$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37e11256-a8d6-42f6-ab1c-a441d2054117.roa File: 37e11256-a8d6-42f6-ab1c-a441d2054117.roa (raw, json) Hash identifier: WpQQWqUX+36tLjGL56KzWpsGY4er4d/cCzOzu6jG4+g= Subject key identifier: 6F:F8:85:39:BF:82:66:9A:74:5F:9D:75:3A:E0:EE:4C:94:2E:BF:F2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4D6FF658E8DF3E6F9AEB3C4C111E63DA4A8F8B0A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37e11256-a8d6-42f6-ab1c-a441d2054117.roa Signing time: Wed 10 Apr 2024 00:00:00 +0000 ROA not before: Wed 10 Apr 2024 00:00:00 +0000 ROA not after: Wed 15 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 99.77.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:6f:f6:58:e8:df:3e:6f:9a:eb:3c:4c:11:1e:63:da:4a:8f:8b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 10 00:00:00 2024 GMT Not After : May 15 23:59:59 2024 GMT Subject: serialNumber=24165bac9abb572c50c9bca4e39fc867ec6c63ff8b55996e5eb686d65deb5601, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3e:72:ab:6b:a5:da:e4:5d:72:a7:29:93:6d: fa:3e:27:80:b9:98:f1:6e:3b:1a:bb:8e:dc:47:69: 2d:8a:eb:6a:0c:0e:6b:2a:f6:d6:71:22:98:93:4c: df:d4:19:be:d8:cd:e5:94:bb:68:14:00:53:02:c2: 21:fb:b9:00:2a:a5:37:da:c5:c9:f1:15:47:bd:5d: c1:45:2f:0c:21:eb:08:3c:20:59:12:5f:58:dc:59: 7d:b5:81:2e:3b:07:1d:0c:fe:6b:58:1e:cb:88:bc: ce:0a:ac:b3:5d:41:14:3b:a8:e1:f7:b0:e0:26:d8: 44:c3:95:d4:e7:9e:da:fe:27:aa:14:7d:00:c4:ef: b6:33:70:e0:eb:fa:5c:32:98:02:67:92:7a:59:c7: ce:46:a6:46:d0:ee:76:ad:53:38:d9:b4:49:3f:3d: 32:85:5a:36:35:a4:32:b6:5c:23:cb:60:0d:1c:2c: 90:9e:1c:c7:eb:2f:a6:eb:5c:91:5c:cb:1c:1e:28: 9f:8b:a9:58:ba:82:b0:91:6b:5a:8c:90:88:e4:c6: 2d:f3:cb:95:a7:08:0e:2f:64:ce:ac:f7:fd:4f:28: 3e:6c:6c:46:73:bf:34:62:87:c0:24:67:90:bb:13: a3:b2:3f:7d:f3:00:e7:a4:3a:76:c1:b4:39:3c:e6: 53:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F8:85:39:BF:82:66:9A:74:5F:9D:75:3A:E0:EE:4C:94:2E:BF:F2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37e11256-a8d6-42f6-ab1c-a441d2054117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.128.0/17 Signature Algorithm: sha256WithRSAEncryption 51:f6:6c:da:7d:3a:10:3d:b7:de:a0:7d:1a:0f:62:1b:10:8d: dd:1d:94:1a:f2:e2:2b:87:10:1a:77:2c:03:21:28:00:d4:8a: 48:1d:ae:0f:a7:9b:5e:4f:5e:c2:d6:87:ca:de:f0:ca:ec:95: 80:f6:d2:7c:2e:c8:61:0d:29:67:fd:ef:33:35:9e:dd:71:1c: 37:70:da:5f:d9:cc:ac:a6:ef:ec:50:73:2d:a5:28:6e:eb:03: 81:f5:6d:e5:53:61:e8:76:ca:f3:17:df:fe:34:a7:ba:c4:f7: 90:97:a1:e9:d4:cd:8c:f9:50:f5:ee:a6:82:b6:e8:8c:80:c7: 6b:a2:a0:5c:e3:66:5b:8b:6c:95:1f:2e:f5:f4:73:1c:b1:87: 04:65:84:81:3f:35:81:e7:10:43:71:7b:f0:d5:b8:3c:da:a6: 40:b7:46:ed:14:8a:47:6f:76:d7:20:99:11:2e:71:c1:19:de: a8:34:1c:d9:19:42:59:2e:8a:c3:51:e2:d3:f2:49:19:2c:70: ee:71:4e:fe:44:e1:b2:a3:ea:8c:aa:a6:01:4b:46:d6:8e:da: 0c:58:38:10:5a:ce:87:ad:f4:b3:6a:fe:b5:37:63:10:b3:22: e3:a9:5e:58:fb:81:cb:c6:b8:6b:be:5b:bf:72:38:20:87:6d: ab:7b:43:00 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTW/2WOjfPm+a6zxMER5j2kqPiwowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEwMDAwMDAwWhcNMjQwNTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNDE2NWJhYzlhYmI1NzJjNTBjOWJjYTRlMzlmYzg2N2Vj NmM2M2ZmOGI1NTk5NmU1ZWI2ODZkNjVkZWI1NjAxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtPnKra6Xa5F1ypymTbfo+J4C5mPFuOxq7jtxHaS2K62oM Dmsq9tZxIpiTTN/UGb7YzeWUu2gUAFMCwiH7uQAqpTfaxcnxFUe9XcFFLwwh6wg8 IFkSX1jcWX21gS47Bx0M/mtYHsuIvM4KrLNdQRQ7qOH3sOAm2ETDldTnntr+J6oU fQDE77YzcODr+lwymAJnknpZx85GpkbQ7natUzjZtEk/PTKFWjY1pDK2XCPLYA0c LJCeHMfrL6brXJFcyxweKJ+LqVi6grCRa1qMkIjkxi3zy5WnCA4vZM6s9/1PKD5s bEZzvzRih8AkZ5C7E6OyP33zAOekOnbBtDk85lPtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUb/iFOb+CZpp0X511OuDuTJQuv/IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM3ZTExMjU2LWE4ZDYtNDJmNi1hYjFjLWE0NDFkMjA1NDExNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdjTYAwDQYJKoZIhvcNAQELBQADggEBAFH2bNp9OhA9t96gfRoPYhsQjd0d lBry4iuHEBp3LAMhKADUikgdrg+nm15PXsLWh8re8MrslYD20nwuyGENKWf97zM1 nt1xHDdw2l/ZzKym7+xQcy2lKG7rA4H1beVTYeh2yvMX3/40p7rE95CXoenUzYz5 UPXupoK26IyAx2uioFzjZluLbJUfLvX0cxyxhwRlhIE/NYHnEENxe/DVuDzapkC3 Ru0UikdvdtcgmREuccEZ3qg0HNkZQlkuisNR4tPySRkscO5xTv5E4bKj6oyqpgFL RtaO2gxYOBBazoet9LNq/rU3YxCzIuOpXlj7gcvGuGu+W79yOCCHbat7QwA= -----END CERTIFICATE-----Generated at Thu May 2 08:50:57 2024 by rpki-client on console-fra.rpki-client.org