$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c616d8c2-5c13-4c1d-a5a2-0282985a712e.roa File: c616d8c2-5c13-4c1d-a5a2-0282985a712e.roa (raw, json) Hash identifier: lHeggmraG3JloqwBR/AZmX4pnZXAujhZFl8lEEAmBpU= Subject key identifier: 82:0F:79:CD:54:94:38:20:76:F2:82:2C:9A:51:E7:E3:13:1C:01:40 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1A2EB9407FFBE044C8A1C93CBA01687656A62B67 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c616d8c2-5c13-4c1d-a5a2-0282985a712e.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 204.236.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2e:b9:40:7f:fb:e0:44:c8:a1:c9:3c:ba:01:68:76:56:a6:2b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=b680337705597abf1e38dff93c4eadd8d3a32fdba42167459ca1c43eb30fbf63, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4f:dd:ee:39:3f:e3:e3:f4:e9:7d:f2:bf:af: 04:36:c3:5a:d0:cb:58:50:d0:06:c0:47:a3:90:14: 3d:fa:ce:3a:65:ff:a0:e2:59:f2:85:10:85:11:bf: 56:78:53:70:97:c6:13:02:2a:55:03:9e:31:a3:ed: 48:0d:34:0d:91:14:8b:f4:51:de:56:7b:62:ba:14: f1:11:23:42:cd:17:13:7c:f5:f0:6e:94:4c:8b:da: 69:6c:69:bc:62:dc:03:af:1c:8d:21:d6:ad:7c:27: 0a:2c:14:d9:b5:51:aa:42:a9:b9:54:41:88:03:f7: fa:3a:ab:67:f6:40:d6:94:ee:9e:80:da:d4:c4:c7: 17:03:f4:01:d7:13:be:46:0b:c6:de:dc:bc:6e:de: 8f:97:5f:8b:e6:1b:0b:2b:76:64:c2:af:f1:38:af: 44:1e:bd:b4:64:97:b6:b1:64:de:1a:f1:ff:4d:d6: 42:36:2d:3c:0a:68:06:c7:7f:af:9e:e7:40:6b:79: 48:16:1d:22:09:d6:ce:96:95:36:ac:ea:d5:6a:7b: 02:82:1c:36:5f:1e:73:61:be:6c:13:d3:1f:8e:13: 0b:32:67:cf:2d:f3:db:96:8a:b5:20:6a:80:0f:15: 57:72:c8:14:da:4f:be:e5:13:c0:ec:64:74:91:97: 51:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0F:79:CD:54:94:38:20:76:F2:82:2C:9A:51:E7:E3:13:1C:01:40 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c616d8c2-5c13-4c1d-a5a2-0282985a712e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.128.0/18 Signature Algorithm: sha256WithRSAEncryption 85:74:47:82:72:9a:d9:65:d3:ee:8e:54:c9:98:87:c9:d0:b2: eb:e6:95:82:84:e5:87:4f:b5:e1:48:23:fe:52:be:5f:30:77: 00:39:58:a0:b4:59:f6:39:a7:8b:e1:26:e2:a7:9a:73:5e:06: 71:2f:ba:a3:af:45:73:33:37:d6:0b:24:ae:9e:d7:0e:8b:78: 2e:27:6b:a5:8c:d9:3f:9f:59:c4:8e:1b:8c:68:54:86:76:d6: 86:9a:d3:d0:90:1f:61:99:24:03:d7:a7:70:13:1c:18:6b:37: d0:df:cc:ec:b3:0f:63:f4:82:13:ad:d1:87:49:bd:50:d9:ac: 51:0f:8f:7f:a1:e7:15:dd:9b:14:49:86:64:b1:2f:87:ed:02: dc:ed:05:2c:9a:d4:e9:4c:8c:0e:c3:40:ed:1e:77:0b:9d:db: b4:0f:9b:ef:fa:5e:ae:eb:ca:af:85:ca:86:dc:57:3f:3b:de: d0:af:52:7e:2e:b2:51:05:c9:c7:1f:78:3d:97:1f:23:0b:a5: 1a:94:cc:51:65:c4:70:88:0d:15:d9:df:ce:c4:f9:c7:86:ab: 96:d9:eb:1b:d4:55:b0:0f:af:18:5d:e0:df:cf:75:16:3d:e2: db:d8:94:ee:cc:e8:5c:d6:bf:9f:d3:72:df:84:21:fd:d1:8e: 0e:f9:d5:3f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGi65QH/74ETIock8ugFodlamK2cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjgwMzM3NzA1NTk3YWJmMWUzOGRmZjkzYzRlYWRkOGQz YTMyZmRiYTQyMTY3NDU5Y2ExYzQzZWIzMGZiZjYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsT93uOT/j4/TpffK/rwQ2w1rQy1hQ0AbAR6OQFD36zjpl /6DiWfKFEIURv1Z4U3CXxhMCKlUDnjGj7UgNNA2RFIv0Ud5We2K6FPERI0LNFxN8 9fBulEyL2mlsabxi3AOvHI0h1q18JwosFNm1UapCqblUQYgD9/o6q2f2QNaU7p6A 2tTExxcD9AHXE75GC8be3Lxu3o+XX4vmGwsrdmTCr/E4r0QevbRkl7axZN4a8f9N 1kI2LTwKaAbHf6+e50BreUgWHSIJ1s6WlTas6tVqewKCHDZfHnNhvmwT0x+OEwsy Z88t89uWirUgaoAPFVdyyBTaT77lE8DsZHSRl1HXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgg95zVSUOCB28oIsmlHn4xMcAUAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M2MTZkOGMyLTVjMTMtNGMxZC1hNWEyLTAyODI5ODVhNzEyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbM7IAwDQYJKoZIhvcNAQELBQADggEBAIV0R4Jymtll0+6OVMmYh8nQsuvm lYKE5YdPteFII/5Svl8wdwA5WKC0WfY5p4vhJuKnmnNeBnEvuqOvRXMzN9YLJK6e 1w6LeC4na6WM2T+fWcSOG4xoVIZ21oaa09CQH2GZJAPXp3ATHBhrN9DfzOyzD2P0 ghOt0YdJvVDZrFEPj3+h5xXdmxRJhmSxL4ftAtztBSya1OlMjA7DQO0edwud27QP m+/6Xq7ryq+FyobcVz873tCvUn4uslEFyccfeD2XHyMLpRqUzFFlxHCIDRXZ387E +ceGq5bZ6xvUVbAPrxhd4N/PdRY94tvYlO7M6FzWv5/Tct+EIf3Rjg751T8= -----END CERTIFICATE-----Generated at Fri Apr 26 00:40:25 2024 by rpki-client on console-fra.rpki-client.org