$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d8f5ef-89bb-4e51-97b7-c522572af87c.roa File: 75d8f5ef-89bb-4e51-97b7-c522572af87c.roa (raw, json) Hash identifier: IHWYTmIS+b1+8XVs+09q6zLQGd3p/k25BGfokuak4+I= Subject key identifier: 91:2A:7C:DC:43:95:7F:FC:F9:78:D9:AE:A2:A1:D0:7D:8E:01:E2:00 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31903521FA7AEEA6CB713DABB52B0C9627F30220 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d8f5ef-89bb-4e51-97b7-c522572af87c.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 99.78.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:90:35:21:fa:7a:ee:a6:cb:71:3d:ab:b5:2b:0c:96:27:f3:02:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=8cf02a826ff7ea3b15074ae0828a7fca3d283c157c284221bbc823ba4c33e877, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:de:8b:03:af:dd:2f:85:1b:e4:82:a1:a5:46: 3c:60:c4:da:13:05:41:cb:d2:00:40:b1:9c:20:0d: b2:ae:ca:dc:2e:e5:1c:c8:ef:70:33:06:f2:73:1d: 55:1d:3c:fe:e9:99:0f:67:4f:0e:fa:e2:70:7a:2a: b4:a4:77:90:f1:2c:33:49:5e:04:73:e8:2e:dd:df: 8e:b2:4d:18:9e:c6:a5:38:7c:b5:78:bb:ba:24:bd: e6:69:5f:c3:d7:ed:b9:14:99:2a:c1:5a:75:5d:62: 8a:9a:1b:d1:4c:dc:9a:2d:6d:f1:fa:d3:32:23:30: 08:59:c0:b8:c1:0c:2e:9a:20:a6:28:44:d5:06:64: 32:32:e7:3a:71:36:34:6b:d9:b5:af:c2:9a:4b:eb: c3:99:ee:3f:e4:b1:98:4b:ee:dd:cf:4f:4e:2a:fa: 11:63:3f:10:3e:eb:d8:eb:08:8b:9c:17:fd:eb:6b: 48:be:a5:43:4e:ee:d4:88:9c:a2:92:37:d5:75:2a: 1c:bb:4f:c9:de:23:6e:9c:04:f7:5c:8a:72:64:68: e5:6a:19:e8:ea:7d:32:0b:20:fc:27:89:a5:33:90: 08:b0:ce:7b:92:09:b9:2c:7c:e0:5a:b2:f5:03:b4: a8:58:33:eb:4b:28:ce:85:93:d7:f9:f4:f9:50:ef: 2c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2A:7C:DC:43:95:7F:FC:F9:78:D9:AE:A2:A1:D0:7D:8E:01:E2:00 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d8f5ef-89bb-4e51-97b7-c522572af87c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.78.128.0/17 Signature Algorithm: sha256WithRSAEncryption 92:f3:df:65:50:02:a0:97:74:de:7c:4e:d3:41:ac:dc:97:93: d3:f4:88:0c:64:9e:d0:7b:b6:fc:2f:2a:1a:eb:ba:64:64:c5: cd:26:09:a8:4b:8a:f8:9a:c2:71:1a:77:a0:24:bf:ec:46:b2: 14:03:5d:0e:c9:26:46:a1:fc:4b:82:4f:36:30:77:91:97:cf: 99:72:a6:a8:75:b0:52:e0:e1:c0:8f:ea:97:ea:14:81:9f:34: 34:21:02:f3:60:e5:fa:1b:d1:9f:49:66:cf:23:33:7a:18:dd: e7:a6:8f:2a:80:c8:87:37:f1:8b:fd:26:fd:7b:ea:e0:af:53: 6b:8e:66:a6:75:05:86:f1:8a:77:78:84:34:b5:bd:00:07:d3: b8:21:47:2e:be:35:5d:e1:98:3a:c9:a3:a3:d2:ac:83:59:e6: 55:1a:1e:30:39:dd:5f:d6:1b:bd:33:f5:5c:ac:a6:3d:8e:63: 0e:de:da:95:8d:c0:02:7a:5b:18:80:a5:48:1b:86:a7:1c:5f: 7e:47:0f:03:83:4f:9a:d0:44:b9:05:58:c4:b1:bf:fc:fc:50: e5:4d:5a:28:65:74:b4:c1:76:e2:10:74:57:04:23:94:63:d0: 26:73:89:e3:71:71:24:3a:33:a2:5c:de:54:09:5e:82:37:c1: 1b:62:6e:a7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMZA1Ifp67qbLcT2rtSsMlifzAiAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4Y2YwMmE4MjZmZjdlYTNiMTUwNzRhZTA4MjhhN2ZjYTNk MjgzYzE1N2MyODQyMjFiYmM4MjNiYTRjMzNlODc3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV3osDr90vhRvkgqGlRjxgxNoTBUHL0gBAsZwgDbKuytwu 5RzI73AzBvJzHVUdPP7pmQ9nTw764nB6KrSkd5DxLDNJXgRz6C7d346yTRiexqU4 fLV4u7okveZpX8PX7bkUmSrBWnVdYoqaG9FM3JotbfH60zIjMAhZwLjBDC6aIKYo RNUGZDIy5zpxNjRr2bWvwppL68OZ7j/ksZhL7t3PT04q+hFjPxA+69jrCIucF/3r a0i+pUNO7tSInKKSN9V1Khy7T8neI26cBPdcinJkaOVqGejqfTILIPwniaUzkAiw znuSCbksfOBasvUDtKhYM+tLKM6Fk9f59PlQ7yyRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkSp83EOVf/z5eNmuoqHQfY4B4gAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1ZDhmNWVmLTg5YmItNGU1MS05N2I3LWM1MjI1NzJhZjg3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdjToAwDQYJKoZIhvcNAQELBQADggEBAJLz32VQAqCXdN58TtNBrNyXk9P0 iAxkntB7tvwvKhrrumRkxc0mCahLiviawnEad6Akv+xGshQDXQ7JJkah/EuCTzYw d5GXz5lypqh1sFLg4cCP6pfqFIGfNDQhAvNg5fob0Z9JZs8jM3oY3eemjyqAyIc3 8Yv9Jv176uCvU2uOZqZ1BYbxind4hDS1vQAH07ghRy6+NV3hmDrJo6PSrINZ5lUa HjA53V/WG70z9Vyspj2OYw7e2pWNwAJ6WxiApUgbhqccX35HDwODT5rQRLkFWMSx v/z8UOVNWihldLTBduIQdFcEI5Rj0CZzieNxcSQ6M6Jc3lQJXoI3wRtibqc= -----END CERTIFICATE-----Generated at Thu May 2 08:02:33 2024 by rpki-client on console-ams.rpki-client.org