$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/932885f4-baab-44df-ba8d-7c171b341796.roa File: 932885f4-baab-44df-ba8d-7c171b341796.roa (raw, json) Hash identifier: /2Eyv57+ifKr4ddzEudknBm52qwItioGlmCN3MYm2jM= Subject key identifier: 67:4E:39:C6:C7:EB:2E:87:BC:FE:AF:04:C1:8F:FC:26:3B:9A:EC:D1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 74670E4807C87DDAAD7A77869B16D390853DBE15 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/932885f4-baab-44df-ba8d-7c171b341796.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 192.157.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:67:0e:48:07:c8:7d:da:ad:7a:77:86:9b:16:d3:90:85:3d:be:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=1344e739ab4ad9119459781fc056acc5aceb65b7b0e0807fdc481b6fd5413260, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:f0:60:91:42:87:41:a8:5e:7d:40:d1:7a: ae:9b:ae:24:c6:57:2b:e5:77:e1:8c:20:f5:23:6f: ab:1b:2f:68:e4:5b:21:ff:fe:9d:6f:4e:e7:cb:a4: 0a:ae:16:c3:9f:60:8e:0f:05:13:d9:38:ad:3e:a4: e1:0e:cc:51:11:1d:35:f8:f6:e9:67:32:b6:6b:e3: c9:fe:99:33:2a:85:1d:73:00:bf:a8:1d:f6:a8:6d: 68:53:9b:22:29:9e:ec:92:7b:31:a9:29:25:f4:25: 61:58:77:69:35:0a:9c:c6:2e:ce:9a:8b:4e:07:d1: 20:3e:ca:f1:a7:6a:70:e7:a7:a3:7d:ee:2c:ba:fd: 4f:8e:3e:dd:6f:b9:e3:d4:bb:68:00:86:5f:ea:47: 31:6a:29:b3:65:94:c2:60:f0:04:82:30:a0:1b:39: 56:c3:26:72:71:e4:47:5c:27:ed:de:c1:cd:2a:60: 68:0b:74:8d:74:80:ba:93:8f:df:ff:59:bd:42:03: e3:32:0f:18:ce:19:78:b0:62:18:05:50:d4:8a:ef: 9b:e4:c1:7d:7f:5d:e0:fc:50:65:34:ff:f5:a4:81: cc:5f:51:40:2e:b6:12:e5:88:b8:5f:5e:9f:d1:6f: f8:04:59:69:02:09:46:52:43:63:27:82:0e:34:2f: 42:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4E:39:C6:C7:EB:2E:87:BC:FE:AF:04:C1:8F:FC:26:3B:9A:EC:D1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/932885f4-baab-44df-ba8d-7c171b341796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.157.72.0/23 Signature Algorithm: sha256WithRSAEncryption ba:d7:d3:f2:b1:bb:52:65:dc:ce:75:47:b6:ae:37:9a:c4:87: 01:af:d3:11:a3:4e:34:1b:5a:88:82:e6:45:87:7a:49:54:a4: 8c:25:82:87:55:fa:fb:b0:23:93:5a:64:0a:d5:df:1e:e5:47: f4:91:e7:53:4e:06:9a:6f:5f:fd:4f:be:31:37:d3:1a:a6:2c: 9c:c1:d0:88:d6:c0:bb:d0:c4:ad:63:4a:c6:58:36:53:f5:f2: e1:a3:8c:21:5c:31:3c:9a:16:b9:a8:7e:0c:c2:06:ba:c8:7c: 61:3b:a2:e8:5a:e6:8b:26:59:c7:19:e9:50:55:f7:0b:ee:e1: 2d:05:5b:fe:14:ff:31:63:c4:f4:33:1a:0b:d2:ca:38:a5:73: 26:d1:45:ad:aa:54:f5:b2:a6:69:37:fb:94:8a:d5:6b:d3:0c: 4a:85:ce:39:c6:33:08:ee:ea:ae:c1:09:09:6d:cd:62:70:4d: 39:4c:3b:3f:bb:42:20:fe:9d:81:c2:d0:f4:57:30:cc:7a:82: 8d:51:9c:f0:69:dd:d1:16:21:e9:ae:71:a9:d9:89:45:d5:51: 32:d2:94:cb:d7:ad:42:6e:02:62:8b:4c:cb:92:ab:c9:29:b3: b5:be:85:8d:4b:1b:d6:cf:2f:12:c6:c6:ac:33:71:4e:39:48: f6:78:c4:45 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdGcOSAfIfdqteneGmxbTkIU9vhUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzQ0ZTczOWFiNGFkOTExOTQ1OTc4MWZjMDU2YWNjNWFj ZWI2NWI3YjBlMDgwN2ZkYzQ4MWI2ZmQ1NDEzMjYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5BvBgkUKHQahefUDReq6briTGVyvld+GMIPUjb6sbL2jk WyH//p1vTufLpAquFsOfYI4PBRPZOK0+pOEOzFERHTX49ulnMrZr48n+mTMqhR1z AL+oHfaobWhTmyIpnuySezGpKSX0JWFYd2k1CpzGLs6ai04H0SA+yvGnanDnp6N9 7iy6/U+OPt1vuePUu2gAhl/qRzFqKbNllMJg8ASCMKAbOVbDJnJx5EdcJ+3ewc0q YGgLdI10gLqTj9//Wb1CA+MyDxjOGXiwYhgFUNSK75vkwX1/XeD8UGU0//Wkgcxf UUAuthLliLhfXp/Rb/gEWWkCCUZSQ2Mngg40L0JDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZ045xsfrLoe8/q8EwY/8Jjua7NEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkzMjg4NWY0LWJhYWItNDRkZi1iYThkLTdjMTcxYjM0MTc5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHAnUgwDQYJKoZIhvcNAQELBQADggEBALrX0/Kxu1Jl3M51R7auN5rEhwGv 0xGjTjQbWoiC5kWHeklUpIwlgodV+vuwI5NaZArV3x7lR/SR51NOBppvX/1PvjE3 0xqmLJzB0IjWwLvQxK1jSsZYNlP18uGjjCFcMTyaFrmofgzCBrrIfGE7ouha5osm WccZ6VBV9wvu4S0FW/4U/zFjxPQzGgvSyjilcybRRa2qVPWypmk3+5SK1WvTDEqF zjnGMwju6q7BCQltzWJwTTlMOz+7QiD+nYHC0PRXMMx6go1RnPBp3dEWIemucanZ iUXVUTLSlMvXrUJuAmKLTMuSq8kps7W+hY1LG9bPLxLGxqwzcU45SPZ4xEU= -----END CERTIFICATE-----Generated at Thu May 2 01:05:37 2024 by rpki-client on console-fra.rpki-client.org