$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5251ab5-2122-4b62-9570-b06eb03ea85d.roa File: f5251ab5-2122-4b62-9570-b06eb03ea85d.roa (raw, json) Hash identifier: 380T5pSjx7fBOSA4Bbr/Za7+YbFX+h3zCkp9xJ3k5aY= Subject key identifier: 14:79:03:47:04:30:44:24:49:98:D7:BF:4A:3A:EF:FF:9F:26:84:C1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7ED9C264126335280A7327E6B41707CED1740941 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5251ab5-2122-4b62-9570-b06eb03ea85d.roa Signing time: Fri 31 May 2024 00:00:00 +0000 ROA not before: Fri 31 May 2024 00:00:00 +0000 ROA not after: Fri 05 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 56.125.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d9:c2:64:12:63:35:28:0a:73:27:e6:b4:17:07:ce:d1:74:09:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 31 00:00:00 2024 GMT Not After : Jul 5 23:59:59 2024 GMT Subject: serialNumber=7a5c656b6f51b0389fa79336212a28ab7057e92127115640b014d12c9ef7f1b3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bc:89:2b:2e:61:ac:79:14:8c:16:37:4b:96: cf:6e:46:24:84:db:cc:15:ce:5f:fe:85:f7:68:00: 39:d1:43:75:df:2c:3d:02:e8:42:56:18:9b:3c:35: 71:a5:91:06:1e:2f:d5:5a:33:53:15:0b:a8:f0:4a: 1c:66:5f:aa:8c:1a:d2:8c:3e:21:de:df:cd:97:8d: 0a:8c:5d:25:d7:4b:06:ff:f1:97:c6:23:6f:fc:ab: a3:56:6e:d3:bb:1a:7b:66:74:2a:ce:41:41:77:3a: 7f:f0:d5:db:ba:3a:c0:60:99:a4:8a:11:b2:c6:1f: 12:0f:80:19:89:12:ae:85:e9:e9:e5:0c:79:7f:c7: b9:32:10:e2:0e:ad:4c:58:61:97:91:b6:5b:6f:4c: 99:f5:eb:b2:18:ca:24:22:5f:11:80:e3:5a:97:44: e4:b8:79:f0:09:d6:d9:5b:88:05:f1:53:7c:3e:74: 38:ba:12:c6:f1:09:dd:93:9d:5e:cd:9c:be:d0:a2: 0a:63:7c:c5:21:1f:9f:23:86:90:de:76:ff:aa:ef: bd:a2:87:57:ab:c4:eb:b4:71:56:b9:59:08:a5:46: 7f:3b:13:30:cb:f3:bf:5a:7a:c4:2c:8d:31:f4:b5: e5:4b:8a:85:b6:f7:11:ad:5c:ce:68:a6:98:90:40: e5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:79:03:47:04:30:44:24:49:98:D7:BF:4A:3A:EF:FF:9F:26:84:C1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5251ab5-2122-4b62-9570-b06eb03ea85d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.125.0.0/16 Signature Algorithm: sha256WithRSAEncryption 89:db:a6:ac:1d:68:45:d5:c1:f2:3c:bc:56:15:dc:44:aa:dd: 5e:46:d5:ed:f9:b9:7d:9b:28:c0:a8:c9:35:72:78:50:ef:01: 24:29:fb:51:78:17:81:df:c3:1a:31:c9:cb:8b:dd:ec:b0:e6: ff:c3:6e:48:3f:6d:29:80:40:6a:cd:16:57:0a:e0:7b:ad:5c: ea:50:78:d5:9a:5b:86:7f:36:6a:e8:c6:a9:9c:91:5d:ed:09: 44:5b:6e:e1:a7:be:df:c5:5e:cf:64:ca:e4:75:ad:92:68:32: 67:dd:1d:93:14:76:04:33:41:4a:65:d2:6d:06:52:03:97:52: 45:7f:af:9c:cc:66:34:82:9f:85:ac:6d:99:0b:c4:b1:82:6a: 94:20:ac:da:5b:dd:f2:9b:22:cd:26:4a:57:13:cc:be:d2:e8: 65:4a:ad:c6:47:72:cd:6d:25:7a:c9:23:c0:b5:d5:de:fc:5c: e5:6f:76:f6:f7:ed:97:29:6b:f6:b0:bd:15:b0:63:60:27:48: 8d:eb:8d:1a:2b:ab:e0:d6:e9:10:97:24:16:b1:63:cc:cc:33: d2:2f:6d:74:68:38:66:95:ea:a1:85:fe:16:f0:e3:bc:82:a1: 39:04:0d:92:46:b0:a8:e7:a7:57:7f:ef:0f:96:89:13:bb:c0: 04:b0:9b:c6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUftnCZBJjNSgKcyfmtBcHztF0CUEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTMxMDAwMDAwWhcNMjQwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTVjNjU2YjZmNTFiMDM4OWZhNzkzMzYyMTJhMjhhYjcw NTdlOTIxMjcxMTU2NDBiMDE0ZDEyYzllZjdmMWIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKvIkrLmGseRSMFjdLls9uRiSE28wVzl/+hfdoADnRQ3Xf LD0C6EJWGJs8NXGlkQYeL9VaM1MVC6jwShxmX6qMGtKMPiHe382XjQqMXSXXSwb/ 8ZfGI2/8q6NWbtO7GntmdCrOQUF3On/w1du6OsBgmaSKEbLGHxIPgBmJEq6F6enl DHl/x7kyEOIOrUxYYZeRtltvTJn167IYyiQiXxGA41qXROS4efAJ1tlbiAXxU3w+ dDi6EsbxCd2TnV7NnL7QogpjfMUhH58jhpDedv+q772ih1erxOu0cVa5WQilRn87 EzDL879aesQsjTH0teVLioW29xGtXM5oppiQQOUNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUFHkDRwQwRCRJmNe/Sjrv/58mhMEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y1MjUxYWI1LTIxMjItNGI2Mi05NTcwLWIwNmViMDNlYTg1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4fTANBgkqhkiG9w0BAQsFAAOCAQEAidumrB1oRdXB8jy8VhXcRKrdXkbV 7fm5fZsowKjJNXJ4UO8BJCn7UXgXgd/DGjHJy4vd7LDm/8NuSD9tKYBAas0WVwrg e61c6lB41Zpbhn82aujGqZyRXe0JRFtu4ae+38Vez2TK5HWtkmgyZ90dkxR2BDNB SmXSbQZSA5dSRX+vnMxmNIKfhaxtmQvEsYJqlCCs2lvd8psizSZKVxPMvtLoZUqt xkdyzW0leskjwLXV3vxc5W929vftlylr9rC9FbBjYCdIjeuNGiur4NbpEJckFrFj zMwz0i9tdGg4ZpXqoYX+FvDjvIKhOQQNkkawqOenV3/vD5aJE7vABLCbxg== -----END CERTIFICATE-----Generated at Sun Jun 2 02:07:07 2024 by rpki-client on console-fra.rpki-client.org