$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2333dcbb-fe31-43d5-982b-b974de76c14d.roa File: 2333dcbb-fe31-43d5-982b-b974de76c14d.roa (raw, json) Hash identifier: 0M9XX8BtvL+NTjaZWNSh92a0BBrQOc5PQEcrfGV/hCU= Subject key identifier: 6C:10:F5:DB:52:84:6C:2F:33:8D:F2:70:52:39:5D:0E:80:28:9D:43 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4685A703F0D31F4E35549D70E64EC3B423EBC80D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2333dcbb-fe31-43d5-982b-b974de76c14d.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 129.30.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:85:a7:03:f0:d3:1f:4e:35:54:9d:70:e6:4e:c3:b4:23:eb:c8:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=880172f9784be3ab44144568dafeea91f8b47616f990a3f61e33bcfba1e1c5f9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b6:26:be:b6:4e:dc:0e:c3:7e:73:6c:ae:e7: a6:4e:37:92:d7:f6:21:45:dc:33:42:96:6f:84:ae: 49:da:11:31:40:37:5d:f8:86:7e:4c:f7:5c:d0:92: b3:13:90:c8:42:dd:8e:a0:3b:2d:9b:16:1c:6b:ea: 48:c8:91:28:35:dd:b4:13:1f:32:ac:7f:c0:ca:76: 44:41:17:69:ce:af:02:c8:55:1a:6d:56:dc:d5:43: 43:ef:7f:9f:14:46:10:57:97:7f:45:43:6d:0c:ed: d3:05:44:dc:4f:36:84:c8:84:9a:dd:ae:7c:93:3a: c4:8d:a4:76:a2:b3:d9:96:eb:7f:05:e4:a8:76:ca: 2b:2d:a6:a7:c2:8f:60:62:2a:0d:41:5f:7f:2f:01: d7:f5:af:8a:7a:b4:f1:61:55:79:4b:a5:1d:de:5a: 54:ac:2d:ff:f6:84:b0:71:fa:ce:4f:ed:db:33:54: 45:03:76:8c:61:77:f2:5f:c5:e5:e0:9b:8a:0f:1a: 6b:df:a4:f2:be:df:1f:26:b9:eb:20:25:97:a0:11: 7b:9a:ea:2a:4f:3d:0e:5b:8b:c9:b6:f0:55:7f:5c: 7f:34:eb:09:9b:9a:df:9c:0f:84:e3:06:17:91:6b: 6c:50:aa:21:e5:f7:f8:9c:3e:8c:13:33:f5:59:e4: d4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:10:F5:DB:52:84:6C:2F:33:8D:F2:70:52:39:5D:0E:80:28:9D:43 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2333dcbb-fe31-43d5-982b-b974de76c14d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.30.0.0/16 Signature Algorithm: sha256WithRSAEncryption 16:73:74:b3:17:83:b7:6f:76:9b:2e:5d:50:7c:d7:7c:aa:e3: cc:83:41:e4:a1:61:9d:52:4f:6f:23:83:42:d1:53:ff:4f:ea: 0a:10:97:78:26:64:73:80:84:71:26:c9:61:4f:bf:75:8c:94: 10:3f:a2:e4:ed:38:1a:03:f2:2f:bb:7a:b9:a8:29:18:af:cd: 9a:78:86:0f:59:63:aa:02:80:f1:97:dd:13:41:4e:c0:24:2d: 48:dd:3a:7c:b1:f5:07:25:d3:ec:fb:22:d3:e9:bc:6c:60:08: 34:9e:b9:ee:71:05:f4:13:2c:76:d2:18:8c:f6:0f:38:dd:c5: 1d:d8:47:9a:b4:15:dc:7b:06:f8:24:3a:65:d6:a7:34:a4:2e: 3a:dc:af:45:f0:40:33:52:f9:8c:08:fd:1e:00:37:ea:cd:94: ea:f0:33:61:3e:cb:9a:c2:38:f6:ff:d8:e9:13:55:62:6b:81: 6c:06:3d:a7:75:ea:30:8c:5a:53:2f:45:fe:bc:5d:f8:8d:55: fa:07:c8:1e:86:ad:29:00:42:70:7b:5e:25:15:28:cb:a7:2c: d0:07:38:f8:fc:e7:b6:93:a8:9b:45:37:1a:a2:0b:b3:aa:6d: 4a:8e:e3:73:2d:6e:b2:1f:dd:f3:af:b5:57:8f:f0:21:64:ad: 0c:c5:8b:6f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURoWnA/DTH041VJ1w5k7DtCPryA0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ODAxNzJmOTc4NGJlM2FiNDQxNDQ1NjhkYWZlZWE5MWY4 YjQ3NjE2Zjk5MGEzZjYxZTMzYmNmYmExZTFjNWY5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCitia+tk7cDsN+c2yu56ZON5LX9iFF3DNClm+ErknaETFA N134hn5M91zQkrMTkMhC3Y6gOy2bFhxr6kjIkSg13bQTHzKsf8DKdkRBF2nOrwLI VRptVtzVQ0Pvf58URhBXl39FQ20M7dMFRNxPNoTIhJrdrnyTOsSNpHais9mW638F 5Kh2yistpqfCj2BiKg1BX38vAdf1r4p6tPFhVXlLpR3eWlSsLf/2hLBx+s5P7dsz VEUDdoxhd/JfxeXgm4oPGmvfpPK+3x8muesgJZegEXua6ipPPQ5bi8m28FV/XH80 6wmbmt+cD4TjBheRa2xQqiHl9/icPowTM/VZ5NRZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUbBD121KEbC8zjfJwUjldDoAonUMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzMzNkY2JiLWZlMzEtNDNkNS05ODJiLWI5NzRkZTc2YzE0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCBHjANBgkqhkiG9w0BAQsFAAOCAQEAFnN0sxeDt292my5dUHzXfKrjzINB 5KFhnVJPbyODQtFT/0/qChCXeCZkc4CEcSbJYU+/dYyUED+i5O04GgPyL7t6uagp GK/NmniGD1ljqgKA8ZfdE0FOwCQtSN06fLH1ByXT7Psi0+m8bGAINJ657nEF9BMs dtIYjPYPON3FHdhHmrQV3HsG+CQ6ZdanNKQuOtyvRfBAM1L5jAj9HgA36s2U6vAz YT7LmsI49v/Y6RNVYmuBbAY9p3XqMIxaUy9F/rxd+I1V+gfIHoatKQBCcHteJRUo y6cs0Ac4+PzntpOom0U3GqILs6ptSo7jcy1ush/d86+1V4/wIWStDMWLbw== -----END CERTIFICATE-----Generated at Thu May 9 01:26:07 2024 by rpki-client on console-ams.rpki-client.org