$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/488b0c50-2499-4c71-b31c-5d61c8650f10.roa File: 488b0c50-2499-4c71-b31c-5d61c8650f10.roa (raw, json) Hash identifier: Wy0YJrynwUFntcvc4sSZvM29GRmNfA6o7ynnZ8HbuHg= Subject key identifier: 79:87:EC:8D:04:EC:DF:30:5D:E7:45:03:58:75:E2:61:71:17:4E:4F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 586BDEB854E89A35B1009BF6A5DCFD7CDFCED3D5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/488b0c50-2499-4c71-b31c-5d61c8650f10.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 135.22.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:6b:de:b8:54:e8:9a:35:b1:00:9b:f6:a5:dc:fd:7c:df:ce:d3:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=f1c79c992d33cdb45c2a2555dec35b2d7a69bbddba45fdb0f4573122957990d2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:82:03:35:90:95:ce:16:78:bc:25:c7:72: 2f:b4:ab:cb:77:c4:71:22:85:59:3b:3c:6a:b5:f4: 17:4d:d2:2b:52:13:e6:1f:b7:cf:78:14:5f:4f:c6: b1:c0:a7:dc:97:a3:48:60:37:90:34:8a:c1:99:40: 42:5c:df:98:c0:42:08:c8:a7:0d:44:09:17:e7:2b: c0:24:b6:94:e4:ec:59:8a:06:59:9b:95:7d:23:0a: 44:cf:d0:99:d9:71:fa:6c:38:38:7f:3b:50:73:1f: 78:a6:f7:52:71:a7:e0:69:68:9d:39:72:34:fa:50: ae:a6:20:5e:87:54:b3:a0:ab:70:e6:de:99:57:63: 7c:69:66:c2:a1:86:ec:d6:a2:78:56:1c:f3:80:4d: 96:32:50:f4:86:c5:a9:16:30:cf:01:0f:ab:dd:ae: 6a:6e:1c:27:2c:bc:b3:8d:67:0d:93:67:14:22:af: 8e:90:9d:fd:a1:5d:cd:5e:ce:42:d9:6c:26:76:78: 3d:a4:1f:e5:09:50:f7:cc:68:f1:d6:3c:3e:68:94: 75:f4:35:9f:90:13:48:a1:43:5e:67:0c:c7:9c:b8: f3:c6:a7:75:ef:29:be:19:93:7f:f5:e0:cc:b8:5f: 7f:b7:34:4a:97:bd:dd:dd:a0:ac:c3:0b:cf:87:3f: 1e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:87:EC:8D:04:EC:DF:30:5D:E7:45:03:58:75:E2:61:71:17:4E:4F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/488b0c50-2499-4c71-b31c-5d61c8650f10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.22.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8d:16:a0:7d:30:76:c4:dd:05:59:09:c7:23:07:09:45:00:be: c7:9e:84:00:a1:9d:70:81:2e:c2:b3:1d:f3:d1:2b:ab:c8:75: cd:0e:b8:4c:55:65:bb:e4:89:d4:87:ec:3c:e6:b2:37:71:c2: ef:ae:61:80:c2:e6:ce:9e:bf:1d:bf:2a:96:96:b3:0a:ce:a1: 2b:42:a6:ab:53:e9:23:02:94:55:8f:2f:23:5b:3c:01:f2:3d: b9:53:8a:aa:b2:04:79:09:d2:14:d3:a0:7e:46:50:a9:5d:28: a5:e3:d2:cd:fd:8a:53:a8:5d:05:76:95:a0:a3:7a:19:b8:5a: a4:f2:25:40:70:6c:a7:cf:5b:18:79:82:84:d1:84:56:e9:11: 23:df:09:40:1b:da:66:46:cb:62:b1:2f:b4:69:f4:00:c8:2c: a0:bb:5d:a5:22:ae:e0:9a:c9:6a:3d:06:73:57:28:86:22:d1: 45:9d:b2:bd:95:aa:ae:1e:e7:4f:6e:06:ff:4b:a9:4b:f2:a3: b6:3d:35:6d:4e:7c:78:67:5a:e1:46:0f:70:1c:71:19:52:1a: 98:35:a7:cb:f2:b1:56:ad:8c:f3:72:77:a0:ea:0c:f2:c6:93: 72:24:9d:99:df:b5:49:60:41:34:91:a3:26:46:58:2f:f7:96: 4c:d5:4e:20 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWGveuFTomjWxAJv2pdz9fN/O09UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMWM3OWM5OTJkMzNjZGI0NWMyYTI1NTVkZWMzNWIyZDdh NjliYmRkYmE0NWZkYjBmNDU3MzEyMjk1Nzk5MGQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDB3oIDNZCVzhZ4vCXHci+0q8t3xHEihVk7PGq19BdN0itS E+Yft894FF9PxrHAp9yXo0hgN5A0isGZQEJc35jAQgjIpw1ECRfnK8AktpTk7FmK BlmblX0jCkTP0JnZcfpsODh/O1BzH3im91Jxp+BpaJ05cjT6UK6mIF6HVLOgq3Dm 3plXY3xpZsKhhuzWonhWHPOATZYyUPSGxakWMM8BD6vdrmpuHCcsvLONZw2TZxQi r46Qnf2hXc1ezkLZbCZ2eD2kH+UJUPfMaPHWPD5olHX0NZ+QE0ihQ15nDMecuPPG p3XvKb4Zk3/14My4X3+3NEqXvd3doKzDC8+HPx47AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUeYfsjQTs3zBd50UDWHXiYXEXTk8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ4OGIwYzUwLTI0OTktNGM3MS1iMzFjLTVkNjFjODY1MGYxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCHFjANBgkqhkiG9w0BAQsFAAOCAQEAjRagfTB2xN0FWQnHIwcJRQC+x56E AKGdcIEuwrMd89Erq8h1zQ64TFVlu+SJ1IfsPOayN3HC765hgMLmzp6/Hb8qlpaz Cs6hK0Kmq1PpIwKUVY8vI1s8AfI9uVOKqrIEeQnSFNOgfkZQqV0opePSzf2KU6hd BXaVoKN6GbhapPIlQHBsp89bGHmChNGEVukRI98JQBvaZkbLYrEvtGn0AMgsoLtd pSKu4JrJaj0Gc1cohiLRRZ2yvZWqrh7nT24G/0upS/Kjtj01bU58eGda4UYPcBxx GVIamDWny/KxVq2M83J3oOoM8saTciSdmd+1SWBBNJGjJkZYL/eWTNVOIA== -----END CERTIFICATE-----Generated at Thu May 2 05:57:25 2024 by rpki-client on console-ams.rpki-client.org