$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36abedd0-558b-48a5-8138-2734946bc4ce.roa File: 36abedd0-558b-48a5-8138-2734946bc4ce.roa (raw, json) Hash identifier: ZmFUMiX/LAP6dQ81Au4hs1qlExxMNxjE5zIUqP8k75I= Subject key identifier: 26:39:E2:48:AB:14:81:CA:CE:BE:25:54:C2:3D:4E:AE:87:E4:61:C4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C38210D711EBE519111A3770E2AAB987F16CB6F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36abedd0-558b-48a5-8138-2734946bc4ce.roa Signing time: Fri 10 May 2024 00:00:00 +0000 ROA not before: Fri 10 May 2024 00:00:00 +0000 ROA not after: Fri 14 Jun 2024 23:59:59 +0000 asID: 19047 IP address blocks: 70.130.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:38:21:0d:71:1e:be:51:91:11:a3:77:0e:2a:ab:98:7f:16:cb:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:00:00 2024 GMT Not After : Jun 14 23:59:59 2024 GMT Subject: serialNumber=056851ce68d0ea8c7693894e1d7e5512718e85c81ce411a53a272da8fb12ce49, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2a:e6:a6:da:4d:ea:18:5b:a4:2a:f1:e4:81: 98:1d:75:7e:b3:f9:69:59:57:5e:3c:e6:9a:e8:5c: 9a:90:cd:86:1e:5b:7e:2e:60:f7:cb:1a:c0:20:d5: bd:51:98:51:9e:90:3a:da:c1:98:67:db:d1:d5:1d: b3:dc:d5:ba:db:df:db:e8:18:ee:45:35:9a:ff:cb: a3:d2:1f:28:20:1c:20:a5:ab:a7:d4:bc:b6:f5:d3: d1:1b:57:84:bf:4a:77:c6:a1:47:b6:9e:ff:73:a5: a0:da:ec:ec:4d:6c:cb:0b:62:c4:f6:6e:0d:89:17: cd:04:91:18:36:da:03:3c:29:3e:53:06:4e:3e:97: e1:2a:9e:d6:15:4f:0b:77:1e:fd:86:d8:87:45:22: 4c:66:47:e4:61:eb:c3:fd:e7:08:e8:d6:60:33:07: d1:0b:a6:ef:04:d4:a3:6b:2f:c4:a0:87:39:9d:22: 43:e3:b3:c9:b3:3e:48:e2:b4:a4:81:44:18:fe:20: 0e:d0:9f:93:75:87:7d:73:d8:99:c0:8f:cf:07:c2: 50:d7:79:f0:ae:46:25:43:59:14:b2:da:c0:ce:e7: af:ba:f5:fb:80:94:6b:9c:b5:b4:10:9d:e8:9d:21: a1:85:66:0d:f6:34:b7:e3:1a:72:d7:b7:3d:f2:93: 44:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:39:E2:48:AB:14:81:CA:CE:BE:25:54:C2:3D:4E:AE:87:E4:61:C4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36abedd0-558b-48a5-8138-2734946bc4ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.130.213.0/24 Signature Algorithm: sha256WithRSAEncryption 39:b3:5d:59:c4:7d:2d:64:55:51:32:4b:4b:a6:98:14:79:71: 50:1c:b0:2b:77:89:ef:6f:83:8b:99:34:90:bf:bb:22:9c:c3: bb:44:d8:ab:9c:ee:44:ab:14:f2:ab:86:d9:bd:1b:49:f3:79: b3:7f:77:a0:a6:6a:64:7d:c4:62:ae:e5:cf:55:03:28:6b:4a: 2c:e2:f9:46:0b:17:5b:66:25:d3:bd:a6:31:9a:22:29:97:a9: e7:34:46:70:0b:b4:f1:7d:da:64:8b:5e:63:32:94:4f:d0:2d: 93:5b:b6:2b:2d:ff:6e:ad:5b:a5:36:b3:52:77:bc:50:87:fa: ca:cb:cb:4b:f6:d7:37:f5:c6:a2:ef:5c:9b:52:66:f5:c2:e1: 2f:63:25:d8:bc:ab:e6:4c:6b:4c:a5:32:44:7e:9c:b7:19:46: 7c:13:a9:07:b5:6c:15:7d:0d:92:03:66:fc:a4:f3:30:2e:c1: 28:ae:23:20:10:69:fd:8b:be:3f:91:39:18:c4:cb:25:cd:c4: ff:40:16:26:6c:f4:d5:94:af:c3:a2:37:f1:65:34:c2:79:b1: 04:f4:71:3b:da:0d:b4:a1:5c:2b:f6:ff:bf:b9:94:41:cf:9b: 24:8a:24:f3:38:bb:60:b8:3e:c2:93:40:65:5a:89:0e:05:69: 04:b5:85:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXDghDXEevlGREaN3DiqrmH8Wy28wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTEwMDAwMDAwWhcNMjQwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTY4NTFjZTY4ZDBlYThjNzY5Mzg5NGUxZDdlNTUxMjcx OGU4NWM4MWNlNDExYTUzYTI3MmRhOGZiMTJjZTQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPKuam2k3qGFukKvHkgZgddX6z+WlZV1485proXJqQzYYe W34uYPfLGsAg1b1RmFGekDrawZhn29HVHbPc1brb39voGO5FNZr/y6PSHyggHCCl q6fUvLb109EbV4S/SnfGoUe2nv9zpaDa7OxNbMsLYsT2bg2JF80EkRg22gM8KT5T Bk4+l+EqntYVTwt3Hv2G2IdFIkxmR+Rh68P95wjo1mAzB9ELpu8E1KNrL8Sghzmd IkPjs8mzPkjitKSBRBj+IA7Qn5N1h31z2JnAj88HwlDXefCuRiVDWRSy2sDO56+6 9fuAlGuctbQQneidIaGFZg32NLfjGnLXtz3yk0T5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJjniSKsUgcrOviVUwj1OrofkYcQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM2YWJlZGQwLTU1OGItNDhhNS04MTM4LTI3MzQ5NDZiYzRjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABGgtUwDQYJKoZIhvcNAQELBQADggEBADmzXVnEfS1kVVEyS0ummBR5cVAc sCt3ie9vg4uZNJC/uyKcw7tE2Kuc7kSrFPKrhtm9G0nzebN/d6CmamR9xGKu5c9V AyhrSizi+UYLF1tmJdO9pjGaIimXqec0RnALtPF92mSLXmMylE/QLZNbtist/26t W6U2s1J3vFCH+srLy0v21zf1xqLvXJtSZvXC4S9jJdi8q+ZMa0ylMkR+nLcZRnwT qQe1bBV9DZIDZvyk8zAuwSiuIyAQaf2Lvj+RORjEyyXNxP9AFiZs9NWUr8OiN/Fl NMJ5sQT0cTvaDbShXCv2/7+5lEHPmySKJPM4u2C4PsKTQGVaiQ4FaQS1hSY= -----END CERTIFICATE-----Generated at Fri May 24 01:08:04 2024 by rpki-client on console-ams.rpki-client.org