$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3d48a9c-23e8-41cc-b2f3-69ac9af79847.roa File: e3d48a9c-23e8-41cc-b2f3-69ac9af79847.roa (raw, json) Hash identifier: aqRfYnZ5WIOIbh/F8LHwSnCsAhndom5zHYRG0UEF7sw= Subject key identifier: 40:89:DD:B4:F9:D9:1E:77:DD:85:72:87:10:09:42:F8:3B:63:6B:C3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2C94FF35C7F27C47C4B10549B7AC720FCC8B7FB8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3d48a9c-23e8-41cc-b2f3-69ac9af79847.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 68.223.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:94:ff:35:c7:f2:7c:47:c4:b1:05:49:b7:ac:72:0f:cc:8b:7f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=ccb08a32474833cd5321377685763e056d743c3571ae952c9dbf7ba3a2f77d15, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0e:f9:23:34:c3:f3:75:8b:4f:ca:b3:93:8e: 1a:c4:2d:50:ec:27:cf:2d:27:49:55:d6:4e:77:47: ef:a9:39:aa:f1:91:36:81:f6:59:7e:d0:4f:6a:e1: 38:42:0a:f2:dc:e8:f0:3b:d3:dc:1a:e8:6d:3e:fc: ce:f8:ec:f7:f9:2c:a3:b1:e4:c1:2c:63:0c:da:4c: 85:87:32:0f:4e:0a:ea:0f:42:ca:5e:f3:70:53:73: 9f:17:ba:50:a8:2c:8a:21:f2:a0:88:2e:47:31:c0: e4:8b:d3:fe:49:c3:b9:7d:26:e0:4b:a9:14:4a:3d: fe:61:2b:57:85:db:96:a3:db:c7:e8:cf:b4:99:d5: 59:88:c3:c9:66:64:78:fd:0a:e7:46:a7:f8:b2:98: 1c:ff:92:e2:f8:cb:cc:1e:6a:b6:77:16:f8:98:43: 62:77:50:de:ed:6a:a1:ab:52:23:07:93:68:b9:d7: de:27:54:d3:80:f2:7c:3b:c6:c6:6b:34:bf:b0:06: e6:0c:59:26:76:9f:14:85:32:73:e3:74:21:f6:3f: 08:b7:07:c9:d7:14:c3:9b:8d:9a:7f:cb:c6:d8:36: 73:25:f2:f1:10:3f:55:86:7b:eb:12:4b:cf:4d:6d: 25:18:dc:10:e8:09:ac:1b:1e:3c:07:53:81:30:c7: 53:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:89:DD:B4:F9:D9:1E:77:DD:85:72:87:10:09:42:F8:3B:63:6B:C3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3d48a9c-23e8-41cc-b2f3-69ac9af79847.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 68.223.0.0/16 Signature Algorithm: sha256WithRSAEncryption b8:b9:f2:15:82:27:50:96:ad:95:4d:e6:d6:49:93:f5:3e:7f: ed:db:61:79:d3:1d:50:a5:3f:ee:cc:d5:6b:1d:29:bb:fc:a1: 19:93:23:d9:98:1c:3d:80:b6:f2:10:eb:03:4e:83:85:80:67: 41:59:11:1e:57:cc:16:b6:97:f6:0b:4a:93:04:5b:a6:64:7e: e5:e5:66:44:06:3e:d2:71:e1:d4:01:48:54:26:a0:b1:5b:cb: 51:75:c9:60:37:50:51:d8:31:c2:0e:a8:7f:44:87:63:2e:35: f3:8d:36:34:a6:e3:bb:61:d7:4f:f0:c4:fa:08:92:2d:4b:ec: d6:df:13:99:6f:67:b2:65:c9:f0:28:ae:e0:6c:f5:fa:60:a5: de:72:a8:52:81:2f:14:6b:dc:0b:0c:05:88:6a:de:c2:52:fc: 2a:8e:84:ef:70:ea:86:42:d6:7b:d6:61:48:64:f2:0c:cf:98: ee:6f:a3:78:41:bc:8f:f2:0a:b0:4f:fc:15:4f:70:f2:f0:e9: b7:ef:0c:91:5c:6e:23:ad:0e:69:0f:36:c4:58:6b:3c:ee:3c: 6f:fd:99:05:5f:e9:e3:b7:e8:91:1c:d2:d7:7e:34:35:9e:97: 50:a1:be:4b:0e:e5:ca:e3:0b:89:79:1b:51:76:55:7c:4d:bd: eb:ff:2c:84 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULJT/NcfyfEfEsQVJt6xyD8yLf7gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjY2IwOGEzMjQ3NDgzM2NkNTMyMTM3NzY4NTc2M2UwNTZk NzQzYzM1NzFhZTk1MmM5ZGJmN2JhM2EyZjc3ZDE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqDvkjNMPzdYtPyrOTjhrELVDsJ88tJ0lV1k53R++pOarx kTaB9ll+0E9q4ThCCvLc6PA709wa6G0+/M747Pf5LKOx5MEsYwzaTIWHMg9OCuoP Qspe83BTc58XulCoLIoh8qCILkcxwOSL0/5Jw7l9JuBLqRRKPf5hK1eF25aj28fo z7SZ1VmIw8lmZHj9CudGp/iymBz/kuL4y8wearZ3FviYQ2J3UN7taqGrUiMHk2i5 194nVNOA8nw7xsZrNL+wBuYMWSZ2nxSFMnPjdCH2Pwi3B8nXFMObjZp/y8bYNnMl 8vEQP1WGe+sSS89NbSUY3BDoCawbHjwHU4Ewx1NTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQIndtPnZHnfdhXKHEAlC+Dtja8MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UzZDQ4YTljLTIzZTgtNDFjYy1iMmYzLTY5YWM5YWY3OTg0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBE3zANBgkqhkiG9w0BAQsFAAOCAQEAuLnyFYInUJatlU3m1kmT9T5/7dth edMdUKU/7szVax0pu/yhGZMj2ZgcPYC28hDrA06DhYBnQVkRHlfMFraX9gtKkwRb pmR+5eVmRAY+0nHh1AFIVCagsVvLUXXJYDdQUdgxwg6of0SHYy418402NKbju2HX T/DE+giSLUvs1t8TmW9nsmXJ8Ciu4Gz1+mCl3nKoUoEvFGvcCwwFiGrewlL8Ko6E 73DqhkLWe9ZhSGTyDM+Y7m+jeEG8j/IKsE/8FU9w8vDpt+8MkVxuI60OaQ82xFhr PO48b/2ZBV/p47fokRzS1340NZ6XUKG+Sw7lyuMLiXkbUXZVfE296/8shA== -----END CERTIFICATE-----Generated at Thu May 9 01:25:50 2024 by rpki-client on console-fra.rpki-client.org