$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfe4e791-37de-4a39-a8f9-8e534d1f98f3.roa File: bfe4e791-37de-4a39-a8f9-8e534d1f98f3.roa (raw, json) Hash identifier: uQyMr/epCdXfhlTYH46cNhqww4biC3wWJP+yu+sG8X4= Subject key identifier: F3:38:9E:C6:38:4D:3B:E1:BB:A3:09:FE:AD:AF:89:5B:45:5B:30:48 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 06F0D228C6A11F8AE8F71756E9B6FECC86B2C9DF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfe4e791-37de-4a39-a8f9-8e534d1f98f3.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 129.224.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f0:d2:28:c6:a1:1f:8a:e8:f7:17:56:e9:b6:fe:cc:86:b2:c9:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=7ec4cf797267672efb79a2c201520c4a950ddfeeddb248233fb6d66cf76fc39e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:63:86:7e:3d:e2:fc:fe:63:69:ea:84:68:37: 25:fd:46:89:1e:e2:20:26:90:cf:2e:fd:40:e4:bb: a1:b8:e7:7f:f8:ea:3e:7f:bc:5d:13:c3:ee:32:15: f1:2f:4c:8d:57:f3:9c:65:a1:d8:4f:58:a1:f3:06: c6:d4:d3:ba:83:7f:9e:6a:2f:37:11:50:5c:25:65: b9:e9:9d:01:ea:a4:c9:be:34:75:b4:b6:00:b8:17: 7f:fc:b2:d8:1d:7b:ab:ac:08:a1:ac:86:43:ea:94: db:4d:dc:14:5d:d0:00:ef:c0:86:b1:c4:44:1a:93: 0e:0a:8f:e2:31:00:35:48:7c:61:1c:73:b1:47:d8: ca:d4:9b:3e:34:af:0b:89:e8:e9:2a:ef:d1:9a:17: 6e:b5:e9:e0:1d:15:46:fd:4f:5b:31:73:11:6e:f9: 04:c2:a0:94:18:38:2b:86:9f:cc:10:51:82:50:e5: 23:47:00:b2:7e:54:79:2a:72:44:1a:ec:13:61:67: a5:de:cf:e5:77:01:6d:c5:05:a7:ce:43:a5:d1:d3: 11:99:a2:ff:3f:bf:7b:cf:f3:a8:bd:26:cd:b1:96: d7:0f:ff:6d:ad:aa:00:f6:5a:47:76:a8:0e:a8:b1: a6:06:ac:0e:12:d7:23:fb:c1:1c:1c:e1:77:e0:a9: ba:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:38:9E:C6:38:4D:3B:E1:BB:A3:09:FE:AD:AF:89:5B:45:5B:30:48 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfe4e791-37de-4a39-a8f9-8e534d1f98f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.224.0.0/17 Signature Algorithm: sha256WithRSAEncryption d2:fc:ff:6c:aa:8b:92:8f:bc:77:f0:83:c6:0e:cf:4a:44:03: 01:fa:dc:c7:22:a1:d6:92:07:5e:a8:64:23:c0:07:87:70:5c: f8:93:70:10:4c:c0:b5:77:b8:bf:15:06:fd:57:dc:83:f1:81: 64:92:aa:fe:f7:ed:cf:31:80:2d:be:36:55:34:41:ce:c1:80: d4:9c:6d:53:a4:ab:1a:44:61:6b:05:ab:6a:c6:8c:19:58:03: 53:0e:de:ca:2c:ca:aa:29:aa:20:57:66:f9:16:a0:21:bb:fe: 8d:e2:cc:76:02:f5:ad:11:3d:eb:5b:ff:05:37:04:ae:58:3f: 97:3f:84:09:c5:e4:fe:7d:1d:95:4d:d8:e2:41:ec:2c:75:9b: 3a:8f:05:72:47:78:45:0e:8d:a3:73:67:f2:92:ac:ba:29:17: 8d:9d:51:6c:c8:76:bc:48:1f:3d:39:13:10:2d:e4:4d:af:f5: 3e:03:4d:bc:68:3c:6c:4b:07:2e:c8:74:62:9a:51:ac:5f:b4: c8:01:a7:de:e5:06:e7:9e:30:37:cb:f6:6d:ce:93:97:04:5f: 8a:d3:2d:37:54:a9:fa:ac:7f:e2:ed:e9:1d:1f:17:45:c0:87: 75:e2:e6:3d:14:6d:62:15:61:e2:62:f0:f6:68:1b:8e:79:fb: e9:4a:c4:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBvDSKMahH4ro9xdW6bb+zIayyd8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZWM0Y2Y3OTcyNjc2NzJlZmI3OWEyYzIwMTUyMGM0YTk1 MGRkZmVlZGRiMjQ4MjMzZmI2ZDY2Y2Y3NmZjMzllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6Y4Z+PeL8/mNp6oRoNyX9Roke4iAmkM8u/UDku6G453/4 6j5/vF0Tw+4yFfEvTI1X85xlodhPWKHzBsbU07qDf55qLzcRUFwlZbnpnQHqpMm+ NHW0tgC4F3/8stgde6usCKGshkPqlNtN3BRd0ADvwIaxxEQakw4Kj+IxADVIfGEc c7FH2MrUmz40rwuJ6Okq79GaF2616eAdFUb9T1sxcxFu+QTCoJQYOCuGn8wQUYJQ 5SNHALJ+VHkqckQa7BNhZ6Xez+V3AW3FBafOQ6XR0xGZov8/v3vP86i9Js2xltcP /22tqgD2Wkd2qA6osaYGrA4S1yP7wRwc4Xfgqbr9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8ziexjhNO+G7own+ra+JW0VbMEgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmZTRlNzkxLTM3ZGUtNGEzOS1hOGY5LThlNTM0ZDFmOThmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeB4AAwDQYJKoZIhvcNAQELBQADggEBANL8/2yqi5KPvHfwg8YOz0pEAwH6 3MciodaSB16oZCPAB4dwXPiTcBBMwLV3uL8VBv1X3IPxgWSSqv737c8xgC2+NlU0 Qc7BgNScbVOkqxpEYWsFq2rGjBlYA1MO3sosyqopqiBXZvkWoCG7/o3izHYC9a0R Petb/wU3BK5YP5c/hAnF5P59HZVN2OJB7Cx1mzqPBXJHeEUOjaNzZ/KSrLopF42d UWzIdrxIHz05ExAt5E2v9T4DTbxoPGxLBy7IdGKaUaxftMgBp97lBueeMDfL9m3O k5cEX4rTLTdUqfqsf+Lt6R0fF0XAh3Xi5j0UbWIVYeJi8PZoG455++lKxLc= -----END CERTIFICATE-----Generated at Thu May 2 08:02:38 2024 by rpki-client on console-ams.rpki-client.org