$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5f0c1cf-2889-4c7c-96c7-06ec497306e4.roa File: f5f0c1cf-2889-4c7c-96c7-06ec497306e4.roa (raw, json) Hash identifier: fwT+WldE7qErBhXXvb/c360G5QgZ0IQsuluAprNoSNI= Subject key identifier: EE:CA:EA:45:01:72:69:A9:66:BB:36:3F:2A:E1:09:87:13:9E:CC:7F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 67CF854A7EF45A8CC43A0DDAC741BB658CF8932B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5f0c1cf-2889-4c7c-96c7-06ec497306e4.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 66.201.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:cf:85:4a:7e:f4:5a:8c:c4:3a:0d:da:c7:41:bb:65:8c:f8:93:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=fc4456bf18411cf690ef1d392025e26ed303da0791bb40e6df405fe41fc299f5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6b:14:48:43:c9:f8:83:70:a8:b7:5a:bf:e4: 45:76:e2:93:89:d8:da:61:8c:17:0d:19:8a:74:78: 79:e5:8f:2f:dc:57:9f:f1:c0:32:5d:d2:63:d0:31: 97:15:85:92:b5:51:7e:76:e7:e3:c5:aa:b3:0e:08: 5e:da:f4:4e:54:4a:15:67:2c:75:28:12:26:66:9e: 2e:57:2b:27:21:8a:5b:4d:40:d8:40:b3:9b:36:26: 13:ca:30:2f:d3:d5:50:f1:01:44:ff:cb:27:cc:c8: 17:e2:7e:4c:e4:5c:41:fe:4f:e2:86:07:02:90:c1: 3a:95:60:aa:d7:d4:6c:44:11:70:7d:bb:23:56:ce: 06:2f:4a:6f:98:db:0b:f4:5c:7c:6d:0a:df:89:9d: ca:de:67:d4:d7:01:a4:83:4e:95:79:05:cc:d3:1a: 9b:b8:e3:f7:00:67:eb:b8:bb:e7:18:97:f1:cf:db: 6b:d7:73:e8:b0:f8:ed:7d:4a:16:9c:2c:fc:d0:83: 87:a2:48:da:11:b7:0b:1c:c6:0f:b7:0f:db:3c:76: fb:9a:0f:1b:f5:31:86:e1:72:4f:6d:99:12:e7:02: 72:a0:d6:2e:f6:01:f5:13:e6:06:99:1f:b6:03:3f: f8:e7:7b:04:9d:fb:6e:13:90:dc:48:f7:10:bb:13: 75:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CA:EA:45:01:72:69:A9:66:BB:36:3F:2A:E1:09:87:13:9E:CC:7F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5f0c1cf-2889-4c7c-96c7-06ec497306e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.201.64.0/18 Signature Algorithm: sha256WithRSAEncryption 82:43:c3:86:e0:f5:75:95:73:86:b1:34:bc:fd:b4:ad:d9:ef: 7e:26:07:67:64:d5:0b:c9:44:6b:2c:d5:58:90:b0:1a:69:e6: 7c:89:b1:8a:37:7f:36:78:26:73:3b:04:05:42:dc:c5:59:8f: f1:9b:93:4d:b8:c2:83:9a:ec:c3:bb:e8:12:fc:80:07:1f:dd: 8d:e6:07:f0:8b:0e:d1:9f:1f:fb:1b:06:05:fe:8a:de:8e:6f: 23:76:ee:d9:dc:39:5c:39:c3:d2:02:b9:c2:3d:02:f0:56:db: 15:8b:fa:3b:48:48:3c:a9:1a:dd:be:f2:f7:23:14:4c:80:4a: 92:cc:65:72:43:29:19:05:4d:d3:bb:75:00:f5:6b:d8:93:2e: aa:76:ed:e1:a9:16:7e:34:70:11:ab:d3:f1:9f:e2:13:77:d0: 73:ad:a9:0b:b2:8d:25:69:ad:96:f5:a0:45:6e:7f:c6:a0:e3: e0:7f:d9:74:fe:3d:99:a2:f5:0e:0f:bc:f7:85:96:95:0d:a1: 52:68:9f:8e:f7:e5:f4:c7:a9:a3:a4:f0:c6:b9:24:33:44:0d: 5e:10:fe:93:e4:29:c1:0f:f9:bd:58:82:3c:d9:26:df:04:64: 25:d2:85:52:ff:28:3e:87:9a:88:3a:69:7f:0d:ec:19:b1:b2: 34:72:a3:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ8+FSn70WozEOg3ax0G7ZYz4kyswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzQ0NTZiZjE4NDExY2Y2OTBlZjFkMzkyMDI1ZTI2ZWQz MDNkYTA3OTFiYjQwZTZkZjQwNWZlNDFmYzI5OWY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6axRIQ8n4g3Cot1q/5EV24pOJ2NphjBcNGYp0eHnljy/c V5/xwDJd0mPQMZcVhZK1UX525+PFqrMOCF7a9E5UShVnLHUoEiZmni5XKychiltN QNhAs5s2JhPKMC/T1VDxAUT/yyfMyBfifkzkXEH+T+KGBwKQwTqVYKrX1GxEEXB9 uyNWzgYvSm+Y2wv0XHxtCt+JncreZ9TXAaSDTpV5BczTGpu44/cAZ+u4u+cYl/HP 22vXc+iw+O19ShacLPzQg4eiSNoRtwscxg+3D9s8dvuaDxv1MYbhck9tmRLnAnKg 1i72AfUT5gaZH7YDP/jnewSd+24TkNxI9xC7E3VNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7srqRQFyaalmuzY/KuEJhxOezH8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y1ZjBjMWNmLTI4ODktNGM3Yy05NmM3LTA2ZWM0OTczMDZlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZCyUAwDQYJKoZIhvcNAQELBQADggEBAIJDw4bg9XWVc4axNLz9tK3Z734m B2dk1QvJRGss1ViQsBpp5nyJsYo3fzZ4JnM7BAVC3MVZj/Gbk024woOa7MO76BL8 gAcf3Y3mB/CLDtGfH/sbBgX+it6ObyN27tncOVw5w9ICucI9AvBW2xWL+jtISDyp Gt2+8vcjFEyASpLMZXJDKRkFTdO7dQD1a9iTLqp27eGpFn40cBGr0/Gf4hN30HOt qQuyjSVprZb1oEVuf8ag4+B/2XT+PZmi9Q4PvPeFlpUNoVJon4735fTHqaOk8Ma5 JDNEDV4Q/pPkKcEP+b1YgjzZJt8EZCXShVL/KD6Hmog6aX8N7BmxsjRyow0= -----END CERTIFICATE-----Generated at Thu May 9 15:20:01 2024 by rpki-client on console-fra.rpki-client.org