$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aacca27b-4a14-4987-a662-e5cb316e5b02.roa File: aacca27b-4a14-4987-a662-e5cb316e5b02.roa (raw, json) Hash identifier: XzLyEVS1d2wPiIFiwHbOcnDLcI69V3isUVGI12C1f/8= Subject key identifier: 1A:AB:E1:59:5B:8F:C4:70:A4:D4:4A:89:7F:74:47:2D:53:6A:0D:24 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 232DB5D77E1F5C78018CD146A3D19963651873DF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aacca27b-4a14-4987-a662-e5cb316e5b02.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 161.178.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:2d:b5:d7:7e:1f:5c:78:01:8c:d1:46:a3:d1:99:63:65:18:73:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=c76e6bb0f0d2ead310635beadb496569128248b8365094f570dea5d4b0217901, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:4f:3d:90:31:63:83:8d:64:57:80:77:da: 8d:2e:a6:0b:f9:84:1d:5a:f5:d7:da:fa:8c:bb:fc: ac:70:5f:1a:35:58:8b:cc:1b:5d:5b:65:3e:aa:ac: e1:49:0f:5b:51:4a:a1:c2:2a:60:18:bf:9d:39:a0: 5f:d4:d4:c9:85:50:30:3a:80:de:80:d1:05:b7:b0: 1d:95:70:31:d9:dc:10:fa:aa:fa:db:02:7b:95:65: f8:9e:e6:52:70:db:56:7d:62:49:c8:2a:ae:30:91: cd:9f:c9:68:89:f7:2d:63:11:49:42:04:81:bc:94: 68:4d:9c:cd:f1:09:4d:61:dc:0f:f2:d9:32:94:f7: a9:48:40:70:2b:aa:43:13:71:2b:f5:89:ac:c3:e4: ee:86:5e:c8:43:c9:c9:98:d1:e3:99:db:e7:35:b8: 6c:82:c4:76:72:73:97:b2:c0:ca:d3:22:50:91:06: 72:48:05:d8:9b:a2:24:fe:53:23:86:2d:6e:99:61: f5:8e:58:0f:14:7c:ac:6a:45:44:09:f2:4f:87:db: 4b:7f:0d:da:53:97:6e:c9:57:b8:3b:65:3a:75:a0: 1b:6c:29:38:57:22:76:56:8f:36:26:7e:53:6b:31: 89:35:61:ed:27:38:c9:6d:d8:60:53:48:cd:39:38: 07:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AB:E1:59:5B:8F:C4:70:A4:D4:4A:89:7F:74:47:2D:53:6A:0D:24 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aacca27b-4a14-4987-a662-e5cb316e5b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.178.0.0/18 Signature Algorithm: sha256WithRSAEncryption 5e:9f:fe:5a:1c:e6:3f:f3:b6:e6:6b:89:05:7b:6e:29:88:36: d6:03:31:86:08:7e:56:8f:51:d5:c6:a1:b9:51:60:ec:72:38: e1:f5:8d:1e:ca:ad:e2:49:45:ea:c9:84:52:47:c9:e9:ec:fb: 40:24:77:50:fc:f6:f3:4a:8e:30:ff:d2:5e:8a:80:64:3c:42: 40:72:88:65:61:e7:8d:00:c6:bd:df:1b:0b:14:a9:29:21:46: be:b0:e8:dd:54:e9:bf:16:a6:1a:5d:64:cb:2a:34:eb:14:8b: 02:e6:58:b0:d7:6a:74:90:17:bf:85:f9:ed:57:af:4d:e8:91: bd:08:78:37:f9:8f:de:c2:58:9e:2a:d3:e4:48:86:73:b3:b9: 53:5c:1b:3e:19:2d:9e:5f:4a:31:4d:7c:08:14:1f:d3:a7:b7: 85:d3:af:78:f2:2e:54:20:67:de:05:bb:7e:d3:68:bf:63:2e: 3c:ed:27:b4:57:8e:59:f3:e7:bf:cc:60:21:6d:52:41:cd:8c: 1e:48:65:ca:49:5a:53:3a:23:20:a2:69:5f:20:31:ce:e0:1a: 6f:15:14:fe:b6:6e:91:b6:4c:5a:3e:7d:53:f3:dd:7d:e0:93: 08:e2:37:f9:c0:26:65:be:a9:1a:94:c3:75:cf:8c:3a:5f:4e: 86:c5:7b:bd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIy21134fXHgBjNFGo9GZY2UYc98wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzZlNmJiMGYwZDJlYWQzMTA2MzViZWFkYjQ5NjU2OTEy ODI0OGI4MzY1MDk0ZjU3MGRlYTVkNGIwMjE3OTAxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv3089kDFjg41kV4B32o0upgv5hB1a9dfa+oy7/KxwXxo1 WIvMG11bZT6qrOFJD1tRSqHCKmAYv505oF/U1MmFUDA6gN6A0QW3sB2VcDHZ3BD6 qvrbAnuVZfie5lJw21Z9YknIKq4wkc2fyWiJ9y1jEUlCBIG8lGhNnM3xCU1h3A/y 2TKU96lIQHArqkMTcSv1iazD5O6GXshDycmY0eOZ2+c1uGyCxHZyc5eywMrTIlCR BnJIBdiboiT+UyOGLW6ZYfWOWA8UfKxqRUQJ8k+H20t/DdpTl27JV7g7ZTp1oBts KThXInZWjzYmflNrMYk1Ye0nOMlt2GBTSM05OAc9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGqvhWVuPxHCk1EqJf3RHLVNqDSQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhY2NhMjdiLTRhMTQtNDk4Ny1hNjYyLWU1Y2IzMTZlNWIwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAahsgAwDQYJKoZIhvcNAQELBQADggEBAF6f/loc5j/ztuZriQV7bimINtYD MYYIflaPUdXGoblRYOxyOOH1jR7KreJJRerJhFJHyens+0Akd1D89vNKjjD/0l6K gGQ8QkByiGVh540Axr3fGwsUqSkhRr6w6N1U6b8WphpdZMsqNOsUiwLmWLDXanSQ F7+F+e1Xr03okb0IeDf5j97CWJ4q0+RIhnOzuVNcGz4ZLZ5fSjFNfAgUH9Ont4XT r3jyLlQgZ94Fu37TaL9jLjztJ7RXjlnz57/MYCFtUkHNjB5IZcpJWlM6IyCiaV8g Mc7gGm8VFP62bpG2TFo+fVPz3X3gkwjiN/nAJmW+qRqUw3XPjDpfTobFe70= -----END CERTIFICATE-----Generated at Thu May 2 08:02:37 2024 by rpki-client on console-ams.rpki-client.org