$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c7a6ccd-fea2-4d15-907c-8c805d000449.roa File: 3c7a6ccd-fea2-4d15-907c-8c805d000449.roa (raw, json) Hash identifier: 2cdqhaO80JAsoNe+c2l7JdbPWBLJaGiTxpq5hGyIUJ4= Subject key identifier: DB:77:8D:4E:EF:ED:C2:1F:3F:43:B9:16:C1:F5:A9:87:A1:0C:08:12 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3AD2119A3B3887A24704BE7C68736B367CEEFFFB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c7a6ccd-fea2-4d15-907c-8c805d000449.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 136.18.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d2:11:9a:3b:38:87:a2:47:04:be:7c:68:73:6b:36:7c:ee:ff:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=d2dd5084ef3ae439921accb18d12fae1e4171d423b08903f4d1e3723d891d291, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5e:79:ed:2e:da:fd:8d:f9:67:d1:da:3a:17: 6c:17:23:b4:ba:35:95:ed:20:2d:c5:32:33:be:06: f4:cb:48:6f:f7:4c:26:ba:78:68:b3:99:ac:d6:ec: 9a:0c:5a:02:72:4b:cd:59:88:bb:13:ec:0a:5b:6e: e4:c1:aa:3d:14:80:b2:fe:7c:39:ae:34:b3:01:7a: 36:f2:cd:46:b0:fe:91:55:58:76:73:a9:1b:e5:83: 68:0c:a8:80:a0:d1:46:89:f7:30:2e:41:f7:a8:25: 79:02:b1:1e:11:94:d8:cc:34:eb:03:c9:98:81:78: a4:d5:82:f2:b1:23:7a:82:0f:ee:b3:e7:4d:98:d4: 45:56:39:8c:c8:a0:50:b5:fb:a7:e9:54:bf:c1:f1: 04:a9:8e:2d:2e:6c:41:0d:3f:f9:65:80:24:83:ab: e2:fa:92:0b:da:0f:f0:ad:de:4f:dc:10:07:3b:7f: ce:05:0e:dd:ef:58:f7:34:14:9e:35:91:93:97:7e: 45:59:4e:6a:7b:f5:1b:30:4c:47:10:42:c2:7b:32: e5:e1:b2:45:d5:ff:9c:01:e6:58:53:2e:e2:0d:f1: 17:61:6d:74:6c:89:75:05:11:ba:54:4b:5c:e4:ea: 4d:3a:7e:a1:e3:32:51:dd:f7:f7:5f:0d:85:4b:e1: fd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:77:8D:4E:EF:ED:C2:1F:3F:43:B9:16:C1:F5:A9:87:A1:0C:08:12 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c7a6ccd-fea2-4d15-907c-8c805d000449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.52.0/22 Signature Algorithm: sha256WithRSAEncryption 94:06:9e:18:fc:44:6e:1b:47:01:a5:63:89:79:12:48:25:2f: 1b:2c:64:e0:9d:f4:60:bd:57:21:b3:10:95:ae:cc:95:c3:de: f2:8b:50:cb:a8:78:9c:a4:2d:b3:b9:05:fe:2d:43:ad:63:55: 5a:32:16:dd:87:2c:d8:49:2c:e0:37:98:c6:24:69:11:6e:26: e2:02:e6:b0:41:27:20:2d:e6:29:22:68:38:32:95:39:9b:b7: 90:68:be:59:fd:c9:78:d1:69:11:2c:7e:b8:37:e2:22:69:39: f8:a4:1d:d2:a4:ec:8b:67:c8:a9:c3:80:a7:79:ee:56:12:38: 79:70:4d:6a:5d:9d:4d:78:b0:35:bf:6b:20:3d:76:3d:7a:5a: f1:c9:48:8e:2a:13:6c:5a:2f:77:4f:53:c4:a1:b2:7f:22:9c: ff:18:ca:bb:26:1e:0f:3f:14:c2:09:7c:5f:83:6d:28:c8:12: e6:12:be:6f:44:09:c3:d8:03:8c:68:1b:10:b7:a2:ed:7a:1e: 24:45:e4:83:26:dd:61:2b:71:f0:14:c8:79:04:be:4c:53:0a: 66:b7:45:47:05:f4:8a:2b:57:4d:75:f0:4f:cc:10:c3:1a:c1: ce:3b:f0:4c:32:a2:e1:d6:52:d1:dd:0d:66:d1:5d:84:50:22: 30:d4:20:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOtIRmjs4h6JHBL58aHNrNnzu//swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMmRkNTA4NGVmM2FlNDM5OTIxYWNjYjE4ZDEyZmFlMWU0 MTcxZDQyM2IwODkwM2Y0ZDFlMzcyM2Q4OTFkMjkxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaXnntLtr9jfln0do6F2wXI7S6NZXtIC3FMjO+BvTLSG/3 TCa6eGizmazW7JoMWgJyS81ZiLsT7ApbbuTBqj0UgLL+fDmuNLMBejbyzUaw/pFV WHZzqRvlg2gMqICg0UaJ9zAuQfeoJXkCsR4RlNjMNOsDyZiBeKTVgvKxI3qCD+6z 502Y1EVWOYzIoFC1+6fpVL/B8QSpji0ubEENP/llgCSDq+L6kgvaD/Ct3k/cEAc7 f84FDt3vWPc0FJ41kZOXfkVZTmp79RswTEcQQsJ7MuXhskXV/5wB5lhTLuIN8Rdh bXRsiXUFEbpUS1zk6k06fqHjMlHd9/dfDYVL4f1jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU23eNTu/twh8/Q7kWwfWph6EMCBIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNjN2E2Y2NkLWZlYTItNGQxNS05MDdjLThjODA1ZDAwMDQ0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKIEjQwDQYJKoZIhvcNAQELBQADggEBAJQGnhj8RG4bRwGlY4l5EkglLxss ZOCd9GC9VyGzEJWuzJXD3vKLUMuoeJykLbO5Bf4tQ61jVVoyFt2HLNhJLOA3mMYk aRFuJuIC5rBBJyAt5ikiaDgylTmbt5Bovln9yXjRaREsfrg34iJpOfikHdKk7Itn yKnDgKd57lYSOHlwTWpdnU14sDW/ayA9dj16WvHJSI4qE2xaL3dPU8Shsn8inP8Y yrsmHg8/FMIJfF+DbSjIEuYSvm9ECcPYA4xoGxC3ou16HiRF5IMm3WErcfAUyHkE vkxTCma3RUcF9IorV0118E/MEMMawc478EwyouHWUtHdDWbRXYRQIjDUIDQ= -----END CERTIFICATE-----Generated at Thu May 9 01:26:11 2024 by rpki-client on console-ams.rpki-client.org