$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c91a0608-8034-4006-ab7a-ad92e57f3cf9.roa File: c91a0608-8034-4006-ab7a-ad92e57f3cf9.roa (raw, json) Hash identifier: CUkqTyKVn2BdyHHk9zbWx/Gv243I6oB6SP53ikFYxFo= Subject key identifier: 11:F9:F1:E3:00:5C:E6:28:21:FB:F0:95:38:2D:72:5E:F3:F1:E4:A3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 018585F04B335F7AC8415307504349CD8DAA30F4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c91a0608-8034-4006-ab7a-ad92e57f3cf9.roa Signing time: Sat 11 May 2024 00:00:00 +0000 ROA not before: Sat 11 May 2024 00:00:00 +0000 ROA not after: Sat 15 Jun 2024 23:59:59 +0000 asID: 8987 IP address blocks: 57.251.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:85:85:f0:4b:33:5f:7a:c8:41:53:07:50:43:49:cd:8d:aa:30:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 11 00:00:00 2024 GMT Not After : Jun 15 23:59:59 2024 GMT Subject: serialNumber=fa0a1d8e8aba3af0ced0976a9ec6bc985354226c63459bf61154ea769f8ba333, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:00:30:61:e6:a2:c5:12:97:65:7b:f1:33:cd: cf:d8:b2:14:17:60:9c:d8:fc:b4:db:91:d6:46:2a: bf:fc:09:4c:d5:1d:19:d9:27:87:18:eb:eb:fa:40: 58:88:ad:1e:d1:33:54:5d:3b:07:bc:84:e9:58:68: 55:a8:0b:18:ce:3a:2a:5d:2a:ba:46:c5:dd:82:78: 09:24:69:7e:2a:e1:3a:f7:94:dc:bd:dc:6c:4a:32: ef:49:11:89:8e:67:7b:d2:3a:a4:88:8d:38:44:35: 41:25:54:f8:fe:95:41:7f:d6:ca:9b:2a:d3:a5:d9: 5c:08:de:00:f5:28:f0:99:15:d6:89:73:b9:cd:6f: 3e:d9:e6:9e:8b:ae:5b:f3:27:7e:01:91:94:be:22: d6:b5:e4:52:b5:52:3c:63:58:5a:59:70:85:90:cb: 97:95:53:40:6d:32:ae:5f:95:cf:68:5b:65:c7:9a: 56:45:63:7c:5e:33:da:27:35:53:54:aa:8c:a9:6e: fd:bc:27:14:da:b1:56:d2:2d:1f:5e:7d:8c:1e:63: 2e:bc:cf:2b:97:38:f3:2a:03:0d:ae:d8:5f:d4:3f: be:65:96:c1:35:af:f7:81:56:99:72:2b:e0:8f:a0: 35:e3:d6:16:ce:c5:23:60:40:46:df:65:4a:4c:eb: ba:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F9:F1:E3:00:5C:E6:28:21:FB:F0:95:38:2D:72:5E:F3:F1:E4:A3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c91a0608-8034-4006-ab7a-ad92e57f3cf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.251.0.0/16 Signature Algorithm: sha256WithRSAEncryption 36:8f:d3:99:bc:9b:a3:db:3c:0f:df:4a:a4:01:9b:e7:2d:72: 3c:5c:24:a3:c1:06:37:6e:61:50:a0:f9:64:22:e7:03:9e:e6: bd:90:ac:ff:12:fc:25:20:b4:36:10:69:00:b8:32:65:e5:2e: 89:4e:c0:6e:c8:2d:f2:18:9a:72:a8:48:de:80:45:9c:71:04: 18:1a:1b:61:26:03:0c:88:ab:8b:b8:77:6c:53:9c:3e:54:e9: 76:5b:40:49:fc:8a:c9:a8:ed:aa:44:ac:3f:6a:a1:29:c9:59: 41:7e:98:2e:f8:7b:6c:75:67:c8:94:cf:00:9c:c1:7d:4f:02: 36:54:ce:87:4d:59:af:83:82:c3:93:58:ba:ca:24:d6:19:8c: f3:39:e3:b2:72:b1:be:42:c2:75:e7:8e:e2:f8:67:4c:0a:22: 64:25:67:56:a3:eb:c4:d3:2e:7b:4c:3b:5d:9a:ff:c5:7b:df: 60:0b:21:76:66:3b:db:f3:e3:24:08:3d:1e:81:79:83:2c:56: 5a:79:5b:37:97:9f:08:13:de:77:aa:a6:e0:1b:1b:39:cc:74: eb:fa:28:56:85:35:6d:6e:49:e2:5c:a1:ca:7c:0f:00:eb:e7: 84:b2:87:a9:50:68:96:71:d9:46:fc:e3:26:2c:67:6f:e5:4a: 19:d7:63:ca -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAYWF8EszX3rIQVMHUENJzY2qMPQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTExMDAwMDAwWhcNMjQwNjE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTBhMWQ4ZThhYmEzYWYwY2VkMDk3NmE5ZWM2YmM5ODUz NTQyMjZjNjM0NTliZjYxMTU0ZWE3NjlmOGJhMzMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5ADBh5qLFEpdle/Ezzc/YshQXYJzY/LTbkdZGKr/8CUzV HRnZJ4cY6+v6QFiIrR7RM1RdOwe8hOlYaFWoCxjOOipdKrpGxd2CeAkkaX4q4Tr3 lNy93GxKMu9JEYmOZ3vSOqSIjThENUElVPj+lUF/1sqbKtOl2VwI3gD1KPCZFdaJ c7nNbz7Z5p6LrlvzJ34BkZS+Ita15FK1UjxjWFpZcIWQy5eVU0BtMq5flc9oW2XH mlZFY3xeM9onNVNUqoypbv28JxTasVbSLR9efYweYy68zyuXOPMqAw2u2F/UP75l lsE1r/eBVplyK+CPoDXj1hbOxSNgQEbfZUpM67phAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUEfnx4wBc5igh+/CVOC1yXvPx5KMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M5MWEwNjA4LTgwMzQtNDAwNi1hYjdhLWFkOTJlNTdmM2NmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA5+zANBgkqhkiG9w0BAQsFAAOCAQEANo/Tmbybo9s8D99KpAGb5y1yPFwk o8EGN25hUKD5ZCLnA57mvZCs/xL8JSC0NhBpALgyZeUuiU7Absgt8hiacqhI3oBF nHEEGBobYSYDDIiri7h3bFOcPlTpdltASfyKyajtqkSsP2qhKclZQX6YLvh7bHVn yJTPAJzBfU8CNlTOh01Zr4OCw5NYusok1hmM8znjsnKxvkLCdeeO4vhnTAoiZCVn VqPrxNMue0w7XZr/xXvfYAshdmY72/PjJAg9HoF5gyxWWnlbN5efCBPed6qm4Bsb Ocx06/ooVoU1bW5J4lyhynwPAOvnhLKHqVBolnHZRvzjJixnb+VKGddjyg== -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:39 2024 by rpki-client on console-ams.rpki-client.org