$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dd5209c-4ed5-4bfa-b0f5-f1f1242379bf.roa File: 7dd5209c-4ed5-4bfa-b0f5-f1f1242379bf.roa (raw, json) Hash identifier: pRXLHLCKzYUuexWs6+s+iph605xx0SPURw64I12Vbk4= Subject key identifier: 41:02:A6:C1:CB:D4:74:1C:78:D8:FB:AA:0E:B5:89:27:53:BA:DE:B1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 112B68062FF1903A8917D9936431B9BCF88C5548 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dd5209c-4ed5-4bfa-b0f5-f1f1242379bf.roa Signing time: Wed 17 Apr 2024 00:00:00 +0000 ROA not before: Wed 17 Apr 2024 00:00:00 +0000 ROA not after: Wed 22 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 206.131.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:2b:68:06:2f:f1:90:3a:89:17:d9:93:64:31:b9:bc:f8:8c:55:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 17 00:00:00 2024 GMT Not After : May 22 23:59:59 2024 GMT Subject: serialNumber=0d8f02fd664e49057ed11feb7641c84182c207ecf1cc8476d8f21a4c8117acea, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6a:2e:c5:28:41:05:1a:ad:6c:7b:36:30:43: f7:fe:d1:12:fc:9e:f6:57:6d:8d:93:05:fa:78:66: aa:71:8f:b1:8a:fc:76:2f:8d:1c:fe:0a:7e:47:47: b7:79:a0:5e:18:03:f2:06:a3:3e:b2:4a:ea:57:7a: 14:07:d4:20:2e:14:d2:74:9d:10:40:a7:ae:b0:6f: 25:35:1d:fb:97:19:61:de:6f:83:02:68:58:4e:08: 47:91:79:ec:a4:71:00:4c:2d:ec:57:3b:0d:1e:91: 4d:57:6d:3b:87:78:52:77:30:2f:32:76:bc:24:85: 83:86:69:4f:66:a1:4c:57:d7:29:f4:74:db:bb:54: 20:b6:b0:b6:3f:9b:cc:cd:4d:98:2c:ae:42:c0:dd: d3:69:e8:48:c8:e9:ae:e6:4e:7f:63:30:d3:47:57: 81:76:e7:e8:22:a3:85:c0:40:65:9a:fb:ea:66:ab: be:49:7f:d3:4a:31:c4:46:7f:e8:7f:16:27:28:1c: 6f:65:c6:09:1d:d2:cc:bc:dd:bf:54:b9:a6:90:2d: 6d:37:d2:20:6c:f3:ef:1a:21:4e:81:af:df:a3:16: 57:34:4e:a5:56:0b:7c:f6:a4:5d:b7:84:8c:4d:9c: c7:e0:86:33:d0:63:b1:e1:b0:2d:34:c1:da:df:09: 2a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:02:A6:C1:CB:D4:74:1C:78:D8:FB:AA:0E:B5:89:27:53:BA:DE:B1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dd5209c-4ed5-4bfa-b0f5-f1f1242379bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.131.0.0/17 Signature Algorithm: sha256WithRSAEncryption 36:16:89:3d:39:95:7b:f4:62:67:f0:82:cd:bf:d8:39:a9:37: 4a:d3:c8:ed:5e:da:f7:96:a2:a6:2d:69:1a:52:6e:4a:34:1e: cc:02:8f:b1:14:bd:31:c1:6c:7d:99:ac:b2:b9:88:6a:73:d9: 0c:ba:d5:f1:fd:52:9b:33:bf:f9:e9:cb:36:f0:79:c8:a4:45: b2:d4:b2:36:1d:20:ff:fc:cc:12:92:f9:eb:b7:0f:6b:ac:02: c5:98:e2:46:3c:e4:a6:7b:62:20:8d:26:bf:b4:55:70:12:f2: b5:cd:7a:03:78:47:5f:b2:ea:a1:32:25:75:28:70:de:b1:26: af:b6:79:af:c2:0a:81:4b:4e:a7:62:8e:68:9a:53:98:e0:81: d8:77:79:d1:ee:89:46:69:fd:8a:b6:77:42:60:79:ae:8d:b9: 69:78:4f:09:d1:2a:fa:f3:b9:d0:55:ab:40:92:96:3b:0a:89: 3f:aa:be:e2:56:33:31:35:0b:cc:25:ce:4a:57:22:2e:04:ff: b9:fa:01:66:73:39:05:0d:e5:7c:15:09:2f:62:0b:58:bc:ab: 02:8b:02:4d:08:58:15:c1:2e:e8:5b:4b:c1:78:df:ec:75:1b: fb:49:e8:74:fd:b1:d8:fc:9f:c5:29:f6:49:0c:3a:05:bc:f8: 03:c0:5f:f1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEStoBi/xkDqJF9mTZDG5vPiMVUgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE3MDAwMDAwWhcNMjQwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDhmMDJmZDY2NGU0OTA1N2VkMTFmZWI3NjQxYzg0MTgy YzIwN2VjZjFjYzg0NzZkOGYyMWE0YzgxMTdhY2VhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaai7FKEEFGq1sezYwQ/f+0RL8nvZXbY2TBfp4Zqpxj7GK /HYvjRz+Cn5HR7d5oF4YA/IGoz6ySupXehQH1CAuFNJ0nRBAp66wbyU1HfuXGWHe b4MCaFhOCEeReeykcQBMLexXOw0ekU1XbTuHeFJ3MC8ydrwkhYOGaU9moUxX1yn0 dNu7VCC2sLY/m8zNTZgsrkLA3dNp6EjI6a7mTn9jMNNHV4F25+gio4XAQGWa++pm q75Jf9NKMcRGf+h/FicoHG9lxgkd0sy83b9UuaaQLW030iBs8+8aIU6Br9+jFlc0 TqVWC3z2pF23hIxNnMfghjPQY7HhsC00wdrfCSq/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQQKmwcvUdBx42PuqDrWJJ1O63rEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkZDUyMDljLTRlZDUtNGJmYS1iMGY1LWYxZjEyNDIzNzliZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfOgwAwDQYJKoZIhvcNAQELBQADggEBADYWiT05lXv0Ymfwgs2/2DmpN0rT yO1e2veWoqYtaRpSbko0HswCj7EUvTHBbH2ZrLK5iGpz2Qy61fH9Upszv/npyzbw ecikRbLUsjYdIP/8zBKS+eu3D2usAsWY4kY85KZ7YiCNJr+0VXAS8rXNegN4R1+y 6qEyJXUocN6xJq+2ea/CCoFLTqdijmiaU5jggdh3edHuiUZp/Yq2d0Jgea6NuWl4 TwnRKvrzudBVq0CSljsKiT+qvuJWMzE1C8wlzkpXIi4E/7n6AWZzOQUN5XwVCS9i C1i8qwKLAk0IWBXBLuhbS8F43+x1G/tJ6HT9sdj8n8Up9kkMOgW8+APAX/E= -----END CERTIFICATE-----Generated at Thu May 9 01:25:35 2024 by rpki-client on console-fra.rpki-client.org