$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1539793-57f7-460a-91e1-fb4b5b0bd7ba.roa File: f1539793-57f7-460a-91e1-fb4b5b0bd7ba.roa (raw, json) Hash identifier: NlopYLxismzmP5KkQYsbAD3vWpxaSvNwgKKiKqppHuA= Subject key identifier: B0:0A:B7:2D:2B:1A:D4:64:FE:96:9F:A0:0F:98:A9:6C:B6:A8:53:47 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3CD0E1ABD040E72ADAEE63C2D48B55F74EDB58BF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1539793-57f7-460a-91e1-fb4b5b0bd7ba.roa Signing time: Fri 12 Apr 2024 00:00:00 +0000 ROA not before: Fri 12 Apr 2024 00:00:00 +0000 ROA not after: Fri 17 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 35.39.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d0:e1:ab:d0:40:e7:2a:da:ee:63:c2:d4:8b:55:f7:4e:db:58:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:00:00 2024 GMT Not After : May 17 23:59:59 2024 GMT Subject: serialNumber=00535db004b534aa101dbefbea7e01154ba7db18e1e8c778e8a93a02b28e5fe9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:d3:ab:65:61:80:1d:80:3e:43:c7:ff:4c: 55:57:e3:73:32:a5:09:6b:f7:75:13:fb:76:55:0d: 86:38:0e:1a:0e:b8:77:1e:8d:13:04:94:b0:ad:a1: dc:33:0c:a9:c9:78:6c:38:ce:5c:b1:14:eb:0b:a8: 64:cf:97:2d:a6:20:2c:f3:34:33:7b:84:db:4f:cf: c7:cb:ff:45:0f:c1:b6:cf:82:f8:9e:70:06:48:08: db:a8:c1:1b:f7:10:3f:f8:6b:af:ba:8f:88:b8:27: 68:6d:fc:75:20:b3:d7:f4:1e:f3:14:9e:96:07:3c: ce:8a:74:86:8d:83:9c:a7:1e:e4:5d:14:ca:53:aa: 25:e3:0a:f5:97:2f:ef:da:21:a5:18:76:97:3d:43: 1f:81:c7:af:40:9a:c9:7a:54:3f:2d:c4:69:37:9f: a1:41:94:80:54:5b:fb:68:b8:e9:a4:b4:90:3a:e3: 97:f3:1e:2c:7c:f0:b3:15:5d:cf:d6:88:b7:91:99: 95:f2:99:3b:d0:7d:fe:65:6d:17:7a:82:f8:14:19: 01:72:55:ae:73:21:a8:96:9e:86:7e:43:35:85:d2: 91:46:2e:c7:c7:79:a2:cc:0a:d1:77:17:81:2a:e1: 0e:92:d7:24:f0:a1:ef:bb:23:c6:e1:4f:dc:cb:c1: 6c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0A:B7:2D:2B:1A:D4:64:FE:96:9F:A0:0F:98:A9:6C:B6:A8:53:47 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1539793-57f7-460a-91e1-fb4b5b0bd7ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.39.96.0/19 Signature Algorithm: sha256WithRSAEncryption 32:f4:1c:a0:28:81:e7:65:dd:6a:30:e7:91:7f:61:5f:19:b7: 4e:93:25:11:1b:2d:2b:2c:f0:d3:fc:42:b8:8c:68:10:34:c6: 08:e0:49:f7:ef:85:e7:7e:07:71:bd:49:c1:7c:36:29:5d:13: 71:4b:96:f6:08:f1:d3:4d:03:72:11:dd:2c:4e:85:34:20:a1: 15:7a:76:70:e9:e5:9f:4b:11:1e:1c:c2:20:01:85:c9:1e:5f: d9:5a:2c:28:0b:e3:3b:77:cb:2d:35:71:3a:b4:e3:99:40:e0: a7:e6:7c:5e:92:d1:5a:ad:7c:b6:fe:e2:98:d6:89:11:94:26: c4:48:5f:96:94:e5:7b:b0:19:79:e4:62:9d:e0:76:c3:c0:ec: cf:c4:f5:4d:de:d7:d7:bf:10:73:29:e7:cb:72:97:2a:55:40: cc:0c:95:9a:fa:c0:44:58:a8:30:59:5c:74:aa:c0:9f:17:b7: 8b:e6:ff:dd:f6:d5:08:af:9c:ac:12:43:11:c2:73:d4:34:e9: 75:6d:1a:b4:b5:5a:c7:3d:a9:c6:e0:cf:0b:5c:06:e3:95:53: e4:73:d2:be:9d:fb:64:51:c6:c9:c0:b2:e6:37:88:b8:c6:f3: dd:41:7e:a3:9d:59:cf:b0:4e:d8:85:a7:50:77:7e:c4:2d:0c: a8:1d:98:f9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPNDhq9BA5yra7mPC1ItV907bWL8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEyMDAwMDAwWhcNMjQwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDUzNWRiMDA0YjUzNGFhMTAxZGJlZmJlYTdlMDExNTRi YTdkYjE4ZTFlOGM3NzhlOGE5M2EwMmIyOGU1ZmU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyBNOrZWGAHYA+Q8f/TFVX43MypQlr93UT+3ZVDYY4DhoO uHcejRMElLCtodwzDKnJeGw4zlyxFOsLqGTPly2mICzzNDN7hNtPz8fL/0UPwbbP gviecAZICNuowRv3ED/4a6+6j4i4J2ht/HUgs9f0HvMUnpYHPM6KdIaNg5ynHuRd FMpTqiXjCvWXL+/aIaUYdpc9Qx+Bx69Amsl6VD8txGk3n6FBlIBUW/touOmktJA6 45fzHix88LMVXc/WiLeRmZXymTvQff5lbRd6gvgUGQFyVa5zIaiWnoZ+QzWF0pFG LsfHeaLMCtF3F4Eq4Q6S1yTwoe+7I8bhT9zLwWwpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsAq3LSsa1GT+lp+gD5ipbLaoU0cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YxNTM5NzkzLTU3ZjctNDYwYS05MWUxLWZiNGI1YjBiZDdiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUjJ2AwDQYJKoZIhvcNAQELBQADggEBADL0HKAogedl3Wow55F/YV8Zt06T JREbLSss8NP8QriMaBA0xgjgSffvhed+B3G9ScF8NildE3FLlvYI8dNNA3IR3SxO hTQgoRV6dnDp5Z9LER4cwiABhckeX9laLCgL4zt3yy01cTq045lA4KfmfF6S0Vqt fLb+4pjWiRGUJsRIX5aU5XuwGXnkYp3gdsPA7M/E9U3e19e/EHMp58tylypVQMwM lZr6wERYqDBZXHSqwJ8Xt4vm/9321QivnKwSQxHCc9Q06XVtGrS1Wsc9qcbgzwtc BuOVU+Rz0r6d+2RRxsnAsuY3iLjG891BfqOdWc+wTtiFp1B3fsQtDKgdmPk= -----END CERTIFICATE-----Generated at Thu May 2 11:33:27 2024 by rpki-client on console-fra.rpki-client.org