$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfbf4ece-bc40-47c0-bfdc-7a87c3a52951.roa File: bfbf4ece-bc40-47c0-bfdc-7a87c3a52951.roa (raw, json) Hash identifier: l60vRlCZhaLiuooH9stGKXf6hVP6ACdKdx9jWGJ6guw= Subject key identifier: E1:C2:A0:1A:EB:3C:67:53:51:C5:DD:35:B1:99:88:A1:20:8A:C8:61 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 46E0F2287CB86CAD64B4A4DD997F2249D3A9A5A6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfbf4ece-bc40-47c0-bfdc-7a87c3a52951.roa Signing time: Fri 03 May 2024 00:00:00 +0000 ROA not before: Fri 03 May 2024 00:00:00 +0000 ROA not after: Fri 07 Jun 2024 23:59:59 +0000 asID: 8987 IP address blocks: 56.208.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e0:f2:28:7c:b8:6c:ad:64:b4:a4:dd:99:7f:22:49:d3:a9:a5:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:00:00 2024 GMT Not After : Jun 7 23:59:59 2024 GMT Subject: serialNumber=ca733d68f339232b09da0a73c18d8165ea532d94ece46113ba6065c6a37259f7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1b:a9:3d:6d:48:2a:c9:40:d3:ec:e9:d7:2a: 86:d2:37:71:64:a9:b8:f5:01:51:27:b6:84:0f:dd: 81:5d:39:19:71:17:85:73:c3:ad:f4:cf:cf:ea:b8: 21:b9:91:b3:91:f9:f9:f3:4b:d0:c2:fc:a2:32:52: fe:63:f2:c2:43:0c:a5:8e:e2:f3:3a:56:8a:74:67: 22:7a:8e:b6:aa:9c:81:0b:e6:6b:de:17:da:d2:01: ec:c3:69:a6:c8:bf:47:fa:04:a5:2e:19:5c:5a:9d: 89:a2:ea:e5:a6:04:a6:c6:d6:9a:3e:3f:32:09:1b: 97:ec:f8:c5:7d:80:ea:70:e4:9f:da:05:5e:2f:4d: 4b:c0:5b:e4:16:26:e7:eb:97:b5:1f:4b:c7:b8:3b: 1a:10:ae:e4:14:4f:e9:96:c7:84:da:22:25:7c:a7: cf:31:21:fa:fe:95:23:3f:b2:31:1d:e8:40:13:a4: f9:65:6d:81:da:f1:40:6c:03:64:87:7e:14:0a:61: 93:02:8c:42:1a:ae:2a:d2:c7:5b:41:18:3a:91:02: af:ba:cd:70:5f:30:8e:dd:f4:98:e4:b9:8d:d9:e8: 1b:00:cc:f0:2b:57:50:b1:26:a2:c8:da:30:f9:eb: 98:8c:ca:e9:00:7a:4a:83:b1:4a:05:2b:a8:6e:2c: 77:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C2:A0:1A:EB:3C:67:53:51:C5:DD:35:B1:99:88:A1:20:8A:C8:61 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfbf4ece-bc40-47c0-bfdc-7a87c3a52951.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.208.0.0/16 Signature Algorithm: sha256WithRSAEncryption ca:54:91:af:10:d7:b9:90:ea:67:1d:d1:a0:2f:34:bc:eb:0d: 4b:49:7f:5c:09:49:e8:57:ec:d9:9f:4a:8c:b7:1d:40:2c:ed: 16:25:4f:b7:43:9e:ae:1d:b0:e4:36:34:7b:ae:d4:1d:34:3e: 39:78:d8:8e:52:7c:fa:65:89:61:c1:17:a7:37:ab:1c:c5:33: c4:ba:c6:d4:27:97:30:05:ac:5c:c9:fc:62:9b:de:0c:e3:2c: 8f:b0:a2:27:d4:3c:56:67:0c:d2:ab:37:8a:8f:62:d1:26:d1: e2:9d:b4:2f:8e:73:07:10:09:d9:53:97:52:3f:bd:b7:98:53: 47:2c:7e:8e:23:3d:26:47:42:9b:0a:0a:0d:03:fa:73:e0:4b: 73:51:49:ac:c6:b6:f6:d5:dd:3b:0d:57:45:f5:c5:d3:f1:c4: 57:43:be:71:93:54:f8:17:5b:62:be:07:2f:68:9c:d9:e5:83: d8:94:ae:39:b3:90:44:e5:c8:1b:47:e8:db:30:1b:90:bc:6a: fd:df:5f:8b:e6:c6:10:47:1f:e2:78:08:fb:f4:a8:cb:e4:4c: 35:bc:26:ae:52:5c:44:9b:6c:a7:74:8d:b5:50:84:5a:dd:b1: ab:7b:8b:5a:10:72:1b:fe:18:c5:d8:f0:02:2d:86:35:10:1d: 2a:5e:ef:9d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURuDyKHy4bK1ktKTdmX8iSdOppaYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYTczM2Q2OGYzMzkyMzJiMDlkYTBhNzNjMThkODE2NWVh NTMyZDk0ZWNlNDYxMTNiYTYwNjVjNmEzNzI1OWY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaG6k9bUgqyUDT7OnXKobSN3Fkqbj1AVEntoQP3YFdORlx F4Vzw630z8/quCG5kbOR+fnzS9DC/KIyUv5j8sJDDKWO4vM6Vop0ZyJ6jraqnIEL 5mveF9rSAezDaabIv0f6BKUuGVxanYmi6uWmBKbG1po+PzIJG5fs+MV9gOpw5J/a BV4vTUvAW+QWJufrl7UfS8e4OxoQruQUT+mWx4TaIiV8p88xIfr+lSM/sjEd6EAT pPllbYHa8UBsA2SHfhQKYZMCjEIarirSx1tBGDqRAq+6zXBfMI7d9JjkuY3Z6BsA zPArV1CxJqLI2jD565iMyukAekqDsUoFK6huLHfpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU4cKgGus8Z1NRxd01sZmIoSCKyGEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmYmY0ZWNlLWJjNDAtNDdjMC1iZmRjLTdhODdjM2E1Mjk1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA40DANBgkqhkiG9w0BAQsFAAOCAQEAylSRrxDXuZDqZx3RoC80vOsNS0l/ XAlJ6Ffs2Z9KjLcdQCztFiVPt0Oerh2w5DY0e67UHTQ+OXjYjlJ8+mWJYcEXpzer HMUzxLrG1CeXMAWsXMn8YpveDOMsj7CiJ9Q8VmcM0qs3io9i0SbR4p20L45zBxAJ 2VOXUj+9t5hTRyx+jiM9JkdCmwoKDQP6c+BLc1FJrMa29tXdOw1XRfXF0/HEV0O+ cZNU+BdbYr4HL2ic2eWD2JSuObOQROXIG0fo2zAbkLxq/d9fi+bGEEcf4ngI+/So y+RMNbwmrlJcRJtsp3SNtVCEWt2xq3uLWhByG/4YxdjwAi2GNRAdKl7vnQ== -----END CERTIFICATE-----Generated at Thu May 9 15:19:54 2024 by rpki-client on console-fra.rpki-client.org