$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa68d5c0-4b41-46d8-bffd-56f22d919e1c.roa File: fa68d5c0-4b41-46d8-bffd-56f22d919e1c.roa (raw, json) Hash identifier: QmVSNHRFveIeTTHJQubMFJ9SElmxxMMM+RDAnyz15EQ= Subject key identifier: 51:27:F6:83:8E:FB:89:E2:0D:9F:32:2A:2A:8C:E2:5F:58:16:31:34 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 06DCE147A112731FD95E2DB73AB85D87E11BCADD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa68d5c0-4b41-46d8-bffd-56f22d919e1c.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 208.86.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:dc:e1:47:a1:12:73:1f:d9:5e:2d:b7:3a:b8:5d:87:e1:1b:ca:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=f6a45228fc0a2df8e2d9333008c06ccbc4f0715172f2750f1ccccd701e44ac21, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c1:ad:12:16:38:61:26:15:ea:e7:c8:a0:4f: 32:bb:e0:13:9c:8d:a2:72:9a:96:5f:4b:0e:91:8e: 8f:7b:76:dc:d4:b4:41:89:63:e4:a4:a1:a1:41:fc: af:21:d4:74:57:d6:4e:b7:e6:46:d6:7e:55:6b:98: 18:fc:07:1e:e4:bb:d9:4a:b5:60:5d:09:5e:21:ec: dd:c1:a0:e2:70:e3:23:c4:3d:3c:d2:16:8a:95:96: 82:80:97:58:0d:5b:e7:55:33:94:2c:b1:46:84:e3: c0:19:96:0c:d8:7f:41:07:60:5d:5d:54:f1:d7:78: 02:e7:fe:6f:09:72:17:d7:31:d6:4e:c9:aa:3c:65: 2d:67:d9:14:39:12:e1:24:57:a6:df:30:62:97:87: d4:3f:9f:92:1d:a9:94:86:61:c5:8f:cb:04:53:96: db:44:66:34:c3:3b:d6:ec:cf:d8:59:42:30:c5:bf: 8e:22:83:33:46:ba:e2:94:c8:2f:04:d5:3f:68:c7: 91:35:89:c8:e9:ab:ff:53:35:0f:45:d5:9e:f4:f7: b6:5b:d7:c8:b7:1e:35:ab:8f:a1:ef:38:54:2d:5a: be:43:7f:21:67:77:c6:a3:e9:93:81:55:f0:31:78: c0:12:37:e4:1f:37:51:33:e0:d4:20:3e:03:9f:42: 79:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:27:F6:83:8E:FB:89:E2:0D:9F:32:2A:2A:8C:E2:5F:58:16:31:34 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa68d5c0-4b41-46d8-bffd-56f22d919e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.86.88.0/22 Signature Algorithm: sha256WithRSAEncryption b1:3b:6b:83:60:ff:e4:d2:76:a7:70:00:41:84:13:6d:31:8a: 84:53:72:27:8a:ac:25:5b:d0:3a:65:3b:10:05:cd:56:f7:0a: 0f:f6:55:6f:f1:ca:3f:31:5c:3c:7d:f8:89:ea:a8:22:64:f9: c3:2b:01:6a:81:14:5d:90:dc:b6:2c:36:4c:8c:ba:c6:8d:db: b6:4c:cf:a8:4e:46:f5:f7:55:b6:ed:aa:d0:fb:7e:d5:95:8c: 2b:94:40:3b:b8:bd:20:24:17:ee:00:d7:22:51:3d:31:28:b2: a8:60:43:0e:2c:a1:a6:3a:38:16:1d:41:08:e8:e1:80:c1:2d: b5:8f:92:dd:33:e8:e5:23:01:d2:c8:20:0f:5b:c6:7d:f0:ab: b2:af:31:7d:ca:58:8d:fc:19:a8:ab:9d:26:c3:39:40:5b:25: f7:d7:f1:bf:e1:0e:5e:6b:e9:d1:b2:3e:37:09:d7:51:e1:d6: 51:b5:70:2c:79:eb:9a:50:db:02:a4:a9:1e:0f:a7:50:63:42: 86:b8:7b:10:7e:64:57:9c:50:c0:cd:28:f0:05:63:eb:6a:37: a9:b4:40:d1:5a:3d:26:86:c3:8c:87:92:ba:83:01:83:49:00: d6:76:58:72:27:d2:35:43:9b:af:0e:62:90:2e:da:5b:2b:a7: 03:ba:5f:68 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBtzhR6EScx/ZXi23Orhdh+Ebyt0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNmE0NTIyOGZjMGEyZGY4ZTJkOTMzMzAwOGMwNmNjYmM0 ZjA3MTUxNzJmMjc1MGYxY2NjY2Q3MDFlNDRhYzIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLwa0SFjhhJhXq58igTzK74BOcjaJympZfSw6Rjo97dtzU tEGJY+SkoaFB/K8h1HRX1k635kbWflVrmBj8Bx7ku9lKtWBdCV4h7N3BoOJw4yPE PTzSFoqVloKAl1gNW+dVM5QssUaE48AZlgzYf0EHYF1dVPHXeALn/m8JchfXMdZO yao8ZS1n2RQ5EuEkV6bfMGKXh9Q/n5IdqZSGYcWPywRTlttEZjTDO9bsz9hZQjDF v44igzNGuuKUyC8E1T9ox5E1icjpq/9TNQ9F1Z7097Zb18i3HjWrj6HvOFQtWr5D fyFnd8aj6ZOBVfAxeMASN+QfN1Ez4NQgPgOfQnnRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUSf2g477ieINnzIqKoziX1gWMTQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZhNjhkNWMwLTRiNDEtNDZkOC1iZmZkLTU2ZjIyZDkxOWUxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALQVlgwDQYJKoZIhvcNAQELBQADggEBALE7a4Ng/+TSdqdwAEGEE20xioRT cieKrCVb0DplOxAFzVb3Cg/2VW/xyj8xXDx9+InqqCJk+cMrAWqBFF2Q3LYsNkyM usaN27ZMz6hORvX3VbbtqtD7ftWVjCuUQDu4vSAkF+4A1yJRPTEosqhgQw4soaY6 OBYdQQjo4YDBLbWPkt0z6OUjAdLIIA9bxn3wq7KvMX3KWI38GairnSbDOUBbJffX 8b/hDl5r6dGyPjcJ11Hh1lG1cCx565pQ2wKkqR4Pp1BjQoa4exB+ZFecUMDNKPAF Y+tqN6m0QNFaPSaGw4yHkrqDAYNJANZ2WHIn0jVDm68OYpAu2lsrpwO6X2g= -----END CERTIFICATE-----Generated at Sat Apr 20 03:56:50 2024 by rpki-client on console-fra.rpki-client.org