$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8a268af-6ffb-4e9a-8b3e-e30511039071.roa File: c8a268af-6ffb-4e9a-8b3e-e30511039071.roa (raw, json) Hash identifier: PQzDXQ6L1fnOVxAk+z8/Kunh5w+S4j2GhSH9pgV+c9w= Subject key identifier: C8:E9:81:0A:0F:E8:6D:E9:29:67:8D:95:EE:99:58:CE:54:16:87:D3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4AA1EEE899460AA3C4D10ED57E8023FBD06BE967 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8a268af-6ffb-4e9a-8b3e-e30511039071.roa Signing time: Wed 17 Apr 2024 00:00:00 +0000 ROA not before: Wed 17 Apr 2024 00:00:00 +0000 ROA not after: Wed 22 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 204.169.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a1:ee:e8:99:46:0a:a3:c4:d1:0e:d5:7e:80:23:fb:d0:6b:e9:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 17 00:00:00 2024 GMT Not After : May 22 23:59:59 2024 GMT Subject: serialNumber=a64e7f7989bae973703aef79b9b87b2c7f05afd97fe8d2dc56e164d2f331bc8e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:17:55:49:db:3f:80:b9:71:71:cc:1f:ae:1b: ef:58:70:50:9c:07:c0:94:4e:f2:c2:19:1d:ea:e0: 36:e9:7b:bb:74:3d:02:4e:57:50:da:63:1b:c6:3a: 09:4a:c0:ba:8e:5d:32:c0:02:56:f7:cd:ef:8d:00: ae:75:25:e8:eb:1e:b2:78:cb:4e:c0:f7:ad:ea:0e: 81:a6:f4:e1:e1:ce:91:c5:f1:ae:0a:f8:47:4b:1e: f7:56:8f:e9:88:c8:6d:8c:a9:33:01:0a:47:46:f6: b4:c6:4f:b1:69:42:a0:a8:9f:d5:01:db:2e:e6:02: 35:b9:3b:98:fa:bc:19:69:ba:8f:4a:06:1e:9c:aa: 48:d7:fe:f6:7a:47:7f:b9:17:b1:74:9f:48:44:c2: 2e:c6:bf:5c:a8:41:1b:31:63:4f:b0:2d:a8:bf:3e: 06:c1:dd:9d:46:5d:11:c3:35:65:0b:2e:f1:2c:19: 61:0e:60:ba:89:f4:62:fa:3f:72:19:6a:f3:04:9c: d7:5e:8c:22:91:d6:45:bf:51:9a:68:6c:40:74:b7: 3c:43:78:a9:76:c5:cb:af:31:b7:78:e8:9f:9b:c2: dc:10:af:ef:da:2a:95:81:50:b6:a7:f5:43:7c:ff: 01:50:5d:ff:96:89:3e:f0:42:3f:ce:33:f1:61:88: a0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E9:81:0A:0F:E8:6D:E9:29:67:8D:95:EE:99:58:CE:54:16:87:D3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8a268af-6ffb-4e9a-8b3e-e30511039071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption bb:f3:08:c4:18:9b:c5:c1:cf:d4:ae:0b:a3:79:30:fb:ad:c8: c6:66:f2:4a:0e:7a:39:52:11:b0:d9:b0:f7:fc:87:d1:6e:f6: 50:26:07:e0:90:39:89:9d:0c:cc:68:2b:59:11:a2:e1:2b:2a: e0:f2:8b:a4:94:08:03:c0:b5:70:52:8f:bc:c4:13:04:92:30: 3e:c7:20:64:a9:6f:94:24:b6:e9:df:b4:6e:49:47:11:de:d7: fb:a8:fa:a9:4d:be:fd:18:55:f5:01:ff:0d:0e:2d:73:f9:4f: 38:e9:ce:91:15:de:44:b1:63:be:b1:bd:63:e7:1f:57:3a:9d: 0d:67:0c:da:9c:8a:e9:66:88:fa:2e:e4:58:2a:6b:a7:51:d8: c3:bc:c4:47:d5:77:3e:44:89:55:4f:70:1c:61:b4:2f:09:42: 13:03:dd:c6:5c:61:22:61:42:f2:d3:87:93:9d:52:ed:3c:19: 3e:6c:01:c0:0c:1e:de:37:b6:8c:ef:2b:86:bb:10:d4:80:74: 84:f2:17:26:08:e9:fa:a4:10:6b:5b:ff:74:eb:83:aa:b0:28: 21:e9:41:6d:92:a7:40:b3:77:bd:d7:90:23:06:cb:e9:53:1a: 1e:ef:39:d2:0b:6c:9a:26:85:0c:a3:62:12:c1:55:9d:85:1d: 01:5c:f5:a6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSqHu6JlGCqPE0Q7VfoAj+9Br6WcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE3MDAwMDAwWhcNMjQwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNjRlN2Y3OTg5YmFlOTczNzAzYWVmNzliOWI4N2IyYzdm MDVhZmQ5N2ZlOGQyZGM1NmUxNjRkMmYzMzFiYzhlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwF1VJ2z+AuXFxzB+uG+9YcFCcB8CUTvLCGR3q4Dbpe7t0 PQJOV1DaYxvGOglKwLqOXTLAAlb3ze+NAK51JejrHrJ4y07A963qDoGm9OHhzpHF 8a4K+EdLHvdWj+mIyG2MqTMBCkdG9rTGT7FpQqCon9UB2y7mAjW5O5j6vBlpuo9K Bh6cqkjX/vZ6R3+5F7F0n0hEwi7Gv1yoQRsxY0+wLai/PgbB3Z1GXRHDNWULLvEs GWEOYLqJ9GL6P3IZavMEnNdejCKR1kW/UZpobEB0tzxDeKl2xcuvMbd46J+bwtwQ r+/aKpWBULan9UN8/wFQXf+WiT7wQj/OM/FhiKA/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUyOmBCg/obekpZ42V7plYzlQWh9MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4YTI2OGFmLTZmZmItNGU5YS04YjNlLWUzMDUxMTAzOTA3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDMqTANBgkqhkiG9w0BAQsFAAOCAQEAu/MIxBibxcHP1K4Lo3kw+63Ixmby Sg56OVIRsNmw9/yH0W72UCYH4JA5iZ0MzGgrWRGi4Ssq4PKLpJQIA8C1cFKPvMQT BJIwPscgZKlvlCS26d+0bklHEd7X+6j6qU2+/RhV9QH/DQ4tc/lPOOnOkRXeRLFj vrG9Y+cfVzqdDWcM2pyK6WaI+i7kWCprp1HYw7zER9V3PkSJVU9wHGG0LwlCEwPd xlxhImFC8tOHk51S7TwZPmwBwAwe3je2jO8rhrsQ1IB0hPIXJgjp+qQQa1v/dOuD qrAoIelBbZKnQLN3vdeQIwbL6VMaHu850gtsmiaFDKNiEsFVnYUdAVz1pg== -----END CERTIFICATE-----Generated at Thu May 2 05:57:34 2024 by rpki-client on console-ams.rpki-client.org