$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1eacbd3b-dba2-471a-aabe-dc0f8e3e8a9b.roa File: 1eacbd3b-dba2-471a-aabe-dc0f8e3e8a9b.roa (raw, json) Hash identifier: EoFbqOu1KU/nQZoSDXzeB8W4r1t1xy9QdvIKKzQraig= Subject key identifier: 7C:09:97:CA:C8:E2:38:4C:80:50:54:04:C4:89:E8:BB:BD:03:C0:12 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 123A39F47AC313F76F9B12810708A40ACE311A3A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1eacbd3b-dba2-471a-aabe-dc0f8e3e8a9b.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 16.20.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:3a:39:f4:7a:c3:13:f7:6f:9b:12:81:07:08:a4:0a:ce:31:1a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=f2ab4f0ebf3295d19890d648b040c9406997b232822f5cab40935237647cdac8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:27:03:7e:28:d5:5d:ce:b0:02:85:2d:8d:01: 8e:cc:a0:80:da:ac:cb:23:f8:ed:d4:c6:5b:6b:6c: 85:ba:f6:3b:d3:6c:bd:60:2b:e2:17:28:c8:3f:f0: 58:1d:de:66:69:74:19:d5:02:17:4f:e1:56:28:39: d7:2b:06:42:c3:04:3f:23:10:48:85:b1:a8:1b:74: 0c:c4:f0:d2:65:f9:35:ec:ba:64:4d:76:a3:fe:16: 32:60:21:45:b1:32:9e:13:6a:77:5e:0d:1c:a4:05: b1:e6:89:2c:4f:14:b6:2a:89:16:22:67:91:8e:d8: 16:33:12:dd:f4:e8:5d:51:ae:7b:1f:1d:77:5b:dc: 15:38:16:5d:6a:1a:75:c9:d6:b3:c7:f5:60:2e:15: 3a:05:bd:4d:86:bf:04:4c:26:86:69:d2:ea:7a:ca: 92:62:38:7a:d8:52:0b:fd:59:36:95:c8:62:f9:6c: 7d:9e:e2:de:61:97:28:d9:72:02:05:1d:2d:25:ff: 3a:31:8f:b9:da:97:2c:38:11:22:6c:9d:d7:0a:e3: d0:a0:1a:fb:57:7b:49:90:89:e9:bf:c7:da:6b:b5: 05:c8:f2:27:73:5b:1b:2e:40:9c:7d:3b:94:69:7d: 2a:c0:21:58:45:7a:21:2e:0e:37:8b:ac:98:2e:30: 0f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:09:97:CA:C8:E2:38:4C:80:50:54:04:C4:89:E8:BB:BD:03:C0:12 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1eacbd3b-dba2-471a-aabe-dc0f8e3e8a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.20.200.0/22 Signature Algorithm: sha256WithRSAEncryption 35:b3:ca:25:09:70:29:72:2a:30:55:5c:a1:c0:15:ef:84:a0: 9e:6b:33:d1:55:b9:12:52:f0:cb:ae:43:99:6d:48:01:9b:e7: 88:4e:f5:0c:aa:8a:73:a8:e0:db:19:40:5e:71:56:1a:7b:cf: 20:26:90:e8:ee:e4:30:34:c3:23:f3:5d:1b:b0:f2:5c:eb:78: 3e:9e:6d:d2:d9:b7:16:f1:d5:19:c2:d8:88:0b:06:ec:53:66: a9:ad:4e:7c:41:e9:e6:6c:14:5f:fe:32:40:a7:f4:9b:72:89: 07:b4:e2:01:8a:f3:11:66:52:5b:98:4f:57:f4:cc:4e:37:22: 95:7d:6f:9e:e0:ce:67:db:bb:bd:65:d1:f5:cf:9c:41:9c:6b: e9:8a:b2:b3:a5:77:de:80:32:92:ea:aa:95:19:1b:10:d0:ec: 8a:63:ed:2a:f9:b7:a1:d3:aa:56:91:a3:0e:00:07:64:29:f7: c4:4d:c3:a4:b1:96:01:d1:80:bf:c8:4b:0d:5e:bf:b1:ab:2d: 9e:e2:97:5d:c8:8b:f5:fe:b6:34:44:d8:e9:08:b0:0d:f8:5d: d7:a8:ed:f5:92:3d:45:09:68:00:36:8f:48:3a:72:a3:a4:57: bd:79:3b:24:98:99:ee:64:3c:ff:86:74:12:6c:31:70:24:8f: d8:71:eb:0b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEjo59HrDE/dvmxKBBwikCs4xGjowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMmFiNGYwZWJmMzI5NWQxOTg5MGQ2NDhiMDQwYzk0MDY5 OTdiMjMyODIyZjVjYWI0MDkzNTIzNzY0N2NkYWM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdJwN+KNVdzrAChS2NAY7MoIDarMsj+O3UxltrbIW69jvT bL1gK+IXKMg/8Fgd3mZpdBnVAhdP4VYoOdcrBkLDBD8jEEiFsagbdAzE8NJl+TXs umRNdqP+FjJgIUWxMp4TandeDRykBbHmiSxPFLYqiRYiZ5GO2BYzEt306F1Rrnsf HXdb3BU4Fl1qGnXJ1rPH9WAuFToFvU2GvwRMJoZp0up6ypJiOHrYUgv9WTaVyGL5 bH2e4t5hlyjZcgIFHS0l/zoxj7nalyw4ESJsndcK49CgGvtXe0mQiem/x9prtQXI 8idzWxsuQJx9O5RpfSrAIVhFeiEuDjeLrJguMA+NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfAmXysjiOEyAUFQExInou70DwBIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFlYWNiZDNiLWRiYTItNDcxYS1hYWJlLWRjMGY4ZTNlOGE5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIQFMgwDQYJKoZIhvcNAQELBQADggEBADWzyiUJcClyKjBVXKHAFe+EoJ5r M9FVuRJS8MuuQ5ltSAGb54hO9QyqinOo4NsZQF5xVhp7zyAmkOju5DA0wyPzXRuw 8lzreD6ebdLZtxbx1RnC2IgLBuxTZqmtTnxB6eZsFF/+MkCn9JtyiQe04gGK8xFm UluYT1f0zE43IpV9b57gzmfbu71l0fXPnEGca+mKsrOld96AMpLqqpUZGxDQ7Ipj 7Sr5t6HTqlaRow4AB2Qp98RNw6SxlgHRgL/ISw1ev7GrLZ7il13Ii/X+tjRE2OkI sA34Xdeo7fWSPUUJaAA2j0g6cqOkV715OySYme5kPP+GdBJsMXAkj9hx6ws= -----END CERTIFICATE-----Generated at Thu May 2 17:17:05 2024 by rpki-client on console-ams.rpki-client.org