNL25sG OzMONfDKVoQ1x29N0IQzrGHr37RvgTFRofyB56BvqUhE2APbKGBDri8cAYURbhOj KshakPo/0gJCJQQcoYIqJ/E2Vuxg0Vua5Mbk11DAm5i+JoOxCWRu8cAj5y1WvDue 3XdBU/Hd+kMndBKaFNn3tDnYLVvuXoj9DipZcYJjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2isS3U7WjfUA4tE6feLg4gBaB+swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA3N2Y1OWE2LWJlMDUtNGRkOC1hNTE0LTEyMmVkNTBlMTcyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeVsQAwDQYJKoZIhvcNAQELBQADggEBAA1Nhk78UU0M9L99iRnTNqNsI9Kw diwWcWzs2idFqD0v/9EL7eFSEulKizzN6gLMJoiaucfNgXGbF4xPW4FOdwDnCz5p r5ith7mpaexlq+d0yJFe1B9L0MXl9v8Eoi8EbmlmW3kWowB2bxbSYqGrSGwDHzCC b99dzVzNEvDS3E18dPHa+IUKoh85ZaKVSDdf8UL2nEUrKDIotyyLOP/E2Z0hY0L5 y/VdrAXLKSk6dOnVctUpPo93FTOiHYBhonY3vkEIHFNRIHv9BFt8UoIrw4nrBuOL cHJMO/nQMzvqokZP1Dw+xxLjfyQPvwtXkGqmnGWSuWTZoDUj3gjn41yOi9E= -----END CERTIFICATE-----Generated at Tue Apr 16 01:09:04 2024 by rpki-client on console-fra.rpki-client.org