$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af352a4f-99cd-4278-9f01-e33633513465.roa File: af352a4f-99cd-4278-9f01-e33633513465.roa (raw, json) Hash identifier: Oo4720BB4GDPafIaAEnkTRhJVIwcuUL6zSOWA+LbH9Q= Subject key identifier: 45:0A:71:8E:1F:19:1D:61:8A:9A:22:58:A5:89:7E:EC:21:81:4B:90 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 471028C0549429F771E014C5D433A71977DC4572 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af352a4f-99cd-4278-9f01-e33633513465.roa Signing time: Mon 06 May 2024 00:00:00 +0000 ROA not before: Mon 06 May 2024 00:00:00 +0000 ROA not after: Mon 10 Jun 2024 23:59:59 +0000 asID: 8987 IP address blocks: 173.228.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:10:28:c0:54:94:29:f7:71:e0:14:c5:d4:33:a7:19:77:dc:45:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 6 00:00:00 2024 GMT Not After : Jun 10 23:59:59 2024 GMT Subject: serialNumber=903768caefb1ad077faceb925d52250855c4a9935e88977f63f2beb9a66a312c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a0:6d:60:7a:1c:0e:2f:6b:82:1f:9d:5b:ae: 6b:62:a1:61:ae:a8:c8:67:e0:e0:70:dc:7d:d7:f3: eb:c9:3a:92:44:28:2c:3e:4f:75:3e:00:15:76:f9: 60:49:bf:6d:85:c8:8a:20:2b:7a:a4:38:ff:05:b5: 32:5e:98:60:4d:ad:00:89:98:25:07:a9:38:b6:bb: 01:50:1d:d9:31:be:d7:cf:49:69:9f:3d:9a:0b:e1: 9b:e5:73:53:0e:cd:b3:6a:16:95:5c:09:00:46:2b: d5:66:35:10:d8:a2:71:17:05:e3:0c:2e:38:5b:ca: de:5d:35:a3:cb:d7:2c:9a:d7:d0:49:11:a6:b1:a6: b0:f5:f9:60:50:f9:86:ab:87:0d:27:59:af:09:56: 26:77:93:46:b3:61:4d:05:7a:27:68:1e:61:37:af: 33:f5:14:58:03:fe:fe:31:be:9b:e4:42:73:a7:c0: 40:27:69:6e:20:69:f2:37:27:7c:e5:21:4e:54:dd: 66:39:f7:3c:cc:67:6c:98:0f:c4:26:02:36:84:1c: c0:c9:f0:5e:ba:c5:80:7e:b1:ae:a2:30:5c:68:a0: cc:04:89:ae:d3:b6:9e:e2:96:24:8e:aa:1e:e9:34: fd:da:22:35:9a:d2:e7:12:91:c8:96:b5:7e:a2:d4: ad:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0A:71:8E:1F:19:1D:61:8A:9A:22:58:A5:89:7E:EC:21:81:4B:90 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af352a4f-99cd-4278-9f01-e33633513465.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.228.160.0/19 Signature Algorithm: sha256WithRSAEncryption 63:5b:61:e8:18:ed:66:3d:05:45:f3:d6:13:23:7f:ae:15:82: 90:7d:19:ad:7a:06:e5:b8:e8:3f:58:29:93:2e:0e:d3:56:f7: 52:9f:f1:5f:58:2a:96:54:b2:aa:7a:86:df:61:43:35:d5:17: 21:26:ea:de:bd:c9:72:7f:3d:71:c9:8a:99:57:3a:49:ed:b2: 21:eb:fa:48:7d:8d:23:8a:84:21:f3:d0:21:8b:dc:d5:92:d9: d4:21:bd:f1:59:f3:96:4a:1b:8b:b8:db:11:ac:77:ec:b9:69: 46:76:24:1e:7b:53:98:26:56:4c:a7:41:1a:de:b6:bc:94:f0: c9:38:ff:2f:65:7f:9b:8c:b4:6d:29:68:ad:c6:0f:e7:0a:f0: b2:dd:ba:7e:df:6f:f7:e0:0c:f7:cc:6b:d1:03:44:82:78:95: cf:ee:ec:42:a8:2a:be:d9:7a:20:6c:75:d5:f0:85:fc:24:64: f9:e6:d5:20:bb:bc:f7:f3:f8:cf:e3:4c:b3:65:96:46:25:0b: 7f:27:11:2f:15:d5:b9:03:a9:8f:26:20:90:b6:7c:88:c4:27: 12:1c:4c:c4:62:4b:c1:9e:19:0f:23:1b:a2:dd:6a:12:ab:68: 09:b8:4f:bc:8a:7b:87:19:bd:42:2f:61:22:86:c7:8e:31:6e: 66:84:3f:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURxAowFSUKfdx4BTF1DOnGXfcRXIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTA2MDAwMDAwWhcNMjQwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDM3NjhjYWVmYjFhZDA3N2ZhY2ViOTI1ZDUyMjUwODU1 YzRhOTkzNWU4ODk3N2Y2M2YyYmViOWE2NmEzMTJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsoG1gehwOL2uCH51brmtioWGuqMhn4OBw3H3X8+vJOpJE KCw+T3U+ABV2+WBJv22FyIogK3qkOP8FtTJemGBNrQCJmCUHqTi2uwFQHdkxvtfP SWmfPZoL4Zvlc1MOzbNqFpVcCQBGK9VmNRDYonEXBeMMLjhbyt5dNaPL1yya19BJ EaaxprD1+WBQ+Yarhw0nWa8JViZ3k0azYU0FeidoHmE3rzP1FFgD/v4xvpvkQnOn wEAnaW4gafI3J3zlIU5U3WY59zzMZ2yYD8QmAjaEHMDJ8F66xYB+sa6iMFxooMwE ia7Ttp7iliSOqh7pNP3aIjWa0ucSkciWtX6i1K1nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURQpxjh8ZHWGKmiJYpYl+7CGBS5AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmMzUyYTRmLTk5Y2QtNDI3OC05ZjAxLWUzMzYzMzUxMzQ2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWt5KAwDQYJKoZIhvcNAQELBQADggEBAGNbYegY7WY9BUXz1hMjf64VgpB9 Ga16BuW46D9YKZMuDtNW91Kf8V9YKpZUsqp6ht9hQzXVFyEm6t69yXJ/PXHJiplX OkntsiHr+kh9jSOKhCHz0CGL3NWS2dQhvfFZ85ZKG4u42xGsd+y5aUZ2JB57U5gm VkynQRretryU8Mk4/y9lf5uMtG0paK3GD+cK8LLdun7fb/fgDPfMa9EDRIJ4lc/u 7EKoKr7ZeiBsddXwhfwkZPnm1SC7vPfz+M/jTLNllkYlC38nES8V1bkDqY8mIJC2 fIjEJxIcTMRiS8GeGQ8jG6LdahKraAm4T7yKe4cZvUIvYSKGx44xbmaEPy8= -----END CERTIFICATE-----Generated at Thu May 9 15:19:52 2024 by rpki-client on console-fra.rpki-client.org