$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4f678cb-1897-41d4-b6a2-b45f958900f6.roa File: e4f678cb-1897-41d4-b6a2-b45f958900f6.roa (raw, json) Hash identifier: fsN0OPX+FYbubRJl0yV6TFL666mKbn/+HCl4Sa9t7ic= Subject key identifier: C3:69:0F:08:A8:05:43:48:9F:30:89:53:EB:10:8E:A6:50:C7:2A:A1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 08458E6F0489530FC6F3D5D5228616040A60541B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4f678cb-1897-41d4-b6a2-b45f958900f6.roa Signing time: Fri 03 May 2024 00:00:00 +0000 ROA not before: Fri 03 May 2024 00:00:00 +0000 ROA not after: Fri 07 Jun 2024 23:59:59 +0000 asID: 8987 IP address blocks: 40.235.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:45:8e:6f:04:89:53:0f:c6:f3:d5:d5:22:86:16:04:0a:60:54:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:00:00 2024 GMT Not After : Jun 7 23:59:59 2024 GMT Subject: serialNumber=1f1843ffffaf3aa1956cc6feaffa7d789021e816e04cd04ff4c174f9344fd33e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fe:bc:da:97:45:7b:6b:e9:76:95:7d:fe:0a: 04:f5:10:55:a0:98:6e:9f:85:b0:0f:0a:c2:f7:6b: 9e:0b:78:9e:07:08:96:14:52:0d:b2:d5:58:db:cf: 72:33:c9:11:46:eb:bb:09:b8:65:4d:95:ac:11:d1: 94:98:b5:7c:28:9e:9a:8b:51:22:c6:a4:e9:81:09: d7:4d:31:60:7d:3c:65:6c:5d:29:a9:a0:31:fb:09: 8c:c0:d0:69:0c:b9:fb:5d:04:6d:38:7a:76:bc:cc: ca:9c:0b:e8:68:bf:f7:05:05:42:23:f7:0e:bf:f7: 2f:a9:88:10:18:53:36:ed:41:35:48:a0:cc:d5:be: 85:55:e6:c9:d2:5f:c1:0d:7b:bd:ea:2a:ad:84:f5: a2:43:f0:27:df:7e:34:2d:53:16:56:18:13:ad:b4: ad:7e:bf:32:4f:e6:39:c5:7d:2b:8a:6f:dc:bb:3a: d4:ab:4d:7c:62:8e:59:07:3d:5b:4a:a6:f0:fa:97: 04:c6:b8:8a:12:d1:67:fe:62:5b:51:0a:e7:18:ba: 44:19:bd:49:3a:76:ba:1f:4f:db:07:70:44:a6:80: 19:70:a3:0a:68:4f:9f:cb:62:12:f9:fe:60:bd:47: 96:71:50:0c:d2:53:96:a5:52:52:3a:d0:83:e8:0a: 35:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:69:0F:08:A8:05:43:48:9F:30:89:53:EB:10:8E:A6:50:C7:2A:A1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4f678cb-1897-41d4-b6a2-b45f958900f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.235.64.0/18 Signature Algorithm: sha256WithRSAEncryption 10:e8:c5:c0:2d:69:31:c9:0f:ac:a3:ee:7a:4c:59:9e:64:bb: 29:58:ad:de:95:b9:5a:24:90:99:b0:43:42:6c:c1:80:f3:27: 23:5d:1e:ae:01:22:55:50:6f:7c:9e:e7:2b:a6:79:bb:ef:84: 68:d6:e7:95:ee:57:0b:55:c1:a3:a4:2b:a7:26:ed:f9:5f:02: ab:7f:ad:ac:75:af:b1:45:75:e9:41:de:64:dc:43:03:12:f9: 4e:f3:fe:ad:19:89:71:5c:fb:8e:3f:8b:07:15:ac:7a:7e:55: dc:df:53:e2:0b:da:7a:0e:3a:9c:74:a1:03:2b:9e:53:b1:d5: 80:41:85:ce:a4:7f:19:b0:09:fe:6b:14:13:d7:34:6d:56:62: 50:37:d0:21:96:5a:62:5e:ec:80:4b:a5:e4:37:cb:9f:c1:c3: 2e:b4:4f:c9:46:69:7e:9a:0f:3b:83:c2:44:8a:b4:2a:94:20: 75:1a:08:85:ea:f5:95:d9:62:a8:f7:ed:5d:9a:d7:da:fb:3a: 9c:09:47:3f:00:bf:4f:59:28:1e:85:1f:6a:f4:93:ca:46:87: 5d:21:7f:90:74:13:65:2d:ff:5f:10:41:28:8f:c1:34:0d:1c: 41:95:67:0e:d2:70:ee:6c:49:be:ff:40:70:dd:a0:80:80:ab: 5a:9f:48:62 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCEWObwSJUw/G89XVIoYWBApgVBswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjE4NDNmZmZmYWYzYWExOTU2Y2M2ZmVhZmZhN2Q3ODkw MjFlODE2ZTA0Y2QwNGZmNGMxNzRmOTM0NGZkMzNlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9/rzal0V7a+l2lX3+CgT1EFWgmG6fhbAPCsL3a54LeJ4H CJYUUg2y1Vjbz3IzyRFG67sJuGVNlawR0ZSYtXwonpqLUSLGpOmBCddNMWB9PGVs XSmpoDH7CYzA0GkMuftdBG04ena8zMqcC+hov/cFBUIj9w6/9y+piBAYUzbtQTVI oMzVvoVV5snSX8ENe73qKq2E9aJD8CfffjQtUxZWGBOttK1+vzJP5jnFfSuKb9y7 OtSrTXxijlkHPVtKpvD6lwTGuIoS0Wf+YltRCucYukQZvUk6drofT9sHcESmgBlw owpoT5/LYhL5/mC9R5ZxUAzSU5alUlI60IPoCjUdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUw2kPCKgFQ0ifMIlT6xCOplDHKqEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U0ZjY3OGNiLTE4OTctNDFkNC1iNmEyLWI0NWY5NTg5MDBmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYo60AwDQYJKoZIhvcNAQELBQADggEBABDoxcAtaTHJD6yj7npMWZ5kuylY rd6VuVokkJmwQ0JswYDzJyNdHq4BIlVQb3ye5yumebvvhGjW55XuVwtVwaOkK6cm 7flfAqt/rax1r7FFdelB3mTcQwMS+U7z/q0ZiXFc+44/iwcVrHp+VdzfU+IL2noO Opx0oQMrnlOx1YBBhc6kfxmwCf5rFBPXNG1WYlA30CGWWmJe7IBLpeQ3y5/Bwy60 T8lGaX6aDzuDwkSKtCqUIHUaCIXq9ZXZYqj37V2a19r7OpwJRz8Av09ZKB6FH2r0 k8pGh10hf5B0E2Ut/18QQSiPwTQNHEGVZw7ScO5sSb7/QHDdoICAq1qfSGI= -----END CERTIFICATE-----Generated at Thu May 9 01:25:51 2024 by rpki-client on console-fra.rpki-client.org