$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43715d19-bd69-4e66-875a-3e6e3d174ac3.roa File: 43715d19-bd69-4e66-875a-3e6e3d174ac3.roa (raw, json) Hash identifier: XBaWh5xx2RIW7UE/BhFrdqERODmO1RMsla49rTAtB+M= Subject key identifier: 0F:28:1D:2A:72:9D:68:A0:A4:5E:C9:87:B2:DB:37:DC:CC:DE:DF:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E1AEB0552CF8645BD10481041D3816DAF12FEDD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43715d19-bd69-4e66-875a-3e6e3d174ac3.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 16.122.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:1a:eb:05:52:cf:86:45:bd:10:48:10:41:d3:81:6d:af:12:fe:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=43d670bb79de08b4aad1c39eba2df1e17d0fd9eeda91cb52b1c206e6e6f73f11, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b0:06:77:a0:20:a4:e8:a3:d2:82:de:29:18: 93:24:55:75:56:2c:49:93:bb:dd:8e:31:ad:cb:3e: 36:c1:5e:09:62:83:d8:e8:ac:0e:7a:d1:a5:26:14: d0:56:ee:33:5a:9c:48:b4:b0:08:dc:29:b1:4f:ed: 44:0e:a2:56:1b:e4:ba:df:5c:b7:05:ff:98:52:69: 71:05:ff:98:6c:4d:77:48:a4:9f:12:96:43:4c:9a: de:4d:15:57:e3:87:d6:a7:d5:cf:41:41:fa:d6:97: 41:39:7f:e7:7e:14:8c:6e:b2:d6:67:b9:1e:8d:12: 51:a9:3c:08:b5:fe:3d:f9:ee:43:c9:14:d2:cd:66: c6:a3:b9:bb:4c:5b:bf:12:c1:47:aa:ed:ee:b5:24: 40:69:e4:c0:14:a8:7a:0d:79:4b:aa:1d:b2:71:8f: 07:ba:7f:17:8c:7b:db:94:88:dc:a6:c5:6e:98:b2: d4:53:94:2f:31:1e:7f:72:bb:42:31:88:29:2f:af: d1:0c:bd:4d:5b:a7:d7:41:ec:aa:b3:df:e5:00:ef: 84:fe:64:c7:26:be:06:7d:2b:4a:43:8b:eb:73:65: 57:70:ce:df:c8:9c:24:46:b7:51:f7:af:cd:30:52: 3d:e4:8e:fe:12:3b:d7:6a:90:a7:5b:3d:71:e9:9e: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:28:1D:2A:72:9D:68:A0:A4:5E:C9:87:B2:DB:37:DC:CC:DE:DF:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43715d19-bd69-4e66-875a-3e6e3d174ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.122.0.0/16 Signature Algorithm: sha256WithRSAEncryption 75:ec:44:01:63:43:c7:4a:d1:d8:b1:14:cc:12:ca:73:90:2e: eb:32:cc:c0:d3:bb:b5:9d:f8:3a:fc:71:9e:26:27:bf:10:56: 7a:ba:81:e5:79:9a:81:3e:67:be:df:1b:83:75:71:44:34:d1: d2:7f:23:b5:44:cf:09:20:60:d6:5b:2a:bc:48:a0:e4:d1:ca: 65:63:b8:93:6f:a5:63:e1:a3:e7:4f:65:d4:24:77:8f:0c:28: 5f:a3:73:62:78:40:b6:97:5b:73:e7:3e:d9:ee:d1:59:c3:dd: ad:e5:42:0b:a6:95:8e:0d:cf:76:da:2d:a7:9a:41:2c:37:7b: 3d:97:72:a8:27:c5:5e:e2:17:98:a7:67:f4:80:81:0d:b0:35: 62:9b:d7:d6:58:33:06:bd:09:30:f0:29:31:6e:f2:27:67:db: e0:6f:32:b6:41:60:23:93:95:b0:a6:91:b2:35:3a:4d:65:5e: 48:18:84:03:68:c2:a8:96:b0:ec:da:97:51:19:f9:60:99:34: 41:08:09:e4:cd:c3:16:28:07:b1:38:f7:0a:1d:51:e8:1a:f8: 0f:f5:aa:93:2f:25:c7:78:bb:15:fb:4e:30:ae:3e:08:a2:a2: 85:d4:db:40:4d:c8:38:9c:fb:a4:23:b0:7c:9d:a5:14:5f:2a: 7b:a3:ef:99 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfhrrBVLPhkW9EEgQQdOBba8S/t0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0M2Q2NzBiYjc5ZGUwOGI0YWFkMWMzOWViYTJkZjFlMTdk MGZkOWVlZGE5MWNiNTJiMWMyMDZlNmU2ZjczZjExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRsAZ3oCCk6KPSgt4pGJMkVXVWLEmTu92OMa3LPjbBXgli g9jorA560aUmFNBW7jNanEi0sAjcKbFP7UQOolYb5LrfXLcF/5hSaXEF/5hsTXdI pJ8SlkNMmt5NFVfjh9an1c9BQfrWl0E5f+d+FIxustZnuR6NElGpPAi1/j357kPJ FNLNZsajubtMW78SwUeq7e61JEBp5MAUqHoNeUuqHbJxjwe6fxeMe9uUiNymxW6Y stRTlC8xHn9yu0IxiCkvr9EMvU1bp9dB7Kqz3+UA74T+ZMcmvgZ9K0pDi+tzZVdw zt/InCRGt1H3r80wUj3kjv4SO9dqkKdbPXHpnjbPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUDygdKnKdaKCkXsmHsts33Mze37YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQzNzE1ZDE5LWJkNjktNGU2Ni04NzVhLTNlNmUzZDE3NGFjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQejANBgkqhkiG9w0BAQsFAAOCAQEAdexEAWNDx0rR2LEUzBLKc5Au6zLM wNO7tZ34OvxxniYnvxBWerqB5XmagT5nvt8bg3VxRDTR0n8jtUTPCSBg1lsqvEig 5NHKZWO4k2+lY+Gj509l1CR3jwwoX6NzYnhAtpdbc+c+2e7RWcPdreVCC6aVjg3P dtotp5pBLDd7PZdyqCfFXuIXmKdn9ICBDbA1YpvX1lgzBr0JMPApMW7yJ2fb4G8y tkFgI5OVsKaRsjU6TWVeSBiEA2jCqJaw7NqXURn5YJk0QQgJ5M3DFigHsTj3Ch1R 6Br4D/Wqky8lx3i7FftOMK4+CKKihdTbQE3IOJz7pCOwfJ2lFF8qe6PvmQ== -----END CERTIFICATE-----Generated at Thu May 9 15:19:28 2024 by rpki-client on console-fra.rpki-client.org