$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0dc6def-824b-44e4-953e-03bc03efa024.roa File: f0dc6def-824b-44e4-953e-03bc03efa024.roa (raw, json) Hash identifier: txn6AHXdb0EV0XE/Mbs5so3/tanQo5LkpKHqI/YvXGY= Subject key identifier: 6C:8D:F9:7F:4A:E6:91:F2:A6:3D:50:8D:5F:21:BF:05:07:63:22:2B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 32C992CA3E76DB5569B3D41FAFCCDBDBDD9A6BC1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0dc6def-824b-44e4-953e-03bc03efa024.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 40.229.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c9:92:ca:3e:76:db:55:69:b3:d4:1f:af:cc:db:db:dd:9a:6b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=f8eb8febdf3065728e5d016fde3af149b73ebc1b038f327aa7ee6cc567a1ac0b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:47:93:8b:5d:01:d9:01:6b:72:9e:e7:fd: c7:7c:fe:94:16:7a:54:bc:53:6c:9c:4a:5b:44:4a: 61:1b:c7:95:cc:57:2b:74:65:4d:c5:09:50:4f:2e: 46:3c:8d:74:71:ad:f5:b4:67:f4:06:9f:e9:80:fd: 04:9f:25:4f:71:2c:ef:e4:41:99:69:84:34:d3:c8: 4f:4e:89:76:1b:cd:91:85:94:79:b6:d8:4a:80:d3: a0:d6:97:53:b2:57:58:0e:1a:01:61:39:a7:81:9a: 53:7b:03:15:79:0d:e9:8d:02:7f:67:27:2f:1b:71: a2:61:9d:f4:15:02:b6:b0:14:db:bc:64:88:57:3c: b5:21:4c:70:b2:21:37:48:62:ab:ae:5c:b1:29:b8: c9:7f:5a:f0:05:ea:22:42:9b:8b:09:02:d8:b7:20: 2d:c7:ca:35:c4:ac:55:00:a7:de:45:5a:27:bb:19: 43:ed:fc:87:27:1e:f3:4b:2c:a9:f0:7d:a9:92:64: 4c:9d:02:7a:66:06:f8:30:79:e7:b6:42:5e:83:7a: c6:ce:09:06:35:fb:79:3f:cf:99:ea:3b:de:99:59: 75:57:1c:8b:78:85:71:b5:30:39:01:4d:c4:c9:33: 32:ae:f7:f0:43:72:da:af:13:dd:05:85:b6:af:a4: a8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8D:F9:7F:4A:E6:91:F2:A6:3D:50:8D:5F:21:BF:05:07:63:22:2B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0dc6def-824b-44e4-953e-03bc03efa024.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.229.0.0/16 Signature Algorithm: sha256WithRSAEncryption ce:71:9e:4d:29:76:9d:93:f3:d6:4a:6a:37:0e:ce:0e:7b:0f: 32:b0:a9:0d:78:c9:fc:ff:32:c9:64:03:71:56:5c:f3:bb:9a: 70:45:ac:92:8c:8c:f0:89:70:24:f0:ae:96:e8:2b:e5:58:ae: b3:65:61:9c:d5:63:dc:31:52:0d:b2:28:36:6d:a5:48:26:4f: 7f:c8:4e:79:c7:40:59:a0:a1:8a:01:18:bc:f5:73:a9:45:d3: 3f:b1:0b:7b:d3:d3:d1:90:f0:31:45:44:59:8e:50:67:c7:44: 0e:3e:1a:8d:0a:af:8a:c8:cf:c6:54:29:3e:0a:c4:e5:ad:85: af:20:cc:64:f6:5e:08:c1:22:16:f2:da:85:2a:95:e6:ec:78: 9b:4e:8e:bd:63:d7:19:44:6a:e8:d5:30:27:8d:65:01:52:f6: a1:69:53:75:e7:6e:d2:25:5e:f9:e1:db:69:a5:4a:8a:88:8e: b6:ec:9a:fd:68:78:3f:06:d8:2f:ed:7d:76:80:1a:04:f0:fd: 80:b0:34:a8:45:94:53:c5:65:4f:ea:6e:a7:20:ef:2d:b0:d7: 5c:1a:e3:f3:67:12:b0:16:08:94:16:79:c8:b0:e7:34:f0:d6: 63:04:3b:6f:f4:d5:a7:b6:57:f9:b2:24:e0:0d:f3:00:b1:80: 60:a4:eb:cd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMsmSyj5221Vps9Qfr8zb292aa8EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmOGViOGZlYmRmMzA2NTcyOGU1ZDAxNmZkZTNhZjE0OWI3 M2ViYzFiMDM4ZjMyN2FhN2VlNmNjNTY3YTFhYzBiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDAEeTi10B2QFrcp7n/cd8/pQWelS8U2ycSltESmEbx5XM Vyt0ZU3FCVBPLkY8jXRxrfW0Z/QGn+mA/QSfJU9xLO/kQZlphDTTyE9OiXYbzZGF lHm22EqA06DWl1OyV1gOGgFhOaeBmlN7AxV5DemNAn9nJy8bcaJhnfQVArawFNu8 ZIhXPLUhTHCyITdIYquuXLEpuMl/WvAF6iJCm4sJAti3IC3HyjXErFUAp95FWie7 GUPt/IcnHvNLLKnwfamSZEydAnpmBvgweee2Ql6DesbOCQY1+3k/z5nqO96ZWXVX HIt4hXG1MDkBTcTJMzKu9/BDctqvE90FhbavpKjbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUbI35f0rmkfKmPVCNXyG/BQdjIiswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YwZGM2ZGVmLTgyNGItNDRlNC05NTNlLTAzYmMwM2VmYTAyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAo5TANBgkqhkiG9w0BAQsFAAOCAQEAznGeTSl2nZPz1kpqNw7ODnsPMrCp DXjJ/P8yyWQDcVZc87uacEWskoyM8IlwJPCulugr5Vius2VhnNVj3DFSDbIoNm2l SCZPf8hOecdAWaChigEYvPVzqUXTP7ELe9PT0ZDwMUVEWY5QZ8dEDj4ajQqvisjP xlQpPgrE5a2FryDMZPZeCMEiFvLahSqV5ux4m06OvWPXGURq6NUwJ41lAVL2oWlT dedu0iVe+eHbaaVKioiOtuya/Wh4PwbYL+19doAaBPD9gLA0qEWUU8VlT+pupyDv LbDXXBrj82cSsBYIlBZ5yLDnNPDWYwQ7b/TVp7ZX+bIk4A3zALGAYKTrzQ== -----END CERTIFICATE-----Generated at Sat Apr 20 01:08:43 2024 by rpki-client on console-ams.rpki-client.org