$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad0ad430-b688-47b5-97d6-6be7153ae649.roa File: ad0ad430-b688-47b5-97d6-6be7153ae649.roa (raw, json) Hash identifier: cc31UHm1toenVuIBJebqpE+gEuZ/G+HKfo4G+Alxfbs= Subject key identifier: 47:4D:7A:49:95:26:95:86:98:D7:09:AB:88:A3:10:6D:4B:81:95:9E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17670D8ECEBD3D276879A362151A79FE944B49AA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad0ad430-b688-47b5-97d6-6be7153ae649.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 204.126.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:67:0d:8e:ce:bd:3d:27:68:79:a3:62:15:1a:79:fe:94:4b:49:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=76fec3246831ac0b4722deca746cd6a71eb5f388b3d8babb62ae30c8027c3c36, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:28:24:aa:fd:fc:77:54:b3:04:16:a6:e8:d5: f1:84:55:8c:ec:e8:2d:96:f3:79:b1:89:3e:d3:7f: 66:08:2d:f6:9e:2c:a7:27:b1:ed:7c:75:68:30:a8: 9a:8c:a8:eb:5c:c5:95:c3:b9:f2:6c:55:69:a1:3a: 8a:53:e4:f2:9b:fc:45:d9:04:45:59:27:79:eb:dd: 9e:53:81:65:e1:98:b1:62:c1:3d:5a:b4:9a:fc:b7: 72:65:d6:26:da:5e:d0:fa:29:cc:a5:ec:22:77:6e: 02:c2:8c:8d:f6:6f:d7:75:b2:b1:c6:bc:51:55:d3: 17:de:b5:bc:9b:03:ed:07:51:52:06:fd:ca:cb:bb: 12:1c:52:5a:31:c7:fe:07:33:c7:b4:a5:e8:82:ab: c8:a4:6d:da:99:ff:17:ab:3d:13:fb:4c:42:02:24: 31:b0:51:99:d5:61:88:a3:1b:81:7e:4c:52:ca:91: 94:59:ca:8a:a7:df:1d:5a:02:9e:0a:d0:db:fb:c9: 45:49:e2:fe:d2:38:21:29:66:ac:0f:c6:e5:95:1d: 76:54:68:5f:7c:a0:1c:3b:64:65:bc:c5:4f:91:bf: b0:d1:f5:b1:b4:31:c5:48:08:4d:6c:03:6d:5f:79: 8c:7e:42:b0:c7:74:d1:4c:37:ad:e9:66:01:c9:5f: 7d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4D:7A:49:95:26:95:86:98:D7:09:AB:88:A3:10:6D:4B:81:95:9E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad0ad430-b688-47b5-97d6-6be7153ae649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.126.120.0/23 Signature Algorithm: sha256WithRSAEncryption 20:cb:f1:0d:74:ca:2d:d0:20:30:29:52:f0:59:4c:eb:2c:89: 12:21:18:b7:e2:35:98:5c:0b:30:2b:d5:a3:2e:30:24:b4:61: 97:99:50:91:24:2a:f9:a8:f3:34:44:e8:61:20:6b:8b:60:4a: 4a:14:89:d7:f8:3c:2e:c9:51:cc:3f:32:e8:4f:46:9e:f6:03: 0c:11:b8:35:06:5c:c3:a0:b6:f0:6f:e4:a6:9d:a4:7e:6d:2c: c1:d0:13:ef:f8:7c:bf:d6:83:f8:0b:8a:04:0e:04:6d:f4:6f: 6a:66:9e:42:9b:5c:be:f4:d7:b6:f5:fe:98:8b:4c:3e:db:c1: 4b:2e:a0:04:87:fd:1d:20:73:53:a1:fe:9d:2b:b1:8c:cf:7a: da:84:36:c6:b1:76:c7:4f:6d:cd:d3:d6:1e:0c:ac:a1:51:67: a0:a9:6c:ef:0d:aa:73:b5:c6:88:24:ba:eb:4b:3a:48:7f:1c: 7e:57:36:85:12:10:11:02:cd:cd:c3:b4:b6:64:a9:c7:32:f7: 5c:1f:78:d3:87:b1:27:9f:32:8a:42:de:28:40:e5:cf:67:13: 67:56:2f:58:35:3f:04:6c:fd:32:cc:63:a9:d0:18:3e:7b:90: c9:0b:bd:b2:51:2f:6b:4f:46:d1:1a:b4:2f:f9:f6:2f:6c:b5: 77:20:b3:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF2cNjs69PSdoeaNiFRp5/pRLSaowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NmZlYzMyNDY4MzFhYzBiNDcyMmRlY2E3NDZjZDZhNzFl YjVmMzg4YjNkOGJhYmI2MmFlMzBjODAyN2MzYzM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvKCSq/fx3VLMEFqbo1fGEVYzs6C2W83mxiT7Tf2YILfae LKcnse18dWgwqJqMqOtcxZXDufJsVWmhOopT5PKb/EXZBEVZJ3nr3Z5TgWXhmLFi wT1atJr8t3Jl1ibaXtD6Kcyl7CJ3bgLCjI32b9d1srHGvFFV0xfetbybA+0HUVIG /crLuxIcUloxx/4HM8e0peiCq8ikbdqZ/xerPRP7TEICJDGwUZnVYYijG4F+TFLK kZRZyoqn3x1aAp4K0Nv7yUVJ4v7SOCEpZqwPxuWVHXZUaF98oBw7ZGW8xU+Rv7DR 9bG0McVICE1sA21feYx+QrDHdNFMN63pZgHJX30nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUR016SZUmlYaY1wmriKMQbUuBlZ4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FkMGFkNDMwLWI2ODgtNDdiNS05N2Q2LTZiZTcxNTNhZTY0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHMfngwDQYJKoZIhvcNAQELBQADggEBACDL8Q10yi3QIDApUvBZTOssiRIh GLfiNZhcCzAr1aMuMCS0YZeZUJEkKvmo8zRE6GEga4tgSkoUidf4PC7JUcw/MuhP Rp72AwwRuDUGXMOgtvBv5KadpH5tLMHQE+/4fL/Wg/gLigQOBG30b2pmnkKbXL70 17b1/piLTD7bwUsuoASH/R0gc1Oh/p0rsYzPetqENsaxdsdPbc3T1h4MrKFRZ6Cp bO8NqnO1xogkuutLOkh/HH5XNoUSEBECzc3DtLZkqccy91wfeNOHsSefMopC3ihA 5c9nE2dWL1g1PwRs/TLMY6nQGD57kMkLvbJRL2tPRtEatC/59i9stXcgs8c= -----END CERTIFICATE-----Generated at Thu May 9 01:25:42 2024 by rpki-client on console-fra.rpki-client.org