$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/32c7289d-8dc4-4212-bc39-65d268c06fa5.roa File: 32c7289d-8dc4-4212-bc39-65d268c06fa5.roa (raw, json) Hash identifier: dDWSHrnzu1erGju/2UvUPoXTfaS5hjzyzob/uhi1Zy8= Subject key identifier: 80:C0:4A:85:D2:A3:3B:BF:22:47:C2:C9:AA:31:F5:46:8B:54:FD:ED Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0AA5361D33DBC71C53879091C53784AFE5BC6F0B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/32c7289d-8dc4-4212-bc39-65d268c06fa5.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 98.77.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a5:36:1d:33:db:c7:1c:53:87:90:91:c5:37:84:af:e5:bc:6f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=87f36da91dc18aa783c9d241e222164b820db8f57590a645d10ec84481601a91, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:39:f6:db:59:24:1e:75:83:26:64:c8:9e:15: ac:5c:68:1f:f4:2e:5e:45:f5:45:dd:d5:bf:8c:76: 70:05:34:02:4f:6e:29:cd:01:11:cb:d2:c0:88:77: 92:f2:ff:04:e3:12:5c:d6:8a:e1:28:06:5f:ba:6f: f9:2e:7f:9d:35:36:70:95:f3:64:e1:a2:ce:65:b6: a6:7b:0e:cb:3e:d2:b8:f2:58:6d:4d:c0:d5:a6:c7: 0f:8f:8f:4e:00:99:b7:65:b4:13:ee:4b:a5:ed:08: b9:cd:ca:cb:fd:ec:b2:1e:b8:26:c6:18:38:78:22: 83:f0:30:2c:2d:1d:6f:85:1d:5d:d3:37:d6:68:2e: 30:69:14:95:c3:41:be:c1:06:9e:07:d4:37:f8:c9: 52:20:d9:63:b3:27:22:ce:0b:f4:45:77:f0:3f:e5: a8:5e:24:51:c1:49:60:e2:eb:1b:ea:bf:69:78:96: f5:29:8c:d0:2c:c7:e6:fe:3d:0a:4e:33:16:9d:47: a5:3d:f9:58:3b:45:7a:b8:ff:9c:3e:a8:d6:e4:cf: f4:0c:e1:a9:98:10:9d:44:c7:a4:24:c4:13:6f:dc: 1b:2d:27:66:73:4b:53:79:40:fe:0b:f2:8d:03:7a: 7e:fe:f1:ab:93:95:0d:c6:fa:e7:df:0c:90:c4:cc: c9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C0:4A:85:D2:A3:3B:BF:22:47:C2:C9:AA:31:F5:46:8B:54:FD:ED X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/32c7289d-8dc4-4212-bc39-65d268c06fa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.77.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4c:cc:c7:9d:52:f4:d2:a0:e0:5c:54:ce:80:03:d3:40:d5:35: 7d:87:28:3b:b5:ff:3d:ef:bc:9f:8c:50:a5:f8:1d:d9:3c:5f: 75:04:b5:d5:87:9c:32:0d:87:af:d8:f8:98:7e:ac:c4:80:a1: 79:73:9e:79:f6:41:bd:82:b9:f2:be:d5:db:72:f2:d6:7d:85: 4d:be:bb:df:fc:3b:09:ca:f7:9e:3d:09:a0:94:95:a8:4a:0e: 24:3c:3d:83:b4:43:03:f4:52:76:ed:86:cd:6e:be:89:19:bb: 01:b1:0d:6e:e6:00:d6:8d:c0:ff:c0:25:0a:45:d5:33:31:5d: 44:d3:f9:da:0f:52:c5:f1:60:78:84:73:2b:12:07:02:16:7e: c5:f5:7b:b8:00:cf:33:6f:0a:94:31:4d:49:a2:12:ea:69:66: a1:53:74:70:41:fd:2d:39:f0:dc:00:b1:61:cb:08:27:0f:64: 43:73:b3:3d:78:f9:97:74:0f:cc:d0:8a:e9:16:88:3d:59:80: aa:41:12:0d:4e:f4:df:01:0c:d8:15:86:14:f0:bd:46:ce:74: 88:1b:25:bc:ae:fe:4b:42:cd:73:67:94:a3:dd:5e:d0:85:f3: 29:18:0d:b1:19:93:aa:2e:b2:e5:98:e3:56:b7:7b:99:e2:29: 44:c2:95:57 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCqU2HTPbxxxTh5CRxTeEr+W8bwswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4N2YzNmRhOTFkYzE4YWE3ODNjOWQyNDFlMjIyMTY0Yjgy MGRiOGY1NzU5MGE2NDVkMTBlYzg0NDgxNjAxYTkxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWOfbbWSQedYMmZMieFaxcaB/0Ll5F9UXd1b+MdnAFNAJP binNARHL0sCId5Ly/wTjElzWiuEoBl+6b/kuf501NnCV82Thos5ltqZ7Dss+0rjy WG1NwNWmxw+Pj04AmbdltBPuS6XtCLnNysv97LIeuCbGGDh4IoPwMCwtHW+FHV3T N9ZoLjBpFJXDQb7BBp4H1Df4yVIg2WOzJyLOC/RFd/A/5aheJFHBSWDi6xvqv2l4 lvUpjNAsx+b+PQpOMxadR6U9+Vg7RXq4/5w+qNbkz/QM4amYEJ1Ex6QkxBNv3Bst J2ZzS1N5QP4L8o0Den7+8auTlQ3G+uffDJDEzMmfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUgMBKhdKjO78iR8LJqjH1RotU/e0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMyYzcyODlkLThkYzQtNDIxMi1iYzM5LTY1ZDI2OGMwNmZhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBiTTANBgkqhkiG9w0BAQsFAAOCAQEATMzHnVL00qDgXFTOgAPTQNU1fYco O7X/Pe+8n4xQpfgd2TxfdQS11YecMg2Hr9j4mH6sxICheXOeefZBvYK58r7V23Ly 1n2FTb673/w7Ccr3nj0JoJSVqEoOJDw9g7RDA/RSdu2GzW6+iRm7AbENbuYA1o3A /8AlCkXVMzFdRNP52g9SxfFgeIRzKxIHAhZ+xfV7uADPM28KlDFNSaIS6mlmoVN0 cEH9LTnw3ACxYcsIJw9kQ3OzPXj5l3QPzNCK6RaIPVmAqkESDU703wEM2BWGFPC9 Rs50iBslvK7+S0LNc2eUo91e0IXzKRgNsRmTqi6y5ZjjVrd7meIpRMKVVw== -----END CERTIFICATE-----Generated at Thu May 2 08:02:28 2024 by rpki-client on console-ams.rpki-client.org