$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fe9bbbb-267f-4b67-95d2-28977cbcaa6d.roa File: 8fe9bbbb-267f-4b67-95d2-28977cbcaa6d.roa (raw, json) Hash identifier: y+WjaI/UDA7NNYeiu/6LXRdJ4KjBIjAOumQG8YyzmY8= Subject key identifier: 45:C8:49:1A:06:B2:B2:BD:BC:A2:62:84:7C:30:B2:92:D9:AF:1A:F2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 479FAD5A9E43BBF178FFBD86F0D53076A49975E0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fe9bbbb-267f-4b67-95d2-28977cbcaa6d.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 99.151.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:9f:ad:5a:9e:43:bb:f1:78:ff:bd:86:f0:d5:30:76:a4:99:75:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=c1c5de2f1783c05d7716058da5e5f7facf8dc38c01cd6c3160f058911beff45e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e8:c7:6c:56:a2:67:8b:08:b8:06:cf:d3:7c: b0:ac:11:dd:f9:8a:f3:3a:8e:00:af:ee:36:66:28: d4:44:6d:64:3b:47:aa:35:88:2a:21:57:db:8e:77: b8:12:fa:4b:4b:62:09:54:95:a5:e9:ff:9d:47:17: 99:56:d4:bb:44:58:85:b5:cb:1a:b2:09:70:61:59: 2a:89:bc:aa:cc:3a:52:81:65:c1:6b:be:b7:4b:02: c4:9e:d2:7f:ea:a5:1a:00:86:b6:d4:ce:0d:d4:98: 85:91:c5:3d:99:f8:40:e1:5f:4d:5e:b2:f0:9d:23: 08:aa:2b:81:b7:63:00:4f:b4:a1:52:0b:61:31:af: 72:e6:55:fe:1e:a4:c2:2b:27:64:d0:e1:f7:78:c7: ff:96:9c:c6:91:b9:ae:92:7a:49:a7:41:59:29:1e: ea:9f:54:3f:a4:fb:e6:49:07:b7:56:65:dd:31:15: a1:d7:16:4d:5b:a6:fa:6f:74:d6:9c:59:a3:87:f7: ac:56:46:9e:1a:37:c9:cb:f1:d0:db:d0:23:f1:c9: 32:e1:b5:b8:f7:d9:d3:03:b8:84:e7:5b:46:ab:c4: 3d:5f:67:8f:20:9f:36:e7:6f:cc:86:44:3e:fe:07: a6:4b:bc:a6:f6:a7:d1:4d:ae:9d:fd:10:d4:e4:9d: 38:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C8:49:1A:06:B2:B2:BD:BC:A2:62:84:7C:30:B2:92:D9:AF:1A:F2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fe9bbbb-267f-4b67-95d2-28977cbcaa6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.128.0/18 Signature Algorithm: sha256WithRSAEncryption cc:29:f4:d7:c7:5d:45:77:a2:f0:51:fa:dc:63:26:e0:a1:8e: 14:a9:40:59:01:d6:5b:c0:28:d2:59:84:34:f5:ed:16:5c:a4: 3c:79:3a:3c:5a:59:19:65:10:3b:15:7b:47:8d:c7:6f:82:25: f1:70:c5:e7:f9:5d:70:0f:2b:bf:8f:aa:17:70:04:14:6f:38: c3:26:e2:79:cb:c8:f7:4c:0a:d9:77:ae:40:c7:6b:d4:d4:fc: b2:7c:51:fd:cb:69:fe:dc:01:30:a3:c4:a9:8e:bd:8c:29:af: ae:aa:01:ef:b0:1f:92:96:76:c7:21:c8:2c:91:f6:02:d3:68: 3a:e0:05:e1:00:ce:95:f3:d0:00:35:31:81:06:f9:b6:38:49: ce:5c:86:cc:23:b3:12:42:6c:26:2c:1b:53:ae:a6:cd:a1:75: dd:fa:fc:d5:41:06:9f:e7:65:d5:06:67:fc:ec:8e:b7:20:73: 28:9c:05:29:c0:1e:ca:11:65:d2:7a:82:d8:c7:62:f4:bf:7b: ac:cc:27:14:fa:cf:ac:a1:8b:0a:ba:a5:f1:13:7f:a2:37:7c: 9b:dc:7a:0b:a5:ca:e1:6e:fa:0d:a9:df:0b:76:09:99:75:75: f0:23:e0:bc:93:aa:22:35:08:16:a9:bd:ab:00:f5:74:01:d1: 65:d2:56:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR5+tWp5Du/F4/72G8NUwdqSZdeAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMWM1ZGUyZjE3ODNjMDVkNzcxNjA1OGRhNWU1ZjdmYWNm OGRjMzhjMDFjZDZjMzE2MGYwNTg5MTFiZWZmNDVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm6MdsVqJniwi4Bs/TfLCsEd35ivM6jgCv7jZmKNREbWQ7 R6o1iCohV9uOd7gS+ktLYglUlaXp/51HF5lW1LtEWIW1yxqyCXBhWSqJvKrMOlKB ZcFrvrdLAsSe0n/qpRoAhrbUzg3UmIWRxT2Z+EDhX01esvCdIwiqK4G3YwBPtKFS C2Exr3LmVf4epMIrJ2TQ4fd4x/+WnMaRua6SekmnQVkpHuqfVD+k++ZJB7dWZd0x FaHXFk1bpvpvdNacWaOH96xWRp4aN8nL8dDb0CPxyTLhtbj32dMDuITnW0arxD1f Z48gnzbnb8yGRD7+B6ZLvKb2p9FNrp39ENTknTgrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURchJGgaysr28omKEfDCyktmvGvIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhmZTliYmJiLTI2N2YtNGI2Ny05NWQyLTI4OTc3Y2JjYWE2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZjl4AwDQYJKoZIhvcNAQELBQADggEBAMwp9NfHXUV3ovBR+txjJuChjhSp QFkB1lvAKNJZhDT17RZcpDx5OjxaWRllEDsVe0eNx2+CJfFwxef5XXAPK7+Pqhdw BBRvOMMm4nnLyPdMCtl3rkDHa9TU/LJ8Uf3Laf7cATCjxKmOvYwpr66qAe+wH5KW dschyCyR9gLTaDrgBeEAzpXz0AA1MYEG+bY4Sc5chswjsxJCbCYsG1Oups2hdd36 /NVBBp/nZdUGZ/zsjrcgcyicBSnAHsoRZdJ6gtjHYvS/e6zMJxT6z6yhiwq6pfET f6I3fJvcegulyuFu+g2p3wt2CZl1dfAj4LyTqiI1CBapvasA9XQB0WXSVj0= -----END CERTIFICATE-----Generated at Thu May 2 03:11:35 2024 by rpki-client on console-ams.rpki-client.org