$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb363ca6-44a5-461f-b2ef-05e93a39afe2.roa File: cb363ca6-44a5-461f-b2ef-05e93a39afe2.roa (raw, json) Hash identifier: oFglB6FJzrl9B9Vg5H/R6xaTj/XpgJz2gdOJwmarT2w= Subject key identifier: F1:11:E4:13:27:09:34:5F:5E:7E:BF:85:0C:1E:0A:6B:C0:8C:B8:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A95E928B802AA457B628002988389DFC6139E36 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb363ca6-44a5-461f-b2ef-05e93a39afe2.roa Signing time: Thu 18 Apr 2024 00:00:00 +0000 ROA not before: Thu 18 Apr 2024 00:00:00 +0000 ROA not after: Thu 23 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 209.134.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:95:e9:28:b8:02:aa:45:7b:62:80:02:98:83:89:df:c6:13:9e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:00:00 2024 GMT Not After : May 23 23:59:59 2024 GMT Subject: serialNumber=4dc87f7c68b28893b407197e5c0cd036a309584e22fcd9ba27bfde7b3ed588b5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2d:5a:37:88:7a:96:ff:bf:1b:c9:ae:44:68: 69:a2:3d:63:d7:16:8e:f8:36:4a:ba:8e:1a:67:ff: d1:77:4b:be:ae:7d:18:76:64:0d:1f:68:fd:95:5a: 51:4c:38:3a:1f:c8:e6:5e:4f:cc:c4:78:e6:c8:16: 52:4a:64:d4:7e:47:a3:81:3b:c0:f7:02:6a:5a:a5: 19:13:e7:69:65:e7:1d:bc:db:f9:49:70:6a:eb:a0: c1:70:69:16:a5:1e:d5:93:70:77:74:4e:a1:cb:ca: dc:ed:6e:37:e0:d1:dc:e5:a3:e4:74:3e:8f:b9:ca: 81:0e:13:10:cb:b9:d4:d0:bf:c3:28:db:cb:01:43: f4:bd:1c:da:6e:5f:8e:04:70:04:56:e9:8a:63:56: 4b:51:93:f2:10:42:12:68:05:5b:91:86:64:cc:03: 3d:e7:46:ad:c9:20:4b:61:a7:3a:23:41:46:82:43: a9:a2:55:73:38:e5:d7:2e:9b:6f:81:50:f1:2e:15: b6:7f:08:4b:3c:e6:b1:fd:d6:88:45:80:50:90:42: 78:e4:00:4c:15:23:b9:e5:86:67:62:38:1c:1d:b1: 2c:0c:ce:5a:ec:03:92:a3:7b:0f:84:12:23:8d:51: 4f:33:34:44:a5:3a:7e:64:4f:d3:e9:26:ca:e7:15: 89:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:11:E4:13:27:09:34:5F:5E:7E:BF:85:0C:1E:0A:6B:C0:8C:B8:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb363ca6-44a5-461f-b2ef-05e93a39afe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.134.64.0/18 Signature Algorithm: sha256WithRSAEncryption 7d:23:9f:11:26:15:2c:0c:9c:5f:e5:69:73:e4:f6:29:e5:b4: 3c:f9:83:41:59:6b:c8:a0:21:54:b2:91:cc:ed:a1:56:e2:12: 27:68:c2:9c:2c:25:75:d0:98:71:88:c6:1b:f4:5c:ec:5f:1b: 9d:07:e9:f9:ab:7c:62:f3:91:75:cd:2f:4e:97:16:0f:6c:df: f4:4c:55:3c:a1:52:1c:1b:51:4a:68:f6:d9:a3:18:60:14:24: b3:ae:fc:02:ac:df:48:5b:e1:29:3b:e5:43:6a:78:92:02:66: 3d:a7:d6:15:27:24:b3:f6:c2:17:af:cb:59:13:15:28:ec:6b: 77:73:1d:25:00:4e:9e:ce:91:3b:3a:97:d1:90:64:a5:b3:87: ab:26:e5:de:22:be:30:86:01:bb:03:d6:12:68:a1:06:00:18: dc:12:7f:d4:f4:07:88:b0:3a:c3:65:f3:48:1e:f3:c8:85:4d: ca:e5:2f:34:9b:a9:0f:5a:5a:53:c3:2d:11:d8:3b:65:39:f1: ed:3b:ae:40:0f:45:54:1c:a2:68:39:8d:d6:e8:d7:95:bd:36: 2f:1f:1e:db:6c:0d:a9:3a:9c:4a:2d:fe:cf:4b:9b:06:76:53: 47:ef:93:33:cc:c7:2e:90:da:65:db:cf:28:a4:d5:d0:18:cc: ac:5d:34:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUapXpKLgCqkV7YoACmIOJ38YTnjYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE4MDAwMDAwWhcNMjQwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZGM4N2Y3YzY4YjI4ODkzYjQwNzE5N2U1YzBjZDAzNmEz MDk1ODRlMjJmY2Q5YmEyN2JmZGU3YjNlZDU4OGI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYLVo3iHqW/78bya5EaGmiPWPXFo74Nkq6jhpn/9F3S76u fRh2ZA0faP2VWlFMODofyOZeT8zEeObIFlJKZNR+R6OBO8D3AmpapRkT52ll5x28 2/lJcGrroMFwaRalHtWTcHd0TqHLytztbjfg0dzlo+R0Po+5yoEOExDLudTQv8Mo 28sBQ/S9HNpuX44EcARW6YpjVktRk/IQQhJoBVuRhmTMAz3nRq3JIEthpzojQUaC Q6miVXM45dcum2+BUPEuFbZ/CEs85rH91ohFgFCQQnjkAEwVI7nlhmdiOBwdsSwM zlrsA5Kjew+EEiONUU8zNESlOn5kT9PpJsrnFYm7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8RHkEycJNF9efr+FDB4Ka8CMuHAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiMzYzY2E2LTQ0YTUtNDYxZi1iMmVmLTA1ZTkzYTM5YWZlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbRhkAwDQYJKoZIhvcNAQELBQADggEBAH0jnxEmFSwMnF/laXPk9inltDz5 g0FZa8igIVSykcztoVbiEidowpwsJXXQmHGIxhv0XOxfG50H6fmrfGLzkXXNL06X Fg9s3/RMVTyhUhwbUUpo9tmjGGAUJLOu/AKs30hb4Sk75UNqeJICZj2n1hUnJLP2 whevy1kTFSjsa3dzHSUATp7OkTs6l9GQZKWzh6sm5d4ivjCGAbsD1hJooQYAGNwS f9T0B4iwOsNl80ge88iFTcrlLzSbqQ9aWlPDLRHYO2U58e07rkAPRVQcomg5jdbo 15W9Ni8fHttsDak6nEot/s9LmwZ2U0fvkzPMxy6Q2mXbzyik1dAYzKxdNDQ= -----END CERTIFICATE-----Generated at Thu May 2 17:41:19 2024 by rpki-client on console-fra.rpki-client.org