$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b08dba51-75c7-46ba-9d55-b8d173693e26.roa File: b08dba51-75c7-46ba-9d55-b8d173693e26.roa (raw, json) Hash identifier: TV9u0xJoHnv1LKKMDBQCdqkrWpZy3EXMYfEIP9ZKJv0= Subject key identifier: 02:6C:C5:A4:8A:80:67:E6:B0:A8:C9:F9:AE:30:A5:31:24:A8:3B:AC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0CCF11D5D4F81735D009347F0A8E52BCBFC0BD12 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b08dba51-75c7-46ba-9d55-b8d173693e26.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 66.165.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:cf:11:d5:d4:f8:17:35:d0:09:34:7f:0a:8e:52:bc:bf:c0:bd:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=ed1d800fcffbe11d2d59e8c3e7dc351edbc6cba945c1bbebc95debdc205c6736, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:19:be:77:b6:5a:80:58:32:c2:ac:d3:30:a3: 5e:f7:92:08:c5:c1:c7:a7:46:be:05:a5:4f:1c:11: 86:b8:25:e9:27:c0:99:5d:8e:0b:ec:26:f0:6f:86: 09:ab:65:59:62:54:35:88:bc:38:bc:98:29:31:68: c3:f5:8a:d8:c8:59:91:95:ec:3f:89:bf:91:b1:90: a4:58:b0:de:e5:0f:9b:b7:9a:44:17:a0:32:e1:fc: 67:b4:f0:b0:d1:a2:c7:eb:15:16:60:2b:0a:81:17: 60:ea:f9:d6:aa:15:fe:7d:ca:d8:e1:c8:3f:81:a7: b4:fb:a7:51:1b:d1:09:e6:de:8b:f3:60:e3:79:d9: 0a:cb:56:cc:d7:b0:f6:76:94:18:7a:66:92:b2:59: 43:30:11:d3:bd:ef:92:fc:81:00:5c:c0:5e:22:53: 83:6c:17:15:7b:8a:26:96:18:17:e1:3d:3d:f0:aa: 03:01:c2:71:01:41:2d:0f:53:c5:23:fb:b0:18:36: ea:56:67:5d:ba:30:bd:ff:af:b7:3b:c0:4f:a4:1b: 18:e2:f2:d9:90:a5:96:6b:99:78:c6:e1:1a:ea:a7: fa:f5:6e:be:16:48:dd:15:5a:b1:d9:85:c9:16:21: ca:b4:40:d2:36:5f:9b:cf:8c:68:8f:37:8e:92:88: 58:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6C:C5:A4:8A:80:67:E6:B0:A8:C9:F9:AE:30:A5:31:24:A8:3B:AC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b08dba51-75c7-46ba-9d55-b8d173693e26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.165.64.0/18 Signature Algorithm: sha256WithRSAEncryption 0f:ed:c9:a3:96:99:9f:0a:47:35:5c:cc:87:7e:f4:e4:c2:fc: 22:b4:44:7c:24:b3:d0:28:7e:39:6d:e8:a4:4a:c3:bf:ee:14: 45:f8:cc:eb:15:49:35:89:98:96:2f:2c:e2:7c:ac:8f:ac:f0: af:84:ce:48:05:45:ed:ca:cf:aa:9b:1f:4a:af:7c:f3:5a:e5: 3a:8b:68:02:7e:97:d0:b6:4c:3f:7e:07:e6:65:2c:21:2d:f6: 0b:44:20:52:f1:86:6f:98:54:7c:6a:99:e2:be:17:54:22:d3: 4f:f8:ea:c3:43:0e:17:c1:4d:a0:e3:e8:12:e8:7c:db:ba:22: 2a:36:d1:c6:82:b0:54:8d:87:4e:02:4d:77:9d:6b:53:d7:61: 2a:43:9b:0b:6b:13:e3:0d:c6:34:d3:1d:e6:c2:bf:1b:ee:5a: d8:e1:22:8a:eb:ea:e4:87:5e:d6:8c:d5:8d:ab:30:23:25:f3: db:25:e0:07:38:72:08:79:5d:eb:ad:06:fb:ce:8d:00:d3:d8: 4b:9d:d2:79:0d:57:2b:93:d8:8e:ba:f4:9a:77:5c:69:30:8a: 91:f3:15:44:5c:b2:0b:1d:28:c7:55:13:9a:e5:d9:34:78:a2: 17:38:bb:d3:28:d4:64:47:b4:83:54:e5:dd:2e:9d:d5:96:3a: 5e:06:66:ed -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDM8R1dT4FzXQCTR/Co5SvL/AvRIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZDFkODAwZmNmZmJlMTFkMmQ1OWU4YzNlN2RjMzUxZWRi YzZjYmE5NDVjMWJiZWJjOTVkZWJkYzIwNWM2NzM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChGb53tlqAWDLCrNMwo173kgjFwcenRr4FpU8cEYa4Jekn wJldjgvsJvBvhgmrZVliVDWIvDi8mCkxaMP1itjIWZGV7D+Jv5GxkKRYsN7lD5u3 mkQXoDLh/Ge08LDRosfrFRZgKwqBF2Dq+daqFf59ytjhyD+Bp7T7p1Eb0Qnm3ovz YON52QrLVszXsPZ2lBh6ZpKyWUMwEdO975L8gQBcwF4iU4NsFxV7iiaWGBfhPT3w qgMBwnEBQS0PU8Uj+7AYNupWZ126ML3/r7c7wE+kGxji8tmQpZZrmXjG4Rrqp/r1 br4WSN0VWrHZhckWIcq0QNI2X5vPjGiPN46SiFj1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAmzFpIqAZ+awqMn5rjClMSSoO6wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IwOGRiYTUxLTc1YzctNDZiYS05ZDU1LWI4ZDE3MzY5M2UyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZCpUAwDQYJKoZIhvcNAQELBQADggEBAA/tyaOWmZ8KRzVczId+9OTC/CK0 RHwks9Aofjlt6KRKw7/uFEX4zOsVSTWJmJYvLOJ8rI+s8K+EzkgFRe3Kz6qbH0qv fPNa5TqLaAJ+l9C2TD9+B+ZlLCEt9gtEIFLxhm+YVHxqmeK+F1Qi00/46sNDDhfB TaDj6BLofNu6Iio20caCsFSNh04CTXeda1PXYSpDmwtrE+MNxjTTHebCvxvuWtjh Iorr6uSHXtaM1Y2rMCMl89sl4Ac4cgh5XeutBvvOjQDT2Eud0nkNVyuT2I669Jp3 XGkwipHzFURcsgsdKMdVE5rl2TR4ohc4u9Mo1GRHtINU5d0undWWOl4GZu0= -----END CERTIFICATE-----Generated at Wed May 1 22:06:41 2024 by rpki-client on console-fra.rpki-client.org