$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e30a1db-2667-4c91-8632-1b39c260d2ac.roa File: 4e30a1db-2667-4c91-8632-1b39c260d2ac.roa (raw, json) Hash identifier: nJfAaz4HUGxDDNlXBRTjMUSZQxgm2dv1lyXWToV0tfg= Subject key identifier: F6:F6:31:07:EB:8F:19:39:5D:D7:C1:32:85:12:A5:6D:35:44:59:11 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1BFB6BCB54785E93410574E1446AE362F5E9FDD7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e30a1db-2667-4c91-8632-1b39c260d2ac.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 65.0.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:fb:6b:cb:54:78:5e:93:41:05:74:e1:44:6a:e3:62:f5:e9:fd:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=3d614729c42a9161da5ac50f9db224330c5e309af153d7c118c04e40f7685219, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:38:34:fa:db:5c:98:45:fc:83:50:4a:6a:be: 73:0f:af:a8:23:d7:20:86:9b:42:e3:48:fc:e6:bd: bd:35:55:a5:0c:5e:0a:4a:7d:6a:46:2d:92:a0:42: 09:b3:2e:9b:ec:89:f2:22:fb:5b:86:c8:0c:43:af: 40:55:40:0c:bd:2f:bd:bc:ba:01:5f:21:0c:55:6a: ef:9e:18:60:9c:8d:6a:23:ea:48:63:21:5d:ea:34: 37:fd:f7:f2:d4:25:21:91:17:71:49:93:94:e0:ab: f9:3e:f8:16:7c:e1:5d:05:6a:d4:9e:59:7b:94:3f: 5a:fe:05:ed:3d:65:a7:71:15:ea:89:04:bf:38:1a: 04:33:25:84:1f:0c:e0:28:af:6e:d5:c9:12:07:37: a9:a2:7c:e4:37:30:26:77:4a:cf:63:6d:9e:1b:04: fc:f0:b8:e3:c1:85:0f:6c:e7:d4:f2:cb:3b:6a:61: a0:e9:2c:3d:8b:86:7b:cf:0a:95:cb:70:e2:03:bd: f5:75:22:e1:d7:aa:76:15:93:33:ca:46:f2:83:98: e4:b4:a5:d4:54:c5:f0:3f:c7:1d:e3:d6:d7:b4:41: 4b:54:45:a2:49:4b:32:ad:f1:b2:47:27:4e:a9:c8: 6f:b5:96:27:34:3b:89:7d:6f:71:0a:da:fe:f9:17: a0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F6:31:07:EB:8F:19:39:5D:D7:C1:32:85:12:A5:6D:35:44:59:11 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e30a1db-2667-4c91-8632-1b39c260d2ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.0.0.0/14 Signature Algorithm: sha256WithRSAEncryption 3e:3f:46:21:47:db:19:7e:a6:c7:55:6d:ff:42:c0:a3:a8:b1: 95:49:a5:70:d1:e0:18:80:24:5d:d5:34:b4:a6:11:8a:23:d1: bd:b8:fc:a0:60:88:1b:97:47:84:f6:64:82:0d:2d:38:bc:29: c2:f4:95:6b:d9:f9:b4:b7:da:41:a0:4a:29:32:03:62:21:88: e9:73:5c:6a:7c:41:5a:7b:45:49:ca:b4:ee:e7:26:13:e1:da: 34:43:56:bf:de:42:ee:79:7c:81:81:20:8b:02:b9:af:72:6b: 2e:22:3e:27:eb:17:14:d8:ca:a6:a8:dc:f0:1f:94:ff:94:7b: f5:fc:4c:2f:e4:28:36:24:35:a8:b8:b2:9d:db:7c:c4:36:ce: 22:b7:e5:2d:9a:e7:4a:37:73:33:91:3e:32:2a:a1:77:db:ed: 8a:dc:90:1b:ed:9a:74:c9:62:a6:38:52:3b:b2:44:e7:48:2e: dc:15:f5:9e:f3:2b:2f:93:f1:58:40:c8:ad:1e:d2:2d:ba:ac: c1:4d:a3:43:72:cc:f2:b8:ef:1a:19:2d:ff:0c:77:3a:33:07: 85:98:39:bf:b2:79:a9:00:49:fe:a4:af:7f:79:92:ac:4f:aa: 94:64:14:5d:ec:42:13:9d:19:57:72:e6:69:c6:b0:78:c9:fd: 90:b6:30:4a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUG/try1R4XpNBBXThRGrjYvXp/dcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZDYxNDcyOWM0MmE5MTYxZGE1YWM1MGY5ZGIyMjQzMzBj NWUzMDlhZjE1M2Q3YzExOGMwNGU0MGY3Njg1MjE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFODT621yYRfyDUEpqvnMPr6gj1yCGm0LjSPzmvb01VaUM XgpKfWpGLZKgQgmzLpvsifIi+1uGyAxDr0BVQAy9L728ugFfIQxVau+eGGCcjWoj 6khjIV3qNDf99/LUJSGRF3FJk5Tgq/k++BZ84V0FatSeWXuUP1r+Be09ZadxFeqJ BL84GgQzJYQfDOAor27VyRIHN6mifOQ3MCZ3Ss9jbZ4bBPzwuOPBhQ9s59Tyyztq YaDpLD2LhnvPCpXLcOIDvfV1IuHXqnYVkzPKRvKDmOS0pdRUxfA/xx3j1te0QUtU RaJJSzKt8bJHJ06pyG+1lic0O4l9b3EK2v75F6AzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU9vYxB+uPGTld18EyhRKlbTVEWREwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRlMzBhMWRiLTI2NjctNGM5MS04NjMyLTFiMzljMjYwZDJhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwJBADANBgkqhkiG9w0BAQsFAAOCAQEAPj9GIUfbGX6mx1Vt/0LAo6ixlUml cNHgGIAkXdU0tKYRiiPRvbj8oGCIG5dHhPZkgg0tOLwpwvSVa9n5tLfaQaBKKTID YiGI6XNcanxBWntFScq07ucmE+HaNENWv95C7nl8gYEgiwK5r3JrLiI+J+sXFNjK pqjc8B+U/5R79fxML+QoNiQ1qLiyndt8xDbOIrflLZrnSjdzM5E+Miqhd9vtityQ G+2adMlipjhSO7JE50gu3BX1nvMrL5PxWEDIrR7SLbqswU2jQ3LM8rjvGhkt/wx3 OjMHhZg5v7J5qQBJ/qSvf3mSrE+qlGQUXexCE50ZV3LmacaweMn9kLYwSg== -----END CERTIFICATE-----Generated at Thu May 9 01:26:12 2024 by rpki-client on console-ams.rpki-client.org