$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4165de56-381f-47ea-93f6-37961d8267c8.roa File: 4165de56-381f-47ea-93f6-37961d8267c8.roa (raw, json) Hash identifier: hgiAAm5mXx8Nv7dXOJr5nWwqV3DHknOeD5c2cW7aDL4= Subject key identifier: 25:F9:1F:1B:99:5B:C7:65:39:79:F4:D9:6A:83:80:75:76:9D:06:67 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 66F3BD267F52F008B82A28223E0BA1C056E6FBF1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4165de56-381f-47ea-93f6-37961d8267c8.roa Signing time: Wed 24 Apr 2024 00:00:00 +0000 ROA not before: Wed 24 Apr 2024 00:00:00 +0000 ROA not after: Wed 29 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 170.172.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f3:bd:26:7f:52:f0:08:b8:2a:28:22:3e:0b:a1:c0:56:e6:fb:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 24 00:00:00 2024 GMT Not After : May 29 23:59:59 2024 GMT Subject: serialNumber=1c64dd354f87a8065569d78c51438b343da7ab1142ace3886857f690f0310743, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e6:5f:de:87:5f:0c:f5:26:60:a5:ca:77:28: d5:25:b0:be:3b:a8:cc:f1:5f:e2:84:bd:72:63:2e: 41:6c:46:e1:9f:04:0f:92:ba:5c:d7:23:c1:33:c9: f9:ad:5b:15:00:4c:41:23:48:98:ea:01:bb:7e:1b: d4:11:6e:b9:8a:57:93:38:f1:b0:fd:e5:bf:e6:34: f2:e3:85:c4:f9:a8:6b:aa:d1:fd:57:06:e3:99:46: 09:35:12:80:24:85:10:22:e3:3e:71:56:ed:6c:77: ef:56:05:a7:65:29:be:3b:e6:b5:2d:ff:c8:fa:9e: b4:ab:a1:d1:01:ba:a5:22:18:6f:d7:55:4f:2e:36: 16:45:0a:6f:9f:e4:19:cd:ed:2e:2c:bc:53:44:3a: d1:96:2d:48:49:f3:49:7d:5b:b4:9f:70:9f:2d:68: 87:f3:8b:b9:37:eb:55:f6:46:83:60:ef:b7:3e:ac: aa:ac:18:10:57:b7:4f:e9:e6:25:d5:a4:b5:cb:3e: 1a:e4:57:0b:0e:cc:35:ec:2a:29:f1:b0:54:ec:63: 41:88:84:93:16:ae:d4:5b:c2:e8:84:b7:ce:cd:d7: 3b:b1:b8:e2:12:47:99:44:55:95:e8:61:bf:95:81: be:97:3e:90:41:81:9c:9c:27:f9:8b:d9:77:f8:73: b3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F9:1F:1B:99:5B:C7:65:39:79:F4:D9:6A:83:80:75:76:9D:06:67 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4165de56-381f-47ea-93f6-37961d8267c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.172.0.0/16 Signature Algorithm: sha256WithRSAEncryption 80:99:0c:92:61:89:6d:76:da:6b:e9:b6:99:43:55:4f:34:0e: dd:1b:14:96:55:52:37:99:da:6a:fe:35:60:20:9f:e2:cf:c8: ed:bd:c8:52:39:83:8e:9f:59:8b:2f:54:a3:fe:e8:6f:0c:11: 63:28:58:33:e6:91:41:f1:1b:62:a7:d8:32:67:77:53:ad:71: ca:e7:b4:30:c1:f0:c6:69:37:65:ca:60:10:94:7e:66:35:4f: 88:e8:53:48:fe:b4:c6:72:9a:46:6d:b2:c9:46:d5:a9:88:3a: 3d:fd:85:b5:5a:c5:8a:bd:22:47:09:c8:59:e3:11:f7:24:05: 63:c1:70:a4:50:08:71:75:94:a5:70:87:51:57:bd:9a:0f:77: 1f:99:bd:85:03:f0:61:a1:00:ec:6e:80:1b:67:85:df:a6:68: 22:53:9f:73:bf:db:13:5e:98:c8:d3:ea:fd:e6:f2:bd:d3:9c: a7:d7:db:0d:4d:48:78:d1:ef:d5:f3:db:2a:b7:3c:46:d6:a9: 38:3a:c3:4f:2d:27:74:3b:33:f7:64:a2:e9:ad:70:49:12:d4: 86:69:a8:47:ab:0d:b3:fe:cd:34:a7:81:d5:b6:53:5c:2c:46: 50:f2:5d:07:6a:7a:de:89:2e:5a:50:ce:62:4a:77:c6:58:e4: 5a:ec:d9:19 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZvO9Jn9S8Ai4KigiPguhwFbm+/EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDI0MDAwMDAwWhcNMjQwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYzY0ZGQzNTRmODdhODA2NTU2OWQ3OGM1MTQzOGIzNDNk YTdhYjExNDJhY2UzODg2ODU3ZjY5MGYwMzEwNzQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/5l/eh18M9SZgpcp3KNUlsL47qMzxX+KEvXJjLkFsRuGf BA+SulzXI8EzyfmtWxUATEEjSJjqAbt+G9QRbrmKV5M48bD95b/mNPLjhcT5qGuq 0f1XBuOZRgk1EoAkhRAi4z5xVu1sd+9WBadlKb475rUt/8j6nrSrodEBuqUiGG/X VU8uNhZFCm+f5BnN7S4svFNEOtGWLUhJ80l9W7SfcJ8taIfzi7k361X2RoNg77c+ rKqsGBBXt0/p5iXVpLXLPhrkVwsOzDXsKinxsFTsY0GIhJMWrtRbwuiEt87N1zux uOISR5lEVZXoYb+Vgb6XPpBBgZycJ/mL2Xf4c7PNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUJfkfG5lbx2U5efTZaoOAdXadBmcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQxNjVkZTU2LTM4MWYtNDdlYS05M2Y2LTM3OTYxZDgyNjdjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCqrDANBgkqhkiG9w0BAQsFAAOCAQEAgJkMkmGJbXbaa+m2mUNVTzQO3RsU llVSN5naav41YCCf4s/I7b3IUjmDjp9Ziy9Uo/7obwwRYyhYM+aRQfEbYqfYMmd3 U61xyue0MMHwxmk3ZcpgEJR+ZjVPiOhTSP60xnKaRm2yyUbVqYg6Pf2FtVrFir0i RwnIWeMR9yQFY8FwpFAIcXWUpXCHUVe9mg93H5m9hQPwYaEA7G6AG2eF36ZoIlOf c7/bE16YyNPq/ebyvdOcp9fbDU1IeNHv1fPbKrc8RtapODrDTy0ndDsz92Si6a1w SRLUhmmoR6sNs/7NNKeB1bZTXCxGUPJdB2p63okuWlDOYkp3xljkWuzZGQ== -----END CERTIFICATE-----Generated at Thu May 2 06:12:34 2024 by rpki-client on console-fra.rpki-client.org