$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5103203d-6ffb-43e0-a728-842a5a759c4a.roa File: 5103203d-6ffb-43e0-a728-842a5a759c4a.roa (raw, json) Hash identifier: jfP9YRtxwQrpcg/rEsOTo4kAqIaOHqK+bWuGajceQP8= Subject key identifier: DC:C6:E7:04:5F:75:6F:F8:E0:04:87:A0:44:D1:56:DF:CE:BA:2B:46 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 28DFF97BBCC68CDE4474122164BF608DB9CD3C34 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5103203d-6ffb-43e0-a728-842a5a759c4a.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 70.240.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:df:f9:7b:bc:c6:8c:de:44:74:12:21:64:bf:60:8d:b9:cd:3c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=edb59c42e87d615f17f2c85cb1c932feadd23b0df25602ac9477e4bd4b0c9cae, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:09:2a:ce:d3:a3:3e:f8:d8:55:fe:3f:db:2e: e2:25:6a:d7:e5:15:0f:f8:31:c5:f5:d7:d3:6e:67: af:c3:7a:84:e2:18:d8:81:7f:9b:f3:04:df:a4:71: f8:cf:ca:96:dd:f8:03:78:6c:46:79:31:4e:1b:de: 1a:21:87:74:8f:76:d8:50:5a:86:63:89:3e:6e:5e: 7d:49:bd:50:bf:e8:d2:40:a5:77:1b:f2:13:30:2d: 40:42:8e:12:a8:01:e4:63:5f:bd:d2:8a:3e:ca:55: 55:f1:be:cb:49:64:47:1d:f3:24:42:09:fd:71:ed: 0d:23:d9:8a:22:c6:0e:1e:72:af:b6:81:36:4d:01: 97:a7:9e:dd:22:d1:e4:1f:44:c6:55:dd:73:20:b6: 3b:62:c2:8c:34:97:27:0a:e0:b1:51:f4:d6:c9:e5: 59:e4:3c:e1:a1:2d:ff:b3:80:94:5f:91:fe:39:15: 95:93:02:8c:f3:bd:99:52:c1:3d:91:0f:29:66:c1: 39:ab:da:3b:a1:8e:40:80:7b:23:94:b1:6d:eb:7f: 1a:2e:13:e6:6d:1e:a1:f3:84:a7:ed:0a:46:d1:30: 19:a7:7b:c4:62:85:f7:d0:7b:16:9b:01:04:1c:2e: d8:7d:05:fa:d1:ea:4e:31:84:16:7d:f4:6b:83:2e: d3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C6:E7:04:5F:75:6F:F8:E0:04:87:A0:44:D1:56:DF:CE:BA:2B:46 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5103203d-6ffb-43e0-a728-842a5a759c4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.240.64.0/18 Signature Algorithm: sha256WithRSAEncryption 9a:a9:54:dd:d8:91:c9:a2:64:e8:98:32:e2:e5:1c:b3:3e:1b: d5:21:2c:a9:cf:33:63:1e:df:91:9b:36:e5:a1:c7:9c:71:40: 01:79:75:c4:41:e8:7e:0f:da:98:58:52:5f:70:6a:38:25:38: 00:fc:e1:8d:b1:6d:b1:90:b6:3d:ec:47:58:70:ec:46:40:f0: 17:5c:5b:45:21:5d:38:65:b7:68:58:c8:c8:51:5b:11:fe:a1: 42:46:4e:95:05:75:d2:91:e4:45:1b:10:ac:76:64:a7:c1:09: 75:71:43:cd:da:5f:ca:16:84:ae:35:1c:cf:d0:b4:11:8f:6e: 8d:dc:e2:ef:20:de:b9:2a:cd:a7:ef:a9:b3:27:e9:83:65:70: 0d:94:8f:f7:44:9a:3a:62:4d:b4:59:7a:72:53:76:24:05:b8: 76:f5:4a:ef:27:ef:0e:6f:f8:94:a4:88:e6:d1:96:a3:7b:68: a1:bf:16:74:c2:36:58:07:40:a3:92:eb:05:f5:42:80:8f:f3: de:c1:5d:a2:76:85:6f:41:bd:9f:59:56:96:61:d4:02:62:d6: 38:77:1b:61:6e:4b:db:e9:17:24:66:73:d7:97:68:07:d1:7a: 6a:03:1b:45:73:f1:c6:5d:69:5e:43:4d:71:3f:3b:cc:12:d4: 41:a5:f7:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKN/5e7zGjN5EdBIhZL9gjbnNPDQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZGI1OWM0MmU4N2Q2MTVmMTdmMmM4NWNiMWM5MzJmZWFk ZDIzYjBkZjI1NjAyYWM5NDc3ZTRiZDRiMGM5Y2FlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdCSrO06M++NhV/j/bLuIlatflFQ/4McX119NuZ6/DeoTi GNiBf5vzBN+kcfjPypbd+AN4bEZ5MU4b3hohh3SPdthQWoZjiT5uXn1JvVC/6NJA pXcb8hMwLUBCjhKoAeRjX73Sij7KVVXxvstJZEcd8yRCCf1x7Q0j2Yoixg4ecq+2 gTZNAZennt0i0eQfRMZV3XMgtjtiwow0lycK4LFR9NbJ5VnkPOGhLf+zgJRfkf45 FZWTAozzvZlSwT2RDylmwTmr2juhjkCAeyOUsW3rfxouE+ZtHqHzhKftCkbRMBmn e8RihffQexabAQQcLth9BfrR6k4xhBZ99GuDLtP1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3MbnBF91b/jgBIegRNFW3866K0YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUxMDMyMDNkLTZmZmItNDNlMC1hNzI4LTg0MmE1YTc1OWM0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZG8EAwDQYJKoZIhvcNAQELBQADggEBAJqpVN3YkcmiZOiYMuLlHLM+G9Uh LKnPM2Me35GbNuWhx5xxQAF5dcRB6H4P2phYUl9wajglOAD84Y2xbbGQtj3sR1hw 7EZA8BdcW0UhXThlt2hYyMhRWxH+oUJGTpUFddKR5EUbEKx2ZKfBCXVxQ83aX8oW hK41HM/QtBGPbo3c4u8g3rkqzafvqbMn6YNlcA2Uj/dEmjpiTbRZenJTdiQFuHb1 Su8n7w5v+JSkiObRlqN7aKG/FnTCNlgHQKOS6wX1QoCP897BXaJ2hW9BvZ9ZVpZh 1AJi1jh3G2FuS9vpFyRmc9eXaAfRemoDG0Vz8cZdaV5DTXE/O8wS1EGl9/A= -----END CERTIFICATE-----Generated at Thu May 9 01:26:13 2024 by rpki-client on console-ams.rpki-client.org