$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5088ec7d-cc64-426a-9c07-9fd38b7f9a3a.roa File: 5088ec7d-cc64-426a-9c07-9fd38b7f9a3a.roa (raw, json) Hash identifier: NTh9/RA7fUpOkO+pjtstGfdJSpeEsFdnVT0rhCf26kU= Subject key identifier: E5:70:6B:61:3E:CD:CA:55:60:B9:58:79:B1:E0:D8:49:5F:A9:D3:64 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1994FDF7875DA1DD8F7339326A769F60C3543F94 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5088ec7d-cc64-426a-9c07-9fd38b7f9a3a.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 76.223.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:94:fd:f7:87:5d:a1:dd:8f:73:39:32:6a:76:9f:60:c3:54:3f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=6a5520522d368e7e1604847f7bb65cf9990de4938f8acc7ad2b84f35bc27ba56, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:21:98:13:0f:cf:62:ef:99:51:42:4d:bc:e8: c7:e1:0a:c1:04:cf:f6:4a:19:f6:8f:bf:62:3e:f9: 83:d1:b2:e0:74:ee:68:34:c7:f8:5b:6a:86:0a:88: f2:a7:66:2d:c3:90:64:87:bb:27:47:e9:c9:20:9c: 43:e1:ce:e1:92:d7:0a:ed:70:c8:a9:8b:57:94:69: 60:d8:cc:22:95:df:fa:85:df:88:51:b4:fa:62:04: 9f:a7:1e:89:95:c1:cf:f1:0e:fe:d5:4e:1e:1a:36: 43:f8:b8:f5:0c:be:c5:e5:6b:68:0a:7d:0e:5e:69: 6e:b5:00:de:0e:31:c2:94:b9:3a:f4:4d:60:40:25: 71:57:82:eb:a6:1a:b0:32:9c:e2:b4:50:e1:05:33: 1d:93:b2:d6:4f:4d:b2:6c:85:f3:df:46:cf:bd:a6: a8:8d:79:85:b2:4f:3c:4e:21:cf:6f:58:ad:3e:bb: 9b:42:a9:7a:5a:f1:57:8f:04:41:1c:a0:6f:af:6c: 26:8f:98:ce:67:3e:78:72:da:7d:0a:bd:a8:16:40: 3f:d6:b6:2b:38:5c:3b:f7:77:46:ec:ff:63:cf:27: ae:1a:1d:73:fa:f0:59:40:c6:ac:fb:ae:0e:c0:ed: e9:63:b5:08:9b:57:4d:2d:f2:ec:6a:f5:fb:5f:37: 13:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:70:6B:61:3E:CD:CA:55:60:B9:58:79:B1:E0:D8:49:5F:A9:D3:64 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5088ec7d-cc64-426a-9c07-9fd38b7f9a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.160.0/21 Signature Algorithm: sha256WithRSAEncryption ae:97:31:fd:95:d3:e7:49:14:55:8a:3b:09:e7:cf:83:8a:75: b9:56:67:67:79:53:54:56:2a:f3:80:2a:44:1b:5d:10:2d:9c: 3c:88:2c:a8:f3:f5:13:0d:41:95:92:8b:85:b9:44:8b:0c:34: f6:1a:d1:ce:2d:0a:a0:a4:b9:6f:96:e1:76:d6:a2:bc:d3:28: 71:21:d1:91:0c:d3:48:a5:87:aa:f4:55:fc:51:49:c3:5f:50: e3:1b:2b:0f:92:24:16:e4:5c:f7:37:ad:2b:27:1d:c5:b2:b3: 9b:78:48:42:e1:3a:63:17:46:ac:12:60:89:dc:84:2b:c6:fd: 97:1a:48:a7:ac:23:32:c9:29:95:ed:c5:ac:0f:f9:71:be:4f: cb:5b:6f:11:eb:6c:45:54:c5:53:4c:2d:5b:8f:d8:c0:bc:a7: 44:6c:39:25:e1:e1:57:70:56:bd:b0:01:61:58:ff:af:38:f4: 5b:db:56:e1:2c:52:64:83:a9:bb:66:e9:c7:0f:27:1a:d0:f4: 02:30:d3:b8:f3:c0:bc:3c:e9:fe:c3:94:db:0d:47:58:95:bd: e1:25:70:ad:6c:73:b9:82:fd:14:84:a9:12:20:b6:c3:39:6b: 5d:4c:c8:7a:a4:14:1d:ff:2e:43:c2:13:78:b0:93:a9:6d:e5: 64:c9:55:be -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGZT994ddod2PczkyanafYMNUP5QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YTU1MjA1MjJkMzY4ZTdlMTYwNDg0N2Y3YmI2NWNmOTk5 MGRlNDkzOGY4YWNjN2FkMmI4NGYzNWJjMjdiYTU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXIZgTD89i75lRQk286MfhCsEEz/ZKGfaPv2I++YPRsuB0 7mg0x/hbaoYKiPKnZi3DkGSHuydH6ckgnEPhzuGS1wrtcMipi1eUaWDYzCKV3/qF 34hRtPpiBJ+nHomVwc/xDv7VTh4aNkP4uPUMvsXla2gKfQ5eaW61AN4OMcKUuTr0 TWBAJXFXguumGrAynOK0UOEFMx2TstZPTbJshfPfRs+9pqiNeYWyTzxOIc9vWK0+ u5tCqXpa8VePBEEcoG+vbCaPmM5nPnhy2n0KvagWQD/Wtis4XDv3d0bs/2PPJ64a HXP68FlAxqz7rg7A7eljtQibV00t8uxq9ftfNxNBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5XBrYT7NylVguVh5seDYSV+p02QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUwODhlYzdkLWNjNjQtNDI2YS05YzA3LTlmZDM4YjdmOWEzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANM36AwDQYJKoZIhvcNAQELBQADggEBAK6XMf2V0+dJFFWKOwnnz4OKdblW Z2d5U1RWKvOAKkQbXRAtnDyILKjz9RMNQZWSi4W5RIsMNPYa0c4tCqCkuW+W4XbW orzTKHEh0ZEM00ilh6r0VfxRScNfUOMbKw+SJBbkXPc3rSsnHcWys5t4SELhOmMX RqwSYInchCvG/ZcaSKesIzLJKZXtxawP+XG+T8tbbxHrbEVUxVNMLVuP2MC8p0Rs OSXh4VdwVr2wAWFY/6849FvbVuEsUmSDqbtm6ccPJxrQ9AIw07jzwLw86f7DlNsN R1iVveElcK1sc7mC/RSEqRIgtsM5a11MyHqkFB3/LkPCE3iwk6lt5WTJVb4= -----END CERTIFICATE-----Generated at Thu May 9 17:46:46 2024 by rpki-client on console-ams.rpki-client.org