$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae81930b-979f-4922-9f58-d9680bcc0fb6.roa File: ae81930b-979f-4922-9f58-d9680bcc0fb6.roa (raw, json) Hash identifier: 1fdZ0n7hYFYDF8QIC9my9dFWPQ4DsstAs9fxgfJc3JU= Subject key identifier: 59:3D:AE:9B:3B:8F:E3:DE:B3:97:AB:EA:C6:4D:7D:6D:E0:E2:E9:02 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39BB27AF0EBF6EDE11F93AB6F7E6861236E34C78 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae81930b-979f-4922-9f58-d9680bcc0fb6.roa Signing time: Tue 30 Apr 2024 00:00:00 +0000 ROA not before: Tue 30 Apr 2024 00:00:00 +0000 ROA not after: Tue 04 Jun 2024 23:59:59 +0000 asID: 14618 IP address blocks: 209.88.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:bb:27:af:0e:bf:6e:de:11:f9:3a:b6:f7:e6:86:12:36:e3:4c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 30 00:00:00 2024 GMT Not After : Jun 4 23:59:59 2024 GMT Subject: serialNumber=3b3925c4bea3d162775e99f3ce700c3ce27c83cec1b08e8b0ea9de0776265c19, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2a:36:88:4d:62:01:84:f5:05:ce:9c:5a:10: 58:f6:1c:f5:65:64:f5:39:b9:e4:2b:a8:f8:f7:ac: 4b:40:e0:9f:c4:da:83:4c:62:e8:15:61:bf:2f:5c: c5:41:45:49:3a:ed:c5:9c:53:11:42:62:14:35:ac: 33:e3:63:fb:d5:8d:38:aa:f2:8d:2f:fa:fa:41:bb: 3f:69:98:b2:64:c5:b1:ae:86:7e:31:0b:e3:91:71: 00:2c:4e:fd:62:eb:5b:f4:d5:64:f3:30:6f:ff:8a: 9e:c1:fa:8d:19:18:11:b2:2e:91:c2:1c:a6:d5:27: a8:94:dc:87:b5:e2:aa:2d:b8:12:54:eb:58:df:91: 2a:92:76:42:88:91:4d:5f:64:83:b5:c1:3a:f1:ce: 5e:e2:ef:5e:65:b0:3c:be:79:d4:a6:6b:6e:8a:bb: c3:ab:0e:75:de:4d:86:fe:ab:80:b2:27:26:97:10: cb:3b:1e:ac:ef:83:5d:15:54:8f:2e:5a:14:5b:40: 6e:c7:fa:3d:6a:23:e0:be:17:6b:77:d1:7b:b4:c1: a5:e5:0a:a5:e0:91:65:8a:8d:b5:36:e9:5e:f8:af: c2:74:6a:2d:d7:a0:95:06:32:15:b6:0b:5a:03:3a: 3c:47:6a:2a:5c:8b:fc:8b:c0:b2:84:4b:e2:41:1d: 0f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3D:AE:9B:3B:8F:E3:DE:B3:97:AB:EA:C6:4D:7D:6D:E0:E2:E9:02 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae81930b-979f-4922-9f58-d9680bcc0fb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.88.0.0/16 Signature Algorithm: sha256WithRSAEncryption 83:c3:9b:92:6a:b1:e9:6c:74:8c:33:b7:33:5f:a1:16:1e:52: 32:23:60:eb:80:c8:bb:c9:d0:a9:df:87:44:1e:70:3c:fb:4e: e6:8d:3c:75:ef:2e:69:7f:6c:be:8c:ec:12:22:d5:2c:97:10: bc:00:62:78:00:59:2b:21:af:c5:cc:ae:58:e0:4a:96:6d:73: c4:26:b4:aa:0a:7e:6d:d8:81:4d:17:20:55:87:17:4a:ce:18: 14:07:15:d3:ac:08:bf:1b:7f:da:59:b7:5f:81:8a:55:7e:1c: e8:85:d7:d6:ac:9f:72:9b:5b:b0:70:a9:af:94:cd:13:fa:3c: dd:7c:83:88:30:67:2e:2b:22:55:75:d2:cc:e0:69:d7:9e:09: a1:14:8a:38:aa:af:54:1e:6d:9d:a5:9a:d4:79:dc:85:2a:86: f6:1b:f0:d2:28:5a:88:7f:9f:80:f4:6f:9f:38:f5:cf:a7:42: dc:31:bb:22:72:41:0e:03:e4:ec:f8:10:cd:c4:8f:68:08:f3: 78:0f:2e:3a:f1:af:29:ee:84:c2:58:2b:17:b9:42:c8:8f:6b: 12:2a:42:1c:60:90:3d:79:40:41:2c:d2:80:42:8e:60:07:57: 4d:2e:a4:0a:ca:7a:c4:a8:5d:cc:de:87:88:69:c4:4c:8a:6b: 4d:1c:54:22 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUObsnrw6/bt4R+Tq29+aGEjbjTHgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDMwMDAwMDAwWhcNMjQwNjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjM5MjVjNGJlYTNkMTYyNzc1ZTk5ZjNjZTcwMGMzY2Uy N2M4M2NlYzFiMDhlOGIwZWE5ZGUwNzc2MjY1YzE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUKjaITWIBhPUFzpxaEFj2HPVlZPU5ueQrqPj3rEtA4J/E 2oNMYugVYb8vXMVBRUk67cWcUxFCYhQ1rDPjY/vVjTiq8o0v+vpBuz9pmLJkxbGu hn4xC+ORcQAsTv1i61v01WTzMG//ip7B+o0ZGBGyLpHCHKbVJ6iU3Ie14qotuBJU 61jfkSqSdkKIkU1fZIO1wTrxzl7i715lsDy+edSma26Ku8OrDnXeTYb+q4CyJyaX EMs7Hqzvg10VVI8uWhRbQG7H+j1qI+C+F2t30Xu0waXlCqXgkWWKjbU26V74r8J0 ai3XoJUGMhW2C1oDOjxHaipci/yLwLKES+JBHQ+fAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUWT2umzuP496zl6vqxk19beDi6QIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlODE5MzBiLTk3OWYtNDkyMi05ZjU4LWQ5NjgwYmNjMGZiNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDRWDANBgkqhkiG9w0BAQsFAAOCAQEAg8Obkmqx6Wx0jDO3M1+hFh5SMiNg 64DIu8nQqd+HRB5wPPtO5o08de8uaX9svozsEiLVLJcQvABieABZKyGvxcyuWOBK lm1zxCa0qgp+bdiBTRcgVYcXSs4YFAcV06wIvxt/2lm3X4GKVX4c6IXX1qyfcptb sHCpr5TNE/o83XyDiDBnLisiVXXSzOBp154JoRSKOKqvVB5tnaWa1HnchSqG9hvw 0ihaiH+fgPRvnzj1z6dC3DG7InJBDgPk7PgQzcSPaAjzeA8uOvGvKe6EwlgrF7lC yI9rEipCHGCQPXlAQSzSgEKOYAdXTS6kCsp6xKhdzN6HiGnETIprTRxUIg== -----END CERTIFICATE-----Generated at Thu May 2 01:05:39 2024 by rpki-client on console-fra.rpki-client.org