$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/243d00ff-8998-4e10-a947-4cca6eff1dff.roa File: 243d00ff-8998-4e10-a947-4cca6eff1dff.roa (raw, json) Hash identifier: Skg8egfCSDZnlGtZenZOJOgL+ClhsiuhHml/jN9xqKo= Subject key identifier: 2D:10:20:F3:7A:03:FE:CC:78:1E:46:7E:4B:DE:2D:81:1B:E9:89:11 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 575974F076533DCFE65E80506D261C1A1F3ECC9B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/243d00ff-8998-4e10-a947-4cca6eff1dff.roa Signing time: Sat 20 Apr 2024 00:00:00 +0000 ROA not before: Sat 20 Apr 2024 00:00:00 +0000 ROA not after: Sat 25 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 16.207.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:59:74:f0:76:53:3d:cf:e6:5e:80:50:6d:26:1c:1a:1f:3e:cc:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 20 00:00:00 2024 GMT Not After : May 25 23:59:59 2024 GMT Subject: serialNumber=d39c7b60851c2eeee8c00ddbcf65aeb508762b36455ee58cad5060625b405cd7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:5c:8b:ff:b0:c6:fe:fb:53:40:12:29:f7: 82:f2:ae:76:31:4d:e1:7d:4a:56:ae:ab:b1:0a:6e: 67:29:f4:67:f3:ec:24:25:a5:63:d4:3d:42:21:e2: 10:c9:f5:a3:ea:f6:17:58:98:4e:48:b5:fe:e8:45: 94:8f:ad:3f:e0:0f:cc:95:b7:0b:cb:9b:bf:20:d4: a6:5f:3f:8f:78:92:91:99:c1:a9:68:e4:a5:96:36: b6:07:69:28:f7:41:7d:1a:f6:9c:7c:4c:6f:92:3c: 78:cb:98:38:09:ff:1e:03:0a:b0:88:43:10:2f:c2: 32:19:01:f0:a9:8e:87:40:15:0e:53:c3:f5:67:00: db:b6:ae:cf:68:11:32:8b:50:c7:47:71:79:48:1c: 13:3f:d4:28:f2:23:10:85:f3:e7:81:0e:7c:ae:a1: 44:26:4d:aa:54:99:7c:b1:4e:3f:eb:6d:ed:b1:2d: de:8b:8b:dd:c2:92:32:c2:c6:08:33:82:e7:06:2a: e3:c4:db:ea:e0:a8:11:19:d7:a9:52:b8:a4:e7:d9: 80:f3:14:92:90:70:e3:79:0b:e4:b6:c3:16:41:46: 31:b6:bc:1c:82:ab:50:b1:1a:51:e0:81:dc:c7:7b: 33:f0:dc:75:58:75:6e:44:cf:d0:fc:f0:52:6d:e7: d0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:10:20:F3:7A:03:FE:CC:78:1E:46:7E:4B:DE:2D:81:1B:E9:89:11 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/243d00ff-8998-4e10-a947-4cca6eff1dff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.207.0.0/16 Signature Algorithm: sha256WithRSAEncryption bd:11:98:d4:97:01:15:9c:d8:04:80:fe:48:61:db:8a:3d:a3: 76:88:5f:7c:ab:88:6d:b1:52:b4:28:0c:45:fd:ae:75:4f:1c: 0f:55:e5:7d:62:38:5e:de:26:5a:f0:84:fe:94:d5:1b:97:71: f0:51:0a:7c:53:a5:bb:98:64:12:1a:9f:f7:01:ba:8e:7b:e5: d5:ec:5b:69:4b:d5:e1:be:5b:2b:4c:fe:a5:23:6a:54:51:b3: 98:1e:90:3d:e6:12:ba:69:2a:a1:5a:50:d2:64:64:13:f1:74: 02:62:fb:2b:e5:39:79:4b:73:1f:b9:c4:ed:94:cf:3c:56:90: 43:5f:38:fc:40:72:56:7c:54:c2:0a:8d:02:2e:1c:09:aa:12: e1:2a:7c:66:84:06:97:12:81:ed:e0:42:bb:52:63:f4:b8:6b: 95:af:69:da:59:02:ba:55:bb:de:49:93:59:ec:78:fe:9b:4c: b3:a9:ae:8c:63:8f:a8:c1:16:d4:4b:f7:b6:30:18:35:2d:ea: 61:42:35:a9:c9:0d:1c:b4:db:89:65:47:09:2b:90:12:b1:cb: aa:30:dd:e2:1a:33:5d:b0:22:1b:3b:9e:04:ff:d9:ea:f8:5d: 60:1a:76:f5:a0:19:4a:20:26:0e:4a:81:4d:d5:5d:84:b5:ba: 1f:a0:5e:96 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUV1l08HZTPc/mXoBQbSYcGh8+zJswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDIwMDAwMDAwWhcNMjQwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzljN2I2MDg1MWMyZWVlZThjMDBkZGJjZjY1YWViNTA4 NzYyYjM2NDU1ZWU1OGNhZDUwNjA2MjViNDA1Y2Q3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5bFyL/7DG/vtTQBIp94LyrnYxTeF9Slauq7EKbmcp9Gfz 7CQlpWPUPUIh4hDJ9aPq9hdYmE5Itf7oRZSPrT/gD8yVtwvLm78g1KZfP494kpGZ walo5KWWNrYHaSj3QX0a9px8TG+SPHjLmDgJ/x4DCrCIQxAvwjIZAfCpjodAFQ5T w/VnANu2rs9oETKLUMdHcXlIHBM/1CjyIxCF8+eBDnyuoUQmTapUmXyxTj/rbe2x Ld6Li93CkjLCxggzgucGKuPE2+rgqBEZ16lSuKTn2YDzFJKQcON5C+S2wxZBRjG2 vByCq1CxGlHggdzHezPw3HVYdW5Ez9D88FJt59AVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQULRAg83oD/sx4HkZ+S94tgRvpiREwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI0M2QwMGZmLTg5OTgtNGUxMC1hOTQ3LTRjY2E2ZWZmMWRmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQzzANBgkqhkiG9w0BAQsFAAOCAQEAvRGY1JcBFZzYBID+SGHbij2jdohf fKuIbbFStCgMRf2udU8cD1XlfWI4Xt4mWvCE/pTVG5dx8FEKfFOlu5hkEhqf9wG6 jnvl1exbaUvV4b5bK0z+pSNqVFGzmB6QPeYSumkqoVpQ0mRkE/F0AmL7K+U5eUtz H7nE7ZTPPFaQQ184/EByVnxUwgqNAi4cCaoS4Sp8ZoQGlxKB7eBCu1Jj9Lhrla9p 2lkCulW73kmTWex4/ptMs6mujGOPqMEW1Ev3tjAYNS3qYUI1qckNHLTbiWVHCSuQ ErHLqjDd4hozXbAiGzueBP/Z6vhdYBp29aAZSiAmDkqBTdVdhLW6H6Belg== -----END CERTIFICATE-----Generated at Thu May 2 08:02:26 2024 by rpki-client on console-ams.rpki-client.org