$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08b34850-0f5e-4a5f-a692-86a70018f54c.roa File: 08b34850-0f5e-4a5f-a692-86a70018f54c.roa (raw, json) Hash identifier: tuk5lXsfTzsTOw+ulmelYJsiz4vV26w+QK0Ckb7itMc= Subject key identifier: 9B:DA:94:73:48:3B:B0:BE:93:1C:45:EC:EB:44:0F:FF:65:FA:4E:8C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 21C7A4F3A6DE2AC3120D58123351F6C3EBEBE09D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08b34850-0f5e-4a5f-a692-86a70018f54c.roa Signing time: Sat 13 Apr 2024 00:00:00 +0000 ROA not before: Sat 13 Apr 2024 00:00:00 +0000 ROA not after: Sat 18 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 99.80.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c7:a4:f3:a6:de:2a:c3:12:0d:58:12:33:51:f6:c3:eb:eb:e0:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 13 00:00:00 2024 GMT Not After : May 18 23:59:59 2024 GMT Subject: serialNumber=16ab0858960b56465815173b715ef9b8426a702c22d480e57776edaf72876793, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:af:64:e1:43:e9:88:c8:9a:7f:4a:f9:8a: d5:51:58:0e:ca:58:71:cd:ca:1b:1e:d2:83:e3:4f: db:73:b6:0e:b6:84:dc:f0:d3:6d:44:c5:32:28:bd: 23:bc:b3:61:90:74:f7:31:f1:79:b0:3a:89:56:20: 3e:e3:fc:30:50:07:3c:26:4d:85:10:18:bf:df:a1: f7:04:1b:e9:1f:84:ac:47:57:0c:56:92:da:23:a2: a8:88:47:c7:13:fd:c5:16:18:1a:1e:45:3c:ce:6f: b7:18:07:56:f5:68:76:50:13:53:d9:7b:00:d4:e7: 73:91:93:03:2c:00:28:01:55:70:23:8d:cd:e4:f8: e5:eb:d0:df:58:50:32:9b:98:3b:ab:99:7e:bd:08: 1f:de:af:cd:3c:0c:c1:1a:75:03:ad:be:55:e5:d5: 4d:aa:7e:07:fa:5e:1b:c7:4b:9e:d2:28:70:0a:12: 0e:e0:b0:33:5a:81:34:3e:6a:e4:b8:45:9b:74:07: 3f:d6:cf:c3:ca:44:7d:01:86:d8:7d:57:8e:69:13: 75:af:8f:a0:c2:04:89:8a:5c:2f:d6:76:aa:dc:c4: 40:d4:90:d9:57:d1:92:b3:a6:8c:28:4d:6c:ef:16: 55:7c:7b:67:3d:64:70:25:68:08:00:c8:13:4a:76: f6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DA:94:73:48:3B:B0:BE:93:1C:45:EC:EB:44:0F:FF:65:FA:4E:8C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08b34850-0f5e-4a5f-a692-86a70018f54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.80.0.0/15 Signature Algorithm: sha256WithRSAEncryption 80:c8:bc:a7:cf:58:5b:4c:1c:4c:50:14:93:f3:ec:ab:b2:e7: e6:63:f2:43:ed:2d:03:4b:1c:b4:c0:fe:44:7e:b3:37:bd:a8: 46:ea:ef:ee:18:21:e3:29:69:ca:3e:f0:b8:ae:e1:af:d8:5d: 65:68:32:bc:63:3b:22:d0:04:ba:75:e0:06:3b:3d:f7:bb:95: 6c:22:f7:0c:3c:15:30:67:2e:b3:38:ce:ef:b6:3d:b4:11:f6: fd:c7:93:41:10:75:af:a1:f1:78:d3:16:64:e4:9a:d7:8d:9f: fc:bf:62:e7:17:0d:d8:f9:9b:f1:cd:6d:1e:de:be:6b:1c:11: b3:a4:ce:87:7b:ae:f2:d0:ca:bc:36:48:09:f8:d9:d7:1b:ce: cd:d1:13:41:a3:b4:6e:fc:0e:36:f1:d7:ad:13:12:74:b4:20: c9:6a:32:12:9c:58:77:87:cc:ee:ad:26:cf:63:21:50:c8:d3: f8:7e:a6:1d:59:55:ba:b2:a4:0b:6c:1f:16:cc:9f:81:f5:d1: b1:aa:c9:51:e0:9c:4e:0e:44:a2:f3:9e:33:92:bd:98:63:b9: 4b:d2:f0:ce:fd:96:6a:db:e2:32:d5:a8:22:52:a8:07:1d:ca: 9f:52:ed:df:76:67:54:51:c5:58:d7:5d:dd:e0:da:27:2c:3c: a4:c6:52:25 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIcek86beKsMSDVgSM1H2w+vr4J0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEzMDAwMDAwWhcNMjQwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNmFiMDg1ODk2MGI1NjQ2NTgxNTE3M2I3MTVlZjliODQy NmE3MDJjMjJkNDgwZTU3Nzc2ZWRhZjcyODc2NzkzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw0q9k4UPpiMiaf0r5itVRWA7KWHHNyhse0oPjT9tztg62 hNzw021ExTIovSO8s2GQdPcx8XmwOolWID7j/DBQBzwmTYUQGL/fofcEG+kfhKxH VwxWktojoqiIR8cT/cUWGBoeRTzOb7cYB1b1aHZQE1PZewDU53ORkwMsACgBVXAj jc3k+OXr0N9YUDKbmDurmX69CB/er808DMEadQOtvlXl1U2qfgf6XhvHS57SKHAK Eg7gsDNagTQ+auS4RZt0Bz/Wz8PKRH0Bhth9V45pE3Wvj6DCBImKXC/WdqrcxEDU kNlX0ZKzpowoTWzvFlV8e2c9ZHAlaAgAyBNKdvZJAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUm9qUc0g7sL6THEXs60QP/2X6TowwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA4YjM0ODUwLTBmNWUtNGE1Zi1hNjkyLTg2YTcwMDE4ZjU0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFjUDANBgkqhkiG9w0BAQsFAAOCAQEAgMi8p89YW0wcTFAUk/Psq7Ln5mPy Q+0tA0sctMD+RH6zN72oRurv7hgh4ylpyj7wuK7hr9hdZWgyvGM7ItAEunXgBjs9 97uVbCL3DDwVMGcuszjO77Y9tBH2/ceTQRB1r6HxeNMWZOSa142f/L9i5xcN2Pmb 8c1tHt6+axwRs6TOh3uu8tDKvDZICfjZ1xvOzdETQaO0bvwONvHXrRMSdLQgyWoy EpxYd4fM7q0mz2MhUMjT+H6mHVlVurKkC2wfFsyfgfXRsarJUeCcTg5EovOeM5K9 mGO5S9Lwzv2WatviMtWoIlKoBx3Kn1Lt33ZnVFHFWNdd3eDaJyw8pMZSJQ== -----END CERTIFICATE-----Generated at Wed Apr 24 16:34:45 2024 by rpki-client on console-fra.rpki-client.org