$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcfc889c-2473-471e-91cb-178bc187dee9.roa File: dcfc889c-2473-471e-91cb-178bc187dee9.roa (raw, json) Hash identifier: pzweukiPI3XnCXDUJWVvU+TJKDii0YGYR46GYTTDQcs= Subject key identifier: 84:26:CB:72:3D:01:53:FA:21:37:05:63:42:4C:A5:9E:8D:A9:3C:7F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52F612A03132D5E4C5E42C1345DDF7C48033EDC3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcfc889c-2473-471e-91cb-178bc187dee9.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:f6:12:a0:31:32:d5:e4:c5:e4:2c:13:45:dd:f7:c4:80:33:ed:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=7afafe8705acaabc76dea7513ded65f3aa57ad150a66ba9ba7cfd855c5e11cfb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5f:bd:66:c4:b3:da:98:b2:c5:79:8f:e0:28: ab:af:20:13:b2:50:84:ed:57:d2:71:7f:15:3b:81: ac:7e:47:6a:87:25:9a:9d:54:2d:f4:47:8f:0c:b8: e0:ad:3c:c5:c6:c2:aa:e1:4b:41:6e:d5:2e:3c:75: 99:91:ad:2f:ea:17:90:17:db:0c:c5:33:af:98:09: fa:52:84:c8:7e:65:2d:f3:46:6f:ad:ec:0c:c6:15: 76:df:7d:41:e2:d5:6f:01:6d:78:7d:e4:73:70:ca: ed:2f:f7:bd:38:a0:01:07:f5:53:b3:02:66:4f:ad: b1:bf:96:08:4d:ec:5b:db:d5:87:ba:3d:70:92:51: ec:9d:60:1a:c1:11:32:6b:7f:2f:74:90:77:98:85: 83:8e:97:85:06:08:97:43:a2:27:26:87:37:fb:94: 99:70:9d:ba:90:73:37:36:53:b9:d4:98:0f:cf:7b: 6e:f0:d3:3c:3c:1d:1d:83:52:3b:53:e3:dc:92:10: fa:a8:86:8d:cf:97:65:7d:c0:55:3b:d7:42:ec:af: 6b:9b:f5:18:aa:d2:a6:1f:27:60:32:20:69:01:59: e8:b9:75:c7:ee:d7:ad:8d:f8:f5:86:63:42:15:27: f6:fd:79:78:78:91:41:c5:df:fb:a9:54:0a:f0:43: 42:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:26:CB:72:3D:01:53:FA:21:37:05:63:42:4C:A5:9E:8D:A9:3C:7F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcfc889c-2473-471e-91cb-178bc187dee9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.118.0/24 Signature Algorithm: sha256WithRSAEncryption 29:82:b7:f1:8f:f4:f5:0a:18:cc:a5:5e:35:08:c6:05:cc:93: 28:ad:95:48:ec:ab:a1:0e:ec:7b:ea:36:ba:84:55:08:75:d8: 6d:82:b3:97:5b:6e:4b:12:a6:9b:d5:94:9d:79:3e:39:c0:71: 10:8c:14:88:42:eb:62:15:d9:4e:5b:8e:b3:95:db:a3:88:20: bf:e9:c8:e2:88:79:b2:e3:63:3d:78:30:07:0a:36:9a:4a:81: 29:9a:f3:88:d6:80:b2:4c:21:43:b9:c7:d8:b7:32:7a:1c:6f: 69:7e:9b:e5:0f:ee:8d:ee:9c:f2:9b:98:b5:ad:5b:d8:85:b0: 1b:58:6e:dc:da:c9:fb:1f:27:92:8b:99:4c:35:d5:19:4a:a5: 3b:49:74:e4:c7:02:4d:d1:30:6e:33:09:f5:2d:49:a3:44:1a: 0d:31:3b:f1:ca:28:4e:50:b3:0d:b9:bd:27:5b:28:5e:32:9a: 9b:f6:f0:23:6f:0f:92:ce:37:e4:75:8f:d6:91:ba:68:d2:d9: 8e:b3:4f:49:e9:ed:eb:a4:c4:9d:dd:80:9e:b2:f7:c4:38:91: e2:7e:9a:ef:a2:96:1e:df:2d:11:f7:a9:32:2b:ec:73:c4:5e: 2b:df:7a:6a:55:f7:f1:29:7a:54:aa:6b:fd:ba:7f:89:7f:de: bc:f1:13:79 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUvYSoDEy1eTF5CwTRd33xIAz7cMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YWZhZmU4NzA1YWNhYWJjNzZkZWE3NTEzZGVkNjVmM2Fh NTdhZDE1MGE2NmJhOWJhN2NmZDg1NWM1ZTExY2ZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcX71mxLPamLLFeY/gKKuvIBOyUITtV9JxfxU7gax+R2qH JZqdVC30R48MuOCtPMXGwqrhS0Fu1S48dZmRrS/qF5AX2wzFM6+YCfpShMh+ZS3z Rm+t7AzGFXbffUHi1W8BbXh95HNwyu0v9704oAEH9VOzAmZPrbG/lghN7Fvb1Ye6 PXCSUeydYBrBETJrfy90kHeYhYOOl4UGCJdDoicmhzf7lJlwnbqQczc2U7nUmA/P e27w0zw8HR2DUjtT49ySEPqoho3Pl2V9wFU710Lsr2ub9Riq0qYfJ2AyIGkBWei5 dcfu162N+PWGY0IVJ/b9eXh4kUHF3/upVArwQ0LJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhCbLcj0BU/ohNwVjQkylno2pPH8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RjZmM4ODljLTI0NzMtNDcxZS05MWNiLTE3OGJjMTg3ZGVlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/HYwDQYJKoZIhvcNAQELBQADggEBACmCt/GP9PUKGMylXjUIxgXMkyit lUjsq6EO7HvqNrqEVQh12G2Cs5dbbksSppvVlJ15PjnAcRCMFIhC62IV2U5bjrOV 26OIIL/pyOKIebLjYz14MAcKNppKgSma84jWgLJMIUO5x9i3Mnocb2l+m+UP7o3u nPKbmLWtW9iFsBtYbtzayfsfJ5KLmUw11RlKpTtJdOTHAk3RMG4zCfUtSaNEGg0x O/HKKE5Qsw25vSdbKF4ympv28CNvD5LON+R1j9aRumjS2Y6zT0np7eukxJ3dgJ6y 98Q4keJ+mu+ilh7fLRH3qTIr7HPEXivfempV9/EpelSqa/26f4l/3rzxE3k= -----END CERTIFICATE-----Generated at Wed Apr 24 16:34:57 2024 by rpki-client on console-fra.rpki-client.org