$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16e7b3a5-aaf2-4c01-acb2-a3de919ee65c.roa File: 16e7b3a5-aaf2-4c01-acb2-a3de919ee65c.roa (raw, json) Hash identifier: Vv2OEm05usJTtz9KgAXPNRpmlf9Sd33+bftR/sGzM00= Subject key identifier: 5F:C3:ED:EA:94:A5:54:32:17:9B:AD:21:C4:92:C3:7E:C3:E3:E8:C4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40901A601B9F323ECF7C2B2034FB472E8715A831 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16e7b3a5-aaf2-4c01-acb2-a3de919ee65c.roa Signing time: Tue 30 Apr 2024 00:00:00 +0000 ROA not before: Tue 30 Apr 2024 00:00:00 +0000 ROA not after: Tue 04 Jun 2024 23:59:59 +0000 asID: 14618 IP address blocks: 64.23.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:90:1a:60:1b:9f:32:3e:cf:7c:2b:20:34:fb:47:2e:87:15:a8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 30 00:00:00 2024 GMT Not After : Jun 4 23:59:59 2024 GMT Subject: serialNumber=3aff408e37f32313e1ba1ed080805dbb1383c3131a7e6c90586f0d6517f13396, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b8:05:cd:48:57:9f:f9:56:83:ba:57:45:12: 61:67:a5:56:dc:66:54:2c:b7:c9:ac:33:aa:6c:04: 8b:ef:9e:e2:d3:1a:f1:fe:f0:37:19:2c:33:a1:7a: 5a:ac:16:a7:16:06:99:c2:d6:ab:c6:b5:84:e8:cc: d3:e2:e3:19:45:ec:af:a2:05:2b:4d:2b:87:7c:c6: 38:f4:be:72:d4:03:ea:97:50:22:42:9a:27:47:38: 79:4f:50:15:9e:98:9c:7c:39:17:97:b2:6b:9c:ea: 62:a8:5d:10:8f:04:da:c8:26:40:32:af:2b:01:71: 12:f2:4a:28:90:df:45:fd:36:23:e1:7c:4c:a3:3d: b9:b8:16:c1:f0:5b:fe:fb:8f:84:11:37:0f:cf:23: 4f:6c:f5:a1:1c:0a:d1:b3:24:9a:c2:1b:9d:88:ca: 08:9a:fb:73:fa:98:ce:e5:3e:dc:c8:a9:f3:79:2a: c1:71:ad:00:4d:42:69:55:60:80:e3:01:af:10:4d: 45:af:31:3a:5a:8b:97:86:3b:a5:d7:09:a9:a7:6a: 1b:17:c5:81:e4:00:d6:7f:c5:2b:4e:6d:4c:67:10: ce:4a:67:d8:09:ad:71:2f:20:a7:02:d2:4e:78:9a: 97:d8:70:bc:e2:bf:99:5e:ae:a9:31:a5:27:7b:2f: 09:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C3:ED:EA:94:A5:54:32:17:9B:AD:21:C4:92:C3:7E:C3:E3:E8:C4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16e7b3a5-aaf2-4c01-acb2-a3de919ee65c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.23.0.0/18 Signature Algorithm: sha256WithRSAEncryption b1:d1:9b:d0:f6:c2:b8:19:50:b7:5e:d5:dc:44:04:e2:21:98: dc:33:98:a9:3b:19:16:4d:21:13:ba:49:a6:50:a9:1b:d8:2f: 5a:c4:16:a8:6c:ea:ac:06:a9:25:cd:bc:9e:b7:da:ae:a6:c0: dd:7c:5e:3f:31:c7:65:69:b2:08:68:17:a5:fa:be:ac:32:76: 95:1f:d3:88:c5:bc:ef:d4:28:3a:e5:8a:01:57:f1:92:56:aa: 4b:34:da:27:b4:62:82:c6:99:b6:b2:04:02:4c:c6:f8:cf:13: ea:e1:fb:48:75:66:05:94:b0:c9:2a:0b:83:37:b5:60:f7:db: f9:c2:04:32:80:01:47:a2:4e:30:04:6a:17:c5:59:9e:8d:7e: e7:6e:ac:7c:b3:a5:45:3b:a7:f0:45:47:07:bd:31:2a:72:c1: 75:a1:17:91:ff:30:59:9f:e0:9c:01:74:67:fb:0b:af:de:88: bc:18:6c:56:62:4a:57:bd:25:13:ac:15:62:6c:10:e4:2f:dd: 77:6d:e3:8d:3d:91:97:b0:d7:4f:c0:87:51:42:8e:61:c6:28: 5d:7f:d2:55:7f:f8:f5:3a:c5:ed:97:15:aa:37:70:a9:e9:34: fd:47:5f:98:26:1f:5e:ed:6a:e9:8a:c0:b4:59:b9:cb:3d:39: 7d:d5:15:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQJAaYBufMj7PfCsgNPtHLocVqDEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDMwMDAwMDAwWhcNMjQwNjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYWZmNDA4ZTM3ZjMyMzEzZTFiYTFlZDA4MDgwNWRiYjEz ODNjMzEzMWE3ZTZjOTA1ODZmMGQ2NTE3ZjEzMzk2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxuAXNSFef+VaDuldFEmFnpVbcZlQst8msM6psBIvvnuLT GvH+8DcZLDOhelqsFqcWBpnC1qvGtYTozNPi4xlF7K+iBStNK4d8xjj0vnLUA+qX UCJCmidHOHlPUBWemJx8OReXsmuc6mKoXRCPBNrIJkAyrysBcRLySiiQ30X9NiPh fEyjPbm4FsHwW/77j4QRNw/PI09s9aEcCtGzJJrCG52Iygia+3P6mM7lPtzIqfN5 KsFxrQBNQmlVYIDjAa8QTUWvMTpai5eGO6XXCamnahsXxYHkANZ/xStObUxnEM5K Z9gJrXEvIKcC0k54mpfYcLziv5lerqkxpSd7LwnjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUX8Pt6pSlVDIXm60hxJLDfsPj6MQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE2ZTdiM2E1LWFhZjItNGMwMS1hY2IyLWEzZGU5MTllZTY1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZAFwAwDQYJKoZIhvcNAQELBQADggEBALHRm9D2wrgZULde1dxEBOIhmNwz mKk7GRZNIRO6SaZQqRvYL1rEFqhs6qwGqSXNvJ632q6mwN18Xj8xx2VpsghoF6X6 vqwydpUf04jFvO/UKDrligFX8ZJWqks02ie0YoLGmbayBAJMxvjPE+rh+0h1ZgWU sMkqC4M3tWD32/nCBDKAAUeiTjAEahfFWZ6NfudurHyzpUU7p/BFRwe9MSpywXWh F5H/MFmf4JwBdGf7C6/eiLwYbFZiSle9JROsFWJsEOQv3Xdt4409kZew10/Ah1FC jmHGKF1/0lV/+PU6xe2XFao3cKnpNP1HX5gmH17taumKwLRZucs9OX3VFco= -----END CERTIFICATE-----Generated at Thu May 2 11:33:10 2024 by rpki-client on console-fra.rpki-client.org