$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b47ec16-1ca6-436d-994a-d172672c1ed5.roa File: 3b47ec16-1ca6-436d-994a-d172672c1ed5.roa (raw, json) Hash identifier: 20h3SSceT42e1s9UTd8R+VY6cV6RokqaIYgkTQ8ABKI= Subject key identifier: 35:DF:D2:76:AE:1A:48:3C:61:D0:D3:EE:21:30:80:82:B2:3D:1F:07 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 489ABC7A96A1C53E563EDC00ED3C24C9B7A4C441 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b47ec16-1ca6-436d-994a-d172672c1ed5.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 136.18.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:9a:bc:7a:96:a1:c5:3e:56:3e:dc:00:ed:3c:24:c9:b7:a4:c4:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=075f345306093597cd869956fa1c3824f0f9debdbb51141f5c9fdf8d50e315eb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2f:7b:ad:e5:46:87:e2:6b:78:40:8e:7f:98: c5:a0:b8:61:3c:5a:65:dc:47:67:06:30:b5:df:8b: cf:20:73:fe:d6:f4:cc:61:46:29:a1:80:4d:02:da: be:f7:6e:3a:58:34:22:2d:18:c9:f3:3d:1e:db:1c: c7:fd:2c:b7:6c:cd:67:05:4a:b4:ec:98:96:f2:a7: 04:27:05:30:be:89:6f:bf:8f:8d:60:b4:e9:15:e4: a1:bb:32:54:78:9a:6e:f1:e3:b7:de:2a:42:22:a2: 2f:03:83:74:88:c3:69:dd:ab:06:b1:ef:9b:5f:91: 36:f5:57:81:b9:9a:b1:ab:70:31:45:e7:6e:dc:e1: 71:54:14:94:7e:b2:79:28:25:e5:f9:87:72:30:1c: 96:f8:a1:05:ef:9b:28:cd:ac:16:58:39:e1:1c:af: 55:30:8c:08:72:e9:2b:fe:c9:b3:7d:f7:ff:4b:99: 1a:3c:69:55:e0:41:e1:46:e8:eb:f0:27:ba:d2:81: 36:5c:de:1b:0a:68:cb:7f:e4:d6:07:4d:46:6d:70: 36:c3:74:f1:cd:fe:a2:31:98:f7:0a:cb:a7:0b:82: ff:e1:f1:1f:c3:c8:8f:2d:f0:b5:ff:b7:a0:83:83: 99:b3:48:ed:16:13:9f:f2:38:4b:09:33:73:82:00: 64:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DF:D2:76:AE:1A:48:3C:61:D0:D3:EE:21:30:80:82:B2:3D:1F:07 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b47ec16-1ca6-436d-994a-d172672c1ed5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.56.0/21 Signature Algorithm: sha256WithRSAEncryption 80:99:5b:c1:39:b4:a6:8e:d4:a6:40:15:35:3f:80:33:f3:13: 2c:2f:35:21:db:d6:f1:a5:91:24:f9:ea:11:81:1a:5e:d9:76: f7:0e:10:bb:84:3c:a9:18:6c:b1:c7:6b:de:9f:32:1d:70:96: d5:fc:06:52:c0:f1:0e:cc:a5:e6:25:da:97:b1:e4:6a:18:7c: ce:78:f4:08:b5:4d:86:16:3b:49:06:a2:0e:77:a8:31:d4:17: 37:36:10:f3:cd:23:3c:59:3b:7b:8c:65:fb:cc:1f:eb:e7:21: cd:b0:bf:17:db:cb:4d:aa:e4:7a:eb:76:46:f8:1d:73:f1:88: 24:65:85:94:ec:77:26:88:8e:8f:c5:d4:ac:95:96:75:ba:a4: 07:a7:bb:15:06:83:db:8a:2e:a1:4e:04:e7:f7:08:fa:a6:32: 41:6e:08:19:0a:c5:ff:7f:90:11:2a:2f:8d:69:6d:38:3c:fe: 8f:2d:ea:9f:04:7a:57:1e:49:3b:57:f3:50:fc:c5:a1:26:e8: 19:b7:8e:8a:b6:85:45:16:6c:7e:a3:14:00:a1:e4:f4:8c:48: 2e:7b:5f:ff:ac:d9:c6:b6:48:37:60:8f:f6:63:80:c5:42:0a: a2:79:d6:49:04:68:28:86:89:80:d1:ed:ba:41:6b:15:08:21: ad:e1:79:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSJq8epahxT5WPtwA7TwkybekxEEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzVmMzQ1MzA2MDkzNTk3Y2Q4Njk5NTZmYTFjMzgyNGYw ZjlkZWJkYmI1MTE0MWY1YzlmZGY4ZDUwZTMxNWViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcL3ut5UaH4mt4QI5/mMWguGE8WmXcR2cGMLXfi88gc/7W 9MxhRimhgE0C2r73bjpYNCItGMnzPR7bHMf9LLdszWcFSrTsmJbypwQnBTC+iW+/ j41gtOkV5KG7MlR4mm7x47feKkIioi8Dg3SIw2ndqwax75tfkTb1V4G5mrGrcDFF 527c4XFUFJR+snkoJeX5h3IwHJb4oQXvmyjNrBZYOeEcr1UwjAhy6Sv+ybN99/9L mRo8aVXgQeFG6OvwJ7rSgTZc3hsKaMt/5NYHTUZtcDbDdPHN/qIxmPcKy6cLgv/h 8R/DyI8t8LX/t6CDg5mzSO0WE5/yOEsJM3OCAGTzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNd/Sdq4aSDxh0NPuITCAgrI9HwcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNiNDdlYzE2LTFjYTYtNDM2ZC05OTRhLWQxNzI2NzJjMWVkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOIEjgwDQYJKoZIhvcNAQELBQADggEBAICZW8E5tKaO1KZAFTU/gDPzEywv NSHb1vGlkST56hGBGl7ZdvcOELuEPKkYbLHHa96fMh1wltX8BlLA8Q7MpeYl2pex 5GoYfM549Ai1TYYWO0kGog53qDHUFzc2EPPNIzxZO3uMZfvMH+vnIc2wvxfby02q 5Hrrdkb4HXPxiCRlhZTsdyaIjo/F1KyVlnW6pAenuxUGg9uKLqFOBOf3CPqmMkFu CBkKxf9/kBEqL41pbTg8/o8t6p8EelceSTtX81D8xaEm6Bm3joq2hUUWbH6jFACh 5PSMSC57X/+s2ca2SDdgj/ZjgMVCCqJ51kkEaCiGiYDR7bpBaxUIIa3hec8= -----END CERTIFICATE-----Generated at Thu May 2 04:02:31 2024 by rpki-client on console-fra.rpki-client.org