$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47701c8b-e269-4cbd-a00d-601cd67f4694.roa File: 47701c8b-e269-4cbd-a00d-601cd67f4694.roa (raw, json) Hash identifier: LRyVwJZqvNBw4cAseVN4jqeyHBhNw47P8QEqABUe2VQ= Subject key identifier: 41:A8:08:70:94:D2:8C:C8:98:13:80:0D:2C:68:4F:B7:C8:7F:4F:4F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 62D6BBA344ED943ABDFFED6713D06782F2662116 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47701c8b-e269-4cbd-a00d-601cd67f4694.roa Signing time: Sat 13 Apr 2024 00:00:00 +0000 ROA not before: Sat 13 Apr 2024 00:00:00 +0000 ROA not after: Sat 18 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d6:bb:a3:44:ed:94:3a:bd:ff:ed:67:13:d0:67:82:f2:66:21:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 13 00:00:00 2024 GMT Not After : May 18 23:59:59 2024 GMT Subject: serialNumber=5ab718b6026de66a65fe6030c162a33c6e79afd2c4f3980d4d7d8626133faf83, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4e:90:70:7d:38:46:ec:50:f7:69:58:21:bf: 60:9e:a1:61:17:89:a6:c4:a5:61:76:96:b6:dd:09: d2:5c:91:ff:89:65:68:4a:31:32:40:dd:20:89:a4: f1:82:34:83:de:11:07:20:20:37:69:6d:e3:01:2f: 44:e0:ea:41:06:03:67:c4:da:b9:21:9c:2c:d6:2c: 00:54:bb:24:71:4d:77:5b:99:ca:7f:4c:ca:6c:9c: 9a:f0:df:c5:9b:97:28:56:c5:f5:0f:bf:98:e6:9d: fe:a2:f8:2d:eb:a6:9a:91:da:af:63:8a:9a:e4:63: da:34:90:e4:57:ed:fb:f9:61:3d:89:69:e4:da:77: c7:2d:5d:7f:4f:36:a7:63:2a:67:06:77:25:21:b5: a1:0b:e0:55:ae:36:1c:35:27:75:c2:02:f8:26:7c: 93:3c:d0:b4:0b:cd:05:1a:6f:12:d4:c6:92:ae:62: b0:f9:0f:f0:73:95:91:56:e5:da:91:bf:f8:2f:1a: 63:1d:89:78:f1:b2:03:32:01:71:cc:e3:9e:dc:d3: 1b:b7:86:a5:e1:a8:4c:74:c1:78:bc:3b:ab:5c:1c: 91:09:20:2e:7a:82:0e:68:13:57:83:dc:f2:d6:c8: af:7b:60:8d:db:68:b1:28:ad:31:80:60:5d:02:42: ee:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A8:08:70:94:D2:8C:C8:98:13:80:0D:2C:68:4F:B7:C8:7F:4F:4F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47701c8b-e269-4cbd-a00d-601cd67f4694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.96.0/19 Signature Algorithm: sha256WithRSAEncryption 68:0f:e4:bc:99:91:de:64:19:8e:ec:1a:5a:c7:36:56:06:00: 02:a4:65:1d:a6:b1:63:a1:7e:a8:65:71:7e:70:8b:93:6d:60: dd:9d:65:f8:0b:52:52:f8:eb:df:03:4e:8b:72:f0:2a:d3:ae: 16:61:2a:64:9c:8c:7c:06:ef:92:88:b8:0d:a4:48:1b:3d:80: 6e:4b:7b:38:a3:75:a7:bc:9d:61:65:e5:b2:b6:ce:48:4a:83: 1a:96:da:99:05:3b:07:bd:bd:4f:af:ab:da:9b:95:28:bb:85: d7:de:32:43:bb:8d:4b:50:c6:14:22:45:c3:f4:0c:87:aa:00: f0:79:30:bf:eb:da:1f:95:71:1d:51:38:50:b4:56:03:99:f0: a6:15:1b:92:9c:74:df:0f:d5:b8:84:88:b4:45:33:b3:e9:7e: e0:ad:49:c4:45:97:78:b8:54:c2:fb:87:03:9c:d3:b3:d9:c9: ef:2b:24:db:dd:76:c9:eb:df:e0:9c:92:d0:9a:5a:7e:31:05: 5c:eb:2c:7c:be:00:9e:1d:79:d8:3c:00:89:a0:c1:fd:8f:82: 87:ff:75:09:c1:ad:ed:18:a1:70:5a:ea:3c:41:4e:33:1b:58: 4b:e1:cb:fa:d5:4a:1e:ce:a1:8b:ad:68:37:e6:8e:16:6c:e4: b0:3b:b7:f8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYta7o0TtlDq9/+1nE9BngvJmIRYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEzMDAwMDAwWhcNMjQwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YWI3MThiNjAyNmRlNjZhNjVmZTYwMzBjMTYyYTMzYzZl NzlhZmQyYzRmMzk4MGQ0ZDdkODYyNjEzM2ZhZjgzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNTpBwfThG7FD3aVghv2CeoWEXiabEpWF2lrbdCdJckf+J ZWhKMTJA3SCJpPGCNIPeEQcgIDdpbeMBL0Tg6kEGA2fE2rkhnCzWLABUuyRxTXdb mcp/TMpsnJrw38WblyhWxfUPv5jmnf6i+C3rppqR2q9jiprkY9o0kORX7fv5YT2J aeTad8ctXX9PNqdjKmcGdyUhtaEL4FWuNhw1J3XCAvgmfJM80LQLzQUabxLUxpKu YrD5D/BzlZFW5dqRv/gvGmMdiXjxsgMyAXHM457c0xu3hqXhqEx0wXi8O6tcHJEJ IC56gg5oE1eD3PLWyK97YI3baLEorTGAYF0CQu5XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQagIcJTSjMiYE4ANLGhPt8h/T08wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ3NzAxYzhiLWUyNjktNGNiZC1hMDBkLTYwMWNkNjdmNDY5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXGKWAwDQYJKoZIhvcNAQELBQADggEBAGgP5LyZkd5kGY7sGlrHNlYGAAKk ZR2msWOhfqhlcX5wi5NtYN2dZfgLUlL4698DToty8CrTrhZhKmScjHwG75KIuA2k SBs9gG5Lezijdae8nWFl5bK2zkhKgxqW2pkFOwe9vU+vq9qblSi7hdfeMkO7jUtQ xhQiRcP0DIeqAPB5ML/r2h+VcR1ROFC0VgOZ8KYVG5KcdN8P1biEiLRFM7PpfuCt ScRFl3i4VML7hwOc07PZye8rJNvddsnr3+CcktCaWn4xBVzrLHy+AJ4dedg8AImg wf2Pgof/dQnBre0YoXBa6jxBTjMbWEvhy/rVSh7OoYutaDfmjhZs5LA7t/g= -----END CERTIFICATE-----Generated at Thu May 2 03:11:31 2024 by rpki-client on console-ams.rpki-client.org