$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd74cd1d-e349-486c-8ee8-cab6763c59dd.roa File: cd74cd1d-e349-486c-8ee8-cab6763c59dd.roa (raw, json) Hash identifier: +lKnPwU+6yDjIQaQ0nDBNahQ24pj4Q02p28Ec/kTEyU= Subject key identifier: FC:FD:E0:19:51:F9:02:79:55:D9:0F:3A:47:FE:6D:E5:CB:C1:4C:21 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40D7F1E1C34E892F0B6F44B338ACCFDD450B7DDC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd74cd1d-e349-486c-8ee8-cab6763c59dd.roa Signing time: Fri 12 Apr 2024 00:00:00 +0000 ROA not before: Fri 12 Apr 2024 00:00:00 +0000 ROA not after: Fri 17 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 138.240.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d7:f1:e1:c3:4e:89:2f:0b:6f:44:b3:38:ac:cf:dd:45:0b:7d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:00:00 2024 GMT Not After : May 17 23:59:59 2024 GMT Subject: serialNumber=3b7d070ca6e78b7bd6e3b5030bf92c61a6b03c94965c12810d31de5c8a8fa05d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6b:5d:4d:e9:b1:a3:15:78:00:63:14:d1:90: 3a:8b:35:9d:ba:54:79:1e:25:63:a3:68:ee:ae:8a: 11:5a:f3:21:d3:06:2b:e5:5e:1c:c2:be:11:0a:a4: 19:1c:ee:da:bc:91:8e:2f:7f:23:6e:7f:9b:95:f4: ac:5f:43:52:e8:5d:3a:c7:26:ed:45:87:d1:b4:14: d2:24:20:45:4f:43:f0:f7:b8:5c:d5:42:42:99:f7: f5:a3:be:68:ec:e4:22:47:23:65:5d:f4:71:42:0c: 79:91:6b:90:3d:9f:78:eb:b4:f9:5d:84:3a:25:a8: d8:dc:a1:0d:fb:cb:3c:35:aa:a7:94:04:bf:54:44: 2c:82:71:e2:b6:ca:a2:4e:12:78:d0:07:70:a1:e8: 90:72:31:ff:77:a8:44:26:18:a8:fe:57:18:54:c5: 5d:2c:f8:b4:fc:97:fc:8e:b7:a4:32:22:c5:98:bf: 95:8a:06:6d:06:e5:b7:64:c5:a4:62:30:1b:b8:3a: 14:68:5f:92:b1:6e:db:c5:c4:45:8e:eb:47:06:78: dc:e9:b0:24:ed:f5:b4:4c:ff:e3:17:7f:8a:4a:df: 29:55:d2:34:e7:e4:f7:81:be:b2:04:aa:ac:e4:f7: 8d:5f:08:76:b6:0a:29:a2:23:61:39:31:85:cb:65: 51:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FD:E0:19:51:F9:02:79:55:D9:0F:3A:47:FE:6D:E5:CB:C1:4C:21 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd74cd1d-e349-486c-8ee8-cab6763c59dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.240.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1f:45:ff:4d:7f:09:82:37:b1:36:c7:cb:46:48:8d:48:31:21: d5:fc:97:4b:dd:62:81:90:5f:7d:d1:ae:65:0a:ae:c5:d3:9b: 5f:72:40:e3:f4:41:f1:47:04:91:56:26:32:0c:8f:c1:4e:56: ae:0f:80:74:5d:8e:f3:54:bd:8f:35:c1:a0:d7:70:bd:47:7a: 1f:24:a4:fe:97:29:69:64:dc:02:c7:9b:73:6a:1a:cf:7b:ec: ff:b2:c8:80:c0:1e:a9:81:4d:c6:9f:00:5f:ce:e8:0d:ec:38: ec:8d:00:b8:13:98:b2:c7:00:b2:26:1a:26:dc:2c:7e:dd:dd: 40:36:15:55:c0:39:f4:29:46:85:93:57:aa:08:f5:52:06:c2: ad:3b:b3:ed:a6:65:84:09:33:95:47:1f:26:42:ed:2d:d9:41: 49:e5:11:58:72:bd:e0:a2:f5:4f:d3:bd:ef:22:88:56:fa:88: f4:60:98:c2:3a:59:86:16:c0:71:ce:2e:c7:92:e8:f1:73:b9: 35:cc:e4:42:c1:da:4d:73:2b:9e:76:4f:3c:4e:93:71:00:e1: b7:ea:ac:1e:8c:53:da:2c:04:8d:c8:12:d8:c6:79:14:7d:31: 5c:45:2a:c9:0f:80:46:a4:35:60:ea:02:3d:11:5f:1d:d7:96: f8:9f:73:2b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQNfx4cNOiS8Lb0SzOKzP3UULfdwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEyMDAwMDAwWhcNMjQwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjdkMDcwY2E2ZTc4YjdiZDZlM2I1MDMwYmY5MmM2MWE2 YjAzYzk0OTY1YzEyODEwZDMxZGU1YzhhOGZhMDVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCta11N6bGjFXgAYxTRkDqLNZ26VHkeJWOjaO6uihFa8yHT BivlXhzCvhEKpBkc7tq8kY4vfyNuf5uV9KxfQ1LoXTrHJu1Fh9G0FNIkIEVPQ/D3 uFzVQkKZ9/Wjvmjs5CJHI2Vd9HFCDHmRa5A9n3jrtPldhDolqNjcoQ37yzw1qqeU BL9URCyCceK2yqJOEnjQB3Ch6JByMf93qEQmGKj+VxhUxV0s+LT8l/yOt6QyIsWY v5WKBm0G5bdkxaRiMBu4OhRoX5KxbtvFxEWO60cGeNzpsCTt9bRM/+MXf4pK3ylV 0jTn5PeBvrIEqqzk941fCHa2CimiI2E5MYXLZVH5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU/P3gGVH5AnlV2Q86R/5t5cvBTCEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkNzRjZDFkLWUzNDktNDg2Yy04ZWU4LWNhYjY3NjNjNTlkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCK8DANBgkqhkiG9w0BAQsFAAOCAQEAH0X/TX8JgjexNsfLRkiNSDEh1fyX S91igZBffdGuZQquxdObX3JA4/RB8UcEkVYmMgyPwU5Wrg+AdF2O81S9jzXBoNdw vUd6HySk/pcpaWTcAsebc2oaz3vs/7LIgMAeqYFNxp8AX87oDew47I0AuBOYsscA siYaJtwsft3dQDYVVcA59ClGhZNXqgj1UgbCrTuz7aZlhAkzlUcfJkLtLdlBSeUR WHK94KL1T9O97yKIVvqI9GCYwjpZhhbAcc4ux5Lo8XO5NczkQsHaTXMrnnZPPE6T cQDht+qsHoxT2iwEjcgS2MZ5FH0xXEUqyQ+ARqQ1YOoCPRFfHdeW+J9zKw== -----END CERTIFICATE-----Generated at Thu May 2 08:02:39 2024 by rpki-client on console-ams.rpki-client.org