$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/616c4633-f034-4928-8c64-b7604c5c1b89.roa File: 616c4633-f034-4928-8c64-b7604c5c1b89.roa (raw, json) Hash identifier: kUV1iQZ5xdrnGeqgnOXOfnutvyymEkjZLB57UcguUDY= Subject key identifier: 4B:82:20:FB:6D:BD:8A:35:BF:68:57:04:1C:20:3F:E6:AE:FC:88:20 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 21C23CF4CF6EC227D251638CB7E93A05058C2D66 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/616c4633-f034-4928-8c64-b7604c5c1b89.roa Signing time: Tue 19 Mar 2024 00:00:00 +0000 ROA not before: Tue 19 Mar 2024 00:00:00 +0000 ROA not after: Tue 23 Apr 2024 23:59:59 +0000 asID: 16509 IP address blocks: 70.132.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 Mar 2024 12:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c2:3c:f4:cf:6e:c2:27:d2:51:63:8c:b7:e9:3a:05:05:8c:2d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 19 00:00:00 2024 GMT Not After : Apr 23 23:59:59 2024 GMT Subject: serialNumber=54757c31ea3cb0e712dfe60e2545e852d988cabaacab8c484d6dc65135474e12, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b9:58:f3:72:7b:ec:29:8a:7c:60:00:03:28: ba:8c:27:4b:28:79:10:c0:ab:d4:41:e5:2d:fe:c2: a6:f1:35:f8:fd:b7:d0:63:b2:a8:20:64:25:62:2a: da:66:dc:67:b1:84:8a:60:36:76:66:3f:1b:e3:f5: 74:a1:c8:4e:1b:36:f9:0b:24:55:d1:92:4f:3e:d7: 84:47:c2:2f:2a:a1:1d:a0:87:a9:b9:ac:62:31:00: 2a:7e:a7:a7:0f:fe:fa:e6:54:a0:0f:65:9f:a3:60: df:e7:35:ed:d6:5d:4e:3c:4b:26:1a:97:2a:1f:08: 1b:36:e1:7d:66:ab:42:f6:4a:25:10:0f:17:2e:7d: 04:e3:ed:6d:48:2b:df:4e:16:9a:12:9c:b1:a4:80: 5c:ad:cd:25:d8:fe:61:2a:ce:9c:37:e5:c7:76:43: 03:39:28:48:7f:61:cf:af:37:42:cf:4a:09:5c:16: 30:de:a2:a7:05:81:a2:7c:9f:cc:30:4a:34:a0:e6: 54:46:e9:2a:fe:38:ef:72:0f:63:82:72:6e:5f:28: 0e:ae:82:0a:6d:8d:8d:e1:3a:c4:45:6a:17:e3:7f: 43:ee:d7:4c:ea:9c:02:64:3c:4a:3c:86:f5:c4:3d: 21:15:ed:88:e0:8f:27:af:66:d0:d8:d8:61:18:6b: 04:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:82:20:FB:6D:BD:8A:35:BF:68:57:04:1C:20:3F:E6:AE:FC:88:20 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/616c4633-f034-4928-8c64-b7604c5c1b89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.132.0.0/18 Signature Algorithm: sha256WithRSAEncryption 62:8d:04:24:ad:2d:ab:9b:b6:10:69:8f:59:3a:7e:a1:6c:10: fa:2e:cb:04:90:7d:3e:2f:76:73:c8:43:11:1d:04:ee:17:79: ee:b0:1b:fa:5a:e8:82:6c:ad:d9:72:6d:4a:64:99:b1:fe:4d: 56:93:89:e7:53:17:a1:73:88:8e:e9:fd:7d:3b:3c:c0:7c:7b: 49:f7:6a:3a:74:7d:72:b5:52:47:01:37:01:14:54:b8:11:5d: e6:dd:5a:91:03:61:6a:4c:ab:97:ff:0e:17:e7:4f:9e:81:46: 40:2c:9a:03:b2:51:e5:9e:78:d7:ab:4b:50:0c:e0:3e:c7:cb: cd:f4:63:63:49:78:83:53:63:02:57:16:d9:c7:76:cd:0e:36: f6:ad:cf:49:f9:d4:ee:05:f5:be:0b:62:b0:9c:d4:e7:e2:32: 21:e0:cc:1a:a2:d5:a7:c4:d2:6a:e5:49:38:c3:11:5c:07:02: d7:2c:0d:c8:92:af:53:af:1c:df:5f:3b:6b:e5:96:fa:3b:c0: 78:38:e3:98:69:46:73:74:37:aa:02:fa:fe:eb:55:f5:94:a1: d4:36:83:b5:af:b9:d7:6c:96:e5:b6:66:2c:8b:1c:11:44:9b: 7c:f3:fa:7b:e0:03:33:14:4c:05:77:a8:4f:82:a0:39:f8:e7: 18:2e:7b:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIcI89M9uwifSUWOMt+k6BQWMLWYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwMzE5MDAwMDAwWhcNMjQwNDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDc1N2MzMWVhM2NiMGU3MTJkZmU2MGUyNTQ1ZTg1MmQ5 ODhjYWJhYWNhYjhjNDg0ZDZkYzY1MTM1NDc0ZTEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDguVjzcnvsKYp8YAADKLqMJ0soeRDAq9RB5S3+wqbxNfj9 t9BjsqggZCViKtpm3GexhIpgNnZmPxvj9XShyE4bNvkLJFXRkk8+14RHwi8qoR2g h6m5rGIxACp+p6cP/vrmVKAPZZ+jYN/nNe3WXU48SyYalyofCBs24X1mq0L2SiUQ DxcufQTj7W1IK99OFpoSnLGkgFytzSXY/mEqzpw35cd2QwM5KEh/Yc+vN0LPSglc FjDeoqcFgaJ8n8wwSjSg5lRG6Sr+OO9yD2OCcm5fKA6uggptjY3hOsRFahfjf0Pu 10zqnAJkPEo8hvXEPSEV7YjgjyevZtDY2GEYawTvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUS4Ig+229ijW/aFcEHCA/5q78iCAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYxNmM0NjMzLWYwMzQtNDkyOC04YzY0LWI3NjA0YzVjMWI4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZGhAAwDQYJKoZIhvcNAQELBQADggEBAGKNBCStLaubthBpj1k6fqFsEPou ywSQfT4vdnPIQxEdBO4Xee6wG/pa6IJsrdlybUpkmbH+TVaTiedTF6FziI7p/X07 PMB8e0n3ajp0fXK1UkcBNwEUVLgRXebdWpEDYWpMq5f/DhfnT56BRkAsmgOyUeWe eNerS1AM4D7Hy830Y2NJeINTYwJXFtnHds0ONvatz0n51O4F9b4LYrCc1OfiMiHg zBqi1afE0mrlSTjDEVwHAtcsDciSr1OvHN9fO2vllvo7wHg445hpRnN0N6oC+v7r VfWUodQ2g7WvuddsluW2ZiyLHBFEm3zz+nvgAzMUTAV3qE+CoDn45xgueys= -----END CERTIFICATE-----Generated at Thu Mar 28 01:00:02 2024 by rpki-client on console-fra.rpki-client.org