$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b17631a-1e45-4663-a038-69014d66f6c2.roa File: 6b17631a-1e45-4663-a038-69014d66f6c2.roa (raw, json) Hash identifier: 4fC/ThHW/5Qxer+PFBhHo+XhLTFX+lyTNP7qoisMdG8= Subject key identifier: FA:B3:4D:B4:A3:61:1F:67:7F:33:C0:F8:7C:97:6E:1F:E8:C0:48:B5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D254F7F2FD47AB03CE75618DD2FC0E68C662185 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b17631a-1e45-4663-a038-69014d66f6c2.roa Signing time: Fri 12 Apr 2024 00:00:00 +0000 ROA not before: Fri 12 Apr 2024 00:00:00 +0000 ROA not after: Fri 17 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 76.223.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:25:4f:7f:2f:d4:7a:b0:3c:e7:56:18:dd:2f:c0:e6:8c:66:21:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:00:00 2024 GMT Not After : May 17 23:59:59 2024 GMT Subject: serialNumber=7f5ad05bbd7a1c1f39cce22a4cc9515a66e09f231de6005008cd5b51db8847fc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e1:d5:2e:f2:bc:d3:5b:87:08:1a:1c:01:31: b9:f5:37:7c:a6:3a:a0:62:fa:34:8f:0c:e0:bb:08: a5:63:a4:1a:12:cc:95:43:88:97:83:c0:f4:3f:cb: ee:11:ce:ef:aa:b7:5b:43:7e:ec:ef:39:73:36:01: b8:68:e0:fb:bc:cc:e3:44:39:8c:1d:09:85:c3:ce: c1:cc:53:3b:00:66:da:b7:ce:19:f6:bd:b4:83:fd: d5:45:4a:9a:be:25:5a:49:cf:b6:47:dc:65:35:5d: 5a:29:9f:a8:a2:cb:9c:a0:2f:8d:8d:c6:91:39:51: c8:ee:41:ec:97:0d:97:da:cd:4f:88:3e:fd:8d:66: fa:99:40:2b:a5:94:c2:4c:84:4b:df:dc:b9:d1:16: e3:99:e2:70:ee:b6:a6:d6:33:8e:08:7c:d3:b2:ab: 22:de:52:48:4e:bf:43:9e:95:6e:a0:40:3f:a7:00: 32:9e:dd:12:d1:0a:d1:fe:1c:c9:f5:d9:42:79:b0: 7c:4a:39:6b:e4:9e:5d:af:19:eb:35:19:93:6e:8e: f0:5f:ea:fa:e8:44:f2:5f:cf:6b:96:d3:31:c8:47: 24:45:e9:1a:7f:31:f2:60:84:2a:a2:c3:7b:40:10: e1:ca:0a:09:e4:6f:b5:08:27:9e:0a:56:79:de:3c: 0a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B3:4D:B4:A3:61:1F:67:7F:33:C0:F8:7C:97:6E:1F:E8:C0:48:B5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b17631a-1e45-4663-a038-69014d66f6c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.128.0/19 Signature Algorithm: sha256WithRSAEncryption a8:0a:b3:35:94:a6:a6:44:d4:7a:cc:14:c7:12:00:d6:53:ba: 01:9e:09:d2:d5:24:2a:2a:eb:f0:01:6c:27:dd:aa:27:85:67: d3:e0:9f:bd:c5:f3:ee:36:50:6b:26:4f:99:28:37:ca:ac:3b: b7:be:b2:61:52:0f:fe:80:ab:f3:df:ea:e2:bb:42:b3:ce:76: 8d:84:da:ec:36:9c:06:88:1e:8d:5b:27:89:24:e0:2f:45:0b: 6d:67:07:47:ed:d9:16:30:34:06:98:f4:56:85:f1:34:48:37: 0b:6f:a4:66:8d:2e:3a:d3:9b:de:70:a7:80:a5:55:b1:82:b2: 2b:be:8a:1d:4a:01:ec:9c:59:ae:49:eb:d0:66:e8:e7:40:2d: 85:65:a4:fb:ac:51:ae:71:89:85:6c:b9:de:79:14:f1:cb:9e: 57:40:c3:d2:dc:ae:d2:80:b0:2f:62:76:25:a1:af:94:9e:c0: 20:6f:3d:22:57:ee:0f:fc:e5:31:e1:09:ea:2d:e7:b3:b6:29: ed:d1:10:1b:6b:c1:39:c6:52:29:49:93:d0:99:ee:f0:14:d8: a6:f8:d1:5e:ac:69:82:d1:4a:4d:c7:de:ef:f5:4f:fc:e1:85: d7:c5:5e:71:3b:8f:71:f7:77:93:ef:8b:ff:26:89:e5:1b:f1: 5e:6f:3e:a1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPSVPfy/UerA851YY3S/A5oxmIYUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEyMDAwMDAwWhcNMjQwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjVhZDA1YmJkN2ExYzFmMzljY2UyMmE0Y2M5NTE1YTY2 ZTA5ZjIzMWRlNjAwNTAwOGNkNWI1MWRiODg0N2ZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf4dUu8rzTW4cIGhwBMbn1N3ymOqBi+jSPDOC7CKVjpBoS zJVDiJeDwPQ/y+4Rzu+qt1tDfuzvOXM2Abho4Pu8zONEOYwdCYXDzsHMUzsAZtq3 zhn2vbSD/dVFSpq+JVpJz7ZH3GU1XVopn6iiy5ygL42NxpE5UcjuQeyXDZfazU+I Pv2NZvqZQCullMJMhEvf3LnRFuOZ4nDutqbWM44IfNOyqyLeUkhOv0OelW6gQD+n ADKe3RLRCtH+HMn12UJ5sHxKOWvknl2vGes1GZNujvBf6vroRPJfz2uW0zHIRyRF 6Rp/MfJghCqiw3tAEOHKCgnkb7UIJ54KVnnePApJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+rNNtKNhH2d/M8D4fJduH+jASLUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZiMTc2MzFhLTFlNDUtNDY2My1hMDM4LTY5MDE0ZDY2ZjZjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVM34AwDQYJKoZIhvcNAQELBQADggEBAKgKszWUpqZE1HrMFMcSANZTugGe CdLVJCoq6/ABbCfdqieFZ9Pgn73F8+42UGsmT5koN8qsO7e+smFSD/6Aq/Pf6uK7 QrPOdo2E2uw2nAaIHo1bJ4kk4C9FC21nB0ft2RYwNAaY9FaF8TRINwtvpGaNLjrT m95wp4ClVbGCsiu+ih1KAeycWa5J69Bm6OdALYVlpPusUa5xiYVsud55FPHLnldA w9LcrtKAsC9idiWhr5SewCBvPSJX7g/85THhCeot57O2Ke3REBtrwTnGUilJk9CZ 7vAU2Kb40V6saYLRSk3H3u/1T/zhhdfFXnE7j3H3d5Pvi/8mieUb8V5vPqE= -----END CERTIFICATE-----Generated at Thu May 2 05:26:23 2024 by rpki-client on console-fra.rpki-client.org