$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/603d26d7-c121-42e1-817f-ef0a806e3d69.roa File: 603d26d7-c121-42e1-817f-ef0a806e3d69.roa (raw, json) Hash identifier: Vnj50KS7Ir0YdtdTpBxQhEROgk0i51Jdaeap1dszYfE= Subject key identifier: 8D:DB:33:6F:07:B8:AD:2B:F4:21:4A:11:81:D2:55:77:34:9B:A5:76 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40266DC580A95E8BC4830A2CBAD4340E3A049604 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/603d26d7-c121-42e1-817f-ef0a806e3d69.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 185.212.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:26:6d:c5:80:a9:5e:8b:c4:83:0a:2c:ba:d4:34:0e:3a:04:96:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=e46b8e69141c899a2826f42a36bdec6061fa004496f7d402107c62fdbdde6651, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:ce:9d:21:a9:7b:3b:fe:fe:e6:7b:0c:35: d4:a2:fe:59:b4:f3:5c:9e:dc:0a:ff:79:87:8c:62: 62:1f:dd:0d:07:87:3c:c7:1f:0e:6c:43:11:b4:c6: e9:93:12:62:80:86:42:00:64:37:3a:cb:2b:2f:3d: be:db:da:f7:91:b7:5d:52:92:35:5a:93:82:0c:13: d7:5e:67:e4:76:c2:75:54:89:0b:9e:ef:ae:76:67: e9:b9:15:13:29:be:e8:15:7b:45:46:58:36:72:50: b2:02:4a:d6:7f:2f:d8:d9:da:34:31:e3:29:df:c8: 17:41:98:ee:fb:94:ff:b9:5a:30:78:cd:42:40:fd: 25:c3:13:be:4a:21:34:9d:a2:73:16:35:df:82:8b: 3e:cd:4f:9a:94:1d:a7:10:54:6f:49:e6:2a:d0:51: b5:b3:11:58:d9:17:25:e3:75:7f:c0:77:f8:6a:a4: a8:4b:d8:86:2b:67:c4:95:ee:f4:77:5e:6a:a6:10: b4:5d:eb:19:17:97:6b:7e:4f:40:83:62:6b:82:71: 4f:fa:45:d6:0f:6f:f3:7e:fa:98:36:da:c0:24:e2: 0a:45:d7:e1:f6:3a:ae:b8:ec:04:d3:34:18:5c:dd: aa:02:1c:20:c6:b1:ac:f2:dc:43:b9:fe:a8:f1:c1: f3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DB:33:6F:07:B8:AD:2B:F4:21:4A:11:81:D2:55:77:34:9B:A5:76 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/603d26d7-c121-42e1-817f-ef0a806e3d69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.212.200.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:67:bd:bd:b4:5c:3c:3e:e0:a5:9c:a3:63:4f:ed:29:52:dc: af:3e:e1:1b:ea:af:bb:f3:8a:89:69:d9:a1:7d:bb:55:be:44: b9:a0:3d:60:bd:b1:e4:6b:e5:9a:36:63:22:be:1e:d2:44:69: 03:91:b2:a4:52:ec:f3:25:18:d0:34:4d:e6:33:89:92:a3:6e: d3:73:e1:11:56:ec:c5:af:24:06:22:9e:3f:aa:11:20:8e:b6: 65:8c:1d:a5:47:84:db:ea:5b:97:64:3a:68:a0:6e:b9:bf:77: 6d:c9:ed:03:1e:d0:64:5d:d0:a5:8c:3f:ea:e7:cb:50:94:9c: 0e:ef:34:c0:ca:62:ad:d6:41:bf:ad:8b:33:d0:94:ef:21:e2: 1c:78:7f:df:f4:33:cc:24:11:e5:8a:98:5d:79:4f:f1:b3:78: b0:65:7e:34:a7:13:8a:4f:13:e4:bb:ae:ee:56:7e:2e:63:24: 58:8a:f3:bf:63:3d:93:a7:eb:c0:1d:74:e1:0c:3a:71:bc:96: 5c:90:1f:30:d7:1c:50:6b:87:c6:ed:37:f4:e9:5e:4b:7c:b7: 47:f7:8e:11:9e:03:fc:4d:68:e8:57:7b:1f:38:5e:8f:54:38: 1e:3f:20:9a:ce:ae:3b:cc:8a:4a:37:0c:29:5b:21:18:24:6b: a5:0c:93:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQCZtxYCpXovEgwosutQ0DjoElgQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDZiOGU2OTE0MWM4OTlhMjgyNmY0MmEzNmJkZWM2MDYx ZmEwMDQ0OTZmN2Q0MDIxMDdjNjJmZGJkZGU2NjUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9S86dIal7O/7+5nsMNdSi/lm081ye3Ar/eYeMYmIf3Q0H hzzHHw5sQxG0xumTEmKAhkIAZDc6yysvPb7b2veRt11SkjVak4IME9deZ+R2wnVU iQue7652Z+m5FRMpvugVe0VGWDZyULICStZ/L9jZ2jQx4ynfyBdBmO77lP+5WjB4 zUJA/SXDE75KITSdonMWNd+Ciz7NT5qUHacQVG9J5irQUbWzEVjZFyXjdX/Ad/hq pKhL2IYrZ8SV7vR3XmqmELRd6xkXl2t+T0CDYmuCcU/6RdYPb/N++pg22sAk4gpF 1+H2Oq647ATTNBhc3aoCHCDGsazy3EO5/qjxwfN1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjdszbwe4rSv0IUoRgdJVdzSbpXYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYwM2QyNmQ3LWMxMjEtNDJlMS04MTdmLWVmMGE4MDZlM2Q2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAK51MgwDQYJKoZIhvcNAQELBQADggEBAB9nvb20XDw+4KWco2NP7SlS3K8+ 4Rvqr7vziolp2aF9u1W+RLmgPWC9seRr5Zo2YyK+HtJEaQORsqRS7PMlGNA0TeYz iZKjbtNz4RFW7MWvJAYinj+qESCOtmWMHaVHhNvqW5dkOmigbrm/d23J7QMe0GRd 0KWMP+rny1CUnA7vNMDKYq3WQb+tizPQlO8h4hx4f9/0M8wkEeWKmF15T/GzeLBl fjSnE4pPE+S7ru5Wfi5jJFiK879jPZOn68AddOEMOnG8llyQHzDXHFBrh8btN/Tp Xkt8t0f3jhGeA/xNaOhXex84Xo9UOB4/IJrOrjvMiko3DClbIRgka6UMk7M= -----END CERTIFICATE-----Generated at Thu May 2 11:33:17 2024 by rpki-client on console-fra.rpki-client.org