$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a7db457-6221-463d-b5bf-bdcf9dac0785.roa File: 6a7db457-6221-463d-b5bf-bdcf9dac0785.roa (raw, json) Hash identifier: G+eqtLNSIWoW7wO1QvIj8kXdL/Kqo7hi2QQS+2rE1HA= Subject key identifier: 8D:8A:DA:B6:94:ED:B7:C8:45:3C:7A:14:82:E4:AF:60:50:1A:61:A0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 726F67C9A307B3927F87A9E791EFB48F9F74D67D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a7db457-6221-463d-b5bf-bdcf9dac0785.roa Signing time: Thu 18 Apr 2024 00:00:00 +0000 ROA not before: Thu 18 Apr 2024 00:00:00 +0000 ROA not after: Thu 23 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 209.177.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:6f:67:c9:a3:07:b3:92:7f:87:a9:e7:91:ef:b4:8f:9f:74:d6:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:00:00 2024 GMT Not After : May 23 23:59:59 2024 GMT Subject: serialNumber=15e4fe48b5e4675e8eff72766e211d4820db9624643485f4e56f267dd9614712, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:21:56:2b:d6:de:0c:c1:c2:07:15:49:86:d3: f3:a4:7d:05:9f:8e:a1:ea:c7:d9:34:bd:59:a8:0a: 84:6b:19:32:ae:a5:4f:f6:5d:91:4b:29:0a:68:b4: cd:6c:de:22:3b:56:a3:33:82:2a:73:2d:4c:19:57: 1c:cf:1d:0c:33:ee:22:72:33:c1:2f:ac:58:55:33: 60:84:f1:02:3d:78:25:3b:fb:08:2e:6e:1f:e2:ad: 9b:94:b2:61:19:3d:ac:d6:ab:87:4d:ee:21:32:02: 78:0f:f5:5c:c8:50:75:c9:c1:d3:8a:2e:f4:bc:1d: 44:13:80:56:04:f6:38:81:b4:d2:47:7e:bb:fc:d7: 4b:cf:e1:d3:b1:f9:f1:7c:c3:9f:a2:9a:c3:4f:93: cf:4c:55:f9:4b:11:16:34:d7:5f:91:6c:74:8e:a1: a3:c1:07:14:c2:42:c4:58:4f:ac:7a:52:7f:f3:b2: e1:15:8e:a1:0b:15:d8:f8:d6:d5:df:c8:73:e3:3c: ac:ba:10:45:72:a6:f2:0b:66:cc:e9:6c:a2:e2:d5: d1:81:6a:98:d8:24:d5:fb:42:15:60:ef:6d:25:a8: cb:b0:3e:40:a8:42:1a:13:60:e7:fd:d5:9c:ca:fe: 80:8b:ca:02:0a:9e:49:d4:28:86:4a:16:1c:cf:4a: b8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8A:DA:B6:94:ED:B7:C8:45:3C:7A:14:82:E4:AF:60:50:1A:61:A0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a7db457-6221-463d-b5bf-bdcf9dac0785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.177.20.0/22 Signature Algorithm: sha256WithRSAEncryption 84:9b:df:c6:b8:47:71:25:d2:9e:35:7f:ac:39:79:a8:2c:5a: c9:95:61:69:ff:0f:c3:20:13:5c:b8:b3:5a:3e:d0:27:a0:27: 05:78:14:6e:8a:a6:4e:c0:43:4f:3b:c1:9e:a7:01:c6:2c:ab: 8e:c2:b8:4f:a6:3e:83:eb:06:10:0d:42:00:ac:b1:87:14:e9: 97:2c:d7:22:4b:8a:e1:8d:f1:f6:21:23:ba:34:8a:e4:25:ed: 09:e1:66:8d:e0:93:ad:a1:c5:08:e6:95:bb:f8:f9:db:58:18: 10:e8:88:1d:f3:4f:60:f5:4d:4c:39:bb:1f:00:18:2a:c0:5c: 58:8a:9f:a9:03:31:a4:75:4e:ef:1d:ef:fd:cd:c0:e3:61:06: cc:22:57:74:7d:f6:cc:ad:1e:e4:41:3f:81:e9:e9:88:e3:23: 4f:e8:c2:6d:d9:68:27:be:23:77:da:ce:d3:7a:cd:4b:1c:88: eb:c2:c8:b8:f9:46:da:dd:6b:61:9c:fb:ff:99:08:41:f9:80: 31:be:4a:43:8e:c4:d9:36:8e:df:bb:a2:5f:0d:91:bb:3d:9e: 85:bd:c1:9b:3e:d4:c7:7b:33:9c:77:a0:d8:2f:a0:9b:fe:61: 2a:10:aa:50:2f:56:d8:31:8e:e0:dd:3b:a2:f6:a2:a7:21:35: 64:f6:94:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcm9nyaMHs5J/h6nnke+0j5901n0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE4MDAwMDAwWhcNMjQwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNWU0ZmU0OGI1ZTQ2NzVlOGVmZjcyNzY2ZTIxMWQ0ODIw ZGI5NjI0NjQzNDg1ZjRlNTZmMjY3ZGQ5NjE0NzEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcIVYr1t4MwcIHFUmG0/OkfQWfjqHqx9k0vVmoCoRrGTKu pU/2XZFLKQpotM1s3iI7VqMzgipzLUwZVxzPHQwz7iJyM8EvrFhVM2CE8QI9eCU7 +wgubh/irZuUsmEZPazWq4dN7iEyAngP9VzIUHXJwdOKLvS8HUQTgFYE9jiBtNJH frv810vP4dOx+fF8w5+imsNPk89MVflLERY011+RbHSOoaPBBxTCQsRYT6x6Un/z suEVjqELFdj41tXfyHPjPKy6EEVypvILZszpbKLi1dGBapjYJNX7QhVg720lqMuw PkCoQhoTYOf91ZzK/oCLygIKnknUKIZKFhzPSrgPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjYratpTtt8hFPHoUguSvYFAaYaAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZhN2RiNDU3LTYyMjEtNDYzZC1iNWJmLWJkY2Y5ZGFjMDc4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALRsRQwDQYJKoZIhvcNAQELBQADggEBAISb38a4R3El0p41f6w5eagsWsmV YWn/D8MgE1y4s1o+0CegJwV4FG6Kpk7AQ087wZ6nAcYsq47CuE+mPoPrBhANQgCs sYcU6Zcs1yJLiuGN8fYhI7o0iuQl7QnhZo3gk62hxQjmlbv4+dtYGBDoiB3zT2D1 TUw5ux8AGCrAXFiKn6kDMaR1Tu8d7/3NwONhBswiV3R99sytHuRBP4Hp6YjjI0/o wm3ZaCe+I3faztN6zUsciOvCyLj5Rtrda2Gc+/+ZCEH5gDG+SkOOxNk2jt+7ol8N kbs9noW9wZs+1Md7M5x3oNgvoJv+YSoQqlAvVtgxjuDdO6L2oqchNWT2lPA= -----END CERTIFICATE-----Generated at Thu May 9 01:25:33 2024 by rpki-client on console-fra.rpki-client.org