$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8554ecf9-d083-423a-874d-3662c284ee4a.roa File: 8554ecf9-d083-423a-874d-3662c284ee4a.roa (raw, json) Hash identifier: rdnk66ehe9Zr6FqkORnDIpVaTDw37fTgeNCeiw5riRE= Subject key identifier: 39:F6:4E:40:42:27:DD:96:52:A8:D9:B5:BC:D6:F3:20:F9:4F:5D:4C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1804A6148551B8EBEFA3AA96A5ABF9F9484676AE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8554ecf9-d083-423a-874d-3662c284ee4a.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 40.172.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:04:a6:14:85:51:b8:eb:ef:a3:aa:96:a5:ab:f9:f9:48:46:76:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=91f2cd3a880cb4369bdfb1569751401ee174480cc2a7c4bfa8c4832ff2dfac51, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8b:bf:74:11:f5:2e:62:68:9d:52:8f:97:18: 1d:6a:48:cd:c3:60:05:98:9f:f5:a9:36:f6:d8:e3: 09:55:9d:8e:a8:44:9c:53:87:6c:55:00:2a:27:97: 54:e9:47:7f:03:0a:90:06:2d:75:0d:3d:4d:23:c9: b9:ad:1a:e3:a3:ba:f2:bc:74:fd:5b:b3:71:5c:62: 9c:5b:24:1d:bd:4a:07:5f:af:76:12:57:25:fd:38: 5a:99:a2:aa:24:40:e1:23:bd:1d:97:c1:51:c1:e9: 45:21:45:00:cc:35:ae:0a:fe:66:32:8f:16:cd:6d: bb:e6:7c:b2:c1:5a:46:7b:61:9f:af:a8:14:72:5d: 51:7e:b1:11:06:60:7b:b8:b7:a8:7a:4f:b9:af:02: 51:24:03:3f:76:ca:2f:9b:e1:17:51:f4:46:24:23: 57:42:0d:18:81:39:30:64:46:a3:84:5e:0b:e2:47: ce:be:c7:50:86:7b:a5:1d:d1:33:15:a0:39:28:a8: fe:55:42:66:25:26:d7:92:94:26:2e:8c:57:1b:11: ca:c7:ac:41:05:8c:2f:30:05:b5:2b:b8:e0:4e:2b: 1b:7b:9d:43:aa:47:16:78:0f:b6:c2:2e:f3:36:b8: f0:9e:7f:7d:ab:01:3e:4c:a2:ed:95:41:94:0a:15: 42:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F6:4E:40:42:27:DD:96:52:A8:D9:B5:BC:D6:F3:20:F9:4F:5D:4C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8554ecf9-d083-423a-874d-3662c284ee4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.172.0.0/14 Signature Algorithm: sha256WithRSAEncryption 34:7c:27:c6:2d:c0:27:18:89:26:fe:b7:80:50:10:12:4a:73: 8b:46:ee:f9:7d:4f:a5:a2:b0:aa:46:f4:1e:6e:5a:d8:70:7b: 96:34:27:39:98:86:97:20:4c:63:9a:56:ba:06:aa:de:d1:46: 6a:e3:76:c7:28:b9:f6:cf:34:81:96:a3:f3:36:94:fb:34:67: d6:ad:8b:82:47:18:a2:8f:78:35:84:52:7b:0c:06:08:5d:2b: 4a:20:3f:bf:15:c4:5d:57:9f:60:37:a6:8f:ab:03:cf:ea:fd: b3:bc:35:a7:54:2b:f5:84:5a:77:ab:a7:e8:ea:20:ba:06:c7: e0:5f:72:cd:e8:7d:c2:86:03:c3:db:ea:06:bd:fe:23:8a:b5: e5:49:6c:4c:21:68:8c:5b:f8:be:0d:06:8f:70:8c:35:a8:28: a8:38:3b:c5:95:4a:00:80:79:cf:17:e1:68:fb:7e:f5:f7:32: b9:6b:27:a5:32:8d:b6:87:c7:2a:15:23:26:a8:55:40:73:c4: 48:b4:1d:b2:ca:1e:4e:28:93:6d:55:84:9b:22:2f:71:4e:72: 03:c7:65:82:59:14:61:96:8d:20:76:20:33:8e:24:88:10:82: 0c:65:bb:e1:94:09:3a:ee:6d:67:dd:f1:8a:33:9b:37:17:13: 00:ae:29:de -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGASmFIVRuOvvo6qWpav5+UhGdq4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MWYyY2QzYTg4MGNiNDM2OWJkZmIxNTY5NzUxNDAxZWUx NzQ0ODBjYzJhN2M0YmZhOGM0ODMyZmYyZGZhYzUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgi790EfUuYmidUo+XGB1qSM3DYAWYn/WpNvbY4wlVnY6o RJxTh2xVAConl1TpR38DCpAGLXUNPU0jybmtGuOjuvK8dP1bs3FcYpxbJB29Sgdf r3YSVyX9OFqZoqokQOEjvR2XwVHB6UUhRQDMNa4K/mYyjxbNbbvmfLLBWkZ7YZ+v qBRyXVF+sREGYHu4t6h6T7mvAlEkAz92yi+b4RdR9EYkI1dCDRiBOTBkRqOEXgvi R86+x1CGe6Ud0TMVoDkoqP5VQmYlJteSlCYujFcbEcrHrEEFjC8wBbUruOBOKxt7 nUOqRxZ4D7bCLvM2uPCef32rAT5Mou2VQZQKFUJDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUOfZOQEIn3ZZSqNm1vNbzIPlPXUwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg1NTRlY2Y5LWQwODMtNDIzYS04NzRkLTM2NjJjMjg0ZWU0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIorDANBgkqhkiG9w0BAQsFAAOCAQEANHwnxi3AJxiJJv63gFAQEkpzi0bu +X1PpaKwqkb0Hm5a2HB7ljQnOZiGlyBMY5pWugaq3tFGauN2xyi59s80gZaj8zaU +zRn1q2LgkcYoo94NYRSewwGCF0rSiA/vxXEXVefYDemj6sDz+r9s7w1p1Qr9YRa d6un6OogugbH4F9yzeh9woYDw9vqBr3+I4q15UlsTCFojFv4vg0Gj3CMNagoqDg7 xZVKAIB5zxfhaPt+9fcyuWsnpTKNtofHKhUjJqhVQHPESLQdssoeTiiTbVWEmyIv cU5yA8dlglkUYZaNIHYgM44kiBCCDGW74ZQJOu5tZ93xijObNxcTAK4p3g== -----END CERTIFICATE-----Generated at Thu May 9 01:25:36 2024 by rpki-client on console-fra.rpki-client.org