$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/747397ee-2cd9-4b84-b49f-a867a86bad13.roa File: 747397ee-2cd9-4b84-b49f-a867a86bad13.roa (raw, json) Hash identifier: SHdGOZkmrl7YHVCj3YNaaKR1bk0/mR3YI+Ig4DaLXNQ= Subject key identifier: E3:D1:74:F3:1F:41:9B:6D:C8:5A:5D:E1:CA:46:19:B3:20:C7:4D:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C099880AC4096FB63FCCB55DCA5402E8DCB18FB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/747397ee-2cd9-4b84-b49f-a867a86bad13.roa Signing time: Thu 18 Apr 2024 00:00:00 +0000 ROA not before: Thu 18 Apr 2024 00:00:00 +0000 ROA not after: Thu 23 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 209.159.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:09:98:80:ac:40:96:fb:63:fc:cb:55:dc:a5:40:2e:8d:cb:18:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:00:00 2024 GMT Not After : May 23 23:59:59 2024 GMT Subject: serialNumber=a505cc0ae101a2ecaac572079decf2ffac9853820c3c956377262efdd6e1d1bd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:08:55:1e:5a:ab:48:26:c8:de:89:d0:41:1b: 07:e9:d0:b6:34:4f:c1:d0:81:af:70:62:f5:f5:5e: 81:df:4e:62:95:db:07:67:f8:60:36:ae:ce:df:47: de:ac:0d:0f:85:e3:58:c5:24:e6:19:4c:13:bf:28: 40:cf:6e:82:13:e8:b2:56:d9:ff:a3:b1:70:8a:bb: f9:48:8e:de:44:0f:7c:93:2a:e7:4a:a4:fc:a0:34: df:dc:3d:d7:ee:fd:47:03:63:77:76:96:16:84:d9: 98:de:f2:8e:4d:0a:e6:c9:2a:4b:57:fb:ef:00:04: e1:93:25:24:0b:61:d7:44:0f:ce:a8:f6:a4:0e:43: 19:8f:98:fe:77:7f:be:a9:6d:7e:70:51:3b:b7:71: 9b:89:50:5c:ac:71:31:84:62:24:b8:e3:91:1b:3a: 8c:f4:01:7f:92:03:5d:51:e0:0d:31:70:6f:8e:f3: bb:ad:20:8e:e3:c5:25:7e:16:5b:55:3c:bb:10:27: e4:9e:98:a4:48:4c:06:66:c9:6f:65:2f:6a:5b:76: ba:58:ab:6e:fe:2d:b4:d2:68:98:65:0a:dd:a9:61: 7e:52:54:c6:99:a2:0a:90:ce:b6:b2:a8:fb:f0:d8: 13:29:c8:98:03:03:00:cc:d1:f0:63:bc:4b:d1:b0: ad:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D1:74:F3:1F:41:9B:6D:C8:5A:5D:E1:CA:46:19:B3:20:C7:4D:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/747397ee-2cd9-4b84-b49f-a867a86bad13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.159.32.0/19 Signature Algorithm: sha256WithRSAEncryption 83:27:6c:8d:7c:a4:d6:5e:cc:81:08:f5:d6:f2:e8:05:aa:ac: ed:ed:5e:7f:c6:a9:2e:e5:1d:58:a6:c8:8d:52:4c:5f:cb:5f: 03:57:27:79:c0:9a:0e:a0:cb:9d:77:97:49:4a:a5:56:69:a0: 83:b4:b4:b1:1b:2c:f7:a1:e1:92:04:44:8e:4e:fe:f3:ec:ad: 13:3e:0d:ca:30:5d:91:a0:9b:57:66:72:4a:8c:36:dd:78:40: 8f:b3:d9:d5:09:76:cc:a5:62:2c:e4:cc:e6:dd:f2:1f:26:55: 6c:7a:b1:fd:68:f6:67:8f:b2:7e:95:31:ae:b0:7e:79:1c:f6: 27:0f:4b:5f:a1:63:d4:b2:e8:62:ac:26:b8:f2:65:28:f3:50: ec:6f:95:cb:e5:79:37:01:66:fc:83:dd:14:9f:db:dc:4f:2b: b9:d9:13:54:fa:b9:be:b8:d6:ad:bf:40:6b:0c:10:e4:b2:fa: cd:2a:e1:e4:38:d3:68:40:76:8f:86:91:88:f5:70:92:14:44: 05:45:77:11:fa:05:0e:72:62:f6:d2:f1:b5:5d:05:35:92:c7: be:5f:54:cf:94:52:86:14:51:d1:d7:ce:ca:ee:c0:40:70:26: c0:42:75:15:bf:08:33:ce:54:8b:d2:23:93:5e:89:c5:54:05: 5a:d0:a9:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXAmYgKxAlvtj/MtV3KVALo3LGPswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE4MDAwMDAwWhcNMjQwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTA1Y2MwYWUxMDFhMmVjYWFjNTcyMDc5ZGVjZjJmZmFj OTg1MzgyMGMzYzk1NjM3NzI2MmVmZGQ2ZTFkMWJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnCFUeWqtIJsjeidBBGwfp0LY0T8HQga9wYvX1XoHfTmKV 2wdn+GA2rs7fR96sDQ+F41jFJOYZTBO/KEDPboIT6LJW2f+jsXCKu/lIjt5ED3yT KudKpPygNN/cPdfu/UcDY3d2lhaE2Zje8o5NCubJKktX++8ABOGTJSQLYddED86o 9qQOQxmPmP53f76pbX5wUTu3cZuJUFyscTGEYiS445EbOoz0AX+SA11R4A0xcG+O 87utII7jxSV+FltVPLsQJ+SemKRITAZmyW9lL2pbdrpYq27+LbTSaJhlCt2pYX5S VMaZogqQzrayqPvw2BMpyJgDAwDM0fBjvEvRsK2XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU49F08x9Bm23IWl3hykYZsyDHTTswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc0NzM5N2VlLTJjZDktNGI4NC1iNDlmLWE4NjdhODZiYWQxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXRnyAwDQYJKoZIhvcNAQELBQADggEBAIMnbI18pNZezIEI9dby6AWqrO3t Xn/GqS7lHVimyI1STF/LXwNXJ3nAmg6gy513l0lKpVZpoIO0tLEbLPeh4ZIERI5O /vPsrRM+DcowXZGgm1dmckqMNt14QI+z2dUJdsylYizkzObd8h8mVWx6sf1o9meP sn6VMa6wfnkc9icPS1+hY9Sy6GKsJrjyZSjzUOxvlcvleTcBZvyD3RSf29xPK7nZ E1T6ub641q2/QGsMEOSy+s0q4eQ402hAdo+GkYj1cJIURAVFdxH6BQ5yYvbS8bVd BTWSx75fVM+UUoYUUdHXzsruwEBwJsBCdRW/CDPOVIvSI5NeicVUBVrQqZI= -----END CERTIFICATE-----Generated at Thu May 9 01:25:34 2024 by rpki-client on console-fra.rpki-client.org