$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6bfdba17-9f7b-493f-af44-efdd39fd1193.roa File: 6bfdba17-9f7b-493f-af44-efdd39fd1193.roa (raw, json) Hash identifier: 4OzuoBGLOwrhsuxLnZ+94b9JG3Rh+IlC1lIuipZOX7Q= Subject key identifier: 15:45:27:40:88:CF:6A:10:C0:2F:3D:A1:14:86:14:9C:B4:22:87:DF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5AEF49668899ACA35263329D0EF2CD143AB8EB02 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6bfdba17-9f7b-493f-af44-efdd39fd1193.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 32.168.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ef:49:66:88:99:ac:a3:52:63:32:9d:0e:f2:cd:14:3a:b8:eb:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=c347c6eda8202319365e6a4b60c702c49608883ddfb5a6cbc33d82993b402a8c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6c:81:8d:52:ee:63:3c:78:c3:7b:3c:d2:c8: e9:03:87:f8:3d:bc:de:9d:b5:da:7c:43:c0:e5:a7: 0d:d2:e0:81:d1:5b:44:19:b8:0a:97:4f:13:23:6f: 7c:ce:4f:ec:98:8d:0c:e0:20:1f:60:1f:b7:ea:58: 04:43:18:b6:bf:90:be:d9:a8:6a:5e:a2:1a:c6:7f: 77:36:6d:2e:28:0e:48:23:35:64:95:0f:d9:28:20: 0f:ae:b6:e4:be:36:7b:44:20:97:c6:96:07:13:e6: 36:4f:b5:47:63:b6:d6:c0:d1:bd:40:c2:14:af:04: 54:b8:d3:0b:18:0f:d8:37:ab:1a:0d:47:1a:c2:1e: 32:60:ab:99:43:68:3f:52:f0:45:8d:4e:c7:a7:ad: 2b:be:ff:57:21:39:34:83:df:53:d8:66:55:2f:e9: 7d:5d:cb:65:92:98:f8:15:e5:ef:8a:4f:fc:aa:68: 32:88:bb:4c:a3:9d:55:b5:4a:21:fa:91:e5:89:27: c3:ca:b6:c4:ca:3c:75:29:73:3b:6f:78:35:17:2c: 1b:9e:2e:aa:14:a7:b7:3e:4e:21:9d:d6:6d:9f:4a: c7:72:49:a7:0e:cf:9c:53:68:dc:50:7e:c1:ea:ca: 3a:35:bc:e3:e0:0a:23:a8:c2:9f:47:f4:5e:81:23: ba:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:45:27:40:88:CF:6A:10:C0:2F:3D:A1:14:86:14:9C:B4:22:87:DF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6bfdba17-9f7b-493f-af44-efdd39fd1193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 32.168.0.0/14 Signature Algorithm: sha256WithRSAEncryption ae:b5:9e:54:6d:dc:e9:f9:f9:bc:24:07:e7:95:af:2a:97:bd: 77:90:cd:b5:f1:d8:c7:80:9d:f3:24:4d:98:e4:0b:0b:f4:10: d2:02:d6:73:22:f4:93:01:c3:66:9b:4b:b6:16:1c:64:0d:0c: 7d:ba:12:49:6a:67:54:cd:f6:d0:4e:2e:b9:ec:3c:85:c0:2d: 5f:91:40:12:aa:e4:85:a3:62:c9:06:3a:29:2d:cc:88:08:6c: fa:e7:c1:e9:1c:20:2f:a7:d6:25:ad:4f:c8:16:da:80:04:cb: 49:c9:b3:5a:97:6d:5d:f9:89:ac:42:13:c8:38:b0:ee:0b:49: d0:ea:70:14:71:39:7d:90:14:a5:01:78:e9:57:1a:8a:78:2b: e9:5d:95:db:92:98:b5:51:df:8e:60:fc:ea:95:8f:32:9c:70: 66:5b:4c:41:ec:f1:38:93:2f:62:fe:22:0a:0f:12:7b:74:e6: c3:9a:47:43:22:53:de:26:09:df:59:21:59:6f:64:35:4c:ff: 91:6f:24:e5:d5:aa:76:1f:de:b4:7b:1c:e6:6b:98:32:c0:80: 1c:d7:98:d1:7b:bc:3d:04:f5:7a:20:a1:f2:2e:39:e2:71:d3: d4:95:33:e3:4a:60:02:1b:4b:66:9d:d5:5a:6d:d2:fb:57:6d: e8:81:82:84 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWu9JZoiZrKNSYzKdDvLNFDq46wIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMzQ3YzZlZGE4MjAyMzE5MzY1ZTZhNGI2MGM3MDJjNDk2 MDg4ODNkZGZiNWE2Y2JjMzNkODI5OTNiNDAyYThjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzbIGNUu5jPHjDezzSyOkDh/g9vN6dtdp8Q8Dlpw3S4IHR W0QZuAqXTxMjb3zOT+yYjQzgIB9gH7fqWARDGLa/kL7ZqGpeohrGf3c2bS4oDkgj NWSVD9koIA+utuS+NntEIJfGlgcT5jZPtUdjttbA0b1AwhSvBFS40wsYD9g3qxoN RxrCHjJgq5lDaD9S8EWNTsenrSu+/1chOTSD31PYZlUv6X1dy2WSmPgV5e+KT/yq aDKIu0yjnVW1SiH6keWJJ8PKtsTKPHUpcztveDUXLBueLqoUp7c+TiGd1m2fSsdy SacOz5xTaNxQfsHqyjo1vOPgCiOowp9H9F6BI7p1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUFUUnQIjPahDALz2hFIYUnLQih98wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZiZmRiYTE3LTlmN2ItNDkzZi1hZjQ0LWVmZGQzOWZkMTE5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIgqDANBgkqhkiG9w0BAQsFAAOCAQEArrWeVG3c6fn5vCQH55WvKpe9d5DN tfHYx4Cd8yRNmOQLC/QQ0gLWcyL0kwHDZptLthYcZA0MfboSSWpnVM320E4uuew8 hcAtX5FAEqrkhaNiyQY6KS3MiAhs+ufB6RwgL6fWJa1PyBbagATLScmzWpdtXfmJ rEITyDiw7gtJ0OpwFHE5fZAUpQF46Vcaingr6V2V25KYtVHfjmD86pWPMpxwZltM QezxOJMvYv4iCg8Se3Tmw5pHQyJT3iYJ31khWW9kNUz/kW8k5dWqdh/etHsc5muY MsCAHNeY0Xu8PQT1eiCh8i454nHT1JUz40pgAhtLZp3VWm3S+1dt6IGChA== -----END CERTIFICATE-----Generated at Thu May 9 01:26:15 2024 by rpki-client on console-ams.rpki-client.org