$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9b2f869-128a-476f-98d6-32a7d464a264.roa File: c9b2f869-128a-476f-98d6-32a7d464a264.roa (raw, json) Hash identifier: mUfVsBf55GJA7m4WMkY+7VoWz7L+k5m9mRxvjXX35Kw= Subject key identifier: 1E:6A:C1:C3:6C:36:77:DF:A1:F0:12:63:D6:BC:B0:C6:18:16:6C:5A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 180700D1CDB4C8AE967E4BCF59C584F6A0A2B45C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9b2f869-128a-476f-98d6-32a7d464a264.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 72.41.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:07:00:d1:cd:b4:c8:ae:96:7e:4b:cf:59:c5:84:f6:a0:a2:b4:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=d38697555b64864fc4158d32a6dbd16034ae879c4e58e4f307e736bae3fff7a8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7a:24:87:2f:b1:43:28:57:f6:ba:74:56:00: 01:27:b6:63:72:09:3c:e4:ca:e0:4d:28:cb:b8:39: cf:38:70:30:24:77:c3:5d:55:13:64:ae:14:8a:77: 8f:c5:72:01:8c:34:86:0d:fe:de:8c:72:59:b5:78: f6:0d:50:d4:c9:a4:bb:da:ce:f2:68:6e:c3:55:64: 75:4c:81:80:ec:0d:52:01:e0:f1:88:1a:27:c4:19: 0a:ff:de:25:56:16:4a:6b:e6:6f:1b:03:db:21:c1: 4d:a6:2b:f0:a4:de:10:94:81:4a:13:fd:4e:f4:17: cc:94:c7:71:1c:28:b0:8b:ed:28:a4:b9:73:24:1e: 8f:11:40:da:21:e2:e6:e8:0b:bb:06:f9:07:8f:6e: c9:ec:06:9b:06:54:ed:61:fc:f6:e5:70:58:c6:d1: cf:6f:0d:8b:74:2a:3a:2b:85:d1:34:d0:0a:74:76: 06:95:4c:5b:06:19:d9:76:e2:56:ec:ef:43:07:d8: 47:2d:21:c1:b1:f1:de:43:26:b8:1a:78:b7:9f:fb: ab:43:e8:98:c6:97:55:70:11:2b:76:f5:6f:d0:fb: 4b:7e:3d:ab:1f:33:20:70:67:87:ac:b6:92:3f:46: 58:c6:8f:1c:fa:a2:54:01:fe:04:c8:c1:7d:53:5d: 47:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6A:C1:C3:6C:36:77:DF:A1:F0:12:63:D6:BC:B0:C6:18:16:6C:5A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9b2f869-128a-476f-98d6-32a7d464a264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.41.0.0/16 Signature Algorithm: sha256WithRSAEncryption 46:8e:4a:db:15:6c:b6:df:9e:1a:ec:23:34:41:46:1c:b1:1e: f3:52:7b:ce:4e:57:bb:48:6e:f8:c9:43:0e:aa:b9:16:7c:35: 63:4c:5b:91:f9:97:74:72:3f:2f:89:e2:f8:cd:6d:6c:29:c2: c9:3b:3a:67:2a:a8:a8:f9:e0:ff:ea:3e:4e:d3:1f:39:51:2a: e5:6a:47:62:80:74:02:3a:8f:ff:42:e1:05:fd:56:c0:40:fd: ed:f7:d8:60:68:c0:49:5b:39:ad:e4:f8:61:07:b2:00:9c:b7: 6d:86:9a:42:ee:94:69:7b:c1:f8:33:be:17:67:9f:98:82:97: 3c:52:8b:a1:0e:34:b8:50:f0:90:64:f0:70:b0:3b:4b:22:f6: 65:19:3b:5e:b8:09:11:e5:cf:61:0c:ed:cc:c0:a0:68:9a:d3: 7b:42:bb:0f:ea:41:62:f8:73:5e:65:a1:37:41:27:98:11:c5: 98:d9:35:ca:45:83:0a:27:18:84:d9:f9:b4:5a:c6:ae:5b:c4: 19:20:bc:24:15:9b:ae:30:dd:f5:6d:c0:9c:03:1f:fb:b0:8c: 6b:f6:f9:13:8c:d7:91:2b:ba:47:83:29:49:41:92:35:50:3b: f2:2c:4e:cd:81:9f:da:81:77:32:e9:96:bf:e3:e4:bd:a7:23: 36:c2:fe:25 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGAcA0c20yK6WfkvPWcWE9qCitFwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzg2OTc1NTViNjQ4NjRmYzQxNThkMzJhNmRiZDE2MDM0 YWU4NzljNGU1OGU0ZjMwN2U3MzZiYWUzZmZmN2E4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSeiSHL7FDKFf2unRWAAEntmNyCTzkyuBNKMu4Oc84cDAk d8NdVRNkrhSKd4/FcgGMNIYN/t6Mclm1ePYNUNTJpLvazvJobsNVZHVMgYDsDVIB 4PGIGifEGQr/3iVWFkpr5m8bA9shwU2mK/Ck3hCUgUoT/U70F8yUx3EcKLCL7Sik uXMkHo8RQNoh4uboC7sG+QePbsnsBpsGVO1h/PblcFjG0c9vDYt0KjorhdE00Ap0 dgaVTFsGGdl24lbs70MH2EctIcGx8d5DJrgaeLef+6tD6JjGl1VwESt29W/Q+0t+ PasfMyBwZ4estpI/RljGjxz6olQB/gTIwX1TXUcPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUHmrBw2w2d9+h8BJj1rywxhgWbFowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M5YjJmODY5LTEyOGEtNDc2Zi05OGQ2LTMyYTdkNDY0YTI2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBIKTANBgkqhkiG9w0BAQsFAAOCAQEARo5K2xVstt+eGuwjNEFGHLEe81J7 zk5Xu0hu+MlDDqq5Fnw1Y0xbkfmXdHI/L4ni+M1tbCnCyTs6ZyqoqPng/+o+TtMf OVEq5WpHYoB0AjqP/0LhBf1WwED97ffYYGjASVs5reT4YQeyAJy3bYaaQu6UaXvB +DO+F2efmIKXPFKLoQ40uFDwkGTwcLA7SyL2ZRk7XrgJEeXPYQztzMCgaJrTe0K7 D+pBYvhzXmWhN0EnmBHFmNk1ykWDCicYhNn5tFrGrlvEGSC8JBWbrjDd9W3AnAMf +7CMa/b5E4zXkSu6R4MpSUGSNVA78ixOzYGf2oF3MumWv+PkvacjNsL+JQ== -----END CERTIFICATE-----Generated at Thu May 9 15:19:55 2024 by rpki-client on console-fra.rpki-client.org