$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f36eaca-de14-481f-ae4a-55c99b57e524.roa File: 8f36eaca-de14-481f-ae4a-55c99b57e524.roa (raw, json) Hash identifier: FFLQY1ajllY/r4o/J0X10+71TsmzuxwbICxLbdeq+O4= Subject key identifier: 99:0A:76:D8:60:B9:A0:BF:AF:6A:08:93:42:C3:AC:5E:3F:DD:52:00 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 382868FED12E73C7FEC0F4EA769A3324935586E2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f36eaca-de14-481f-ae4a-55c99b57e524.roa Signing time: Tue 30 Apr 2024 00:00:00 +0000 ROA not before: Tue 30 Apr 2024 00:00:00 +0000 ROA not after: Tue 04 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 64.66.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:28:68:fe:d1:2e:73:c7:fe:c0:f4:ea:76:9a:33:24:93:55:86:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 30 00:00:00 2024 GMT Not After : Jun 4 23:59:59 2024 GMT Subject: serialNumber=be2ef51abe237ff3e8108f9c676dc3bec62836ea14536889cbb9aaf2a22a83b5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:31:84:0b:bf:46:4b:ce:c4:35:47:b5:c3:a1: 14:3b:33:92:84:5d:0b:04:e6:b7:83:fb:05:85:57: 06:f5:82:24:50:52:ce:41:f8:de:ec:dc:d4:e3:34: 8e:00:af:62:bc:ef:6d:1b:fc:92:4a:a5:6c:57:1e: 06:96:3d:c2:9b:70:5f:fe:1d:a2:d7:2b:a2:d9:db: f0:fe:1a:cd:cf:8e:1f:cf:24:c2:93:50:08:24:94: b4:ec:1b:13:a6:9f:56:71:ad:d4:ef:94:84:b7:f7: 6d:15:fa:a4:21:57:3e:f8:13:ed:77:99:5a:a5:5e: 3b:b8:df:e7:3c:bd:bc:a8:42:ce:52:b7:fb:e7:66: b9:06:88:21:9b:17:20:cf:56:c9:65:9a:45:20:ce: b7:69:88:12:9c:13:1c:17:a5:c5:be:e9:0f:01:7a: dc:66:ff:54:46:6a:c5:f0:f4:09:1c:0e:c0:ac:cb: e7:a7:59:8c:d5:d2:c7:6b:ba:e7:46:3b:e7:29:d4: b2:b3:a0:52:10:7e:20:12:0c:7c:75:3c:a0:e6:8a: 40:2b:1f:8e:c4:dd:42:c6:96:42:4c:b8:62:62:37: e9:bc:fc:b7:1e:83:65:91:a7:ea:b8:bd:02:72:2f: 65:8c:0a:44:6f:13:a1:44:e3:81:1e:19:25:fc:c6: 74:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0A:76:D8:60:B9:A0:BF:AF:6A:08:93:42:C3:AC:5E:3F:DD:52:00 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f36eaca-de14-481f-ae4a-55c99b57e524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.66.128.0/18 Signature Algorithm: sha256WithRSAEncryption 89:35:db:fb:fb:8a:27:bb:73:17:ff:bf:97:ec:70:ff:0a:40: e8:d3:33:cd:c1:98:e9:bd:0a:76:bf:37:a1:28:5b:49:a2:c9: a9:fd:10:2a:f5:c1:ff:c0:4c:32:1d:3e:8e:50:fa:fc:a3:61: db:af:fc:d2:c0:11:81:60:6b:a8:b9:b9:70:58:4e:20:c8:0f: 15:b1:ef:3b:50:3a:41:09:76:74:0f:21:07:29:e0:3c:67:b5: de:85:d1:64:84:1d:d5:13:c3:67:7a:66:b1:33:3c:f0:27:b3: 03:a9:c6:3f:e5:63:47:82:29:cc:da:14:96:b1:21:6e:f8:17: 7b:e6:b0:76:26:93:c3:dc:3c:74:c6:6b:d5:43:8e:92:40:a2: e2:a8:b1:db:42:81:61:a0:b3:92:be:7f:c0:b0:05:1f:91:dd: 23:71:79:26:c1:9b:19:ad:ab:d0:b3:31:fe:6b:21:bb:1a:3d: d4:21:66:52:1f:2c:06:c0:12:09:ac:6b:a9:fc:d9:bd:d0:3a: 8c:18:2c:41:bd:2b:b2:b0:63:e4:25:36:2a:cb:bb:21:54:9c: 9a:27:c3:f1:8e:bd:e0:23:65:04:72:4f:cd:41:cd:28:db:e4: e3:6d:07:7d:7e:a9:14:18:6c:d8:c4:9a:f8:44:e5:33:cc:f0: f3:f6:47:88 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOCho/tEuc8f+wPTqdpozJJNVhuIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDMwMDAwMDAwWhcNMjQwNjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTJlZjUxYWJlMjM3ZmYzZTgxMDhmOWM2NzZkYzNiZWM2 MjgzNmVhMTQ1MzY4ODljYmI5YWFmMmEyMmE4M2I1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlMYQLv0ZLzsQ1R7XDoRQ7M5KEXQsE5reD+wWFVwb1giRQ Us5B+N7s3NTjNI4Ar2K8720b/JJKpWxXHgaWPcKbcF/+HaLXK6LZ2/D+Gs3Pjh/P JMKTUAgklLTsGxOmn1ZxrdTvlIS3920V+qQhVz74E+13mVqlXju43+c8vbyoQs5S t/vnZrkGiCGbFyDPVsllmkUgzrdpiBKcExwXpcW+6Q8Betxm/1RGasXw9AkcDsCs y+enWYzV0sdruudGO+cp1LKzoFIQfiASDHx1PKDmikArH47E3ULGlkJMuGJiN+m8 /Lceg2WRp+q4vQJyL2WMCkRvE6FE44EeGSX8xnQrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmQp22GC5oL+vagiTQsOsXj/dUgAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhmMzZlYWNhLWRlMTQtNDgxZi1hZTRhLTU1Yzk5YjU3ZTUyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZAQoAwDQYJKoZIhvcNAQELBQADggEBAIk12/v7iie7cxf/v5fscP8KQOjT M83BmOm9Cna/N6EoW0miyan9ECr1wf/ATDIdPo5Q+vyjYduv/NLAEYFga6i5uXBY TiDIDxWx7ztQOkEJdnQPIQcp4Dxntd6F0WSEHdUTw2d6ZrEzPPAnswOpxj/lY0eC KczaFJaxIW74F3vmsHYmk8PcPHTGa9VDjpJAouKosdtCgWGgs5K+f8CwBR+R3SNx eSbBmxmtq9CzMf5rIbsaPdQhZlIfLAbAEgmsa6n82b3QOowYLEG9K7KwY+QlNirL uyFUnJonw/GOveAjZQRyT81BzSjb5ONtB31+qRQYbNjEmvhE5TPM8PP2R4g= -----END CERTIFICATE-----Generated at Thu May 2 12:23:09 2024 by rpki-client on console-ams.rpki-client.org