$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d48b5646-255d-472a-a4c2-09bc0091f89d.roa File: d48b5646-255d-472a-a4c2-09bc0091f89d.roa (raw, json) Hash identifier: YDvyhgsrWl2Z8n9FCRQTt7fzk4h7so3L/koIz2ZwKNc= Subject key identifier: 83:12:6B:2E:87:4D:A4:94:88:0F:04:D3:DB:54:B4:B6:08:87:F6:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A9D3099EC2A7D1ABD814951C255A4D63CD895B1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d48b5646-255d-472a-a4c2-09bc0091f89d.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 40.32.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:9d:30:99:ec:2a:7d:1a:bd:81:49:51:c2:55:a4:d6:3c:d8:95:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=9274844404845f52102c7552ae2c8b8478c83c7c81a5f841ad96ce0ba2775fa8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f5:24:46:3f:39:16:fb:c2:d8:02:3e:3e:e3: 38:8b:c5:5b:3e:90:b6:d3:ec:48:f3:09:1c:b1:a0: 5d:d4:21:89:78:5c:ca:14:31:46:a1:c5:01:1b:bb: dd:e1:2b:de:42:88:8d:b2:08:c7:85:fe:50:9c:15: 3c:f0:4d:74:cd:a0:7b:b3:d5:43:15:8b:a2:ec:dc: d6:89:63:b5:f1:a3:5e:63:a2:4d:9f:65:af:24:ad: 29:5e:cc:de:1a:36:32:75:e5:b2:cb:81:35:30:0d: 5f:77:97:82:b4:b4:40:a4:4b:48:9d:4a:40:9d:b9: 4c:5c:58:c3:eb:30:2d:d4:62:35:67:c8:6d:3e:2d: b5:1b:84:35:0c:86:4b:e8:59:c2:ea:0b:4c:6e:67: c8:cc:08:a7:6f:c0:92:a5:9e:e4:5f:bc:0d:fb:06: 90:ad:17:3f:19:bb:7d:21:9c:3e:a1:1b:9f:71:1e: 65:b4:49:be:56:a9:60:2d:27:a7:10:b2:80:7c:2e: de:83:e4:1d:f5:86:f7:2c:d0:b6:9e:44:9b:99:0e: 0a:97:90:aa:af:10:06:56:af:1d:7d:18:10:39:04: 71:88:76:02:bf:12:59:3f:34:6e:9f:0b:fd:b0:5f: dd:48:4e:f7:d3:16:f2:85:9a:85:67:58:a3:1e:c6: b0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:12:6B:2E:87:4D:A4:94:88:0F:04:D3:DB:54:B4:B6:08:87:F6:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d48b5646-255d-472a-a4c2-09bc0091f89d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.32.0.0/16 Signature Algorithm: sha256WithRSAEncryption c8:ed:0d:fc:bf:da:40:9d:2f:62:9f:bc:64:3a:1b:7a:aa:f5: 71:db:e0:eb:7d:73:cd:dd:37:a2:9c:46:38:c6:d7:fb:7a:5f: e6:16:f8:35:6a:ee:10:a7:83:9a:0c:0e:1d:1b:09:f3:5b:1e: 9d:42:f7:65:75:77:22:43:d5:74:0e:f9:4c:da:4d:0b:24:76: 7c:d4:25:69:40:9a:89:6a:b8:2d:12:13:6b:60:bf:7e:75:b6: 39:70:0b:8d:2b:7c:67:24:ae:a2:ea:37:4b:63:a4:91:ed:37: ed:9c:62:5e:d9:f1:da:83:6d:86:ff:73:30:7c:b9:a7:30:16: 76:50:2a:2a:05:55:de:d9:3a:c1:3d:01:b0:f9:08:36:6d:8c: 6c:12:8f:59:54:67:85:17:2f:ef:e4:94:a0:96:c5:93:6e:37: 31:0c:88:d4:f6:66:bd:56:5f:55:f5:d4:d9:11:27:5d:f5:a2: 0c:50:25:6b:d8:00:ed:b8:e4:ef:3f:15:60:72:b3:f0:02:b2: 0a:7a:44:17:81:05:17:fa:90:5f:f1:2e:bc:2d:b4:0c:0c:53: 5b:0d:58:6b:0b:68:24:64:16:44:ef:78:dc:c2:86:a0:69:c2: b0:d8:bc:1d:42:55:5c:ba:04:b9:4d:23:96:b2:03:d4:0d:a4: c2:a9:de:f5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUap0wmewqfRq9gUlRwlWk1jzYlbEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5Mjc0ODQ0NDA0ODQ1ZjUyMTAyYzc1NTJhZTJjOGI4NDc4 YzgzYzdjODFhNWY4NDFhZDk2Y2UwYmEyNzc1ZmE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDN9SRGPzkW+8LYAj4+4ziLxVs+kLbT7EjzCRyxoF3UIYl4 XMoUMUahxQEbu93hK95CiI2yCMeF/lCcFTzwTXTNoHuz1UMVi6Ls3NaJY7Xxo15j ok2fZa8krSlezN4aNjJ15bLLgTUwDV93l4K0tECkS0idSkCduUxcWMPrMC3UYjVn yG0+LbUbhDUMhkvoWcLqC0xuZ8jMCKdvwJKlnuRfvA37BpCtFz8Zu30hnD6hG59x HmW0Sb5WqWAtJ6cQsoB8Lt6D5B31hvcs0LaeRJuZDgqXkKqvEAZWrx19GBA5BHGI dgK/Elk/NG6fC/2wX91ITvfTFvKFmoVnWKMexrAFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUgxJrLodNpJSIDwTT21S0tgiH9p0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q0OGI1NjQ2LTI1NWQtNDcyYS1hNGMyLTA5YmMwMDkxZjg5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAoIDANBgkqhkiG9w0BAQsFAAOCAQEAyO0N/L/aQJ0vYp+8ZDobeqr1cdvg 631zzd03opxGOMbX+3pf5hb4NWruEKeDmgwOHRsJ81senUL3ZXV3IkPVdA75TNpN CyR2fNQlaUCaiWq4LRITa2C/fnW2OXALjSt8ZySuouo3S2Okke037ZxiXtnx2oNt hv9zMHy5pzAWdlAqKgVV3tk6wT0BsPkINm2MbBKPWVRnhRcv7+SUoJbFk243MQyI 1PZmvVZfVfXU2REnXfWiDFAla9gA7bjk7z8VYHKz8AKyCnpEF4EFF/qQX/EuvC20 DAxTWw1YawtoJGQWRO943MKGoGnCsNi8HUJVXLoEuU0jlrID1A2kwqne9Q== -----END CERTIFICATE-----Generated at Thu May 2 08:02:40 2024 by rpki-client on console-ams.rpki-client.org