$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/790ece99-b2c6-4c63-b076-ad6f5cfc7dff.roa File: 790ece99-b2c6-4c63-b076-ad6f5cfc7dff.roa (raw, json) Hash identifier: QhEEeT3O62eEzAjVg63vSBE5ChIuLMG0ENRdH32XeLA= Subject key identifier: 01:14:85:29:52:80:3C:0F:6F:2B:7D:75:20:1B:5D:CA:7C:78:59:D8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4CC06EE5DAEFC0037546FC278347E7FF7EA0018D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/790ece99-b2c6-4c63-b076-ad6f5cfc7dff.roa Signing time: Fri 12 Apr 2024 00:00:00 +0000 ROA not before: Fri 12 Apr 2024 00:00:00 +0000 ROA not after: Fri 17 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 45.72.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c0:6e:e5:da:ef:c0:03:75:46:fc:27:83:47:e7:ff:7e:a0:01:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:00:00 2024 GMT Not After : May 17 23:59:59 2024 GMT Subject: serialNumber=b11a5ebba0770c5046f246040e4ba2ef2595ca2f6e0480d9135bffb51bc178c8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:22:15:ac:98:b4:3e:db:5b:19:ce:fc:c8:30: 4f:91:54:c6:75:aa:32:5a:92:96:6e:7f:ed:a9:df: 12:1a:45:9b:51:6c:a4:36:2e:af:65:da:9c:57:c2: e1:f3:4a:af:7e:35:9d:a4:a6:67:d8:c3:00:0a:55: c1:d7:19:2e:4f:98:35:74:be:05:e9:d0:9d:c6:9a: 9e:e5:9c:a0:0d:e7:ad:25:b1:c3:0d:0c:3c:92:a0: 7a:bb:84:11:ae:a0:8b:93:af:93:d5:dc:97:4e:d2: 87:cf:ee:0c:9f:13:bb:4b:1c:22:49:86:ff:05:be: 75:c1:bb:d3:5e:18:e8:e9:e6:4f:c5:c6:6f:ee:0f: b4:41:cc:73:14:98:4c:71:b4:31:f9:ec:1d:32:af: 59:2b:42:f8:75:90:54:10:8a:4a:c8:a2:f0:ed:ce: ff:7d:c3:d3:98:01:70:80:b4:f1:c2:bc:2a:ac:af: c4:bd:35:f2:db:de:19:0b:25:98:21:b5:c7:46:c0: da:66:11:ff:9f:23:3e:36:5e:74:09:e3:3a:77:71: 5e:77:42:18:78:36:7e:63:3f:0c:b8:59:23:ad:ac: 18:93:7e:bd:5b:05:eb:ae:1c:87:7a:29:26:c6:5d: da:1e:40:52:5e:17:1a:ff:6f:34:91:ce:e9:3a:40: 9d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:14:85:29:52:80:3C:0F:6F:2B:7D:75:20:1B:5D:CA:7C:78:59:D8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/790ece99-b2c6-4c63-b076-ad6f5cfc7dff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.72.0.0/17 Signature Algorithm: sha256WithRSAEncryption 7a:f1:89:0b:36:ef:ad:da:92:33:45:9c:8a:fc:d2:27:33:7b: 5c:89:28:cc:73:8f:67:53:5b:fa:a4:43:84:3f:0c:56:e0:e0: 37:63:55:0b:c0:1b:71:17:e2:87:07:b5:0c:eb:2c:8c:8c:55: 7b:b4:e4:9a:05:e3:5c:fd:a6:ef:38:2f:77:26:3f:f8:24:cf: 26:e4:cc:a5:8c:65:ab:86:fb:ff:e0:fc:13:ad:43:c0:dc:fa: c9:e5:6e:90:1f:0c:5f:6c:6b:6e:e4:d2:07:9f:76:30:0d:d9: 90:68:40:72:75:57:a3:ef:ef:79:22:1c:4c:21:f4:5c:71:19: ac:3a:1e:cc:e9:e1:a6:7c:be:02:2a:50:72:1f:35:15:ac:b4: 2f:4b:f0:ec:28:22:da:13:8b:13:f3:e0:ea:84:ab:a7:fc:81: 71:b0:5d:ec:b3:01:7f:6e:f2:d5:44:c4:4d:14:e9:c0:9d:f8: c5:e3:52:99:70:9c:32:db:b5:ea:4f:b8:4f:90:fd:2d:08:ac: fd:d0:c9:5a:df:f8:b5:b0:c8:4b:5e:6d:3b:30:34:e6:cb:c1: 25:e5:03:67:63:a4:ad:fd:e2:75:17:57:69:73:e0:75:10:09: da:af:6e:fb:fb:25:50:6d:1f:75:e5:56:85:52:6c:d5:06:24: 66:c9:b9:13 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTMBu5drvwAN1Rvwng0fn/36gAY0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEyMDAwMDAwWhcNMjQwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTFhNWViYmEwNzcwYzUwNDZmMjQ2MDQwZTRiYTJlZjI1 OTVjYTJmNmUwNDgwZDkxMzViZmZiNTFiYzE3OGM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpIhWsmLQ+21sZzvzIME+RVMZ1qjJakpZuf+2p3xIaRZtR bKQ2Lq9l2pxXwuHzSq9+NZ2kpmfYwwAKVcHXGS5PmDV0vgXp0J3Gmp7lnKAN560l scMNDDySoHq7hBGuoIuTr5PV3JdO0ofP7gyfE7tLHCJJhv8FvnXBu9NeGOjp5k/F xm/uD7RBzHMUmExxtDH57B0yr1krQvh1kFQQikrIovDtzv99w9OYAXCAtPHCvCqs r8S9NfLb3hkLJZghtcdGwNpmEf+fIz42XnQJ4zp3cV53Qhh4Nn5jPwy4WSOtrBiT fr1bBeuuHId6KSbGXdoeQFJeFxr/bzSRzuk6QJ0RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUARSFKVKAPA9vK311IBtdynx4WdgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc5MGVjZTk5LWIyYzYtNGM2My1iMDc2LWFkNmY1Y2ZjN2RmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBActSAAwDQYJKoZIhvcNAQELBQADggEBAHrxiQs2763akjNFnIr80icze1yJ KMxzj2dTW/qkQ4Q/DFbg4DdjVQvAG3EX4ocHtQzrLIyMVXu05JoF41z9pu84L3cm P/gkzybkzKWMZauG+//g/BOtQ8Dc+snlbpAfDF9sa27k0gefdjAN2ZBoQHJ1V6Pv 73kiHEwh9FxxGaw6Hszp4aZ8vgIqUHIfNRWstC9L8OwoItoTixPz4OqEq6f8gXGw XeyzAX9u8tVExE0U6cCd+MXjUplwnDLbtepPuE+Q/S0IrP3QyVrf+LWwyEtebTsw NObLwSXlA2djpK394nUXV2lz4HUQCdqvbvv7JVBtH3XlVoVSbNUGJGbJuRM= -----END CERTIFICATE-----Generated at Wed May 1 22:06:36 2024 by rpki-client on console-fra.rpki-client.org