$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da51cbf7-646f-4459-939d-5c4cd81261b6.roa File: da51cbf7-646f-4459-939d-5c4cd81261b6.roa (raw, json) Hash identifier: u+jpNix32xlijtbA/epDnW3pBWCT9cL86GaOi2ohpgM= Subject key identifier: 1A:92:BE:CE:DF:83:AE:0A:01:3A:1D:DD:7A:3F:02:B3:CD:50:8F:F4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1425B16584C056266D5367684371591E17F99C55 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da51cbf7-646f-4459-939d-5c4cd81261b6.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:25:b1:65:84:c0:56:26:6d:53:67:68:43:71:59:1e:17:f9:9c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=7a69f459a31e63eb90ad540f0f95b1811567ef1aa23976f9587a42a7a41ffed8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2a:f4:8d:8e:8e:92:5f:7e:c1:89:65:62:f2: a7:75:67:ad:ce:5c:0e:9a:fa:d7:2d:f0:53:3a:98: 12:b1:17:4c:29:6b:53:5d:fc:ef:c6:9b:7b:18:2a: 3a:0c:b8:3e:68:7d:cc:18:6e:26:61:51:71:a2:57: af:3a:ff:34:4b:80:de:18:57:4e:cb:57:72:2b:f8: b2:06:0c:0f:30:f0:2b:0a:51:19:0b:d1:67:7a:bb: ae:57:f1:e7:d8:d5:c4:ae:c1:f2:68:f1:41:33:7b: a2:15:4b:88:55:66:14:b4:73:65:36:ee:b7:81:f9: 95:5b:be:9e:d7:3d:a8:af:45:71:c0:59:7c:d6:7c: 1a:3e:08:02:57:14:de:4c:0a:f2:b9:22:9b:03:82: ba:ca:7d:83:3a:9f:7b:5f:b9:86:34:0b:b1:83:df: 21:85:22:08:db:e4:8c:10:cd:0c:30:ed:81:fa:73: 3c:82:99:6c:c0:64:b5:bf:6f:6b:87:0a:60:8b:b3: 0b:21:72:0c:89:f5:5e:34:5d:50:1c:d8:14:fd:5a: ae:6b:3d:4b:1f:8c:81:68:bc:77:14:9c:ed:11:08: 42:19:74:b3:8e:e8:36:91:0c:49:86:7a:e2:4a:fa: bd:64:00:c0:6f:2b:88:62:89:b5:33:34:85:fe:12: 81:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:92:BE:CE:DF:83:AE:0A:01:3A:1D:DD:7A:3F:02:B3:CD:50:8F:F4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da51cbf7-646f-4459-939d-5c4cd81261b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.134.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:99:29:0e:25:66:07:84:66:33:71:f3:fd:6d:c9:26:e1:ab: 09:ec:a7:0a:b5:cf:7c:35:c9:73:04:0d:08:2d:35:09:6e:bd: a0:62:56:3a:71:60:40:0d:a3:e2:1f:84:45:a1:14:4a:5b:49: 4e:73:16:7a:b2:b8:4c:85:ea:6b:cc:81:0e:21:ce:b0:37:0c: 49:79:9a:35:f0:14:46:25:84:8d:59:8f:a7:2a:f4:61:6b:61: ce:59:4c:51:59:e4:8a:3a:37:21:70:3a:94:51:02:00:a7:96: 20:2a:26:e9:bb:d3:59:98:9a:00:e0:16:a0:82:8f:67:0a:14: 90:3d:da:5a:22:34:a8:c0:50:1b:d3:60:a2:7d:33:d5:d0:71: 9c:f5:a9:c9:15:c6:ee:cf:c7:9c:af:88:6d:36:c9:fe:df:f8: 5f:a3:c1:cf:28:38:10:e4:ab:af:cb:a4:d1:03:29:25:af:0a: ed:da:5c:37:61:57:d5:96:b7:d5:c0:8a:1c:98:76:24:b4:13: b5:8c:a0:c3:11:aa:0b:89:c9:00:78:ec:a8:c9:70:76:eb:09: 8b:fa:a2:80:1d:98:da:c8:6c:e9:74:f1:7b:4a:95:5f:b1:49: aa:0a:b5:93:47:7a:e3:6b:9a:81:33:67:7d:3d:4c:28:c9:fb: 2d:4a:d5:66 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFCWxZYTAViZtU2doQ3FZHhf5nFUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTY5ZjQ1OWEzMWU2M2ViOTBhZDU0MGYwZjk1YjE4MTE1 NjdlZjFhYTIzOTc2Zjk1ODdhNDJhN2E0MWZmZWQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzKvSNjo6SX37BiWVi8qd1Z63OXA6a+tct8FM6mBKxF0wp a1Nd/O/Gm3sYKjoMuD5ofcwYbiZhUXGiV686/zRLgN4YV07LV3Ir+LIGDA8w8CsK URkL0Wd6u65X8efY1cSuwfJo8UEze6IVS4hVZhS0c2U27reB+ZVbvp7XPaivRXHA WXzWfBo+CAJXFN5MCvK5IpsDgrrKfYM6n3tfuYY0C7GD3yGFIgjb5IwQzQww7YH6 czyCmWzAZLW/b2uHCmCLswshcgyJ9V40XVAc2BT9Wq5rPUsfjIFovHcUnO0RCEIZ dLOO6DaRDEmGeuJK+r1kAMBvK4hiibUzNIX+EoF5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGpK+zt+DrgoBOh3dej8Cs81Qj/QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RhNTFjYmY3LTY0NmYtNDQ1OS05MzlkLTVjNGNkODEyNjFiNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEoYwDQYJKoZIhvcNAQELBQADggEBAD+ZKQ4lZgeEZjNx8/1tySbhqwns pwq1z3w1yXMEDQgtNQluvaBiVjpxYEANo+IfhEWhFEpbSU5zFnqyuEyF6mvMgQ4h zrA3DEl5mjXwFEYlhI1Zj6cq9GFrYc5ZTFFZ5Io6NyFwOpRRAgCnliAqJum701mY mgDgFqCCj2cKFJA92loiNKjAUBvTYKJ9M9XQcZz1qckVxu7Px5yviG02yf7f+F+j wc8oOBDkq6/LpNEDKSWvCu3aXDdhV9WWt9XAihyYdiS0E7WMoMMRqguJyQB47KjJ cHbrCYv6ooAdmNrIbOl08XtKlV+xSaoKtZNHeuNrmoEzZ309TCjJ+y1K1WY= -----END CERTIFICATE-----Generated at Thu May 2 22:12:19 2024 by rpki-client on console-fra.rpki-client.org