$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/180c2965-16a2-4cec-9ddb-3b2ae1dda338.roa File: 180c2965-16a2-4cec-9ddb-3b2ae1dda338.roa (raw, json) Hash identifier: +1vDj0uD3wLc9wwOpn59OPk4lYjLPpIJP8hC1Z8oX1Q= Subject key identifier: 92:07:92:27:08:E7:78:5C:C9:BC:DD:03:0A:10:B8:75:15:AC:70:64 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A1A3701C9B3E1F8836FBC9261445491EC6836FD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/180c2965-16a2-4cec-9ddb-3b2ae1dda338.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 40.220.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:1a:37:01:c9:b3:e1:f8:83:6f:bc:92:61:44:54:91:ec:68:36:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=d6eaed3280d6a12a47c9b7a9a090d1af1bb6150c30166ca663f2ae7aa52ff66a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f5:85:9d:c8:bb:c4:31:79:5a:e8:17:e9:9a: 0b:3b:41:19:60:52:23:ec:0d:26:93:71:3d:79:82: f9:c0:eb:6d:e1:88:2b:69:85:9c:04:1f:2a:b9:30: 8a:ee:ae:32:04:0f:90:6d:54:27:b7:0d:d3:ff:e3: d8:c4:30:10:c7:aa:d5:3c:1a:72:86:d3:e0:d3:86: ff:db:ef:45:29:24:e7:36:d9:a6:30:05:d3:aa:c2: 86:a8:43:15:9e:79:4f:01:ab:e6:cf:f2:40:83:90: 33:9c:37:2e:79:11:47:ff:dc:50:93:87:cf:5f:8e: b7:3c:2d:de:1a:26:cd:4c:4b:17:65:c8:fb:b3:13: 6f:15:a5:81:b3:1c:2b:ba:d2:d0:30:0d:65:d0:85: 1b:3e:23:09:8c:6e:5b:74:63:40:5e:bd:41:0c:c8: c0:35:87:bc:c8:a9:05:e4:dc:c8:a1:de:c7:0b:d2: 20:b5:aa:5c:ab:d9:34:92:2a:60:e3:61:67:22:cc: 2a:f5:88:a4:1c:bc:08:bc:c7:84:4e:65:ee:b1:ca: c0:fa:d5:36:bc:06:c1:40:e4:7e:00:bd:7d:ee:08: c0:05:ba:ae:51:48:5b:29:fc:d0:5c:73:a4:df:22: c3:2f:78:a9:f7:4a:bd:60:9b:e0:df:40:fa:aa:d4: 19:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:07:92:27:08:E7:78:5C:C9:BC:DD:03:0A:10:B8:75:15:AC:70:64 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/180c2965-16a2-4cec-9ddb-3b2ae1dda338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.220.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9e:2f:2e:03:0b:6e:ac:2d:62:74:0e:d7:cb:5c:1b:60:6b:b9: 74:85:9d:b3:f6:74:a4:b5:ab:28:b4:d7:01:e8:1c:b1:cc:11: 21:1b:c8:ab:da:a9:ee:f5:cf:9d:a2:91:ef:90:44:05:89:13: ed:e9:ac:88:e2:5e:f9:82:1e:fe:76:a5:c7:d1:9f:62:3d:58: e7:50:6a:69:c5:38:1d:6c:1e:2e:26:9d:d2:ef:21:bf:c4:10: 11:47:35:dc:76:5e:e9:ad:43:7c:b3:d4:3e:7e:25:46:fe:3d: 9e:13:a8:79:07:f0:d1:71:d3:df:e5:4e:86:94:e8:9e:83:19: 0d:37:d5:bc:ba:35:fe:da:80:3f:3f:2e:64:de:50:dc:a7:89: 8b:40:bc:9f:9f:2e:04:e7:99:dc:94:dd:46:23:4d:c4:21:28: 8f:db:05:e4:64:ac:08:0b:25:b0:a3:c7:c5:37:24:c1:7e:14: 95:d3:1d:79:c0:04:ec:1f:31:ca:33:50:d2:39:a9:55:0e:e3: 61:82:7c:96:57:b1:f1:ac:0d:56:f1:2b:2a:56:23:3d:06:26: 86:d5:2b:b2:ba:ec:60:b6:9d:af:13:f1:7d:da:de:dd:58:15: 63:ad:1a:db:06:e6:2e:40:e7:99:28:56:f5:0a:9f:d3:43:6c: 1a:bc:be:9b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSho3Acmz4fiDb7ySYURUkexoNv0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNmVhZWQzMjgwZDZhMTJhNDdjOWI3YTlhMDkwZDFhZjFi YjYxNTBjMzAxNjZjYTY2M2YyYWU3YWE1MmZmNjZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDS9YWdyLvEMXla6Bfpmgs7QRlgUiPsDSaTcT15gvnA623h iCtphZwEHyq5MIrurjIED5BtVCe3DdP/49jEMBDHqtU8GnKG0+DThv/b70UpJOc2 2aYwBdOqwoaoQxWeeU8Bq+bP8kCDkDOcNy55EUf/3FCTh89fjrc8Ld4aJs1MSxdl yPuzE28VpYGzHCu60tAwDWXQhRs+IwmMblt0Y0BevUEMyMA1h7zIqQXk3Mih3scL 0iC1qlyr2TSSKmDjYWcizCr1iKQcvAi8x4ROZe6xysD61Ta8BsFA5H4AvX3uCMAF uq5RSFsp/NBcc6TfIsMveKn3Sr1gm+DfQPqq1Bl3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUkgeSJwjneFzJvN0DChC4dRWscGQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE4MGMyOTY1LTE2YTItNGNlYy05ZGRiLTNiMmFlMWRkYTMzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAo3DANBgkqhkiG9w0BAQsFAAOCAQEAni8uAwturC1idA7Xy1wbYGu5dIWd s/Z0pLWrKLTXAegcscwRIRvIq9qp7vXPnaKR75BEBYkT7emsiOJe+YIe/nalx9Gf Yj1Y51BqacU4HWweLiad0u8hv8QQEUc13HZe6a1DfLPUPn4lRv49nhOoeQfw0XHT 3+VOhpTonoMZDTfVvLo1/tqAPz8uZN5Q3KeJi0C8n58uBOeZ3JTdRiNNxCEoj9sF 5GSsCAslsKPHxTckwX4UldMdecAE7B8xyjNQ0jmpVQ7jYYJ8llex8awNVvErKlYj PQYmhtUrsrrsYLadrxPxfdre3VgVY60a2wbmLkDnmShW9Qqf00NsGry+mw== -----END CERTIFICATE-----Generated at Thu May 2 01:05:26 2024 by rpki-client on console-fra.rpki-client.org