$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5aa1a0f-8a67-4a90-8cbf-5d232a4d3a51.roa File: a5aa1a0f-8a67-4a90-8cbf-5d232a4d3a51.roa (raw, json) Hash identifier: tNdj1Mh35lkBXfAJJ0jjCQnD5WSRDmp0SojpRlwYwWc= Subject key identifier: 2A:33:90:B1:99:B1:F7:41:01:DD:21:4F:99:83:E6:25:A6:B4:21:06 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B89E34DBA15EC6C0C1A9CA0108EA095EA82D271 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5aa1a0f-8a67-4a90-8cbf-5d232a4d3a51.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 40.176.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:89:e3:4d:ba:15:ec:6c:0c:1a:9c:a0:10:8e:a0:95:ea:82:d2:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=31201fae2b940c07e1e04433e76468697f2fb11dcbff461d448bd5faa58ecf9d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:53:1d:4d:67:48:46:d7:37:af:05:de:ef:c2: 6d:e7:f6:e7:4f:fb:d8:11:d3:fd:a9:78:f2:4a:d6: 54:c5:56:36:fb:39:63:c3:70:02:e7:86:74:5e:c2: 6f:88:d1:c7:04:98:f6:f5:6f:75:40:70:5a:aa:5e: a4:7a:ff:75:79:a1:7e:5d:76:15:2e:ef:78:1a:35: 69:9c:66:ea:df:6b:b2:47:5e:c0:e9:cb:aa:b4:b5: b1:c5:de:ff:8d:53:df:d3:fd:eb:76:83:f8:87:89: 07:35:7c:31:90:bc:a9:16:24:b9:da:0a:1f:a1:6f: b3:a3:fa:fd:75:15:71:b7:77:b5:25:9b:b1:d0:4e: d4:87:5e:70:40:d1:d2:ea:75:18:3f:d4:9b:e2:34: 31:22:30:e5:9a:ea:6e:51:50:ba:e5:e7:e1:fe:26: 3e:2e:67:cb:51:2d:d5:0c:37:9f:78:12:17:e8:e6: fc:44:95:6b:46:21:09:b9:bf:55:fb:eb:cb:1e:1a: 6d:b1:03:02:73:7c:e4:54:f9:c4:13:8a:d3:b8:3e: 2f:9f:b1:b5:aa:65:4d:4b:fa:ba:1f:63:83:fb:fe: 9f:76:80:c7:56:38:87:32:8e:9b:2a:7e:d5:a5:86: 74:c7:ad:58:89:d1:a9:96:98:0b:5f:67:70:40:1f: 59:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:33:90:B1:99:B1:F7:41:01:DD:21:4F:99:83:E6:25:A6:B4:21:06 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5aa1a0f-8a67-4a90-8cbf-5d232a4d3a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.176.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4a:73:e3:37:b6:fc:02:b0:78:dc:a9:8d:f8:fd:3a:f7:83:07: 9c:6d:52:a9:31:50:bd:62:8b:11:bf:f0:ae:85:09:f5:d0:35: 32:72:36:ab:f7:a3:d7:f7:00:58:98:86:f1:85:8e:91:c6:03: 8d:87:34:98:c0:2e:7b:3a:3c:88:5d:99:6e:0c:b6:3d:8a:93: 53:be:ba:19:de:62:53:b8:e0:59:87:13:dd:77:5f:11:9b:56: ff:84:c3:7a:d3:d3:73:b7:0e:e4:f6:b6:b1:ef:63:87:99:07: 7f:8a:13:b7:0d:b7:ae:b6:c0:09:5b:89:36:43:81:22:a1:c4: 98:ed:84:d6:e9:9c:ca:a5:31:55:b8:b7:8d:fd:04:2c:8b:13: ab:80:d5:06:52:de:36:4f:c6:ac:e3:e3:04:85:a4:da:c8:12: 83:ba:f7:6e:56:7d:99:9f:94:93:5d:30:a7:e5:ce:99:b6:2c: d9:26:77:76:d6:86:e7:55:52:71:25:3c:e5:d0:ba:9e:2d:f9: 85:73:50:a4:9f:0e:13:84:c4:56:ed:70:fb:91:26:cb:fe:b9: d7:bd:aa:38:a0:02:93:a7:26:dd:18:4f:c6:4a:2b:cb:1a:67: 93:7b:d4:14:4c:47:88:bc:19:14:8a:e6:08:57:71:ea:5b:c7: 3d:83:84:47 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUW4njTboV7GwMGpygEI6gleqC0nEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTIwMWZhZTJiOTQwYzA3ZTFlMDQ0MzNlNzY0Njg2OTdm MmZiMTFkY2JmZjQ2MWQ0NDhiZDVmYWE1OGVjZjlkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLUx1NZ0hG1zevBd7vwm3n9udP+9gR0/2pePJK1lTFVjb7 OWPDcALnhnRewm+I0ccEmPb1b3VAcFqqXqR6/3V5oX5ddhUu73gaNWmcZurfa7JH XsDpy6q0tbHF3v+NU9/T/et2g/iHiQc1fDGQvKkWJLnaCh+hb7Oj+v11FXG3d7Ul m7HQTtSHXnBA0dLqdRg/1JviNDEiMOWa6m5RULrl5+H+Jj4uZ8tRLdUMN594Ehfo 5vxElWtGIQm5v1X768seGm2xAwJzfORU+cQTitO4Pi+fsbWqZU1L+rofY4P7/p92 gMdWOIcyjpsqftWlhnTHrViJ0amWmAtfZ3BAH1lNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUKjOQsZmx90EB3SFPmYPmJaa0IQYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E1YWExYTBmLThhNjctNGE5MC04Y2JmLTVkMjMyYTRkM2E1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAosDANBgkqhkiG9w0BAQsFAAOCAQEASnPjN7b8ArB43KmN+P0694MHnG1S qTFQvWKLEb/wroUJ9dA1MnI2q/ej1/cAWJiG8YWOkcYDjYc0mMAuezo8iF2Zbgy2 PYqTU766Gd5iU7jgWYcT3XdfEZtW/4TDetPTc7cO5Pa2se9jh5kHf4oTtw23rrbA CVuJNkOBIqHEmO2E1umcyqUxVbi3jf0ELIsTq4DVBlLeNk/GrOPjBIWk2sgSg7r3 blZ9mZ+Uk10wp+XOmbYs2SZ3dtaG51VScSU85dC6ni35hXNQpJ8OE4TEVu1w+5Em y/65172qOKACk6cm3RhPxkoryxpnk3vUFExHiLwZFIrmCFdx6lvHPYOERw== -----END CERTIFICATE-----Generated at Thu May 9 01:26:21 2024 by rpki-client on console-ams.rpki-client.org