$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/686fd666-1ab8-4afa-91a5-a4ba604f8f63.roa File: 686fd666-1ab8-4afa-91a5-a4ba604f8f63.roa (raw, json) Hash identifier: Z3JdYLzK9hP8whnMRTYNYiiR4oBhm9TiH8UdcxjPOJM= Subject key identifier: 8A:70:7C:F4:B0:5D:FB:24:0F:E6:36:9F:16:50:EE:0F:E2:85:2C:46 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6ABFE6EE0C77DB4485EE057527D732DA50B2BC98 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/686fd666-1ab8-4afa-91a5-a4ba604f8f63.roa Signing time: Wed 17 Apr 2024 00:00:00 +0000 ROA not before: Wed 17 Apr 2024 00:00:00 +0000 ROA not after: Wed 22 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 206.131.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:bf:e6:ee:0c:77:db:44:85:ee:05:75:27:d7:32:da:50:b2:bc:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 17 00:00:00 2024 GMT Not After : May 22 23:59:59 2024 GMT Subject: serialNumber=7ad27f3c3fa4cf8f0df61e90750616c36ac4c291a4d73b5bbd46625f0f3e0625, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:a1:71:78:cf:47:5f:bc:d6:2f:ca:99:c4: bd:12:1b:9e:d2:16:3b:1f:73:32:51:20:77:f6:b9: 1f:d2:69:02:e1:75:46:da:25:b2:48:98:3b:6b:11: d2:57:64:29:44:43:21:9c:26:35:78:46:98:75:e0: 78:f7:53:a7:34:e1:1b:25:3e:1a:80:d9:98:4c:c0: c6:67:e6:a8:87:03:12:13:04:18:d0:1a:1b:1f:f9: 86:03:1a:e6:04:9a:09:96:51:76:73:cd:13:2a:7f: 2c:7e:b1:c0:e9:78:4a:b6:55:57:2f:8c:3b:42:cd: 7f:5f:f3:ef:d7:a5:28:d8:10:fa:7d:2a:50:17:af: d4:a8:25:cf:98:38:fb:83:0e:56:be:ce:2d:7f:a2: f4:0e:64:0d:92:7a:41:52:00:3f:51:8e:26:ce:e4: 05:6e:2d:82:4d:a0:bc:27:50:dd:db:22:4c:de:e7: 85:dd:02:38:80:55:8d:74:f2:d0:3b:72:44:96:dd: 9d:98:14:e6:25:5b:d4:9d:66:8c:1a:d7:50:69:e7: 35:e1:e6:5d:a8:c6:6b:a6:ef:47:87:db:b1:ef:81: eb:9b:89:29:a6:91:40:07:d9:3f:e3:fc:5b:b0:56: 81:a8:60:63:22:16:69:11:8d:b7:59:c3:a0:10:2d: c7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:70:7C:F4:B0:5D:FB:24:0F:E6:36:9F:16:50:EE:0F:E2:85:2C:46 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/686fd666-1ab8-4afa-91a5-a4ba604f8f63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.131.0.0/17 Signature Algorithm: sha256WithRSAEncryption 6a:8a:34:fc:9e:fc:6b:2d:88:07:a3:d1:f1:f3:77:24:36:6d: 95:da:20:82:21:67:4b:aa:ea:ed:59:01:da:cf:1d:b7:02:32: bf:c5:de:40:7d:d9:e9:2f:f2:25:da:65:4e:81:c8:43:ba:88: 34:27:bd:6c:98:9d:69:b9:18:c1:fe:ec:25:17:41:b2:e7:d8: 10:00:dd:29:62:09:d9:83:40:a3:86:a7:ab:01:cd:04:f1:34: 7e:ac:a9:4f:82:5c:a0:61:04:60:87:89:80:66:41:6d:f1:21: 3a:28:8f:84:d4:e4:42:a1:a1:c7:c9:7d:f8:bf:62:fe:08:1b: 4a:f5:28:2f:7c:c0:6b:57:0c:4a:bc:d2:eb:9e:dc:ea:7c:99: 49:30:ef:38:fd:11:32:87:32:18:04:7b:1d:12:94:13:93:b4: b4:ca:0c:07:72:d3:27:5e:f2:ea:26:7d:89:d3:19:42:b0:c4: 4a:8b:1f:26:58:94:96:59:91:a3:41:fd:26:61:2a:61:77:2e: 2e:d5:e9:e4:b7:aa:c1:ba:03:0d:a2:3d:b0:51:5a:9e:d4:09: 00:c5:65:50:ca:cb:8a:61:f7:78:bb:84:bf:b3:d4:6f:8a:52: e8:dc:44:7b:40:37:ab:f8:83:d1:7a:df:b8:c9:11:65:94:38: 72:a6:4b:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUar/m7gx320SF7gV1J9cy2lCyvJgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE3MDAwMDAwWhcNMjQwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YWQyN2YzYzNmYTRjZjhmMGRmNjFlOTA3NTA2MTZjMzZh YzRjMjkxYTRkNzNiNWJiZDQ2NjI1ZjBmM2UwNjI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkPqFxeM9HX7zWL8qZxL0SG57SFjsfczJRIHf2uR/SaQLh dUbaJbJImDtrEdJXZClEQyGcJjV4Rph14Hj3U6c04RslPhqA2ZhMwMZn5qiHAxIT BBjQGhsf+YYDGuYEmgmWUXZzzRMqfyx+scDpeEq2VVcvjDtCzX9f8+/XpSjYEPp9 KlAXr9SoJc+YOPuDDla+zi1/ovQOZA2SekFSAD9RjibO5AVuLYJNoLwnUN3bIkze 54XdAjiAVY108tA7ckSW3Z2YFOYlW9SdZowa11Bp5zXh5l2oxmum70eH27Hvgeub iSmmkUAH2T/j/FuwVoGoYGMiFmkRjbdZw6AQLcflAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUinB89LBd+yQP5jafFlDuD+KFLEYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4NmZkNjY2LTFhYjgtNGFmYS05MWE1LWE0YmE2MDRmOGY2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfOgwAwDQYJKoZIhvcNAQELBQADggEBAGqKNPye/GstiAej0fHzdyQ2bZXa IIIhZ0uq6u1ZAdrPHbcCMr/F3kB92ekv8iXaZU6ByEO6iDQnvWyYnWm5GMH+7CUX QbLn2BAA3SliCdmDQKOGp6sBzQTxNH6sqU+CXKBhBGCHiYBmQW3xITooj4TU5EKh ocfJffi/Yv4IG0r1KC98wGtXDEq80uue3Op8mUkw7zj9ETKHMhgEex0SlBOTtLTK DAdy0yde8uomfYnTGUKwxEqLHyZYlJZZkaNB/SZhKmF3Li7V6eS3qsG6Aw2iPbBR Wp7UCQDFZVDKy4ph93i7hL+z1G+KUujcRHtAN6v4g9F637jJEWWUOHKmS8I= -----END CERTIFICATE-----Generated at Thu May 2 08:51:02 2024 by rpki-client on console-fra.rpki-client.org