$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0db0b14c-a7aa-428b-966f-3b4091f7f54b.roa File: 0db0b14c-a7aa-428b-966f-3b4091f7f54b.roa (raw, json) Hash identifier: wxk1yBwLKQG9gGe95BIVesImdObtvV6vR7t8cQAFTxI= Subject key identifier: DB:31:CC:8D:7B:AB:8C:2C:F8:B2:CB:BE:A8:74:FB:4A:BF:7F:28:18 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 558E785EF143134E84FF9EFDE3853EC0B8C30408 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0db0b14c-a7aa-428b-966f-3b4091f7f54b.roa Signing time: Fri 10 May 2024 00:00:00 +0000 ROA not before: Fri 10 May 2024 00:00:00 +0000 ROA not after: Fri 14 Jun 2024 23:59:59 +0000 asID: 8987 IP address blocks: 16.185.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:8e:78:5e:f1:43:13:4e:84:ff:9e:fd:e3:85:3e:c0:b8:c3:04:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:00:00 2024 GMT Not After : Jun 14 23:59:59 2024 GMT Subject: serialNumber=875940a2f2c2ead5a6cebad9b1aa1d870b6a0fa659790f13c06ce931b3ee873e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:48:ad:6d:6a:73:c7:c3:07:a2:2d:b6:87: 4e:f4:a2:21:13:37:3e:b1:62:78:54:9e:d3:74:6f: b0:ce:6a:27:4c:d3:2f:3b:0f:4d:42:c2:bb:84:c8: 4e:9a:fc:3e:e1:ab:40:ed:9d:fc:22:b1:a6:0d:7a: e3:d1:54:1a:89:f6:e8:9d:8b:88:ef:6d:70:a9:6e: a7:6d:4a:60:3a:7a:25:89:5a:ec:0b:c3:3b:d5:d6: 41:0d:74:50:f2:ff:4c:4b:c4:ed:68:5c:1b:f7:90: 70:be:5f:c2:1a:3a:04:da:85:42:5a:70:c4:ad:64: f5:00:a9:28:97:23:d4:f6:17:23:f0:e4:49:77:70: 2f:6e:f3:39:dc:96:df:85:14:bb:ed:fb:45:31:77: 83:62:12:52:2e:cd:6a:37:85:d3:ac:4c:51:3d:d6: de:9c:fc:81:37:dc:20:06:d8:8a:14:21:f0:af:db: 49:5d:c3:54:99:37:4a:03:da:19:dd:9c:51:16:75: 80:a1:dd:cd:c1:67:10:9b:df:cd:f0:65:ba:ab:a0: dd:dc:2e:a4:c6:d3:f9:44:c3:5d:d6:0b:31:8d:f8: b4:d8:3e:e2:00:1d:61:dc:7e:e2:e0:45:5a:bf:a8: e1:cd:ee:30:be:d3:41:48:44:95:be:b5:a8:e7:33: 87:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:31:CC:8D:7B:AB:8C:2C:F8:B2:CB:BE:A8:74:FB:4A:BF:7F:28:18 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0db0b14c-a7aa-428b-966f-3b4091f7f54b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.185.0.0/16 Signature Algorithm: sha256WithRSAEncryption 47:71:b9:3e:50:a8:f2:31:7a:40:fe:7d:08:97:a9:34:ca:68: b7:ac:76:b9:f3:6f:e4:e4:2f:5c:df:05:ea:7f:c2:2b:a2:63: fe:b3:94:38:6f:39:40:a0:b6:90:f9:69:8d:9e:76:30:71:0d: b5:ac:d5:47:2b:b1:cf:6f:f4:7d:58:69:bc:af:9a:3d:7c:bc: 6d:28:50:7e:4b:77:da:2b:98:9c:14:96:b7:ed:cf:4b:94:4b: e4:23:f7:75:ae:23:56:62:90:b9:11:c4:40:34:08:fe:09:41: a2:a0:68:dc:41:e6:1d:0c:64:a5:74:14:37:88:a8:e8:1a:cf: 66:4b:34:f7:dd:6c:0c:4f:4f:a4:40:89:be:38:c5:9b:03:2e: 40:25:ca:0e:77:b2:9a:b2:a0:3f:06:42:05:f3:17:b4:b6:fb: a7:b7:c8:14:93:66:d8:0e:fb:cc:f6:4e:9b:fa:85:d3:10:26: a9:be:61:31:0e:d7:f8:a3:1a:0a:b0:7f:2f:3e:3c:3e:02:09: 69:d3:65:ad:fa:5b:44:2d:f9:3d:41:78:72:0c:d2:a1:fb:8e: 71:46:f4:39:d3:6c:98:20:9a:53:0b:82:69:00:9a:a7:ae:7d: 99:7d:79:4a:60:c6:e9:af:c0:81:5e:45:f3:b3:e6:a4:3d:f4: 1f:01:c1:d5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVY54XvFDE06E/57944U+wLjDBAgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTEwMDAwMDAwWhcNMjQwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NzU5NDBhMmYyYzJlYWQ1YTZjZWJhZDliMWFhMWQ4NzBi NmEwZmE2NTk3OTBmMTNjMDZjZTkzMWIzZWU4NzNlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCk+0itbWpzx8MHoi22h070oiETNz6xYnhUntN0b7DOaidM 0y87D01CwruEyE6a/D7hq0DtnfwisaYNeuPRVBqJ9uidi4jvbXCpbqdtSmA6eiWJ WuwLwzvV1kENdFDy/0xLxO1oXBv3kHC+X8IaOgTahUJacMStZPUAqSiXI9T2FyPw 5El3cC9u8znclt+FFLvt+0Uxd4NiElIuzWo3hdOsTFE91t6c/IE33CAG2IoUIfCv 20ldw1SZN0oD2hndnFEWdYCh3c3BZxCb383wZbqroN3cLqTG0/lEw13WCzGN+LTY PuIAHWHcfuLgRVq/qOHN7jC+00FIRJW+tajnM4c3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU2zHMjXurjCz4ssu+qHT7Sr9/KBgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBkYjBiMTRjLWE3YWEtNDI4Yi05NjZmLTNiNDA5MWY3ZjU0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQuTANBgkqhkiG9w0BAQsFAAOCAQEAR3G5PlCo8jF6QP59CJepNMpot6x2 ufNv5OQvXN8F6n/CK6Jj/rOUOG85QKC2kPlpjZ52MHENtazVRyuxz2/0fVhpvK+a PXy8bShQfkt32iuYnBSWt+3PS5RL5CP3da4jVmKQuRHEQDQI/glBoqBo3EHmHQxk pXQUN4io6BrPZks0991sDE9PpECJvjjFmwMuQCXKDneymrKgPwZCBfMXtLb7p7fI FJNm2A77zPZOm/qF0xAmqb5hMQ7X+KMaCrB/Lz48PgIJadNlrfpbRC35PUF4cgzS ofuOcUb0OdNsmCCaUwuCaQCap659mX15SmDG6a/AgV5F87PmpD30HwHB1Q== -----END CERTIFICATE-----Generated at Sun Jun 2 02:06:45 2024 by rpki-client on console-fra.rpki-client.org