$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db06f6f1-5e39-48fb-870e-b6f503321845.roa File: db06f6f1-5e39-48fb-870e-b6f503321845.roa (raw, json) Hash identifier: YcBIjZInKokySH41WEkkxyJUd69vnSsMAJUulfZtJFw= Subject key identifier: 1A:03:C7:E5:80:51:FE:E6:FB:D2:47:98:1F:85:C3:C2:A8:90:89:1D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11BFDC5DA676F9951C57909E79459B4E5970D16D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db06f6f1-5e39-48fb-870e-b6f503321845.roa Signing time: Sat 20 Apr 2024 00:00:00 +0000 ROA not before: Sat 20 Apr 2024 00:00:00 +0000 ROA not after: Sat 25 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 163.119.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:bf:dc:5d:a6:76:f9:95:1c:57:90:9e:79:45:9b:4e:59:70:d1:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 20 00:00:00 2024 GMT Not After : May 25 23:59:59 2024 GMT Subject: serialNumber=22dcc5c626819006e4ea72c8a9a4f6365b99e2dfcac425dbd0fe10fbf8dd0bb3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ea:d3:55:53:cb:b9:9f:21:94:61:c1:20:3f: e6:d1:59:a5:d0:d5:a0:6c:f1:b9:62:68:be:28:c3: d2:13:e1:07:a9:d6:1d:1a:8e:88:26:80:fe:b7:7f: 4a:e5:ae:f3:74:74:44:3c:20:2d:f1:53:78:ed:db: fe:91:10:fd:bf:df:1c:e5:e9:56:29:04:8b:b4:73: 5f:76:4a:1a:ff:f2:ea:ad:ee:85:6e:e6:4e:b9:fc: 0f:46:a0:9d:33:ba:2c:2a:9e:c0:7b:65:64:dd:23: 8e:54:6b:5d:4e:d8:31:35:2a:dc:d1:66:9b:d5:06: 21:18:30:42:38:aa:4d:ad:16:6c:b6:81:ed:97:d9: 92:02:50:b1:58:c0:e9:a3:35:1f:9e:04:de:f4:dc: d3:86:40:61:46:23:10:75:c4:a9:6e:c3:0e:d3:76: d6:83:6c:7a:a8:6c:c7:69:1e:e6:6c:bd:34:b2:3a: dc:39:ce:14:3d:46:63:4e:8c:0e:fb:c0:98:d0:d4: 41:64:85:44:b7:10:7e:69:92:77:85:23:2f:ea:86: 51:d4:ce:1f:68:dc:64:7a:58:07:e7:28:94:56:d5: 56:23:6c:26:33:c2:41:e3:fe:0c:6a:eb:f8:05:6d: eb:f1:a0:ed:0a:8c:b5:34:dd:c3:de:69:1c:ef:31: c5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:03:C7:E5:80:51:FE:E6:FB:D2:47:98:1F:85:C3:C2:A8:90:89:1D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db06f6f1-5e39-48fb-870e-b6f503321845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.119.128.0/17 Signature Algorithm: sha256WithRSAEncryption cc:5e:b3:b4:b3:24:0b:e0:76:bf:dd:10:51:a5:08:b5:9c:9e: 04:8b:90:86:b6:39:34:80:12:0b:7b:38:30:6d:43:31:12:23: 4d:10:72:9a:4d:c1:5e:e8:93:12:81:86:25:b0:91:e0:72:5c: a0:e4:14:2d:9c:e3:f9:d0:c9:fa:fb:1d:f3:32:ab:7a:f1:ee: bc:b3:4d:8e:e2:d1:2b:53:81:be:1f:1f:4c:f0:25:85:d9:20: f9:f1:4e:b2:92:be:ec:0d:32:14:bd:0f:79:4e:bb:89:81:2e: a3:f3:85:b3:6f:33:cf:bc:11:91:4c:03:d6:22:bf:4e:36:4a: 0e:cc:73:17:6f:a3:a4:aa:ff:e3:e7:22:45:31:1a:2a:06:a0: 6a:62:4c:11:af:11:c3:a7:27:2a:98:03:90:5d:18:64:1a:a1: cd:35:1e:d3:ab:89:45:fe:46:a4:25:b8:49:a4:30:7b:76:39: c5:d8:96:52:af:9a:49:cd:e6:7a:6c:4d:cf:2b:0f:ea:2c:6a: 77:6c:8f:57:e1:ba:c6:b0:de:b1:d0:5b:27:e3:04:af:b9:2c: 4d:3e:6b:db:95:6a:88:99:19:9f:25:67:96:c4:03:ac:38:88: f2:17:f2:ad:bc:85:43:94:27:4b:51:e2:c3:77:de:c0:1e:01: 49:32:3e:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEb/cXaZ2+ZUcV5CeeUWbTllw0W0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDIwMDAwMDAwWhcNMjQwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMmRjYzVjNjI2ODE5MDA2ZTRlYTcyYzhhOWE0ZjYzNjVi OTllMmRmY2FjNDI1ZGJkMGZlMTBmYmY4ZGQwYmIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC86tNVU8u5nyGUYcEgP+bRWaXQ1aBs8bliaL4ow9IT4Qep 1h0ajogmgP63f0rlrvN0dEQ8IC3xU3jt2/6REP2/3xzl6VYpBIu0c192Shr/8uqt 7oVu5k65/A9GoJ0zuiwqnsB7ZWTdI45Ua11O2DE1KtzRZpvVBiEYMEI4qk2tFmy2 ge2X2ZICULFYwOmjNR+eBN703NOGQGFGIxB1xKluww7TdtaDbHqobMdpHuZsvTSy Otw5zhQ9RmNOjA77wJjQ1EFkhUS3EH5pkneFIy/qhlHUzh9o3GR6WAfnKJRW1VYj bCYzwkHj/gxq6/gFbevxoO0KjLU03cPeaRzvMcXnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGgPH5YBR/ub70keYH4XDwqiQiR0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RiMDZmNmYxLTVlMzktNDhmYi04NzBlLWI2ZjUwMzMyMTg0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAejd4AwDQYJKoZIhvcNAQELBQADggEBAMxes7SzJAvgdr/dEFGlCLWcngSL kIa2OTSAEgt7ODBtQzESI00QcppNwV7okxKBhiWwkeByXKDkFC2c4/nQyfr7HfMy q3rx7ryzTY7i0StTgb4fH0zwJYXZIPnxTrKSvuwNMhS9D3lOu4mBLqPzhbNvM8+8 EZFMA9Yiv042Sg7Mcxdvo6Sq/+PnIkUxGioGoGpiTBGvEcOnJyqYA5BdGGQaoc01 HtOriUX+RqQluEmkMHt2OcXYllKvmknN5npsTc8rD+osandsj1fhusaw3rHQWyfj BK+5LE0+a9uVaoiZGZ8lZ5bEA6w4iPIX8q28hUOUJ0tR4sN33sAeAUkyPuQ= -----END CERTIFICATE-----Generated at Thu May 2 05:57:34 2024 by rpki-client on console-ams.rpki-client.org