$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22397cac-406e-4c89-85e5-b4a29edd8651.roa File: 22397cac-406e-4c89-85e5-b4a29edd8651.roa (raw, json) Hash identifier: zfsDqFX0s8ASIRplNAirtMzauxy2RBgmY/k2EOJXYRA= Subject key identifier: C9:6C:76:8B:B1:76:6E:F0:FE:31:CF:2C:14:CE:C7:E4:0F:5B:6B:9A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65212F34387390BCECE67C3EEC23A52C63E889FB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22397cac-406e-4c89-85e5-b4a29edd8651.roa Signing time: Sat 04 May 2024 00:00:00 +0000 ROA not before: Sat 04 May 2024 00:00:00 +0000 ROA not after: Sat 08 Jun 2024 23:59:59 +0000 asID: 14618 IP address blocks: 54.25.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:21:2f:34:38:73:90:bc:ec:e6:7c:3e:ec:23:a5:2c:63:e8:89:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 00:00:00 2024 GMT Not After : Jun 8 23:59:59 2024 GMT Subject: serialNumber=018f77f538d519f98b47194e7d0689385213749e7512f7d9d766725d2e325911, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:06:b8:01:7f:3b:ea:09:5e:f7:d8:69:eb:b4: 6d:6b:d8:44:69:ef:4d:b5:89:d9:4f:86:c5:c6:60: f7:9a:bb:fa:a5:cf:8b:4d:b0:df:84:79:ff:cd:5c: 3b:51:fa:fc:24:20:a6:59:db:bc:0c:65:d5:72:dc: f5:70:4f:da:0f:d8:af:68:2b:30:72:49:80:ea:47: 90:a9:a1:a4:e2:59:55:8f:50:56:8c:fd:0a:be:1a: c0:ba:e7:ea:59:0d:ee:37:fd:d5:d5:8f:ad:1e:7c: 9a:cb:b9:3a:2d:da:8a:d1:08:56:45:2c:1c:54:44: 5a:1b:b5:a5:00:ff:ba:c0:24:1e:aa:1f:62:71:42: 2a:29:9a:09:c7:1d:f8:22:69:5e:c3:37:8a:23:30: 19:92:86:cb:f8:32:9e:65:eb:d7:64:b5:1d:ed:f8: 4f:af:61:17:e5:01:49:54:ff:63:25:cd:8a:ec:e2: 25:fb:1e:c6:3e:d8:38:7e:61:36:54:05:c2:eb:33: a7:df:2c:a4:fc:35:ba:40:d0:11:11:d6:1a:61:9e: 86:0e:bb:33:3c:54:76:db:15:0f:5f:0e:b2:89:6d: 0d:f7:d9:f9:0a:8d:de:20:fd:9f:5c:ca:cd:c7:f7: d9:2e:7b:d5:a1:3c:17:13:f5:2d:3a:fc:11:25:1b: 89:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6C:76:8B:B1:76:6E:F0:FE:31:CF:2C:14:CE:C7:E4:0F:5B:6B:9A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22397cac-406e-4c89-85e5-b4a29edd8651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.25.15.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:8c:8a:62:ee:43:20:ec:07:f1:83:8c:16:7c:5b:d4:1d:66: c0:c0:6e:4c:b1:1b:f0:98:1f:a3:cb:2c:5b:30:ea:c8:93:41: 22:1c:93:c1:96:0d:e3:9f:fa:df:87:84:8c:e8:6f:9d:e5:0e: bf:a7:14:64:ea:97:85:86:37:c3:4b:5f:9a:55:66:23:fa:45: 48:20:54:be:a6:f7:14:d9:ea:5c:d7:b0:0b:0f:03:cb:c1:c7: 5d:f7:dd:9c:a7:eb:b2:b8:c4:82:0f:96:fd:8d:11:34:49:4f: 06:d4:0f:2b:5e:6e:e0:0a:f9:a8:8f:39:41:c3:67:1f:3a:cf: a8:70:a3:f3:cb:0a:28:c4:1c:da:3b:05:18:23:bc:b9:be:3d: 2c:c5:71:94:c8:d3:86:18:fd:17:94:fb:48:10:5a:2d:22:df: 7b:e4:0f:a3:7c:92:7a:05:6a:8e:d7:4d:fd:56:68:3a:62:53: e3:13:de:7f:bb:43:cf:91:6f:9d:6a:61:4f:da:2a:ab:b4:19: 9a:5d:5f:a9:12:54:e7:84:06:95:21:9d:a3:72:34:1d:79:9b: 64:2e:01:58:ce:97:f2:da:d2:73:dc:d9:84:54:88:48:3c:a6: 71:c4:fa:0e:72:f5:95:48:3f:c4:1e:c3:e8:f1:55:44:b1:c2: 6c:e2:d4:c1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZSEvNDhzkLzs5nw+7COlLGPoifswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTA0MDAwMDAwWhcNMjQwNjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMThmNzdmNTM4ZDUxOWY5OGI0NzE5NGU3ZDA2ODkzODUy MTM3NDllNzUxMmY3ZDlkNzY2NzI1ZDJlMzI1OTExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhBrgBfzvqCV732GnrtG1r2ERp7021idlPhsXGYPeau/ql z4tNsN+Eef/NXDtR+vwkIKZZ27wMZdVy3PVwT9oP2K9oKzBySYDqR5CpoaTiWVWP UFaM/Qq+GsC65+pZDe43/dXVj60efJrLuTot2orRCFZFLBxURFobtaUA/7rAJB6q H2JxQiopmgnHHfgiaV7DN4ojMBmShsv4Mp5l69dktR3t+E+vYRflAUlU/2MlzYrs 4iX7HsY+2Dh+YTZUBcLrM6ffLKT8NbpA0BER1hphnoYOuzM8VHbbFQ9fDrKJbQ33 2fkKjd4g/Z9cys3H99kue9WhPBcT9S06/BElG4nJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyWx2i7F2bvD+Mc8sFM7H5A9ba5owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyMzk3Y2FjLTQwNmUtNGM4OS04NWU1LWI0YTI5ZWRkODY1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2GQ8wDQYJKoZIhvcNAQELBQADggEBAFyMimLuQyDsB/GDjBZ8W9QdZsDA bkyxG/CYH6PLLFsw6siTQSIck8GWDeOf+t+HhIzob53lDr+nFGTql4WGN8NLX5pV ZiP6RUggVL6m9xTZ6lzXsAsPA8vBx1333Zyn67K4xIIPlv2NETRJTwbUDytebuAK +aiPOUHDZx86z6hwo/PLCijEHNo7BRgjvLm+PSzFcZTI04YY/ReU+0gQWi0i33vk D6N8knoFao7XTf1WaDpiU+MT3n+7Q8+Rb51qYU/aKqu0GZpdX6kSVOeEBpUhnaNy NB15m2QuAVjOl/La0nPc2YRUiEg8pnHE+g5y9ZVIP8Qew+jxVUSxwmzi1ME= -----END CERTIFICATE-----Generated at Mon May 6 00:46:47 2024 by rpki-client on console-ams.rpki-client.org