$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8063696a-4d59-4817-bf19-72bdf8b8f250.roa File: 8063696a-4d59-4817-bf19-72bdf8b8f250.roa (raw, json) Hash identifier: EoNd3RFQVoNNe/5p+t+v8GxN97A9n5DyS7Ct7yF/UwY= Subject key identifier: C1:E2:1E:78:93:3B:1F:40:D3:E3:E6:75:AA:BB:52:F4:29:E9:C3:B7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6DC221E36D54689D20B4CF6388A1B66E19F02CA6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8063696a-4d59-4817-bf19-72bdf8b8f250.roa Signing time: Tue 09 Apr 2024 00:00:00 +0000 ROA not before: Tue 09 Apr 2024 00:00:00 +0000 ROA not after: Tue 14 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 198.14.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c2:21:e3:6d:54:68:9d:20:b4:cf:63:88:a1:b6:6e:19:f0:2c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:00:00 2024 GMT Not After : May 14 23:59:59 2024 GMT Subject: serialNumber=2921e58e2efbcb5029c7bcdc973a7aadb392ff5fb8141347adc134a0636ec2fb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:26:74:99:65:07:a2:d3:d6:d4:c8:c1:5a:54: 6c:64:df:7f:2d:83:67:a0:af:79:ca:b9:61:ab:57: 49:3b:5b:55:53:6d:05:cd:71:1f:50:d3:69:3a:e7: 9d:af:d8:3e:d7:c9:2b:35:bb:79:f4:a1:f4:e9:88: 6d:36:da:36:e2:c6:2c:77:1c:b8:40:71:11:2d:ff: 1e:c7:0e:f4:95:d7:0d:8a:22:84:54:a7:f2:be:b5: 35:65:79:25:dd:aa:61:35:59:1e:ac:49:a7:99:9b: 52:30:cc:82:15:05:dd:1b:4f:1b:f4:55:72:ae:50: fe:82:aa:36:10:53:b4:08:aa:db:9a:22:0c:82:79: 3a:18:1c:98:3c:a4:99:3a:4a:7c:7d:9e:f4:a5:76: 9e:9d:02:18:6f:47:c8:37:f8:f9:05:e7:3f:23:d6: eb:08:46:a8:63:ac:94:d3:d9:09:c2:27:e0:e9:9d: 8e:92:fc:14:f2:d5:68:aa:59:e3:64:75:db:19:45: 4e:c3:f9:9e:cb:d3:f1:a3:b9:40:1e:33:95:36:bb: f9:5d:98:48:e0:58:61:ed:d6:72:6a:95:a2:3b:d8: 6d:90:7b:1f:e4:d1:4e:24:da:2e:09:22:a5:cd:a9: d7:2d:a2:b6:b8:5e:4d:da:ef:f6:66:a4:f9:17:18: 9e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E2:1E:78:93:3B:1F:40:D3:E3:E6:75:AA:BB:52:F4:29:E9:C3:B7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8063696a-4d59-4817-bf19-72bdf8b8f250.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.14.0.0/24 Signature Algorithm: sha256WithRSAEncryption 62:bc:3a:b9:ea:00:12:d6:b2:02:7c:a9:77:4f:d0:52:28:fb: 33:5c:03:37:e3:e5:d7:75:5e:ea:4d:eb:e8:ad:eb:c2:db:89: f4:76:c7:23:ed:df:8d:5c:d6:b6:fc:f8:d4:cf:52:3b:45:1c: 1b:3a:64:07:1e:a5:60:2b:91:68:99:22:9e:a3:e1:5b:e2:6b: 94:86:19:65:b3:c3:5f:c4:fe:d2:0f:02:be:e7:9f:d7:9a:b6: b1:9a:0e:f1:80:bf:3b:98:42:cc:e2:43:77:a4:03:e8:31:b8: fe:02:5a:23:2d:88:40:1e:f8:e2:8f:26:70:3d:7c:91:20:29: 3f:69:fb:02:fc:a3:a9:37:0b:36:ff:a3:e9:d0:2e:c5:ec:2c: 65:f5:83:7d:ea:f7:3c:e9:46:7c:1a:94:9e:7c:2c:20:85:10: 72:b5:f1:5c:91:a6:83:c4:9a:f4:b0:55:6d:ca:3b:1d:a2:04: f3:dd:5b:1e:41:e7:4d:1f:d0:fa:8c:45:c0:95:3c:f8:f9:5b: a6:5b:55:6d:de:16:af:25:84:95:0e:1f:68:50:54:01:19:4d: 0b:b9:48:eb:fb:10:10:d4:37:96:1c:bc:f2:27:36:63:7f:1e: 13:0f:e0:d5:38:21:da:c1:35:4f:a6:b9:a8:4e:21:ec:b5:65: 29:e8:01:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbcIh421UaJ0gtM9jiKG2bhnwLKYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA5MDAwMDAwWhcNMjQwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTIxZTU4ZTJlZmJjYjUwMjljN2JjZGM5NzNhN2FhZGIz OTJmZjVmYjgxNDEzNDdhZGMxMzRhMDYzNmVjMmZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKJnSZZQei09bUyMFaVGxk338tg2egr3nKuWGrV0k7W1VT bQXNcR9Q02k6552v2D7XySs1u3n0ofTpiG022jbixix3HLhAcREt/x7HDvSV1w2K IoRUp/K+tTVleSXdqmE1WR6sSaeZm1IwzIIVBd0bTxv0VXKuUP6CqjYQU7QIqtua IgyCeToYHJg8pJk6Snx9nvSldp6dAhhvR8g3+PkF5z8j1usIRqhjrJTT2QnCJ+Dp nY6S/BTy1WiqWeNkddsZRU7D+Z7L0/GjuUAeM5U2u/ldmEjgWGHt1nJqlaI72G2Q ex/k0U4k2i4JIqXNqdctora4Xk3a7/ZmpPkXGJ6JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUweIeeJM7H0DT4+Z1qrtS9Cnpw7cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgwNjM2OTZhLTRkNTktNDgxNy1iZjE5LTcyYmRmOGI4ZjI1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGDgAwDQYJKoZIhvcNAQELBQADggEBAGK8OrnqABLWsgJ8qXdP0FIo+zNc Azfj5dd1XupN6+it68LbifR2xyPt341c1rb8+NTPUjtFHBs6ZAcepWArkWiZIp6j 4Vvia5SGGWWzw1/E/tIPAr7nn9eatrGaDvGAvzuYQsziQ3ekA+gxuP4CWiMtiEAe +OKPJnA9fJEgKT9p+wL8o6k3Czb/o+nQLsXsLGX1g33q9zzpRnwalJ58LCCFEHK1 8VyRpoPEmvSwVW3KOx2iBPPdWx5B500f0PqMRcCVPPj5W6ZbVW3eFq8lhJUOH2hQ VAEZTQu5SOv7EBDUN5YcvPInNmN/HhMP4NU4IdrBNU+muahOIey1ZSnoAXY= -----END CERTIFICATE-----Generated at Thu May 2 20:48:41 2024 by rpki-client on console-fra.rpki-client.org