$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4607ef94-988a-4531-a4bf-cd0814e88655.roa File: 4607ef94-988a-4531-a4bf-cd0814e88655.roa (raw, json) Hash identifier: SEe0M7+1GSTXUIaRYN/X+qo//mMM9Y5r0rpL8Q1+uvk= Subject key identifier: 08:08:5E:29:46:92:96:3E:72:76:BB:73:E9:8F:C7:EF:FB:8E:70:7F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17408870CEA54AD948FF9E68A223EB4BCD37F539 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4607ef94-988a-4531-a4bf-cd0814e88655.roa Signing time: Tue 07 May 2024 00:00:00 +0000 ROA not before: Tue 07 May 2024 00:00:00 +0000 ROA not after: Tue 11 Jun 2024 23:59:59 +0000 asID: 8987 IP address blocks: 35.43.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:40:88:70:ce:a5:4a:d9:48:ff:9e:68:a2:23:eb:4b:cd:37:f5:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:00:00 2024 GMT Not After : Jun 11 23:59:59 2024 GMT Subject: serialNumber=2c698797078406b6ab82bda22ca0dacbf4cec8533006890d2b5679471ee04c89, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:2e:b8:f0:d9:ab:b3:e5:2c:9b:54:d5:9f: b7:42:57:5b:bb:68:88:a7:43:f9:65:1f:a8:b3:59: d3:dc:c6:2f:46:25:ec:ee:0c:f3:d8:df:12:83:61: c9:37:f5:6c:48:26:6b:fa:d0:15:02:3c:7e:6f:68: ef:9d:5d:22:4e:ff:c9:89:95:ac:77:78:20:a7:e2: bc:ea:4c:2e:bd:42:33:fb:9c:55:90:0d:ae:b9:1d: 2f:74:bc:16:08:c7:ca:b6:cd:16:02:7f:de:4b:e1: 56:70:57:93:8d:de:06:58:e2:bb:28:de:8a:12:c7: d8:64:ba:2f:22:6a:06:b8:60:f9:34:e9:18:e4:89: 78:3d:25:58:a5:c1:10:59:fe:75:d1:96:38:08:c5: 85:10:dc:ee:0c:6c:ac:ae:ab:d3:69:e3:f5:c3:96: 2e:3a:05:2d:33:85:c1:fa:c1:53:f8:2d:94:56:e3: ed:a1:b5:1e:7d:cd:04:19:e7:1d:1d:eb:20:f5:eb: 9a:16:54:93:70:d5:e5:de:11:4e:1b:0f:26:8f:f8: 09:d5:6d:87:dc:08:48:5e:4b:4b:b7:64:8f:35:cd: 4d:31:4a:a5:5e:75:3a:92:a2:9f:0d:2b:76:a2:bb: fd:5d:22:53:9c:a8:40:bc:6c:24:a1:db:15:de:c4: 8e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:08:5E:29:46:92:96:3E:72:76:BB:73:E9:8F:C7:EF:FB:8E:70:7F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4607ef94-988a-4531-a4bf-cd0814e88655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.43.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1f:33:43:e9:5a:32:de:71:1d:7b:60:9a:db:a6:40:38:b4:93: 7e:bc:c4:98:15:0b:eb:11:7d:ad:28:8e:b6:b7:27:90:e6:23: 04:c6:e5:2e:7d:63:7e:e7:d0:98:77:6b:4a:9d:03:de:52:e7: 05:69:ec:07:0b:7b:58:e6:e5:5a:43:5d:cc:87:5b:c9:f0:18: 20:59:d9:fb:76:37:a2:e4:a8:29:07:1e:73:6e:e7:28:88:81: 27:a1:11:f9:c3:0b:99:74:93:88:98:cb:37:92:14:18:18:5f: e3:49:ed:f4:38:ee:ca:58:a1:65:40:7b:13:5e:fb:ff:24:07: ee:eb:0b:f2:45:0f:ac:ec:b9:90:f2:d0:fa:7c:6e:4a:72:4d: 5a:f7:42:6c:bf:53:8e:2c:40:25:56:3a:c1:f7:d0:22:88:c9: d0:ca:6e:fa:c0:75:e3:9b:b2:d3:9c:d7:e1:c3:9c:7c:69:1a: ec:7a:74:d6:ef:06:03:97:9c:7f:9a:92:2c:0a:98:f4:41:50: 23:38:1b:41:23:8a:14:f9:63:09:03:7e:60:f6:cd:06:a8:8c: 01:c0:a2:5d:4f:00:a0:c9:e7:8d:fc:3a:62:1c:52:eb:cf:39: a6:74:41:14:e1:2b:0e:e8:08:5d:8d:51:fb:bc:dd:2b:cd:0d: 9a:b2:de:3b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUF0CIcM6lStlI/55ooiPrS8039TkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTA3MDAwMDAwWhcNMjQwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYzY5ODc5NzA3ODQwNmI2YWI4MmJkYTIyY2EwZGFjYmY0 Y2VjODUzMzAwNjg5MGQyYjU2Nzk0NzFlZTA0Yzg5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+2i648Nmrs+Usm1TVn7dCV1u7aIinQ/llH6izWdPcxi9G JezuDPPY3xKDYck39WxIJmv60BUCPH5vaO+dXSJO/8mJlax3eCCn4rzqTC69QjP7 nFWQDa65HS90vBYIx8q2zRYCf95L4VZwV5ON3gZY4rso3ooSx9hkui8iaga4YPk0 6RjkiXg9JVilwRBZ/nXRljgIxYUQ3O4MbKyuq9Np4/XDli46BS0zhcH6wVP4LZRW 4+2htR59zQQZ5x0d6yD165oWVJNw1eXeEU4bDyaP+AnVbYfcCEheS0u3ZI81zU0x SqVedTqSop8NK3aiu/1dIlOcqEC8bCSh2xXexI61AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUCAheKUaSlj5ydrtz6Y/H7/uOcH8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2MDdlZjk0LTk4OGEtNDUzMS1hNGJmLWNkMDgxNGU4ODY1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjKzANBgkqhkiG9w0BAQsFAAOCAQEAHzND6Voy3nEde2Ca26ZAOLSTfrzE mBUL6xF9rSiOtrcnkOYjBMblLn1jfufQmHdrSp0D3lLnBWnsBwt7WOblWkNdzIdb yfAYIFnZ+3Y3ouSoKQcec27nKIiBJ6ER+cMLmXSTiJjLN5IUGBhf40nt9Djuylih ZUB7E177/yQH7usL8kUPrOy5kPLQ+nxuSnJNWvdCbL9TjixAJVY6wffQIojJ0Mpu +sB145uy05zX4cOcfGka7Hp01u8GA5ecf5qSLAqY9EFQIzgbQSOKFPljCQN+YPbN BqiMAcCiXU8AoMnnjfw6YhxS6885pnRBFOErDugIXY1R+7zdK80NmrLeOw== -----END CERTIFICATE-----Generated at Thu May 9 01:26:12 2024 by rpki-client on console-ams.rpki-client.org