$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d7b766e-899c-4b48-9903-40dfd15b6e72.roa File: 5d7b766e-899c-4b48-9903-40dfd15b6e72.roa (raw, json) Hash identifier: xelQhGgI4M+jBqKCVQNNWdMkdOcTVxIHUZe5fiDdPso= Subject key identifier: AA:AD:28:C6:7E:0C:62:13:A1:66:57:FB:CE:DC:13:6E:7F:23:7F:22 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4BE57712D5E69E2D9F1015FE7711003C46C02E1B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d7b766e-899c-4b48-9903-40dfd15b6e72.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 149.180.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e5:77:12:d5:e6:9e:2d:9f:10:15:fe:77:11:00:3c:46:c0:2e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=69117060cab385fef7092cdd1d98fa7d47339ca707efe9eaacdc5621190189af, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9d:53:8c:05:01:b4:a8:55:c2:f5:50:88:6d: a2:00:20:0f:8a:33:2b:57:71:bc:e4:01:36:20:bd: 44:93:39:ce:14:c6:ab:b9:de:42:10:ca:63:49:69: 88:e4:55:82:11:c4:11:7c:09:b5:00:bb:5f:00:66: 06:6e:0c:57:11:48:7b:56:90:f8:6e:ef:3f:ca:7b: 89:70:68:fc:55:82:55:da:ad:05:85:be:2a:85:86: 45:bb:3a:c3:79:17:71:f8:84:4d:24:b7:6c:90:1a: c1:3f:74:21:56:ab:55:0f:bc:b0:16:d2:58:5b:ff: 39:55:66:d2:1d:5d:44:f5:cd:70:d2:4e:a6:dc:ed: f2:ed:83:5a:84:7e:03:40:98:21:8b:2e:9f:3a:62: f1:81:c8:a1:27:a9:bb:6e:bd:09:7c:1e:a8:64:3c: 1d:b1:db:ab:84:6f:ba:32:e0:cd:09:5d:5c:2b:ee: ce:48:d2:5f:04:11:d6:98:fa:9c:62:82:70:35:df: 4d:39:5c:e8:b0:b7:71:cd:24:52:83:2b:69:42:93: 34:68:38:91:fc:85:0b:8e:96:c3:b1:2c:16:f0:97: 0b:a5:9d:e3:bc:58:eb:93:ec:64:32:31:c0:f2:6c: 3b:26:74:69:a2:11:7d:b8:56:d3:8b:91:1c:41:ce: 6b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AD:28:C6:7E:0C:62:13:A1:66:57:FB:CE:DC:13:6E:7F:23:7F:22 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d7b766e-899c-4b48-9903-40dfd15b6e72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.180.0.0/17 Signature Algorithm: sha256WithRSAEncryption 4a:cc:85:a3:03:bd:38:60:a2:ae:9e:84:88:50:1b:c0:a4:8e: 03:08:39:3d:ee:a5:7a:90:1e:60:71:24:05:df:41:6a:df:59: 8a:47:f8:48:df:c8:3a:f8:87:3d:a3:c9:7f:4d:80:a6:b7:f4: ce:ec:ae:24:cd:d2:2b:85:75:9c:4f:83:f3:86:1d:b3:8c:e3: 4a:71:7c:0a:ab:4f:de:33:be:13:c8:97:4c:e3:72:aa:8f:f8: ce:c5:91:a5:59:9a:44:cc:ba:8b:25:4e:ab:5e:43:ce:b4:17: d3:57:d5:21:2c:ec:54:5f:52:35:69:88:c2:5f:52:59:ad:d0: 9d:9a:e7:66:d2:3b:37:8e:a8:97:d4:9d:94:77:73:86:22:70: 83:63:95:88:f8:ea:01:a1:5e:cc:70:9f:13:7e:9b:50:9a:76: d6:77:a6:00:1f:45:cc:09:39:ea:64:40:12:76:cb:13:e6:43: c4:ed:62:4a:ca:c3:10:80:09:d0:bc:b2:ec:9f:73:3e:0b:a9: b5:2c:89:ff:a2:4b:5a:f1:72:d0:66:99:77:18:79:e6:21:aa: c5:30:17:36:c3:50:50:69:3f:0e:ba:7f:ae:03:85:6a:ea:a7: e7:6e:8b:c0:14:df:0e:fd:82:34:ab:36:22:11:59:5d:b3:14: 35:c0:76:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS+V3EtXmni2fEBX+dxEAPEbALhswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTExNzA2MGNhYjM4NWZlZjcwOTJjZGQxZDk4ZmE3ZDQ3 MzM5Y2E3MDdlZmU5ZWFhY2RjNTYyMTE5MDE4OWFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKnVOMBQG0qFXC9VCIbaIAIA+KMytXcbzkATYgvUSTOc4U xqu53kIQymNJaYjkVYIRxBF8CbUAu18AZgZuDFcRSHtWkPhu7z/Ke4lwaPxVglXa rQWFviqFhkW7OsN5F3H4hE0kt2yQGsE/dCFWq1UPvLAW0lhb/zlVZtIdXUT1zXDS Tqbc7fLtg1qEfgNAmCGLLp86YvGByKEnqbtuvQl8HqhkPB2x26uEb7oy4M0JXVwr 7s5I0l8EEdaY+pxignA13005XOiwt3HNJFKDK2lCkzRoOJH8hQuOlsOxLBbwlwul neO8WOuT7GQyMcDybDsmdGmiEX24VtOLkRxBzmv/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqq0oxn4MYhOhZlf7ztwTbn8jfyIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVkN2I3NjZlLTg5OWMtNGI0OC05OTAzLTQwZGZkMTViNmU3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeVtAAwDQYJKoZIhvcNAQELBQADggEBAErMhaMDvThgoq6ehIhQG8CkjgMI OT3upXqQHmBxJAXfQWrfWYpH+EjfyDr4hz2jyX9NgKa39M7sriTN0iuFdZxPg/OG HbOM40pxfAqrT94zvhPIl0zjcqqP+M7FkaVZmkTMuoslTqteQ860F9NX1SEs7FRf UjVpiMJfUlmt0J2a52bSOzeOqJfUnZR3c4YicINjlYj46gGhXsxwnxN+m1CadtZ3 pgAfRcwJOepkQBJ2yxPmQ8TtYkrKwxCACdC8suyfcz4LqbUsif+iS1rxctBmmXcY eeYhqsUwFzbDUFBpPw66f64DhWrqp+dui8AU3w79gjSrNiIRWV2zFDXAdi8= -----END CERTIFICATE-----Generated at Thu May 9 01:26:14 2024 by rpki-client on console-ams.rpki-client.org