$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d76bf16b-4d6b-40f9-b388-1690b8e44a32.roa File: d76bf16b-4d6b-40f9-b388-1690b8e44a32.roa (raw, json) Hash identifier: jU/9KKQohWfcFBE/7mnhXX7OMTlvdH8hQvTCy+vE9qc= Subject key identifier: 59:31:3E:4E:98:D7:70:09:EA:A2:8D:90:F9:B1:49:8C:E9:B7:89:74 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4B0B3D81F37821982C597702612034E179F44377 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d76bf16b-4d6b-40f9-b388-1690b8e44a32.roa Signing time: Sat 13 Apr 2024 00:00:00 +0000 ROA not before: Sat 13 Apr 2024 00:00:00 +0000 ROA not after: Sat 18 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 160.223.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:0b:3d:81:f3:78:21:98:2c:59:77:02:61:20:34:e1:79:f4:43:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 13 00:00:00 2024 GMT Not After : May 18 23:59:59 2024 GMT Subject: serialNumber=0c46ba45c9df314cef6e6e447d6e3e507da0b35adf97ff02ffe98ba63bde43e1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:37:06:25:3e:49:33:87:6d:75:be:4c:f8: 62:e5:f1:09:cb:68:76:e7:b8:d2:5c:3f:c8:51:f5: 89:92:72:0c:36:33:16:8c:6d:70:ac:8e:e9:18:1c: 46:b8:08:02:0c:6a:88:7f:71:b7:87:a3:32:eb:07: 23:b3:57:76:f8:7b:35:5b:58:61:de:7f:8f:62:69: 91:2e:dd:53:f3:97:12:1f:71:04:d3:ee:e3:41:84: d1:b1:c1:a4:0a:47:9a:d8:57:55:38:13:66:e9:0b: 3d:1c:fd:1c:94:cf:2e:9a:26:95:0f:2c:74:3f:16: 29:b7:1c:01:ff:9c:b3:a7:63:19:1e:10:4d:6d:59: fe:c4:1e:47:ff:08:0b:b8:31:ea:5c:f3:92:3a:13: 86:8d:9c:eb:08:d7:4b:8a:c3:0b:e1:e7:ca:3e:50: 9b:ee:5f:8f:2c:c0:03:59:61:ba:0e:5d:9f:e4:a3: a3:0e:d1:a2:09:f6:ea:ae:55:68:11:71:6b:49:24: 5b:98:cd:93:6e:08:4f:ef:ba:64:da:87:d1:a7:1f: b9:b1:ff:93:88:12:03:02:48:be:d4:5c:76:32:ea: 17:27:d6:65:95:2f:c0:50:aa:17:31:50:ea:1e:49: 85:23:58:da:ae:af:78:3e:ec:ad:73:e7:77:19:59: db:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:31:3E:4E:98:D7:70:09:EA:A2:8D:90:F9:B1:49:8C:E9:B7:89:74 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d76bf16b-4d6b-40f9-b388-1690b8e44a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.223.128.0/19 Signature Algorithm: sha256WithRSAEncryption 00:f4:c7:0d:e4:31:9b:bf:8a:9a:39:90:b3:4d:da:16:83:fc: 30:89:62:1f:78:8a:52:52:e1:91:51:18:fb:eb:5c:9f:d8:8b: 5f:b0:6d:b2:4b:37:c2:d2:46:60:55:a9:4e:c2:e7:b8:be:5e: 39:ce:84:14:87:82:4f:90:8d:5b:d6:0c:4f:b0:bf:05:83:8f: 43:b1:5c:b7:df:16:b7:df:4c:93:d9:59:1b:24:a2:8c:b5:de: 76:c2:fe:29:1d:37:87:1d:97:50:87:00:8f:b4:26:b3:1d:bd: d0:8f:c6:ef:cf:f0:fe:e3:6c:7a:20:03:fd:d5:c8:75:8c:fc: 0b:20:56:12:b1:35:45:f8:92:ab:ab:f4:27:a5:19:c2:36:ac: bc:7a:4b:9d:80:26:1a:ba:c9:ed:ad:1a:b1:d1:74:4b:ee:9f: 41:a2:2a:e7:7d:fc:5f:0f:f3:2e:ab:79:c8:31:6a:b1:b7:38: 5e:b6:9f:22:bf:da:38:33:a0:3b:2a:da:2d:97:27:74:4f:94: 14:be:3f:77:bd:96:b2:04:2c:f0:74:b0:ab:bd:70:b3:0f:34: cb:c6:f9:f8:32:a7:6a:e9:56:87:71:7b:f5:e8:14:2d:8c:fa: 36:73:37:54:9f:1e:c7:da:31:40:b0:ea:96:d4:3a:2d:c6:ea: ae:f7:a3:c3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSws9gfN4IZgsWXcCYSA04Xn0Q3cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEzMDAwMDAwWhcNMjQwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzQ2YmE0NWM5ZGYzMTRjZWY2ZTZlNDQ3ZDZlM2U1MDdk YTBiMzVhZGY5N2ZmMDJmZmU5OGJhNjNiZGU0M2UxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/GTcGJT5JM4dtdb5M+GLl8QnLaHbnuNJcP8hR9YmScgw2 MxaMbXCsjukYHEa4CAIMaoh/cbeHozLrByOzV3b4ezVbWGHef49iaZEu3VPzlxIf cQTT7uNBhNGxwaQKR5rYV1U4E2bpCz0c/RyUzy6aJpUPLHQ/Fim3HAH/nLOnYxke EE1tWf7EHkf/CAu4Mepc85I6E4aNnOsI10uKwwvh58o+UJvuX48swANZYboOXZ/k o6MO0aIJ9uquVWgRcWtJJFuYzZNuCE/vumTah9GnH7mx/5OIEgMCSL7UXHYy6hcn 1mWVL8BQqhcxUOoeSYUjWNqur3g+7K1z53cZWdszAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWTE+TpjXcAnqoo2Q+bFJjOm3iXQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q3NmJmMTZiLTRkNmItNDBmOS1iMzg4LTE2OTBiOGU0NGEzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWg34AwDQYJKoZIhvcNAQELBQADggEBAAD0xw3kMZu/ipo5kLNN2haD/DCJ Yh94ilJS4ZFRGPvrXJ/Yi1+wbbJLN8LSRmBVqU7C57i+XjnOhBSHgk+QjVvWDE+w vwWDj0OxXLffFrffTJPZWRskooy13nbC/ikdN4cdl1CHAI+0JrMdvdCPxu/P8P7j bHogA/3VyHWM/AsgVhKxNUX4kqur9CelGcI2rLx6S52AJhq6ye2tGrHRdEvun0Gi Kud9/F8P8y6recgxarG3OF62nyK/2jgzoDsq2i2XJ3RPlBS+P3e9lrIELPB0sKu9 cLMPNMvG+fgyp2rpVodxe/XoFC2M+jZzN1SfHsfaMUCw6pbUOi3G6q73o8M= -----END CERTIFICATE-----Generated at Thu May 2 06:12:49 2024 by rpki-client on console-fra.rpki-client.org