$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/477773fa-f3e7-4272-9b64-ee0d3bacab6d.roa File: 477773fa-f3e7-4272-9b64-ee0d3bacab6d.roa (raw, json) Hash identifier: m9xzK77Fhnfx/h786eIfPG10yLhM/UZ0mLQ4bzj9ra8= Subject key identifier: CA:DA:6C:C1:86:8A:86:3B:AA:F1:D5:3E:83:12:20:91:B1:BE:9D:C7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4F9BC80D98681254E5BA918004C2ACECBCFD311B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/477773fa-f3e7-4272-9b64-ee0d3bacab6d.roa Signing time: Sat 20 Apr 2024 00:00:00 +0000 ROA not before: Sat 20 Apr 2024 00:00:00 +0000 ROA not after: Sat 25 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 104.227.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:9b:c8:0d:98:68:12:54:e5:ba:91:80:04:c2:ac:ec:bc:fd:31:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 20 00:00:00 2024 GMT Not After : May 25 23:59:59 2024 GMT Subject: serialNumber=15379a6d3038c2cd918762f51119bf369555ea59aa8f7d236dde3a25c1229c68, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ba:f0:cc:3e:43:0d:52:b8:17:8f:d7:22:de: a2:82:2f:3e:68:6a:94:26:2b:c8:54:c9:eb:76:33: 6f:eb:1c:97:16:34:e9:76:f9:bb:77:94:d2:b6:00: cb:41:4f:f3:e6:09:07:72:35:d9:f0:30:11:58:04: 69:3d:c9:6c:fe:99:7e:54:33:81:f3:ef:25:30:ec: 68:b6:ae:4c:ca:01:76:c2:be:08:b1:49:9b:a4:61: 8d:0c:ee:96:6d:fe:da:18:9e:b0:2a:1c:a8:6a:70: f3:5b:bd:c9:a9:c2:86:3d:28:2b:3f:48:29:21:09: 44:7c:df:17:e7:88:70:bb:09:e6:2b:9e:7f:93:9c: 37:26:65:19:5e:81:58:55:85:4a:06:96:4e:d3:71: 1f:0e:37:d5:aa:2a:65:01:95:07:88:b1:a0:9c:56: 0e:42:b4:69:50:a2:b4:b9:5c:02:1d:48:81:da:4f: 86:42:b1:f5:48:99:d6:8b:51:e2:33:6c:16:a3:2d: 90:23:c0:5a:b3:98:65:c2:d5:84:33:fc:0d:ff:04: 9e:55:5f:80:77:84:ca:9e:ef:04:36:59:36:47:b7: a0:50:0e:a6:48:d2:b1:b1:42:12:d4:9b:93:f0:68: ca:69:59:a5:bc:d6:57:2c:ed:bc:80:3c:13:00:e5: a2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DA:6C:C1:86:8A:86:3B:AA:F1:D5:3E:83:12:20:91:B1:BE:9D:C7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/477773fa-f3e7-4272-9b64-ee0d3bacab6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.227.0.0/16 Signature Algorithm: sha256WithRSAEncryption 43:34:0e:65:7f:85:fa:e1:62:28:72:c5:d0:5a:49:5c:e6:0d: 4c:82:e7:3f:da:f0:5b:5a:16:65:9d:9f:2e:ef:b3:01:2f:e2: 2d:1e:b4:90:12:7d:5e:dc:76:14:53:52:fd:a5:95:e3:47:c3: 3d:51:cd:9c:a8:63:24:92:41:cd:40:db:d0:32:61:51:20:49: fe:c9:d9:42:bb:f7:c5:6f:2a:f9:b1:02:19:dd:00:e7:3e:ee: 3b:79:83:99:7f:37:a1:c7:88:58:95:b4:c0:7a:7d:ba:91:05: 89:2a:62:07:96:2f:22:16:84:04:75:b7:71:44:c8:6f:77:c1: 24:b9:50:36:98:76:28:05:62:de:a6:49:42:3e:1b:c8:c4:23: bb:0c:28:dc:e2:17:3b:0d:f1:1f:2b:e2:ac:89:56:e2:f1:27: 15:21:96:95:a0:38:c1:63:19:5a:0e:b1:51:a0:e9:86:81:3d: 60:30:3b:49:8d:05:75:e5:5e:53:94:01:b3:96:d8:8d:5f:d2: ff:9c:fd:d1:d7:ec:17:b4:97:0b:61:e1:30:37:58:64:cd:11: 4b:9d:38:e5:7b:19:d1:9b:79:12:df:49:61:b4:6a:5a:33:60: f2:e6:73:0c:be:2b:b0:82:ab:e2:5f:51:dd:24:40:73:e9:a5: 79:86:fd:4a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUT5vIDZhoElTlupGABMKs7Lz9MRswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDIwMDAwMDAwWhcNMjQwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTM3OWE2ZDMwMzhjMmNkOTE4NzYyZjUxMTE5YmYzNjk1 NTVlYTU5YWE4ZjdkMjM2ZGRlM2EyNWMxMjI5YzY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6uvDMPkMNUrgXj9ci3qKCLz5oapQmK8hUyet2M2/rHJcW NOl2+bt3lNK2AMtBT/PmCQdyNdnwMBFYBGk9yWz+mX5UM4Hz7yUw7Gi2rkzKAXbC vgixSZukYY0M7pZt/toYnrAqHKhqcPNbvcmpwoY9KCs/SCkhCUR83xfniHC7CeYr nn+TnDcmZRlegVhVhUoGlk7TcR8ON9WqKmUBlQeIsaCcVg5CtGlQorS5XAIdSIHa T4ZCsfVImdaLUeIzbBajLZAjwFqzmGXC1YQz/A3/BJ5VX4B3hMqe7wQ2WTZHt6BQ DqZI0rGxQhLUm5PwaMppWaW81lcs7byAPBMA5aJ3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUytpswYaKhjuq8dU+gxIgkbG+nccwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ3Nzc3M2ZhLWYzZTctNDI3Mi05YjY0LWVlMGQzYmFjYWI2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBo4zANBgkqhkiG9w0BAQsFAAOCAQEAQzQOZX+F+uFiKHLF0FpJXOYNTILn P9rwW1oWZZ2fLu+zAS/iLR60kBJ9Xtx2FFNS/aWV40fDPVHNnKhjJJJBzUDb0DJh USBJ/snZQrv3xW8q+bECGd0A5z7uO3mDmX83oceIWJW0wHp9upEFiSpiB5YvIhaE BHW3cUTIb3fBJLlQNph2KAVi3qZJQj4byMQjuwwo3OIXOw3xHyvirIlW4vEnFSGW laA4wWMZWg6xUaDphoE9YDA7SY0FdeVeU5QBs5bYjV/S/5z90dfsF7SXC2HhMDdY ZM0RS5045XsZ0Zt5Et9JYbRqWjNg8uZzDL4rsIKr4l9R3SRAc+mleYb9Sg== -----END CERTIFICATE-----Generated at Fri May 3 00:47:21 2024 by rpki-client on console-ams.rpki-client.org