$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca987030-44c3-48e3-b5be-ea5021f48461.roa File: ca987030-44c3-48e3-b5be-ea5021f48461.roa (raw, json) Hash identifier: bee/9ap333Hi21MO8rD1siUc4tkIiVULr5RXa3afDJo= Subject key identifier: BA:F0:78:98:02:4A:CF:B3:1F:07:2E:09:3C:A0:DD:EF:0C:DD:C6:DF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F004E8672D455D3D8616027AC2CA97C8F1FD112 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca987030-44c3-48e3-b5be-ea5021f48461.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 132.223.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:00:4e:86:72:d4:55:d3:d8:61:60:27:ac:2c:a9:7c:8f:1f:d1:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=e74eb183224446c3882512a999fc64cf9f99bc13fcf226754dc4d4621a48b5e0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4b:7a:8c:f6:ff:2c:2a:62:11:da:ac:67:07: c1:28:6c:a7:a2:0c:76:e0:f0:86:73:11:af:ea:ec: 2f:d4:4e:3b:0e:1c:b8:ff:94:c7:69:75:4d:40:be: 07:a4:21:c7:09:df:b9:2c:3c:16:4d:13:e7:ea:3e: 74:fb:74:14:d1:82:b9:6b:0b:9f:2f:c4:71:d3:32: a5:04:59:5a:6d:0f:b0:f2:87:e5:d5:27:fa:5c:c0: d8:ef:54:ce:5a:96:ad:a7:8a:ed:c1:67:54:d7:af: 68:59:f4:40:cf:37:c6:ba:12:11:e0:dd:b7:bd:e5: b3:31:c9:a2:2d:11:76:27:98:7d:88:bf:f0:b6:96: 36:94:27:cc:d6:43:45:26:3a:c6:d5:8d:21:e4:ab: a4:c6:5b:cb:cf:d3:da:6d:8b:9f:24:5c:ac:07:9c: 25:80:da:58:12:90:47:f0:e6:03:00:48:19:c3:c9: 9f:34:ae:47:09:69:5a:67:15:7d:27:c7:ff:7f:46: ee:21:70:6c:24:00:cc:bb:f5:54:88:5a:a7:3b:54: 40:fb:e0:ca:1e:54:79:f6:a3:d3:4b:97:41:a9:1e: 24:8a:a5:a2:51:b5:dd:5b:ff:1c:80:bf:2d:d4:cd: 38:3c:e6:ac:3b:58:f6:b7:44:60:ce:f2:7d:7d:2c: cf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F0:78:98:02:4A:CF:B3:1F:07:2E:09:3C:A0:DD:EF:0C:DD:C6:DF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca987030-44c3-48e3-b5be-ea5021f48461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.223.0.0/16 Signature Algorithm: sha256WithRSAEncryption ae:69:13:41:ef:5e:d6:6a:11:da:60:60:ba:1e:2e:20:a6:81: 56:2a:ce:fb:ad:1b:a9:1a:23:db:0b:96:eb:d1:0a:d2:95:ae: 5e:16:16:67:81:6c:52:ac:61:10:d6:35:c4:4e:cf:77:f2:a1: 00:b3:d3:61:ba:82:23:0e:12:a8:d9:7c:1f:2e:31:44:0c:56: ad:b0:3c:dc:35:2e:e4:c1:91:89:03:cd:06:a2:1b:1d:3d:c8: dd:88:30:9d:23:1d:c6:8b:79:31:a5:32:d3:83:9e:2e:fc:27: d2:a9:00:7b:30:fc:b7:d9:35:f0:df:6e:fe:07:e6:b5:f4:fa: aa:57:16:f7:c0:96:b7:f2:8f:bb:87:e8:35:e9:0b:1a:f6:38: ab:b6:60:f0:1a:8a:f7:58:9c:8d:7a:54:9b:6f:b7:3e:70:5b: 26:b6:af:f3:7e:a3:4f:ca:90:5e:be:48:61:d7:f2:64:86:52: c6:d7:42:ce:fe:f7:03:36:71:29:ed:50:1e:84:18:79:63:02: f4:14:cc:51:bf:dd:08:12:80:5e:aa:4a:51:dd:0f:9f:a3:08: 35:54:4f:4f:9a:fd:e6:48:80:a7:a5:ca:bf:8a:60:dd:97:6b: 72:ee:e0:72:47:be:7f:71:4f:72:61:4d:6b:ca:dc:b2:de:b3: 44:aa:5a:58 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHwBOhnLUVdPYYWAnrCypfI8f0RIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNzRlYjE4MzIyNDQ0NmMzODgyNTEyYTk5OWZjNjRjZjlm OTliYzEzZmNmMjI2NzU0ZGM0ZDQ2MjFhNDhiNWUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYS3qM9v8sKmIR2qxnB8EobKeiDHbg8IZzEa/q7C/UTjsO HLj/lMdpdU1AvgekIccJ37ksPBZNE+fqPnT7dBTRgrlrC58vxHHTMqUEWVptD7Dy h+XVJ/pcwNjvVM5alq2niu3BZ1TXr2hZ9EDPN8a6EhHg3be95bMxyaItEXYnmH2I v/C2ljaUJ8zWQ0UmOsbVjSHkq6TGW8vP09pti58kXKwHnCWA2lgSkEfw5gMASBnD yZ80rkcJaVpnFX0nx/9/Ru4hcGwkAMy79VSIWqc7VED74MoeVHn2o9NLl0GpHiSK paJRtd1b/xyAvy3UzTg85qw7WPa3RGDO8n19LM/XAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUuvB4mAJKz7MfBy4JPKDd7wzdxt8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NhOTg3MDMwLTQ0YzMtNDhlMy1iNWJlLWVhNTAyMWY0ODQ2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCE3zANBgkqhkiG9w0BAQsFAAOCAQEArmkTQe9e1moR2mBguh4uIKaBVirO +60bqRoj2wuW69EK0pWuXhYWZ4FsUqxhENY1xE7Pd/KhALPTYbqCIw4SqNl8Hy4x RAxWrbA83DUu5MGRiQPNBqIbHT3I3YgwnSMdxot5MaUy04OeLvwn0qkAezD8t9k1 8N9u/gfmtfT6qlcW98CWt/KPu4foNekLGvY4q7Zg8BqK91icjXpUm2+3PnBbJrav 836jT8qQXr5IYdfyZIZSxtdCzv73AzZxKe1QHoQYeWMC9BTMUb/dCBKAXqpKUd0P n6MINVRPT5r95kiAp6XKv4pg3Zdrcu7gcke+f3FPcmFNa8rcst6zRKpaWA== -----END CERTIFICATE-----Generated at Thu Apr 25 19:10:00 2024 by rpki-client on console-ams.rpki-client.org