$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7538292c-9697-4822-8500-3088da3cb9a2.roa File: 7538292c-9697-4822-8500-3088da3cb9a2.roa (raw, json) Hash identifier: Ge0DissS0PKMex5zTNl0Iw0ruhSb1JgC8oBnsT5b8iA= Subject key identifier: 04:1A:3A:09:BD:88:1E:21:E1:E0:FE:8A:8A:69:90:B0:97:FC:23:8A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6F714F2EE0B16B1651D92529293AB0F7C5D14459 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7538292c-9697-4822-8500-3088da3cb9a2.roa Signing time: Tue 30 Apr 2024 00:00:00 +0000 ROA not before: Tue 30 Apr 2024 00:00:00 +0000 ROA not after: Tue 04 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 209.88.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:71:4f:2e:e0:b1:6b:16:51:d9:25:29:29:3a:b0:f7:c5:d1:44:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 30 00:00:00 2024 GMT Not After : Jun 4 23:59:59 2024 GMT Subject: serialNumber=53d73d7f0951d0506463ec05dc0eb9fe172ec0c7c9fc8489196488c44637c312, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1f:b2:c8:2e:01:f3:17:af:e4:74:db:24:d6: 9c:3f:37:10:18:47:e7:fc:fd:bf:4f:6f:cb:55:a9: 47:f6:31:d3:d4:d5:f2:e1:88:9b:ac:3d:a2:32:40: 84:d9:67:d0:e8:0e:66:9e:e7:7e:77:28:72:72:77: e2:dc:3c:ec:03:8c:ab:55:59:74:09:56:e7:d9:b1: b4:63:70:f5:ff:5d:fe:0e:54:d3:ca:1c:41:72:12: b7:cd:4a:37:4b:71:e9:e5:75:de:61:91:ab:02:ea: ee:eb:de:8a:b8:89:c4:a8:a5:46:64:19:05:e7:53: 69:f1:d0:76:00:e9:a9:e0:39:4e:6e:65:61:2e:71: dd:36:9a:3f:90:d7:12:6e:d9:89:9b:c9:9c:e4:57: 9c:e7:d3:c1:fd:ed:8c:a0:0c:fd:9f:3d:7f:7a:88: ed:8d:86:60:c0:d6:29:c8:a7:fc:e6:06:65:70:52: 82:62:7e:4b:d9:be:71:5b:46:26:e6:4c:3c:df:e9: 96:8d:cc:f2:14:38:eb:23:f8:97:4e:b7:4e:1d:be: aa:bd:5a:5b:76:2b:a7:b8:f6:24:ef:a2:87:e2:dc: 67:6a:9a:f5:f8:18:8f:ec:34:8f:11:72:8f:08:e7: ef:ed:ed:1f:e6:fc:96:4d:d2:f5:5b:94:e4:b6:40: e9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1A:3A:09:BD:88:1E:21:E1:E0:FE:8A:8A:69:90:B0:97:FC:23:8A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7538292c-9697-4822-8500-3088da3cb9a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.88.0.0/16 Signature Algorithm: sha256WithRSAEncryption 53:52:24:6c:6f:c0:45:f1:07:29:12:9a:51:7d:cc:ba:95:07: d0:74:bb:cf:9b:f9:f5:9a:90:dd:20:39:2a:53:ee:c0:19:23: a0:29:c6:d4:31:86:7e:00:00:8d:36:e2:6e:5a:32:9b:d4:5f: 73:ad:17:f2:67:ca:e9:25:08:2a:89:f2:d7:06:77:62:70:fb: fb:4b:e2:91:15:a5:1b:69:79:f8:42:41:ec:fb:1b:ef:1c:d3: 24:43:ee:78:b6:6a:47:72:56:fa:1b:38:14:3e:8e:78:02:9f: 63:42:34:f3:7b:9d:52:f8:f6:d7:77:a4:5f:2c:36:68:c5:f7: fb:73:82:11:02:02:ef:f9:e7:4f:d2:01:4a:71:17:98:d0:fd: 6f:1b:ee:f3:98:b4:04:9b:aa:08:1f:e9:bb:e5:1a:da:ce:44: 2a:66:6c:2b:34:a2:9e:e8:0e:49:95:22:a0:74:7d:37:df:70: b8:f9:96:b0:5d:38:7a:68:ab:7f:6a:aa:72:a8:92:61:a8:b8: d8:d6:13:b6:3a:55:d0:97:ba:35:8e:d7:d8:37:9f:e2:1c:e6: db:54:42:43:1e:c4:42:9b:1d:00:ad:72:4a:2c:c2:1c:50:89: 06:4a:33:e4:57:8d:d2:d1:cd:48:cd:82:be:fa:f4:f9:1b:a8: cb:dd:cf:e6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUb3FPLuCxaxZR2SUpKTqw98XRRFkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDMwMDAwMDAwWhcNMjQwNjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1M2Q3M2Q3ZjA5NTFkMDUwNjQ2M2VjMDVkYzBlYjlmZTE3 MmVjMGM3YzlmYzg0ODkxOTY0ODhjNDQ2MzdjMzEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxH7LILgHzF6/kdNsk1pw/NxAYR+f8/b9Pb8tVqUf2MdPU 1fLhiJusPaIyQITZZ9DoDmae5353KHJyd+LcPOwDjKtVWXQJVufZsbRjcPX/Xf4O VNPKHEFyErfNSjdLcenldd5hkasC6u7r3oq4icSopUZkGQXnU2nx0HYA6angOU5u ZWEucd02mj+Q1xJu2YmbyZzkV5zn08H97YygDP2fPX96iO2NhmDA1inIp/zmBmVw UoJifkvZvnFbRibmTDzf6ZaNzPIUOOsj+JdOt04dvqq9Wlt2K6e49iTvoofi3Gdq mvX4GI/sNI8Rco8I5+/t7R/m/JZN0vVblOS2QOnjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUBBo6Cb2IHiHh4P6KimmQsJf8I4owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1MzgyOTJjLTk2OTctNDgyMi04NTAwLTMwODhkYTNjYjlhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDRWDANBgkqhkiG9w0BAQsFAAOCAQEAU1IkbG/ARfEHKRKaUX3MupUH0HS7 z5v59ZqQ3SA5KlPuwBkjoCnG1DGGfgAAjTbibloym9Rfc60X8mfK6SUIKony1wZ3 YnD7+0vikRWlG2l5+EJB7Psb7xzTJEPueLZqR3JW+hs4FD6OeAKfY0I083udUvj2 13ekXyw2aMX3+3OCEQIC7/nnT9IBSnEXmND9bxvu85i0BJuqCB/pu+Ua2s5EKmZs KzSinugOSZUioHR9N99wuPmWsF04emirf2qqcqiSYai42NYTtjpV0Je6NY7X2Def 4hzm21RCQx7EQpsdAK1ySizCHFCJBkoz5FeN0tHNSM2Cvvr0+Ruoy93P5g== -----END CERTIFICATE-----Generated at Fri May 3 00:47:26 2024 by rpki-client on console-ams.rpki-client.org