$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e989a3c-6316-412a-a304-1a759390ec3b.roa File: 5e989a3c-6316-412a-a304-1a759390ec3b.roa (raw, json) Hash identifier: ueLGQ5ppXEL+KKN9UjYK0NsmIpLT0vdZVsUJa7rsgQc= Subject key identifier: 4D:2A:67:CE:52:39:91:C4:ED:21:31:B6:5E:64:39:26:EC:B9:52:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4AA8D8AC63CD9ECA8EB662C893DAAE5078FC78AB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e989a3c-6316-412a-a304-1a759390ec3b.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 170.26.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a8:d8:ac:63:cd:9e:ca:8e:b6:62:c8:93:da:ae:50:78:fc:78:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=d0843031ed221e7bdbcacbc9b830b8e7ebc436db8af1d3ab214b19a1311dcd44, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:39:dc:c9:23:cd:cd:17:ae:7c:22:94:f1:2c: 36:ce:4b:4b:cc:d9:3d:16:20:75:cf:d4:90:96:af: 1f:13:67:f5:e6:3c:54:42:10:44:39:1e:fa:d9:61: b5:dc:90:8e:2f:2c:10:64:42:ab:f5:72:5a:41:14: 03:6c:d6:b5:24:8a:88:5a:9c:12:13:55:cb:f8:5a: ff:99:62:09:e0:5a:51:be:40:27:d3:1a:53:67:82: 1c:94:25:cd:42:31:2a:82:ef:c2:26:5d:6d:da:05: 59:32:f8:96:35:ad:cf:50:1e:a8:b2:2b:36:6e:ac: 08:f9:13:27:7f:ed:fa:ad:d4:90:10:6c:78:61:63: 6a:fe:3e:cb:ea:69:fe:08:c1:71:a7:be:ef:53:df: e6:59:0b:f4:9a:ca:bb:4f:c6:fb:d6:34:41:2e:40: cf:7a:b3:d2:87:04:d8:89:bb:5d:c2:81:01:c1:86: 67:90:9f:77:a7:95:a1:06:8c:91:3c:1c:d0:01:27: e8:e7:be:81:9f:7a:18:ca:b1:a8:6e:34:7d:dc:04: 49:08:27:6b:8e:79:4d:5c:c9:38:18:1b:66:ea:d2: 6a:09:48:db:27:50:1b:d4:7f:2a:31:46:a2:b3:1d: b1:32:60:4b:29:1a:fb:5e:9c:a3:6c:fe:6c:2b:75: b6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2A:67:CE:52:39:91:C4:ED:21:31:B6:5E:64:39:26:EC:B9:52:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e989a3c-6316-412a-a304-1a759390ec3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.26.0.0/16 Signature Algorithm: sha256WithRSAEncryption 51:37:37:a3:e6:29:29:14:2c:40:e3:35:94:98:83:84:3d:dc: 7b:0f:b4:d6:81:5d:66:1e:3c:d9:14:df:b8:d8:40:17:81:9a: e7:6d:b8:43:a7:48:f7:6e:f0:02:ee:4b:06:de:c6:90:ec:f0: 35:28:e2:ea:db:f1:9e:5e:55:f9:ad:73:1f:10:47:20:63:c1: f5:4e:5b:cc:1e:89:02:64:99:10:a7:18:fd:d1:c8:06:13:44: ae:a2:44:1e:96:af:46:ad:79:93:49:c3:55:4c:59:24:77:99: bb:2f:fc:7d:82:10:65:12:ae:01:77:f7:f0:bc:df:16:e1:ec: f1:ad:89:bc:04:a5:3a:16:93:37:50:2c:56:c2:d4:ca:79:9e: 35:83:e6:d4:0d:84:ff:5e:d0:a7:e4:4f:1f:e6:13:91:f8:b3: 99:10:1c:18:ef:ee:9d:28:13:5f:b4:c8:df:07:9e:d1:07:31: ab:81:2b:9f:ff:54:57:33:a6:34:a7:a6:c8:bf:e3:ef:11:96: 65:39:42:75:cf:71:0d:71:e5:b9:ee:65:62:f6:9b:a5:24:ab: ff:19:e0:27:53:04:5c:79:b1:d6:05:69:97:b7:94:1f:e3:64: 78:56:2b:b5:19:c6:81:55:25:81:bc:55:8f:5e:99:34:51:43: 18:11:2d:b7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSqjYrGPNnsqOtmLIk9quUHj8eKswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDg0MzAzMWVkMjIxZTdiZGJjYWNiYzliODMwYjhlN2Vi YzQzNmRiOGFmMWQzYWIyMTRiMTlhMTMxMWRjZDQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvOdzJI83NF658IpTxLDbOS0vM2T0WIHXP1JCWrx8TZ/Xm PFRCEEQ5HvrZYbXckI4vLBBkQqv1clpBFANs1rUkiohanBITVcv4Wv+ZYgngWlG+ QCfTGlNnghyUJc1CMSqC78ImXW3aBVky+JY1rc9QHqiyKzZurAj5Eyd/7fqt1JAQ bHhhY2r+Psvqaf4IwXGnvu9T3+ZZC/SayrtPxvvWNEEuQM96s9KHBNiJu13CgQHB hmeQn3enlaEGjJE8HNABJ+jnvoGfehjKsahuNH3cBEkIJ2uOeU1cyTgYG2bq0moJ SNsnUBvUfyoxRqKzHbEyYEspGvtenKNs/mwrdba7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUTSpnzlI5kcTtITG2XmQ5Juy5UhQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlOTg5YTNjLTYzMTYtNDEyYS1hMzA0LTFhNzU5MzkwZWMzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCqGjANBgkqhkiG9w0BAQsFAAOCAQEAUTc3o+YpKRQsQOM1lJiDhD3cew+0 1oFdZh482RTfuNhAF4Ga5224Q6dI927wAu5LBt7GkOzwNSji6tvxnl5V+a1zHxBH IGPB9U5bzB6JAmSZEKcY/dHIBhNErqJEHpavRq15k0nDVUxZJHeZuy/8fYIQZRKu AXf38LzfFuHs8a2JvASlOhaTN1AsVsLUynmeNYPm1A2E/17Qp+RPH+YTkfizmRAc GO/unSgTX7TI3wee0Qcxq4Ern/9UVzOmNKemyL/j7xGWZTlCdc9xDXHlue5lYvab pSSr/xngJ1MEXHmx1gVpl7eUH+NkeFYrtRnGgVUlgbxVj16ZNFFDGBEttw== -----END CERTIFICATE-----Generated at Thu May 2 22:12:07 2024 by rpki-client on console-fra.rpki-client.org