$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56a7ef53-352e-4b7a-860f-8a7658f7afa1.roa File: 56a7ef53-352e-4b7a-860f-8a7658f7afa1.roa (raw, json) Hash identifier: 4lFyhNlXKGqtNyZxTLzMeOe6q/65BTikuDtqlyVUs1w= Subject key identifier: B6:63:EC:C8:05:0F:CA:0B:4D:98:86:2A:CE:47:3E:89:98:DA:BE:C8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 76E651D2026775042DAE3C7004839044B07CCA83 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56a7ef53-352e-4b7a-860f-8a7658f7afa1.roa Signing time: Wed 08 May 2024 00:00:00 +0000 ROA not before: Wed 08 May 2024 00:00:00 +0000 ROA not after: Wed 12 Jun 2024 23:59:59 +0000 asID: 8987 IP address blocks: 161.99.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e6:51:d2:02:67:75:04:2d:ae:3c:70:04:83:90:44:b0:7c:ca:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 00:00:00 2024 GMT Not After : Jun 12 23:59:59 2024 GMT Subject: serialNumber=b9e4de648b13ea2c5c9d7ddcdd061ea67fda680dabcdbb7fae4704b4aeff51dc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ec:10:3b:12:e7:f1:f6:f5:d3:2e:09:7a:3a: ce:fb:b7:66:f3:28:3c:45:a4:d2:a4:cc:0b:47:a2: eb:81:fd:ee:4c:ff:17:c0:c5:30:ad:b8:13:1d:cc: 25:ac:5f:99:29:e6:b4:65:28:73:fa:d0:c8:6b:ab: 8b:4f:88:2b:b2:7e:96:88:89:33:6e:ac:17:5b:88: 44:1c:50:0c:59:d3:cd:bb:1e:a1:f6:a0:80:ea:fd: 38:49:dd:69:26:f0:b2:ee:50:d7:d2:f6:9c:fb:8a: f9:a1:9d:36:7d:b5:43:3b:ed:0f:64:f3:14:ee:fe: 20:d2:ca:84:13:39:8b:a1:64:d1:d2:ce:20:15:fd: 03:7f:e0:de:7b:8a:3f:b8:6f:ec:b4:a0:45:37:0d: e8:af:29:ee:61:ac:52:92:07:48:af:4f:e6:a9:b8: 80:67:40:2a:7c:34:b3:e7:ac:ce:f8:67:00:9b:b2: 3d:f5:56:fc:2f:d0:c4:45:15:a6:9a:72:6a:0f:b4: f6:4e:fc:f0:81:d3:cc:1d:f6:1e:5e:a0:4d:fa:c8: ab:06:75:ce:5d:62:a7:b4:b1:b3:a3:73:86:e6:4d: 2d:f1:15:c8:76:56:e0:b6:f3:ac:4c:f9:a5:18:cd: 61:5a:24:c3:72:bd:a8:e9:f2:24:a4:4d:ed:ff:d4: 76:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:63:EC:C8:05:0F:CA:0B:4D:98:86:2A:CE:47:3E:89:98:DA:BE:C8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56a7ef53-352e-4b7a-860f-8a7658f7afa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.99.128.0/17 Signature Algorithm: sha256WithRSAEncryption 70:eb:26:57:4e:08:46:c0:8c:33:19:76:4f:95:c4:32:49:a2: b0:7e:45:5e:5e:35:6e:f2:c6:da:9f:68:0c:bf:31:3c:9a:2e: 89:6b:33:d7:54:19:43:42:31:ac:9e:20:d3:62:ca:61:6f:1c: 56:6d:ba:a3:18:6e:27:7e:1d:a3:68:6a:91:c2:c6:dd:0d:56: ac:84:55:75:fa:7c:16:4f:50:63:1f:23:1a:51:68:e3:73:4c: 22:7f:38:1e:79:c7:6c:c0:01:16:c9:a8:2e:9c:39:e1:80:cc: 23:1f:32:e5:ae:9e:e4:ad:a5:26:56:b5:f4:f3:96:ee:22:55: 5c:46:7c:9e:85:49:39:bd:6a:b5:c4:39:2e:f3:ca:f6:d5:8d: d1:ab:37:e8:4d:49:75:84:69:a3:9b:2b:da:f1:8d:4e:7c:ae: b4:89:ab:bc:ec:d5:25:da:ef:cf:86:6d:2a:5e:16:8b:90:78: fe:c5:75:80:dc:aa:0e:ba:c8:a7:c7:ae:f0:6d:94:b0:61:63: 2f:f7:69:fe:42:91:38:6f:eb:a1:fc:6d:eb:0c:50:d6:2a:7c: 54:8c:65:da:53:b9:7b:48:15:67:6b:c3:fb:55:3c:bf:d2:f8: 6f:3b:cd:53:9f:dd:59:8f:4c:aa:e9:49:60:cb:67:ea:db:28: 0d:9b:22:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUduZR0gJndQQtrjxwBIOQRLB8yoMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTA4MDAwMDAwWhcNMjQwNjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiOWU0ZGU2NDhiMTNlYTJjNWM5ZDdkZGNkZDA2MWVhNjdm ZGE2ODBkYWJjZGJiN2ZhZTQ3MDRiNGFlZmY1MWRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE7BA7Eufx9vXTLgl6Os77t2bzKDxFpNKkzAtHouuB/e5M /xfAxTCtuBMdzCWsX5kp5rRlKHP60Mhrq4tPiCuyfpaIiTNurBdbiEQcUAxZ0827 HqH2oIDq/ThJ3Wkm8LLuUNfS9pz7ivmhnTZ9tUM77Q9k8xTu/iDSyoQTOYuhZNHS ziAV/QN/4N57ij+4b+y0oEU3DeivKe5hrFKSB0ivT+apuIBnQCp8NLPnrM74ZwCb sj31Vvwv0MRFFaaacmoPtPZO/PCB08wd9h5eoE36yKsGdc5dYqe0sbOjc4bmTS3x Fch2VuC286xM+aUYzWFaJMNyvajp8iSkTe3/1HZDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtmPsyAUPygtNmIYqzkc+iZjavsgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU2YTdlZjUzLTM1MmUtNGI3YS04NjBmLThhNzY1OGY3YWZhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAehY4AwDQYJKoZIhvcNAQELBQADggEBAHDrJldOCEbAjDMZdk+VxDJJorB+ RV5eNW7yxtqfaAy/MTyaLolrM9dUGUNCMayeINNiymFvHFZtuqMYbid+HaNoapHC xt0NVqyEVXX6fBZPUGMfIxpRaONzTCJ/OB55x2zAARbJqC6cOeGAzCMfMuWunuSt pSZWtfTzlu4iVVxGfJ6FSTm9arXEOS7zyvbVjdGrN+hNSXWEaaObK9rxjU58rrSJ q7zs1SXa78+GbSpeFouQeP7FdYDcqg66yKfHrvBtlLBhYy/3af5CkThv66H8besM UNYqfFSMZdpTuXtIFWdrw/tVPL/S+G87zVOf3VmPTKrpSWDLZ+rbKA2bIiY= -----END CERTIFICATE-----Generated at Thu May 9 15:19:32 2024 by rpki-client on console-fra.rpki-client.org