$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/178372ae-407c-46d0-b587-ae3d2137faf4.roa File: 178372ae-407c-46d0-b587-ae3d2137faf4.roa (raw, json) Hash identifier: D7qX5nCoKntFj5D0kcmmFG7rSwnCeKPX1Pa0Td1k7oQ= Subject key identifier: 8B:94:B3:2E:56:BD:E8:D6:F5:4C:37:F4:9D:2B:B2:18:93:CA:36:A9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: BD4114CCCAD2F18A6F7E600CF9729DDA4261DB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/178372ae-407c-46d0-b587-ae3d2137faf4.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 40.235.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: bd:41:14:cc:ca:d2:f1:8a:6f:7e:60:0c:f9:72:9d:da:42:61:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=0b1199ece473089e4796f125c07905ff783616a667ebe868ffffbc863abcd7a1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:57:95:4e:b2:89:cb:cc:d6:4a:70:22:8f: fa:15:4b:ac:68:fc:67:5b:22:94:b8:e6:5d:e0:55: 06:2b:86:cb:08:16:3c:d2:17:95:3a:5a:13:41:58: 29:33:cc:0e:47:5a:ec:c0:e1:18:33:4a:96:94:6f: 55:ac:4d:49:11:aa:23:62:0e:ac:04:9a:bd:ec:5d: ae:67:4d:ea:aa:a0:50:24:bd:6d:e3:f1:e1:b4:77: 3b:07:8c:35:72:6c:6f:33:e4:05:0b:da:a7:67:28: 30:be:cc:e3:23:21:08:0e:9f:03:5c:2c:f2:f3:a3: a6:d1:b3:1b:6f:8c:86:78:7b:fa:f3:f4:c2:21:d4: 36:52:4d:76:67:5e:d4:9f:61:cf:1a:14:d5:f6:cb: 48:6e:c5:dc:3c:a7:3a:0c:be:46:13:f8:47:93:82: 1c:9d:bc:a3:2b:53:52:07:64:fb:91:4d:49:3e:84: 11:e9:db:7d:7e:78:29:64:ad:69:cf:f8:d8:05:6e: 56:48:26:24:02:aa:ad:52:ae:a6:2d:eb:bc:e8:b0: 13:44:48:56:f7:b7:b8:76:e6:b8:64:7a:ed:12:49: 9d:7d:c4:92:ff:a5:fc:4d:71:8c:fb:26:6f:f6:39: 4d:e5:e7:f5:a2:86:06:be:1a:97:cf:a8:e3:e5:59: bd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:94:B3:2E:56:BD:E8:D6:F5:4C:37:F4:9D:2B:B2:18:93:CA:36:A9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/178372ae-407c-46d0-b587-ae3d2137faf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.235.64.0/18 Signature Algorithm: sha256WithRSAEncryption 87:7b:e1:e6:3f:bd:78:52:89:2d:7c:fa:8c:eb:60:09:75:d6: fa:df:c7:f0:2f:07:e5:83:6f:46:b5:51:c5:0e:a7:55:7c:c3: ba:b3:cc:47:e9:95:6f:96:49:8a:1a:eb:6b:c4:d3:bf:13:c6: 0b:1a:80:e5:40:74:84:17:f5:7c:c0:ab:db:c0:89:e8:bb:66: 95:79:69:b2:6e:ff:9a:8c:01:c6:ca:05:f8:60:51:37:20:ae: c6:5e:c3:14:b0:f4:2f:52:21:ca:11:da:ba:9d:e7:a6:ce:51: 79:61:96:66:dd:e0:5c:00:15:94:ed:40:01:14:31:df:97:6c: 86:4a:fc:ba:31:06:c6:55:91:c7:d5:2c:dd:2a:f8:fa:e0:57: b6:a0:de:9d:97:e7:35:e7:cb:f0:1f:40:79:22:9a:17:78:08: 31:61:fa:85:85:ff:6d:ba:4b:49:f9:ae:a1:d9:36:10:15:be: 9f:cb:0e:be:bd:db:de:b1:5b:d0:80:34:91:ec:e2:98:31:91: b8:de:25:f7:1c:e3:5e:77:7c:14:1d:22:f1:5e:06:84:e6:b1: 9e:39:2e:89:70:8a:91:9a:20:88:1a:1c:0c:40:6a:69:39:1e: 90:19:4d:77:07:7c:7a:2f:bc:69:98:ea:d1:1d:20:de:a1:2d: c2:a4:3d:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAL1BFMzK0vGKb35gDPlyndpCYdswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjExOTllY2U0NzMwODllNDc5NmYxMjVjMDc5MDVmZjc4 MzYxNmE2NjdlYmU4NjhmZmZmYmM4NjNhYmNkN2ExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6nVeVTrKJy8zWSnAij/oVS6xo/GdbIpS45l3gVQYrhssI FjzSF5U6WhNBWCkzzA5HWuzA4RgzSpaUb1WsTUkRqiNiDqwEmr3sXa5nTeqqoFAk vW3j8eG0dzsHjDVybG8z5AUL2qdnKDC+zOMjIQgOnwNcLPLzo6bRsxtvjIZ4e/rz 9MIh1DZSTXZnXtSfYc8aFNX2y0huxdw8pzoMvkYT+EeTghydvKMrU1IHZPuRTUk+ hBHp231+eClkrWnP+NgFblZIJiQCqq1SrqYt67zosBNESFb3t7h25rhkeu0SSZ19 xJL/pfxNcYz7Jm/2OU3l5/Wihga+GpfPqOPlWb2XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUi5SzLla96Nb1TDf0nSuyGJPKNqkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE3ODM3MmFlLTQwN2MtNDZkMC1iNTg3LWFlM2QyMTM3ZmFmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYo60AwDQYJKoZIhvcNAQELBQADggEBAId74eY/vXhSiS18+ozrYAl11vrf x/AvB+WDb0a1UcUOp1V8w7qzzEfplW+WSYoa62vE078TxgsagOVAdIQX9XzAq9vA iei7ZpV5abJu/5qMAcbKBfhgUTcgrsZewxSw9C9SIcoR2rqd56bOUXlhlmbd4FwA FZTtQAEUMd+XbIZK/LoxBsZVkcfVLN0q+PrgV7ag3p2X5zXny/AfQHkimhd4CDFh +oWF/226S0n5rqHZNhAVvp/LDr69296xW9CANJHs4pgxkbjeJfcc4153fBQdIvFe BoTmsZ45LolwipGaIIgaHAxAamk5HpAZTXcHfHovvGmY6tEdIN6hLcKkPeg= -----END CERTIFICATE-----Generated at Thu May 2 11:33:10 2024 by rpki-client on console-fra.rpki-client.org