$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a21de1aa-39e4-4343-b52a-3793f3a662af.roa File: a21de1aa-39e4-4343-b52a-3793f3a662af.roa (raw, json) Hash identifier: 6vBxeR0/JF3yuHaKvbLvcSRnYX3VnWGQ5hH/7j35pMc= Subject key identifier: 81:13:FE:2E:B4:8A:A1:A3:EC:00:6E:25:BD:03:6E:07:A7:88:9B:06 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 58B3B6D71AD3A7C83C71FC0F4F1B0FF4F9328DDB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a21de1aa-39e4-4343-b52a-3793f3a662af.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 96.0.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b3:b6:d7:1a:d3:a7:c8:3c:71:fc:0f:4f:1b:0f:f4:f9:32:8d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=f3688b9351700885760c4be4f7650924eef0d517feaf8d906a1930903832264b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0d:53:1b:db:71:8a:93:1c:91:40:88:53:da: d3:86:4e:d6:d1:40:d9:b9:15:a8:6a:8a:30:c6:ab: b7:12:f7:1c:05:3a:b3:46:98:78:5a:8f:d7:2f:a3: 56:67:c5:d5:6e:ec:07:05:c1:96:a5:3e:75:f4:66: e5:69:f2:46:71:65:03:55:94:95:e7:b9:ba:41:ec: e5:79:1d:8d:49:92:cd:c6:6b:64:c2:c2:86:0c:e9: 59:93:6d:d5:c8:db:c8:e5:ec:58:17:2a:c9:2c:7b: 98:a6:7d:90:53:c4:f1:9d:74:ed:cc:df:16:8f:a4: c0:28:b4:83:14:35:8c:52:fd:57:48:a5:d1:56:8f: 24:13:e7:38:70:67:23:c1:9c:81:5b:08:02:35:cc: 75:a7:3a:98:9c:93:d2:bb:d0:53:4a:ed:15:84:11: 83:15:70:f8:8e:b8:c4:f8:5f:c5:54:d1:cb:13:cd: da:a1:ea:f0:31:c3:b2:ac:48:3c:1e:b6:57:42:7e: 1a:ad:9b:3b:c7:cb:77:37:69:e0:8e:31:fe:90:f3: eb:20:70:aa:ae:66:9a:21:08:c9:0f:75:59:17:b5: b3:04:dd:54:55:47:9e:e5:eb:a6:c8:b0:90:91:0e: f6:32:e3:bb:f9:84:5e:24:a7:d9:8c:4f:b6:dc:00: ec:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:13:FE:2E:B4:8A:A1:A3:EC:00:6E:25:BD:03:6E:07:A7:88:9B:06 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a21de1aa-39e4-4343-b52a-3793f3a662af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.128.0/23 Signature Algorithm: sha256WithRSAEncryption 17:b2:09:64:25:be:a9:f3:76:66:af:08:d1:6b:6f:74:11:22: 71:2a:0a:fe:c8:35:65:84:1c:4a:2c:35:75:07:f4:b7:93:1f: 38:72:76:f1:d5:ab:3b:44:a1:04:b5:66:b2:c4:ae:a0:5b:eb: 24:38:c6:5e:cd:b8:30:1a:6a:51:bd:4c:1f:b5:42:20:9a:68: bb:6c:72:98:3d:46:33:0d:59:a7:05:7f:56:07:43:25:e0:fc: a8:17:a6:de:1e:68:f4:13:b0:70:dc:80:e2:bd:6d:27:0e:a8: c1:b2:74:78:1d:3a:31:ff:b8:11:08:d0:12:7b:a8:99:13:b1: 0a:90:3a:04:7d:d2:c0:be:81:67:60:1d:a8:25:01:78:68:ee: 9b:62:38:86:77:3f:21:05:94:06:49:20:03:aa:25:25:ec:29: ac:3b:5b:78:c5:80:ce:a3:0e:f8:2a:76:5a:ca:f9:dd:d3:0c: db:e1:61:69:0d:dd:ff:fe:53:8e:6f:35:cd:9d:0e:13:49:f1: f2:e6:cb:83:7b:9f:22:1b:10:b0:95:2c:6d:c6:8a:a3:91:db: 58:82:ea:63:30:ec:03:d4:d1:ea:f0:ed:ce:aa:c4:00:98:d6: 16:e0:33:b8:73:b7:c4:53:e6:53:a9:94:8a:ba:3c:39:b8:36: 8d:de:1a:88 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWLO21xrTp8g8cfwPTxsP9PkyjdswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzY4OGI5MzUxNzAwODg1NzYwYzRiZTRmNzY1MDkyNGVl ZjBkNTE3ZmVhZjhkOTA2YTE5MzA5MDM4MzIyNjRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaDVMb23GKkxyRQIhT2tOGTtbRQNm5FahqijDGq7cS9xwF OrNGmHhaj9cvo1ZnxdVu7AcFwZalPnX0ZuVp8kZxZQNVlJXnubpB7OV5HY1Jks3G a2TCwoYM6VmTbdXI28jl7FgXKskse5imfZBTxPGddO3M3xaPpMAotIMUNYxS/VdI pdFWjyQT5zhwZyPBnIFbCAI1zHWnOpick9K70FNK7RWEEYMVcPiOuMT4X8VU0csT zdqh6vAxw7KsSDwetldCfhqtmzvHy3c3aeCOMf6Q8+sgcKquZpohCMkPdVkXtbME 3VRVR57l66bIsJCRDvYy47v5hF4kp9mMT7bcAOy1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgRP+LrSKoaPsAG4lvQNuB6eImwYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyMWRlMWFhLTM5ZTQtNDM0My1iNTJhLTM3OTNmM2E2NjJhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgAIAwDQYJKoZIhvcNAQELBQADggEBABeyCWQlvqnzdmavCNFrb3QRInEq Cv7INWWEHEosNXUH9LeTHzhydvHVqztEoQS1ZrLErqBb6yQ4xl7NuDAaalG9TB+1 QiCaaLtscpg9RjMNWacFf1YHQyXg/KgXpt4eaPQTsHDcgOK9bScOqMGydHgdOjH/ uBEI0BJ7qJkTsQqQOgR90sC+gWdgHaglAXho7ptiOIZ3PyEFlAZJIAOqJSXsKaw7 W3jFgM6jDvgqdlrK+d3TDNvhYWkN3f/+U45vNc2dDhNJ8fLmy4N7nyIbELCVLG3G iqOR21iC6mMw7APU0erw7c6qxACY1hbgM7hzt8RT5lOplIq6PDm4No3eGog= -----END CERTIFICATE-----Generated at Fri Apr 26 00:40:22 2024 by rpki-client on console-fra.rpki-client.org