$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e48f73-72e8-4969-ac13-6a474a1ac49e.roa File: 42e48f73-72e8-4969-ac13-6a474a1ac49e.roa (raw, json) Hash identifier: 6p+YDPwY8vLPnPvO4WF/AYipPNAihQoHLXgEt56VCg8= Subject key identifier: 41:9D:E2:A3:B0:BE:11:EE:77:A2:4B:EA:DA:01:18:D8:53:82:4A:65 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F206EE05242ACC58396B5B41193A4C4EEF0487B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e48f73-72e8-4969-ac13-6a474a1ac49e.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 54.134.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:20:6e:e0:52:42:ac:c5:83:96:b5:b4:11:93:a4:c4:ee:f0:48:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=2a76d96e03d391a972232d56bdf40a08ee8e83be8557206227673e6a5de96915, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e7:29:b2:5c:4d:82:6f:9b:f2:19:b2:9a:ce: 9b:7c:36:2f:6f:e2:9a:09:e0:e6:dc:77:68:a2:21: 34:48:6a:e4:2b:5f:3c:8a:23:04:a1:a8:58:3c:75: 71:22:68:21:6e:58:bc:b3:55:26:fb:0f:70:aa:a4: 90:0f:6d:fd:58:af:9f:a0:e9:08:8f:02:47:95:e3: 32:14:3c:51:ee:3d:1d:eb:bb:87:2a:d7:6f:74:0b: e7:72:8c:ac:ef:4b:84:56:4b:56:6a:10:c2:f3:8b: cc:74:8e:3f:89:0f:d4:a5:a8:13:00:c7:88:48:44: 43:1f:a6:22:3c:65:0b:8c:38:28:cc:59:6f:e2:a3: f9:30:3d:bf:48:58:9a:e0:8e:4a:ed:fe:90:21:07: 0f:83:b5:c1:d5:49:fe:62:d0:80:94:3d:00:2d:47: 2e:90:92:f3:20:27:26:08:06:b5:67:28:31:01:c3: e0:b9:e4:f4:59:ec:1a:fd:64:0a:fb:11:20:c1:1a: 65:6d:95:f1:24:4d:4e:94:dc:5d:66:78:24:b1:7a: 57:12:dd:43:6d:81:cf:e9:f2:7a:78:f3:4e:5f:d5: 49:4d:1c:74:9c:4d:e9:bb:fd:65:b6:eb:9f:50:c9: 17:3f:8c:75:ed:1a:be:f4:ea:e8:bc:f7:9a:89:9f: 86:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9D:E2:A3:B0:BE:11:EE:77:A2:4B:EA:DA:01:18:D8:53:82:4A:65 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e48f73-72e8-4969-ac13-6a474a1ac49e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.134.0.0/16 Signature Algorithm: sha256WithRSAEncryption 03:0a:70:d6:34:ee:73:4a:f8:ba:4f:12:fd:48:8d:fc:be:9a: be:f4:1c:64:01:9e:81:2d:62:a2:93:4a:22:48:9c:63:f8:24: b7:22:15:ac:04:f8:56:14:0a:89:f6:74:13:4a:6b:d9:4a:3a: c5:a1:4e:62:4c:e7:71:1e:08:df:53:43:37:5a:cd:6c:88:a1: 29:2b:71:84:15:9e:6d:c7:f1:65:3e:92:59:5a:27:83:fa:3f: 3b:fa:af:fa:4c:13:ad:44:90:2b:e8:cf:4e:c8:23:38:c0:a3: 4a:4e:36:db:59:ac:0e:df:bd:fa:04:e6:ef:59:29:92:72:47: b7:14:23:a8:8f:7f:9b:bb:ec:56:c3:a2:10:89:b2:c2:90:3c: e7:3f:9b:2e:32:1e:7c:52:e6:47:ee:a4:0a:3d:06:59:de:51: b3:d2:89:83:06:95:79:0f:6b:5c:1e:b2:7e:71:02:41:e9:a9: 06:dd:43:71:78:89:81:4d:22:35:9b:4a:b0:7d:4e:c0:03:74: d1:31:30:b0:fd:b1:1e:5f:7c:be:13:54:08:d0:0d:08:c3:74: f9:b5:3c:7d:d8:cb:54:79:54:bf:7f:6b:12:a0:9b:3f:be:c8: b2:1d:fd:a6:02:fa:6c:07:d2:17:82:bd:d1:9e:6b:0e:eb:d0: 88:92:06:a4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDyBu4FJCrMWDlrW0EZOkxO7wSHswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTc2ZDk2ZTAzZDM5MWE5NzIyMzJkNTZiZGY0MGEwOGVl OGU4M2JlODU1NzIwNjIyNzY3M2U2YTVkZTk2OTE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF5ymyXE2Cb5vyGbKazpt8Ni9v4poJ4Obcd2iiITRIauQr XzyKIwShqFg8dXEiaCFuWLyzVSb7D3CqpJAPbf1Yr5+g6QiPAkeV4zIUPFHuPR3r u4cq1290C+dyjKzvS4RWS1ZqEMLzi8x0jj+JD9SlqBMAx4hIREMfpiI8ZQuMOCjM WW/io/kwPb9IWJrgjkrt/pAhBw+DtcHVSf5i0ICUPQAtRy6QkvMgJyYIBrVnKDEB w+C55PRZ7Br9ZAr7ESDBGmVtlfEkTU6U3F1meCSxelcS3UNtgc/p8np4805f1UlN HHScTem7/WW2659QyRc/jHXtGr706ui895qJn4ZjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQZ3io7C+Ee53okvq2gEY2FOCSmUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQyZTQ4ZjczLTcyZTgtNDk2OS1hYzEzLTZhNDc0YTFhYzQ5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2hjANBgkqhkiG9w0BAQsFAAOCAQEAAwpw1jTuc0r4uk8S/UiN/L6avvQc ZAGegS1iopNKIkicY/gktyIVrAT4VhQKifZ0E0pr2Uo6xaFOYkzncR4I31NDN1rN bIihKStxhBWebcfxZT6SWVong/o/O/qv+kwTrUSQK+jPTsgjOMCjSk4221msDt+9 +gTm71kpknJHtxQjqI9/m7vsVsOiEImywpA85z+bLjIefFLmR+6kCj0GWd5Rs9KJ gwaVeQ9rXB6yfnECQempBt1DcXiJgU0iNZtKsH1OwAN00TEwsP2xHl98vhNUCNAN CMN0+bU8fdjLVHlUv39rEqCbP77Ish39pgL6bAfSF4K90Z5rDuvQiJIGpA== -----END CERTIFICATE-----Generated at Thu May 2 00:52:03 2024 by rpki-client on console-ams.rpki-client.org