$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f4a752b-e60f-443b-9702-8b2ea51c4df9.roa File: 9f4a752b-e60f-443b-9702-8b2ea51c4df9.roa (raw, json) Hash identifier: 1kkBzanvYnLWS0zKePv7IALRoh6N4a9F2j60tHrjia0= Subject key identifier: 96:5D:B3:83:8B:D9:FA:BB:13:0E:01:99:AA:E4:CF:8A:09:31:34:93 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31BB82E65555E7B0EE54E214C709CB3E968AD95F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f4a752b-e60f-443b-9702-8b2ea51c4df9.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 71.145.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:bb:82:e6:55:55:e7:b0:ee:54:e2:14:c7:09:cb:3e:96:8a:d9:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=afbc875d3491f761c169509174350bf49d7e81e7a7eb49f5b52f008414b7ab6c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:7c:44:16:24:4d:32:9d:e4:4c:e8:dc:6f: 2c:37:bc:50:b0:94:74:19:34:d0:a8:96:11:a7:45: 44:44:d3:28:2f:27:af:c5:b8:9a:cf:36:c9:a6:d1: 32:ac:62:ef:7c:d8:7b:fd:b2:c5:61:8a:ef:36:57: 2d:23:47:3b:ae:33:84:68:b7:a0:39:31:5f:2b:c9: 80:2b:d1:72:64:b9:51:af:68:7b:0f:e1:43:a3:c7: 4c:ce:10:02:ce:98:5a:3c:d5:a1:8f:c7:ed:9f:bc: 13:be:30:8d:23:86:57:b3:1f:5b:eb:c6:0b:5f:f0: 0b:6f:ad:b0:83:9f:e4:37:de:45:9c:50:11:0e:c5: 41:8f:82:38:62:a6:2f:cd:48:82:6d:6e:38:9f:28: 32:f7:be:b0:16:d7:35:91:1e:e3:fe:07:6d:10:b4: 76:fb:06:c7:04:e9:f8:de:b8:6c:c7:4d:cf:f0:d8: cd:ad:f7:87:71:8f:f8:5a:39:42:a5:7b:08:c2:cc: 20:bc:59:be:db:4b:66:5a:17:2f:79:4d:a7:d3:f6: 81:b3:90:d2:6c:5f:d7:43:c8:a9:4a:61:f0:35:6b: ee:b8:cf:7e:3c:5f:f0:65:7f:b9:88:b3:0c:23:f9: a1:ce:62:5c:5b:ee:4d:41:47:c5:59:b5:27:73:2b: 81:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5D:B3:83:8B:D9:FA:BB:13:0E:01:99:AA:E4:CF:8A:09:31:34:93 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f4a752b-e60f-443b-9702-8b2ea51c4df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.145.128.0/18 Signature Algorithm: sha256WithRSAEncryption 19:91:5d:bb:51:9b:46:6a:f2:b9:4f:39:6e:5d:07:6d:ca:36: 70:bc:72:77:b6:ea:88:d9:ab:4f:34:a0:0f:49:ab:c8:07:e1: 1d:3b:64:47:d5:3b:28:69:d5:58:e0:03:85:9d:20:eb:88:22: 5b:82:d2:a9:b9:d4:6e:03:bf:3e:44:97:fc:ae:cf:68:7d:c6: c5:ac:86:b0:34:3d:69:d6:c0:d0:e6:3f:08:d1:4c:eb:64:32: b5:a8:b8:d8:d5:6a:4d:1b:82:62:9f:11:3a:df:c6:5e:26:25: a6:97:54:af:34:9c:46:c3:bd:7d:a8:d7:36:32:c6:3c:eb:43: 3f:6f:7a:d0:9e:d3:82:0b:c6:2f:c5:bd:da:2c:c1:4d:fe:7f: 58:cb:77:d1:c8:54:1d:9a:3c:e4:c5:b5:05:66:82:ad:cf:24: 3e:45:64:c2:75:e7:98:97:4f:ef:25:da:7a:24:be:ab:97:58: 0c:ea:db:cc:8a:d9:34:e5:94:81:ee:52:6f:61:5c:f5:77:27: 47:92:fa:06:a7:bb:17:7e:72:a6:ff:3d:9f:53:b5:df:fe:c7: 90:c6:01:5d:b1:ac:62:43:ef:75:e0:2d:37:d4:18:4b:b8:24: 61:36:71:e4:e1:1e:bd:03:75:1f:91:82:c4:ce:7a:02:18:46: 32:e3:23:fc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMbuC5lVV57DuVOIUxwnLPpaK2V8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmJjODc1ZDM0OTFmNzYxYzE2OTUwOTE3NDM1MGJmNDlk N2U4MWU3YTdlYjQ5ZjViNTJmMDA4NDE0YjdhYjZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs7XxEFiRNMp3kTOjcbyw3vFCwlHQZNNColhGnRURE0ygv J6/FuJrPNsmm0TKsYu982Hv9ssVhiu82Vy0jRzuuM4Rot6A5MV8ryYAr0XJkuVGv aHsP4UOjx0zOEALOmFo81aGPx+2fvBO+MI0jhlezH1vrxgtf8AtvrbCDn+Q33kWc UBEOxUGPgjhipi/NSIJtbjifKDL3vrAW1zWRHuP+B20QtHb7BscE6fjeuGzHTc/w 2M2t94dxj/haOUKlewjCzCC8Wb7bS2ZaFy95TafT9oGzkNJsX9dDyKlKYfA1a+64 z348X/Blf7mIswwj+aHOYlxb7k1BR8VZtSdzK4HXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUll2zg4vZ+rsTDgGZquTPigkxNJMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmNGE3NTJiLWU2MGYtNDQzYi05NzAyLThiMmVhNTFjNGRmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZHkYAwDQYJKoZIhvcNAQELBQADggEBABmRXbtRm0Zq8rlPOW5dB23KNnC8 cne26ojZq080oA9Jq8gH4R07ZEfVOyhp1VjgA4WdIOuIIluC0qm51G4Dvz5El/yu z2h9xsWshrA0PWnWwNDmPwjRTOtkMrWouNjVak0bgmKfETrfxl4mJaaXVK80nEbD vX2o1zYyxjzrQz9vetCe04ILxi/FvdoswU3+f1jLd9HIVB2aPOTFtQVmgq3PJD5F ZMJ155iXT+8l2nokvquXWAzq28yK2TTllIHuUm9hXPV3J0eS+ganuxd+cqb/PZ9T td/+x5DGAV2xrGJD73XgLTfUGEu4JGE2ceThHr0DdR+RgsTOegIYRjLjI/w= -----END CERTIFICATE-----Generated at Thu May 2 08:51:10 2024 by rpki-client on console-fra.rpki-client.org