$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afe78680-92ac-4c5a-810d-e207fccb38d1.roa File: afe78680-92ac-4c5a-810d-e207fccb38d1.roa (raw, json) Hash identifier: JaAY5cFDu6oXlJWo5OnmS6Dxh951b/1eiMM2DXYhU7M= Subject key identifier: C0:9C:98:C6:72:11:1F:49:F4:42:55:96:57:44:D6:BE:66:39:A1:AA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 21D4A3DC6E183F695163569F431A3A65979F404E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afe78680-92ac-4c5a-810d-e207fccb38d1.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 64.252.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d4:a3:dc:6e:18:3f:69:51:63:56:9f:43:1a:3a:65:97:9f:40:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=eab59d8212e687b586ab96da59db55d867f7ef6b601a7d75e42b6a4192e3c1b5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:75:b3:46:a2:a2:53:a0:25:2c:d4:39:28:fa: 0c:6b:aa:2f:fd:55:83:9a:07:22:69:e9:4b:18:84: eb:ea:f4:66:ad:3b:04:fe:d0:52:d1:03:7a:0a:d1: 17:8f:66:60:f3:c4:72:85:12:b2:22:b5:0d:49:3e: 79:17:0e:6e:66:66:85:eb:71:4a:a5:07:ed:6d:ff: c4:08:4c:70:6b:33:45:df:62:a1:b8:75:fc:be:3b: a9:08:36:54:67:67:b5:31:97:39:1a:d2:22:fe:47: 91:1b:b0:f7:e7:8b:04:4c:90:9b:94:58:ce:0b:68: 10:3d:d8:81:3f:3a:e4:67:07:c1:ef:ff:c3:9e:c5: f6:ac:17:e3:18:ed:a8:bc:7b:2a:06:b0:41:f2:1c: b7:1c:71:df:48:9f:ec:c3:32:46:18:ef:e9:95:10: aa:60:8c:84:a7:62:7f:44:de:59:2a:53:34:7a:1e: 16:69:c3:69:ca:72:d4:65:08:a3:dd:dc:f6:ec:6c: 73:6b:b4:1d:6b:3f:28:0c:69:44:8f:f9:d3:f8:38: 2a:81:10:b2:d4:3e:10:6a:27:c8:24:28:5d:4d:1a: 97:dc:4e:cf:77:b5:7d:9d:d1:86:7e:9d:09:5c:01: 8d:bb:b4:01:13:c2:bf:54:26:05:d0:78:39:c7:99: c7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9C:98:C6:72:11:1F:49:F4:42:55:96:57:44:D6:BE:66:39:A1:AA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afe78680-92ac-4c5a-810d-e207fccb38d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.128.0/18 Signature Algorithm: sha256WithRSAEncryption cf:e8:02:49:b3:a2:3d:bb:13:a9:ec:fb:eb:4b:de:18:cd:aa: 3d:97:5a:be:a4:fc:af:9e:ca:f7:68:95:31:56:9b:90:8e:e0: 4d:8b:af:9a:00:8f:9d:ef:6b:99:e3:3b:8b:66:d6:2c:10:eb: ce:22:20:96:75:fd:9d:ec:52:94:53:c5:ba:96:ba:22:81:5d: 56:5a:bc:38:40:07:33:76:fd:d9:96:15:a8:4f:2e:b2:f5:5d: 46:06:2c:9e:0e:93:22:2d:ae:b8:aa:94:c9:fa:8c:49:63:18: e0:72:cc:76:ed:b7:7f:40:72:96:b6:8d:2d:44:e2:7e:23:2d: 61:09:cd:89:35:f4:b6:c4:cd:ba:74:76:ab:63:13:34:c4:4e: 0e:8a:02:e5:f6:48:ea:64:ba:d0:48:00:db:b1:de:97:7c:61: f3:7a:67:af:3d:4a:ca:0a:e5:68:7f:4c:94:54:87:6d:53:f3: 03:f9:f5:47:42:df:27:1b:ac:02:b0:fe:64:ad:67:a6:02:3f: b0:42:5e:b5:ad:6b:07:4e:45:cb:9f:75:0e:31:dc:1e:42:61: d7:05:a0:ee:02:6b:0a:83:89:18:87:60:10:f4:82:22:2d:d9: 2a:5a:5e:40:d4:90:a7:41:6e:a5:98:b6:c4:34:60:08:ed:dd: be:3f:f6:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIdSj3G4YP2lRY1afQxo6ZZefQE4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYWI1OWQ4MjEyZTY4N2I1ODZhYjk2ZGE1OWRiNTVkODY3 ZjdlZjZiNjAxYTdkNzVlNDJiNmE0MTkyZTNjMWI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKdbNGoqJToCUs1Dko+gxrqi/9VYOaByJp6UsYhOvq9Gat OwT+0FLRA3oK0RePZmDzxHKFErIitQ1JPnkXDm5mZoXrcUqlB+1t/8QITHBrM0Xf YqG4dfy+O6kINlRnZ7Uxlzka0iL+R5EbsPfniwRMkJuUWM4LaBA92IE/OuRnB8Hv /8OexfasF+MY7ai8eyoGsEHyHLcccd9In+zDMkYY7+mVEKpgjISnYn9E3lkqUzR6 HhZpw2nKctRlCKPd3PbsbHNrtB1rPygMaUSP+dP4OCqBELLUPhBqJ8gkKF1NGpfc Ts93tX2d0YZ+nQlcAY27tAETwr9UJgXQeDnHmccPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwJyYxnIRH0n0QlWWV0TWvmY5oaowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmZTc4NjgwLTkyYWMtNGM1YS04MTBkLWUyMDdmY2NiMzhkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZA/IAwDQYJKoZIhvcNAQELBQADggEBAM/oAkmzoj27E6ns++tL3hjNqj2X Wr6k/K+eyvdolTFWm5CO4E2Lr5oAj53va5njO4tm1iwQ684iIJZ1/Z3sUpRTxbqW uiKBXVZavDhABzN2/dmWFahPLrL1XUYGLJ4OkyItrriqlMn6jEljGOByzHbtt39A cpa2jS1E4n4jLWEJzYk19LbEzbp0dqtjEzTETg6KAuX2SOpkutBIANux3pd8YfN6 Z689SsoK5Wh/TJRUh21T8wP59UdC3ycbrAKw/mStZ6YCP7BCXrWtawdORcufdQ4x 3B5CYdcFoO4CawqDiRiHYBD0giIt2SpaXkDUkKdBbqWYtsQ0YAjt3b4/9lo= -----END CERTIFICATE-----Generated at Thu May 2 04:02:40 2024 by rpki-client on console-fra.rpki-client.org