$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/298d72e4-354c-46bd-a3f9-9f69844f1676.roa File: 298d72e4-354c-46bd-a3f9-9f69844f1676.roa (raw, json) Hash identifier: iBkjmnuf6TeM5DPyUTjLd6IxIaMEbue2F9JYy6JRKLo= Subject key identifier: AC:79:B4:74:FD:15:63:79:22:31:15:D8:51:89:A2:3A:A2:E0:09:5D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F4356AD50812A51DD159AE6318301429276F8F1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/298d72e4-354c-46bd-a3f9-9f69844f1676.roa Signing time: Thu 18 Apr 2024 00:00:00 +0000 ROA not before: Thu 18 Apr 2024 00:00:00 +0000 ROA not after: Thu 23 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 209.177.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:43:56:ad:50:81:2a:51:dd:15:9a:e6:31:83:01:42:92:76:f8:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:00:00 2024 GMT Not After : May 23 23:59:59 2024 GMT Subject: serialNumber=70f6bbac0693c22250230c39cabc4a0ec1e76386e1f8562f84d9c51d43a03529, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ef:6a:8e:7a:55:fa:31:ef:ae:81:a1:57:e1: 56:8a:dc:ba:35:99:b3:4a:1a:43:5c:d1:82:90:59: 8a:96:a2:31:9b:7a:5c:89:bc:c0:58:b5:2e:eb:74: 83:65:a8:63:bc:81:39:89:fa:9a:aa:49:e0:0b:51: 97:a2:df:24:dd:d1:c3:5d:53:88:c5:a7:75:4f:f4: 4e:05:18:19:7c:b4:b8:d4:b6:ac:88:9f:be:42:f9: 43:9a:ea:dc:8c:ea:87:cc:59:52:9f:9c:1a:de:62: 71:5f:ba:c2:53:1c:89:43:ea:c6:ee:ab:75:5c:e3: 21:f5:25:04:2b:d8:ca:fd:f5:67:52:0f:f7:4d:76: 1c:a5:bf:ab:04:30:ce:bc:ad:8b:fc:f6:13:63:e8: 1e:b8:08:55:bd:d5:0f:37:a9:a1:13:f4:38:62:5e: 7d:d0:04:e3:1a:84:ee:0c:a0:8a:c5:15:46:7e:24: 6a:cf:64:42:40:b6:27:f7:7b:2d:34:36:c1:f2:f1: 06:66:5c:ef:3c:89:69:c5:f9:d5:6d:6a:0b:c6:dd: c1:46:2a:91:5e:34:91:ea:f6:25:93:84:b4:84:ff: 1f:49:e6:ce:43:53:f3:42:6b:1e:18:a6:17:19:e4: da:71:81:75:de:f1:08:0b:f3:3f:48:c8:b6:b3:30: cd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:79:B4:74:FD:15:63:79:22:31:15:D8:51:89:A2:3A:A2:E0:09:5D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/298d72e4-354c-46bd-a3f9-9f69844f1676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.177.20.0/22 Signature Algorithm: sha256WithRSAEncryption bd:e0:41:0f:21:7e:44:96:37:72:7f:21:83:ed:f1:db:e6:03: 61:cc:2d:3c:03:73:3c:2c:6b:f4:63:4f:6c:fa:56:ba:63:1f: 36:e7:36:9f:d0:72:df:66:b3:5a:de:66:32:b0:57:01:dc:a4: 83:cd:d4:e9:5c:74:c5:61:71:2f:7a:a1:ea:c0:34:43:32:59: 9f:43:09:29:87:28:a7:f1:fe:d1:f0:e4:80:4d:3b:35:67:1e: 6e:46:3b:49:a5:58:7c:4b:21:fd:c0:52:9f:24:8a:04:e6:f4: 30:17:45:a1:0a:ac:04:ad:1f:3d:4d:41:77:81:9e:50:38:e2: 26:c2:53:6f:fd:cc:1f:a7:4f:70:a1:3b:e0:c4:22:d3:bb:3b: 83:16:1e:88:20:90:05:02:d2:c4:47:d4:9e:94:9a:43:2d:6d: ae:9d:da:35:85:b0:28:ac:7a:fe:4e:56:51:9d:16:fb:49:05: f2:c2:bd:38:91:1b:e3:75:5f:1b:43:aa:0f:a4:81:7d:4a:07: f3:eb:c8:a1:a5:6e:f8:b6:bf:45:35:0c:90:41:5b:28:71:99: 02:71:88:e4:b6:20:47:a4:b1:8f:8c:1a:aa:77:d8:59:39:1e: dd:32:25:19:a0:46:85:0b:4a:9e:c6:bb:ee:7c:8a:8d:77:49: d7:a4:da:01 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH0NWrVCBKlHdFZrmMYMBQpJ2+PEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE4MDAwMDAwWhcNMjQwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MGY2YmJhYzA2OTNjMjIyNTAyMzBjMzljYWJjNGEwZWMx ZTc2Mzg2ZTFmODU2MmY4NGQ5YzUxZDQzYTAzNTI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDx72qOelX6Me+ugaFX4VaK3Lo1mbNKGkNc0YKQWYqWojGb elyJvMBYtS7rdINlqGO8gTmJ+pqqSeALUZei3yTd0cNdU4jFp3VP9E4FGBl8tLjU tqyIn75C+UOa6tyM6ofMWVKfnBreYnFfusJTHIlD6sbuq3Vc4yH1JQQr2Mr99WdS D/dNdhylv6sEMM68rYv89hNj6B64CFW91Q83qaET9DhiXn3QBOMahO4MoIrFFUZ+ JGrPZEJAtif3ey00NsHy8QZmXO88iWnF+dVtagvG3cFGKpFeNJHq9iWThLSE/x9J 5s5DU/NCax4YphcZ5NpxgXXe8QgL8z9IyLazMM0VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrHm0dP0VY3kiMRXYUYmiOqLgCV0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI5OGQ3MmU0LTM1NGMtNDZiZC1hM2Y5LTlmNjk4NDRmMTY3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALRsRQwDQYJKoZIhvcNAQELBQADggEBAL3gQQ8hfkSWN3J/IYPt8dvmA2HM LTwDczwsa/RjT2z6VrpjHzbnNp/Qct9ms1reZjKwVwHcpIPN1OlcdMVhcS96oerA NEMyWZ9DCSmHKKfx/tHw5IBNOzVnHm5GO0mlWHxLIf3AUp8kigTm9DAXRaEKrASt Hz1NQXeBnlA44ibCU2/9zB+nT3ChO+DEItO7O4MWHoggkAUC0sRH1J6UmkMtba6d 2jWFsCisev5OVlGdFvtJBfLCvTiRG+N1XxtDqg+kgX1KB/PryKGlbvi2v0U1DJBB WyhxmQJxiOS2IEeksY+MGqp32Fk5Ht0yJRmgRoULSp7Gu+58io13Sdek2gE= -----END CERTIFICATE-----Generated at Fri May 3 01:27:51 2024 by rpki-client on console-fra.rpki-client.org