$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/322f41f2-6732-4000-9b4c-66e0061d9c5e.roa File: 322f41f2-6732-4000-9b4c-66e0061d9c5e.roa (raw, json) Hash identifier: bbP+GXCfLMZG3fWrduPEYOOoUnx0sapQkpWuwyejwhU= Subject key identifier: BB:A8:85:43:02:FC:12:B6:AE:21:C1:7F:92:5A:12:6F:BC:8B:A4:B1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A70C265F1EFAFB18AA872F6F5F0D73C6A9D0492 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/322f41f2-6732-4000-9b4c-66e0061d9c5e.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 56.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:70:c2:65:f1:ef:af:b1:8a:a8:72:f6:f5:f0:d7:3c:6a:9d:04:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=f8458c12ece22b7a498c8a74a17d2b5a943f0e0a9f629a8d0e898dd9dea4e3bc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:25:a1:01:a2:a3:da:2f:c1:b5:6f:cb:be:2b: 47:4c:d5:a9:4c:43:92:4f:94:6a:46:35:d7:b3:79: 47:1a:35:cb:a6:3a:de:c5:6a:ce:20:c1:48:f6:eb: 0a:fa:a3:35:fe:35:b1:43:77:a7:06:3a:77:9d:b8: d9:4e:00:88:95:61:6e:a7:c1:79:47:b6:a5:1e:c6: 86:56:a5:ba:2b:e1:2d:1e:4d:4d:9c:10:91:78:1b: 0a:ec:30:b1:8a:db:87:24:cf:ac:99:33:3b:a7:91: bb:5f:f0:af:d4:de:43:61:39:31:97:f9:e8:a4:3e: 3b:91:f2:fc:60:46:9a:cf:8e:53:29:c0:71:6d:91: 01:dd:80:fc:0f:de:4f:9b:44:14:69:dd:fb:8a:f8: d2:09:26:1d:d7:4a:10:ad:a5:d4:c2:33:fc:0f:27: 79:bd:40:ac:4f:5a:bd:0e:74:16:2b:d0:f4:fd:55: 8b:a5:ec:96:a4:58:8c:ac:37:64:8f:6f:83:a4:d3: fd:b6:63:1e:f1:98:26:6c:d2:30:82:29:ce:e3:05: d0:c2:e4:2b:6c:d6:25:99:8e:ee:e2:c7:ec:58:8d: 55:14:1a:78:5d:05:7c:a7:72:6b:dd:b6:ca:26:2c: f8:13:25:ff:8e:c2:5d:1d:30:9c:1b:05:20:62:57: ff:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A8:85:43:02:FC:12:B6:AE:21:C1:7F:92:5A:12:6F:BC:8B:A4:B1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/322f41f2-6732-4000-9b4c-66e0061d9c5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.66.0.0/16 Signature Algorithm: sha256WithRSAEncryption 84:21:12:bb:a3:de:7a:14:34:0e:2b:84:b3:3e:fb:06:4e:b6: 22:5a:34:43:83:1d:c8:ae:07:c3:1a:7b:0f:5b:ac:18:fc:03: 80:79:db:6d:40:cd:a9:01:29:6d:45:18:51:17:18:f9:02:00: 94:f9:b9:ae:d1:d1:29:5c:c6:6b:f7:7c:79:00:8c:b7:7e:ea: 2b:ba:4a:6b:9a:e5:57:c5:9d:4e:4c:31:4c:c1:39:b6:c5:3f: e7:5a:d4:8c:e3:e2:40:ea:df:88:df:af:9e:8f:1a:0a:93:f8: 54:f4:bb:c3:46:42:47:6b:50:c4:d7:7a:69:e4:08:20:58:10: 2f:87:ca:e8:85:cd:65:b3:4d:8a:ee:1c:78:f9:6a:41:b6:22: 2e:dc:5d:0f:aa:71:e6:46:70:5a:9f:07:05:ba:30:fb:27:46: 89:ae:32:71:5a:dd:1b:3c:9c:c2:97:f6:4b:f4:0c:93:c5:82: ab:db:28:79:d2:a2:45:5d:6a:90:20:ab:35:e7:e1:82:c3:95: e6:d1:1a:55:d3:b8:55:7b:1e:33:d9:be:dd:ee:31:30:b7:6f: 23:d3:97:c4:98:31:c8:b8:61:bb:76:a5:6b:70:ce:81:6c:15: 6b:f4:40:a0:db:90:90:92:6b:39:ff:fc:00:f9:f2:81:46:06: f7:24:ff:6d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWnDCZfHvr7GKqHL29fDXPGqdBJIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmODQ1OGMxMmVjZTIyYjdhNDk4YzhhNzRhMTdkMmI1YTk0 M2YwZTBhOWY2MjlhOGQwZTg5OGRkOWRlYTRlM2JjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVJaEBoqPaL8G1b8u+K0dM1alMQ5JPlGpGNdezeUcaNcum Ot7Fas4gwUj26wr6ozX+NbFDd6cGOneduNlOAIiVYW6nwXlHtqUexoZWpbor4S0e TU2cEJF4GwrsMLGK24ckz6yZMzunkbtf8K/U3kNhOTGX+eikPjuR8vxgRprPjlMp wHFtkQHdgPwP3k+bRBRp3fuK+NIJJh3XShCtpdTCM/wPJ3m9QKxPWr0OdBYr0PT9 VYul7JakWIysN2SPb4Ok0/22Yx7xmCZs0jCCKc7jBdDC5Cts1iWZju7ix+xYjVUU GnhdBXyncmvdtsomLPgTJf+Owl0dMJwbBSBiV/9zAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUu6iFQwL8ErauIcF/kloSb7yLpLEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMyMmY0MWYyLTY3MzItNDAwMC05YjRjLTY2ZTAwNjFkOWM1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4QjANBgkqhkiG9w0BAQsFAAOCAQEAhCESu6PeehQ0DiuEsz77Bk62Ilo0 Q4MdyK4Hwxp7D1usGPwDgHnbbUDNqQEpbUUYURcY+QIAlPm5rtHRKVzGa/d8eQCM t37qK7pKa5rlV8WdTkwxTME5tsU/51rUjOPiQOrfiN+vno8aCpP4VPS7w0ZCR2tQ xNd6aeQIIFgQL4fK6IXNZbNNiu4cePlqQbYiLtxdD6px5kZwWp8HBbow+ydGia4y cVrdGzycwpf2S/QMk8WCq9soedKiRV1qkCCrNefhgsOV5tEaVdO4VXseM9m+3e4x MLdvI9OXxJgxyLhhu3ala3DOgWwVa/RAoNuQkJJrOf/8APnygUYG9yT/bQ== -----END CERTIFICATE-----Generated at Thu May 9 17:46:43 2024 by rpki-client on console-ams.rpki-client.org