$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbf77510-a681-4626-a2b7-1af089199a64.roa File: dbf77510-a681-4626-a2b7-1af089199a64.roa (raw, json) Hash identifier: NY81PpD6vu3HJrq24ntyVO5wZ8IkZOrpjemEVgU4/GA= Subject key identifier: 50:37:85:EC:A3:6D:1A:7B:B6:B1:05:F2:CE:28:E9:DC:17:B0:6E:EC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 550997252BD6934612C658801C0A71A7BBEA6001 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbf77510-a681-4626-a2b7-1af089199a64.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 156.5.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:09:97:25:2b:d6:93:46:12:c6:58:80:1c:0a:71:a7:bb:ea:60:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=3a3d4473c89dec1ccee28bfd906dbdddc77c08cf0c79d4b2e7d1d33cedcd6549, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:90:33:a1:27:d5:79:48:f8:7e:bd:20:08:38: 2e:f0:d3:3e:74:bc:bf:ec:1b:85:d2:5e:83:46:93: 25:23:bd:e0:6e:37:c7:3a:01:ec:03:77:6e:8e:fe: 2a:90:30:59:7a:d0:f3:e2:d4:e3:ff:4b:0c:e8:0e: b9:2a:1d:4a:7f:60:85:a2:f3:45:75:d2:ee:70:8f: aa:50:cf:c5:73:ef:a0:65:be:2d:13:a7:be:a4:41: dc:55:50:72:cb:9f:b1:dd:81:71:61:7e:bc:cf:af: 27:96:2d:25:e0:50:f4:d0:ba:f6:de:8b:17:8a:d2: ea:b5:0a:0a:78:05:8e:56:1a:80:5d:1e:33:22:fc: 4e:44:bb:81:92:df:3c:f7:77:07:34:fa:ac:e4:03: 67:75:4a:94:23:08:01:11:b1:dc:9c:87:7f:31:c1: f3:4a:45:9a:07:85:3e:86:d3:bb:ba:f6:53:91:95: 74:dd:d2:4e:81:33:0c:4f:19:05:69:ac:9c:06:b6: 99:cb:5f:f5:7a:e3:58:6b:bd:6b:9d:50:a1:c0:2b: a3:94:d9:87:1e:8f:92:89:ff:25:b6:02:03:4b:fe: 4f:16:a3:ea:a7:68:ef:6d:40:28:da:4e:41:3b:f8: 11:43:3e:c3:42:b7:b8:7b:08:a1:da:34:99:e4:2c: 02:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:37:85:EC:A3:6D:1A:7B:B6:B1:05:F2:CE:28:E9:DC:17:B0:6E:EC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbf77510-a681-4626-a2b7-1af089199a64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.5.0.0/16 Signature Algorithm: sha256WithRSAEncryption 92:98:68:74:1f:a0:78:b8:ec:a7:fe:29:eb:cd:a1:27:39:4f: a2:c8:6d:d1:29:37:24:68:6d:ae:a4:d3:8c:6a:2d:37:fc:42: f0:17:84:ec:85:fb:48:06:be:7e:52:3d:42:52:2c:be:98:8a: aa:e0:b1:88:95:0f:0e:ab:65:64:72:ac:83:82:c2:8f:c5:3a: 4d:37:49:7c:25:cd:6a:cf:ce:97:95:cd:7a:41:e0:46:82:b9: 4e:22:9f:10:4b:16:5e:f8:23:ee:a7:d4:91:27:f2:7b:1c:a7: a1:fd:f4:fa:8f:45:d5:6f:11:5f:20:8a:d0:a4:cd:3b:35:7b: 5f:e4:c7:6c:4d:44:f8:fd:7b:c8:ac:7d:01:33:01:68:8c:59: 09:1e:8a:fd:64:31:c7:2a:0d:f9:45:5b:b1:15:5d:f7:ec:8b: 38:74:cd:fb:4e:76:bf:44:1c:40:66:3d:52:55:c2:05:d4:18: fd:e5:b3:18:13:63:69:e1:79:d6:51:1a:4d:d7:8e:50:f6:f0: 88:52:46:b7:a9:fa:35:25:50:d4:a9:ec:b7:f9:c0:af:33:c4: bf:74:1f:36:c3:89:c4:cf:c0:b4:33:30:c6:10:99:05:20:6e: ce:52:2f:ba:0a:fc:b5:ee:79:11:49:1e:fc:86:bd:61:1c:c9: 1b:00:37:a1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVQmXJSvWk0YSxliAHApxp7vqYAEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTNkNDQ3M2M4OWRlYzFjY2VlMjhiZmQ5MDZkYmRkZGM3 N2MwOGNmMGM3OWQ0YjJlN2QxZDMzY2VkY2Q2NTQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDzkDOhJ9V5SPh+vSAIOC7w0z50vL/sG4XSXoNGkyUjveBu N8c6AewDd26O/iqQMFl60PPi1OP/SwzoDrkqHUp/YIWi80V10u5wj6pQz8Vz76Bl vi0Tp76kQdxVUHLLn7HdgXFhfrzPryeWLSXgUPTQuvbeixeK0uq1Cgp4BY5WGoBd HjMi/E5Eu4GS3zz3dwc0+qzkA2d1SpQjCAERsdych38xwfNKRZoHhT6G07u69lOR lXTd0k6BMwxPGQVprJwGtpnLX/V641hrvWudUKHAK6OU2Ycej5KJ/yW2AgNL/k8W o+qnaO9tQCjaTkE7+BFDPsNCt7h7CKHaNJnkLAJdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUUDeF7KNtGnu2sQXyzijp3BewbuwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RiZjc3NTEwLWE2ODEtNDYyNi1hMmI3LTFhZjA4OTE5OWE2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCcBTANBgkqhkiG9w0BAQsFAAOCAQEAkphodB+geLjsp/4p682hJzlPosht 0Sk3JGhtrqTTjGotN/xC8BeE7IX7SAa+flI9QlIsvpiKquCxiJUPDqtlZHKsg4LC j8U6TTdJfCXNas/Ol5XNekHgRoK5TiKfEEsWXvgj7qfUkSfyexynof30+o9F1W8R XyCK0KTNOzV7X+THbE1E+P17yKx9ATMBaIxZCR6K/WQxxyoN+UVbsRVd9+yLOHTN +052v0QcQGY9UlXCBdQY/eWzGBNjaeF51lEaTdeOUPbwiFJGt6n6NSVQ1Knst/nA rzPEv3QfNsOJxM/AtDMwxhCZBSBuzlIvugr8te55EUke/Ia9YRzJGwA3oQ== -----END CERTIFICATE-----Generated at Thu May 2 04:02:43 2024 by rpki-client on console-fra.rpki-client.org