$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8175b0b-6ddc-4c01-b903-2c28c1424ca2.roa File: d8175b0b-6ddc-4c01-b903-2c28c1424ca2.roa (raw, json) Hash identifier: XTp+vV6rOCdRLvppRZ72EdY0Q8SO1qCep8BrJqy9TMI= Subject key identifier: 78:D2:7B:BA:D3:FA:C4:E6:30:34:E5:25:20:88:C2:22:11:4E:C8:77 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 33A5794906E8EB37421A93462D83610C31864454 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8175b0b-6ddc-4c01-b903-2c28c1424ca2.roa Signing time: Fri 12 Apr 2024 00:00:00 +0000 ROA not before: Fri 12 Apr 2024 00:00:00 +0000 ROA not after: Fri 17 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 35.47.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a5:79:49:06:e8:eb:37:42:1a:93:46:2d:83:61:0c:31:86:44:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:00:00 2024 GMT Not After : May 17 23:59:59 2024 GMT Subject: serialNumber=a306fb6ca151817b8203f37bbb3614e9ae875ca625faf6e64753e8d8389004f3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:77:85:5d:d6:db:cb:9a:8f:24:73:fc:0e:3a: c3:20:d1:4d:49:37:0d:2e:e4:74:46:3b:b9:9d:be: c8:4d:0e:25:6b:3e:18:09:67:f9:b3:42:78:2c:f2: 8a:87:b4:85:50:80:fc:0b:45:54:60:bf:3c:c4:be: b2:26:dd:09:a1:c9:ce:c8:8b:c3:dc:7a:78:bc:12: f2:77:cf:44:a7:b0:ea:f9:26:3d:5c:c3:7e:2c:85: 24:c9:fc:2e:7f:a0:24:96:94:92:24:f0:83:82:80: 6f:12:23:34:ea:4c:71:32:14:2a:24:ca:06:2e:77: 51:66:82:32:c3:34:4b:ac:88:4e:4d:6e:54:d1:d6: 45:57:d4:33:20:f7:36:f4:0a:c7:f5:0f:e9:47:3f: 2b:62:27:48:12:53:14:5d:9f:a9:3f:99:cd:54:41: 3a:31:e2:54:39:6d:d9:d9:22:c5:52:4e:22:ed:b3: 44:dd:e1:7e:a3:a3:5d:b8:48:1e:78:15:15:bd:f0: a9:6d:1a:e0:d6:a1:16:ea:28:e7:7c:6a:7c:45:69: 19:ff:b4:44:9f:22:1a:bd:12:1f:c9:de:f8:ab:92: a3:af:f0:a5:34:47:76:8c:88:91:e1:28:23:8c:ff: 5a:76:87:05:4d:3c:05:f8:72:4b:72:fc:e0:bf:1f: cb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D2:7B:BA:D3:FA:C4:E6:30:34:E5:25:20:88:C2:22:11:4E:C8:77 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8175b0b-6ddc-4c01-b903-2c28c1424ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.47.0.0/16 Signature Algorithm: sha256WithRSAEncryption 36:48:a9:13:7f:db:a9:78:89:1d:06:6e:22:52:28:10:50:c7: cc:dc:cf:8f:86:c3:60:f8:1a:c0:73:19:3b:c6:62:f1:09:c3: d8:16:78:45:07:6a:95:b7:ef:ca:72:07:46:88:0d:4a:1e:43: ad:54:3e:6c:2a:b9:d2:3a:a1:0e:9d:e0:97:a9:4d:34:31:fb: db:7b:bc:4a:89:62:f3:27:89:eb:1d:ed:3e:6d:44:1b:5e:5b: 5b:92:be:22:46:d7:ca:52:5c:80:d8:8b:92:45:21:ba:60:bf: b1:65:22:38:67:91:d8:d3:be:f2:72:d2:fa:14:48:14:ee:d6: 5f:59:bd:30:60:c4:c6:43:0b:2c:2e:10:6b:61:ca:2a:2e:13: 23:8a:f1:a4:6b:00:ec:85:fc:cf:62:8c:73:41:a5:f6:6a:dc: 85:c5:ef:8e:38:95:70:1d:d9:61:b0:86:ea:d6:fb:26:bc:af: dc:a1:f2:89:cd:33:16:b7:91:e0:f0:b0:70:63:e3:38:56:1f: 5b:29:c2:a8:b2:2f:1d:5b:68:93:d9:88:d7:18:7e:4b:4a:52: 7d:f4:b5:9c:0e:cc:82:76:66:62:24:11:b8:a2:09:07:1f:fb: 79:c4:52:c4:7c:ed:86:34:20:2d:55:8e:c7:37:0d:e1:03:b2: f0:c8:e4:e9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUM6V5SQbo6zdCGpNGLYNhDDGGRFQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEyMDAwMDAwWhcNMjQwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzA2ZmI2Y2ExNTE4MTdiODIwM2YzN2JiYjM2MTRlOWFl ODc1Y2E2MjVmYWY2ZTY0NzUzZThkODM4OTAwNGYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPd4Vd1tvLmo8kc/wOOsMg0U1JNw0u5HRGO7mdvshNDiVr PhgJZ/mzQngs8oqHtIVQgPwLRVRgvzzEvrIm3Qmhyc7Ii8Pceni8EvJ3z0SnsOr5 Jj1cw34shSTJ/C5/oCSWlJIk8IOCgG8SIzTqTHEyFCokygYud1FmgjLDNEusiE5N blTR1kVX1DMg9zb0Csf1D+lHPytiJ0gSUxRdn6k/mc1UQTox4lQ5bdnZIsVSTiLt s0Td4X6jo124SB54FRW98KltGuDWoRbqKOd8anxFaRn/tESfIhq9Eh/J3virkqOv 8KU0R3aMiJHhKCOM/1p2hwVNPAX4ckty/OC/H8tFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUeNJ7utP6xOYwNOUlIIjCIhFOyHcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4MTc1YjBiLTZkZGMtNGMwMS1iOTAzLTJjMjhjMTQyNGNhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjLzANBgkqhkiG9w0BAQsFAAOCAQEANkipE3/bqXiJHQZuIlIoEFDHzNzP j4bDYPgawHMZO8Zi8QnD2BZ4RQdqlbfvynIHRogNSh5DrVQ+bCq50jqhDp3gl6lN NDH723u8Soli8yeJ6x3tPm1EG15bW5K+IkbXylJcgNiLkkUhumC/sWUiOGeR2NO+ 8nLS+hRIFO7WX1m9MGDExkMLLC4Qa2HKKi4TI4rxpGsA7IX8z2KMc0Gl9mrchcXv jjiVcB3ZYbCG6tb7Jryv3KHyic0zFreR4PCwcGPjOFYfWynCqLIvHVtok9mI1xh+ S0pSffS1nA7MgnZmYiQRuKIJBx/7ecRSxHzthjQgLVWOxzcN4QOy8Mjk6Q== -----END CERTIFICATE-----Generated at Thu May 2 01:05:44 2024 by rpki-client on console-fra.rpki-client.org