$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f46bbda-627c-4d22-9f8c-ea240e6ec04b.roa File: 5f46bbda-627c-4d22-9f8c-ea240e6ec04b.roa (raw, json) Hash identifier: xL/rugAIr8e7+vScHM7FwuZlgU7cbSx6VaYtDdDq9gA= Subject key identifier: A3:37:5C:08:F3:B0:F0:8D:A7:62:68:AB:BA:E1:E4:74:E1:1F:C5:D2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 44DAD58C10537EBE0AA7149A95B2D73AE764AB87 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f46bbda-627c-4d22-9f8c-ea240e6ec04b.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 16.112.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:da:d5:8c:10:53:7e:be:0a:a7:14:9a:95:b2:d7:3a:e7:64:ab:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=bfd1acb557f92d3238681ff80bfd26da2614d12bbfcd4ea90a6dbc31b7f82e1e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:24:12:fa:0c:ff:f3:ef:41:14:0f:98:f9:de: c3:2f:11:b8:ab:8d:a9:44:0a:59:dd:5c:6c:a6:99: 7b:a3:0c:de:0b:2e:60:75:51:bb:a1:d6:dc:4d:df: 2f:f4:c3:6f:a1:9a:38:94:63:1a:06:7c:35:1a:97: cb:b3:61:07:3e:fd:37:7d:78:80:97:0a:99:5c:64: 61:f2:f1:25:9b:0d:a3:c1:a6:fa:99:dd:61:c7:62: 72:ea:9c:ca:d7:fd:44:41:82:94:6a:0b:5d:5d:19: 4c:8f:19:83:bf:b1:91:98:d5:1f:61:8a:69:64:20: e6:a8:09:a6:cd:ac:a7:8e:cf:e3:2b:52:46:f6:d0: b9:23:76:5c:c1:05:4f:4c:b8:a1:2e:f4:cc:a7:7c: 26:bb:f2:d5:0a:24:10:83:65:91:f9:95:26:60:11: 48:d1:71:53:6f:39:7f:9a:77:be:f8:2a:33:72:18: a7:e2:c8:28:ee:36:5f:fd:0d:b7:c6:3b:c4:55:d7: d0:9e:66:d7:11:3a:43:78:60:21:66:31:a2:03:67: e9:11:36:0c:6f:f6:cf:ab:fd:e4:51:af:77:7d:ed: 4c:61:c2:ce:ce:d2:99:2f:6a:31:05:1a:cf:4f:04: 65:80:ba:5c:4b:ee:ce:a2:44:2e:33:4b:2b:ab:b7: dc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:37:5C:08:F3:B0:F0:8D:A7:62:68:AB:BA:E1:E4:74:E1:1F:C5:D2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f46bbda-627c-4d22-9f8c-ea240e6ec04b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.112.0.0/16 Signature Algorithm: sha256WithRSAEncryption 00:c9:15:c0:ce:1a:7b:2c:f8:fe:20:73:3c:cb:90:69:98:18: 9b:8f:fd:fd:4c:02:f8:c7:cd:b7:e9:ac:62:96:c3:e8:72:a0: d0:d6:f7:76:cc:35:87:17:72:8e:62:1e:9f:ca:18:9d:b1:b4: 23:ee:6f:0d:f3:6f:77:36:c9:eb:94:49:69:fa:f9:37:25:e1: 94:48:cc:88:1c:30:5b:a8:d6:46:d0:27:fe:61:e9:4d:c8:98: a5:0a:f4:9a:0e:38:7a:22:d9:af:10:dd:53:e7:81:1b:e9:e3: f4:ac:f0:fc:11:b8:02:52:69:d8:c7:3b:e4:45:6a:54:1a:48: f7:1c:0a:db:c0:88:f9:e4:54:d7:67:23:90:a0:e7:2a:c0:d7: e0:28:35:70:78:d6:65:d8:51:67:7d:33:ba:05:b6:54:1d:bc: e6:66:d5:b2:49:75:a2:e0:f4:7c:54:fd:24:76:62:2d:f9:20: 22:5e:1e:1d:f0:f2:1c:1a:eb:41:e6:96:f0:53:6e:26:55:de: a3:ee:b5:80:1a:44:a8:23:20:96:71:6f:16:c5:af:ea:55:c8: e5:83:65:bc:8d:2d:e9:d0:59:c0:01:96:6a:f4:75:9e:d2:ac: dc:ff:51:c5:f0:18:b1:d1:78:36:b0:c2:7d:db:47:2e:5b:87: e8:b9:00:ea -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURNrVjBBTfr4KpxSalbLXOudkq4cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZmQxYWNiNTU3ZjkyZDMyMzg2ODFmZjgwYmZkMjZkYTI2 MTRkMTJiYmZjZDRlYTkwYTZkYmMzMWI3ZjgyZTFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFJBL6DP/z70EUD5j53sMvEbirjalEClndXGymmXujDN4L LmB1Ubuh1txN3y/0w2+hmjiUYxoGfDUal8uzYQc+/Td9eICXCplcZGHy8SWbDaPB pvqZ3WHHYnLqnMrX/URBgpRqC11dGUyPGYO/sZGY1R9himlkIOaoCabNrKeOz+Mr Ukb20LkjdlzBBU9MuKEu9MynfCa78tUKJBCDZZH5lSZgEUjRcVNvOX+ad774KjNy GKfiyCjuNl/9DbfGO8RV19CeZtcROkN4YCFmMaIDZ+kRNgxv9s+r/eRRr3d97Uxh ws7O0pkvajEFGs9PBGWAulxL7s6iRC4zSyurt9wLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUozdcCPOw8I2nYmiruuHkdOEfxdIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVmNDZiYmRhLTYyN2MtNGQyMi05ZjhjLWVhMjQwZTZlYzA0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQcDANBgkqhkiG9w0BAQsFAAOCAQEAAMkVwM4aeyz4/iBzPMuQaZgYm4/9 /UwC+MfNt+msYpbD6HKg0Nb3dsw1hxdyjmIen8oYnbG0I+5vDfNvdzbJ65RJafr5 NyXhlEjMiBwwW6jWRtAn/mHpTciYpQr0mg44eiLZrxDdU+eBG+nj9Kzw/BG4AlJp 2Mc75EVqVBpI9xwK28CI+eRU12cjkKDnKsDX4Cg1cHjWZdhRZ30zugW2VB285mbV skl1ouD0fFT9JHZiLfkgIl4eHfDyHBrrQeaW8FNuJlXeo+61gBpEqCMglnFvFsWv 6lXI5YNlvI0t6dBZwAGWavR1ntKs3P9RxfAYsdF4NrDCfdtHLluH6LkA6g== -----END CERTIFICATE-----Generated at Mon May 6 00:48:46 2024 by rpki-client on console-fra.rpki-client.org