$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a9852c1-91f7-4e59-a3ed-4d1c92b2194f.roa File: 3a9852c1-91f7-4e59-a3ed-4d1c92b2194f.roa (raw, json) Hash identifier: rK6xW7Q54lZ5ilaJ0WucFw0ariqg4Xv7PLXR35+mPlc= Subject key identifier: CA:46:C3:B0:DC:81:B9:69:0D:89:6A:50:F7:13:42:40:95:98:63:D7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 07C901AFB00B86E08AA2DA105E2EE1E8C6F3BA84 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a9852c1-91f7-4e59-a3ed-4d1c92b2194f.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 16.176.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c9:01:af:b0:0b:86:e0:8a:a2:da:10:5e:2e:e1:e8:c6:f3:ba:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=2cf2ddbfd1fbb7a0bc24123a2e13ce766f0a9d2e527d83bca7c965e3644b4c90, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7c:17:bf:4d:bd:9e:30:18:87:d1:c4:a7:1a: 17:7e:71:d7:d0:fa:78:a5:2a:e1:08:67:4f:a8:a8: f5:53:ad:e5:f9:1e:0c:27:72:42:24:16:e2:31:7e: 9b:8c:38:bb:75:c4:d4:b0:fd:b0:29:28:ea:29:0c: 7a:15:0a:b8:a0:bf:2a:6b:01:e8:3e:ee:02:24:b6: c1:2d:43:50:ee:3c:9d:e8:96:14:89:4b:39:c9:4c: 43:f5:20:9a:9b:15:8e:8b:8b:5b:cf:fd:da:17:89: 5c:91:69:40:27:ec:ad:33:a9:6b:b5:48:c1:b8:04: f2:89:37:fe:7f:69:90:b0:2e:a2:74:b7:09:a6:99: fb:88:1b:84:e8:20:52:0d:66:24:cc:c0:00:2f:91: 16:85:75:3a:d1:3b:7f:73:c1:cb:d2:39:4e:de:1b: d7:b7:83:58:90:df:50:0a:70:94:71:e6:a8:41:b0: a7:34:a2:c4:14:d9:db:3a:0a:c9:d1:c6:5c:79:13: e1:b7:d6:ec:d2:bc:81:b2:22:ef:c8:00:78:9a:53: 55:bb:c1:f8:37:82:66:e0:21:36:a2:95:e0:37:fa: 8f:54:96:ed:32:13:c9:09:c1:c0:d7:31:23:d6:10: 2f:a2:b3:86:87:f5:b5:5c:8c:91:9d:3a:ec:2b:d5: 46:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:46:C3:B0:DC:81:B9:69:0D:89:6A:50:F7:13:42:40:95:98:63:D7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a9852c1-91f7-4e59-a3ed-4d1c92b2194f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.176.0.0/16 Signature Algorithm: sha256WithRSAEncryption 68:8b:0b:fe:47:7d:ab:e5:93:b8:c1:df:ef:3f:97:39:e6:fd: 86:d0:bf:8d:8c:03:52:45:75:bd:fe:fc:ba:f4:57:53:4d:6d: f5:72:7c:ed:ac:eb:3e:0c:04:32:42:a7:f2:ee:6a:f3:5f:f8: 3f:a1:ba:67:1e:91:92:e1:2d:a2:e9:d5:a5:1e:c5:12:31:99: d5:06:a3:39:0f:bf:a0:b8:66:d5:98:16:14:19:82:6b:67:09: 93:15:33:28:bf:ab:52:da:fd:2b:00:cd:1d:bf:b2:9c:df:db: e9:2c:c2:33:8d:8b:ba:c5:d9:b1:c7:cb:fe:2b:1e:32:5d:6e: 3a:aa:59:00:f7:bf:74:7c:ac:45:c9:2c:66:ce:d7:97:51:64: 16:82:2a:44:4c:1f:a2:09:98:99:21:c1:63:94:7e:e3:5c:a6: 37:77:be:ad:c9:a3:f0:b2:b5:7c:57:f5:de:43:86:77:a7:09: 9b:8e:99:2d:ae:dc:31:97:19:99:f5:3f:95:3e:c3:c3:ee:8c: 31:44:02:4a:86:3a:40:29:1f:80:a5:e6:56:66:61:cc:ee:e7: 18:fb:80:15:fa:cb:fb:92:65:46:4b:24:85:f1:79:82:23:b0: a2:08:2b:3a:8a:a7:a9:72:9a:3c:02:c6:7d:f3:4d:e0:4a:f0: e6:00:a9:a6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUB8kBr7ALhuCKotoQXi7h6MbzuoQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyY2YyZGRiZmQxZmJiN2EwYmMyNDEyM2EyZTEzY2U3NjZm MGE5ZDJlNTI3ZDgzYmNhN2M5NjVlMzY0NGI0YzkwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPfBe/Tb2eMBiH0cSnGhd+cdfQ+nilKuEIZ0+oqPVTreX5 HgwnckIkFuIxfpuMOLt1xNSw/bApKOopDHoVCrigvyprAeg+7gIktsEtQ1DuPJ3o lhSJSznJTEP1IJqbFY6Li1vP/doXiVyRaUAn7K0zqWu1SMG4BPKJN/5/aZCwLqJ0 twmmmfuIG4ToIFINZiTMwAAvkRaFdTrRO39zwcvSOU7eG9e3g1iQ31AKcJRx5qhB sKc0osQU2ds6CsnRxlx5E+G31uzSvIGyIu/IAHiaU1W7wfg3gmbgITaileA3+o9U lu0yE8kJwcDXMSPWEC+is4aH9bVcjJGdOuwr1UbRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUykbDsNyBuWkNiWpQ9xNCQJWYY9cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhOTg1MmMxLTkxZjctNGU1OS1hM2VkLTRkMWM5MmIyMTk0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQsDANBgkqhkiG9w0BAQsFAAOCAQEAaIsL/kd9q+WTuMHf7z+XOeb9htC/ jYwDUkV1vf78uvRXU01t9XJ87azrPgwEMkKn8u5q81/4P6G6Zx6RkuEtounVpR7F EjGZ1QajOQ+/oLhm1ZgWFBmCa2cJkxUzKL+rUtr9KwDNHb+ynN/b6SzCM42LusXZ scfL/iseMl1uOqpZAPe/dHysRcksZs7Xl1FkFoIqREwfogmYmSHBY5R+41ymN3e+ rcmj8LK1fFf13kOGd6cJm46ZLa7cMZcZmfU/lT7Dw+6MMUQCSoY6QCkfgKXmVmZh zO7nGPuAFfrL+5JlRkskhfF5giOwoggrOoqnqXKaPALGffNN4Erw5gCppg== -----END CERTIFICATE-----Generated at Wed Apr 24 16:34:48 2024 by rpki-client on console-fra.rpki-client.org