$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e98bcd0b-cfcb-4050-a190-5429d55b2b60.roa File: e98bcd0b-cfcb-4050-a190-5429d55b2b60.roa (raw, json) Hash identifier: KLTdPEIbSmfHjlHmZ6RszmpWm/IsfvE+wELAtpO+bf0= Subject key identifier: 23:D7:F6:CE:F6:D7:2A:B5:DF:BE:38:B4:D0:26:F4:AF:C7:C6:0B:7D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 698A4CFC25683A20EB587361A15745C64A56546F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e98bcd0b-cfcb-4050-a190-5429d55b2b60.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 76.223.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:8a:4c:fc:25:68:3a:20:eb:58:73:61:a1:57:45:c6:4a:56:54:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=ffbc750d09b76fccdae4eed0a31c8665a01a5cc5ff223fb4e13d6d198fd7f2d5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d4:17:b9:79:7c:3f:7c:ad:7a:eb:a4:86:b5: 77:00:5d:c9:49:12:40:91:93:7d:11:62:d0:be:a3: f1:d2:34:07:fa:8d:fa:d2:b6:5e:f6:ce:ce:5e:64: 7b:34:9c:3d:95:72:ce:75:17:2c:be:3d:7f:89:83: 3b:65:e4:5f:37:db:04:c1:6c:c8:8f:ab:ae:30:73: 4b:74:30:95:fa:68:4a:ca:a2:71:70:e0:8e:c2:6a: 54:97:9e:7c:7e:8f:1a:3d:87:55:67:37:de:c5:e7: 30:48:ed:1d:ae:80:45:c5:35:77:77:2d:d6:26:fa: f9:0d:14:64:ef:31:a4:ff:26:b0:54:af:53:07:01: a2:3f:6b:08:1b:fc:e0:69:0a:cb:51:cf:8d:3c:0b: f3:95:4f:97:88:bc:94:a3:00:d8:32:ed:cb:ef:38: 8b:16:6d:f5:17:81:76:b6:5e:0b:5f:a8:0f:e0:c7: ef:df:38:86:14:06:99:d0:41:30:01:b1:88:78:69: e5:7c:92:aa:e3:6f:67:ce:3a:4c:5a:b5:ae:75:0f: 70:05:be:ce:5b:21:76:59:8c:aa:06:4e:d5:42:6f: 2e:ed:f9:70:7a:f4:64:57:92:31:ec:cb:29:f9:4b: fd:b1:7c:1e:1a:54:58:f5:50:0f:52:e4:1f:e2:21: 11:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D7:F6:CE:F6:D7:2A:B5:DF:BE:38:B4:D0:26:F4:AF:C7:C6:0B:7D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e98bcd0b-cfcb-4050-a190-5429d55b2b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.160.0/21 Signature Algorithm: sha256WithRSAEncryption 5e:c1:92:dc:6b:7f:82:0a:ff:ba:e0:65:03:78:7f:b2:28:f7: 33:7a:f6:04:70:ba:07:a2:79:91:f6:30:51:7f:d3:d0:19:1f: be:3e:da:28:2c:f3:e4:22:17:0c:cd:05:26:0e:9e:f6:b3:6f: 99:20:37:e3:ee:a4:20:f8:18:4f:04:69:dd:cf:cc:c3:72:50: 6f:1b:70:96:b4:8f:1d:68:ef:f0:59:4c:b7:44:7b:0a:ef:e5: 58:53:ef:63:ff:f7:7e:07:d3:7a:c6:1c:57:82:56:06:6e:12: b1:8d:62:dd:11:cb:1f:91:c2:10:99:9e:27:36:83:75:cd:78: e5:f7:63:f9:7a:5b:6e:32:47:4a:5e:82:7f:3f:df:1f:ad:b5: 84:90:4d:7d:34:a3:51:68:4e:a8:49:4d:13:f1:91:a1:30:7d: 6c:91:67:f6:c6:ac:81:d6:16:77:e4:12:e2:14:63:00:63:d3: 0c:6e:f2:71:f2:3c:e0:9f:12:c7:0f:ce:a9:cf:2d:fb:74:b8: 9f:c0:54:27:13:89:4c:f2:41:48:d5:4e:55:84:55:fc:17:1a: 28:02:0b:85:b4:1e:aa:71:9a:65:d6:3e:02:96:88:5c:5b:fe: f2:3b:5e:2b:a8:0d:66:3d:bd:32:c0:99:4b:70:82:7e:1f:92: f5:26:05:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaYpM/CVoOiDrWHNhoVdFxkpWVG8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZmJjNzUwZDA5Yjc2ZmNjZGFlNGVlZDBhMzFjODY2NWEw MWE1Y2M1ZmYyMjNmYjRlMTNkNmQxOThmZDdmMmQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDo1Be5eXw/fK1666SGtXcAXclJEkCRk30RYtC+o/HSNAf6 jfrStl72zs5eZHs0nD2Vcs51Fyy+PX+Jgztl5F832wTBbMiPq64wc0t0MJX6aErK onFw4I7CalSXnnx+jxo9h1VnN97F5zBI7R2ugEXFNXd3LdYm+vkNFGTvMaT/JrBU r1MHAaI/awgb/OBpCstRz408C/OVT5eIvJSjANgy7cvvOIsWbfUXgXa2XgtfqA/g x+/fOIYUBpnQQTABsYh4aeV8kqrjb2fOOkxata51D3AFvs5bIXZZjKoGTtVCby7t +XB69GRXkjHsyyn5S/2xfB4aVFj1UA9S5B/iIREvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUI9f2zvbXKrXfvji00Cb0r8fGC30wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U5OGJjZDBiLWNmY2ItNDA1MC1hMTkwLTU0MjlkNTViMmI2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANM36AwDQYJKoZIhvcNAQELBQADggEBAF7Bktxrf4IK/7rgZQN4f7Io9zN6 9gRwugeieZH2MFF/09AZH74+2igs8+QiFwzNBSYOnvazb5kgN+PupCD4GE8Ead3P zMNyUG8bcJa0jx1o7/BZTLdEewrv5VhT72P/934H03rGHFeCVgZuErGNYt0Ryx+R whCZnic2g3XNeOX3Y/l6W24yR0pegn8/3x+ttYSQTX00o1FoTqhJTRPxkaEwfWyR Z/bGrIHWFnfkEuIUYwBj0wxu8nHyPOCfEscPzqnPLft0uJ/AVCcTiUzyQUjVTlWE VfwXGigCC4W0HqpxmmXWPgKWiFxb/vI7XiuoDWY9vTLAmUtwgn4fkvUmBXA= -----END CERTIFICATE-----Generated at Thu May 2 06:12:51 2024 by rpki-client on console-fra.rpki-client.org