$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/465952ef-7d24-4eb8-9c9c-9f3b9d759e5a.roa File: 465952ef-7d24-4eb8-9c9c-9f3b9d759e5a.roa (raw, json) Hash identifier: IZMw5DNTRkyb3iVhpLnqUfT/iMPrxAIYSFb+11N9Xcs= Subject key identifier: A5:1A:EB:23:AE:F3:D6:76:74:4F:F9:27:57:A4:5F:8D:12:6D:67:C3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 74F836D86D4F3103C1A9262D8C65D57E690F7F9E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/465952ef-7d24-4eb8-9c9c-9f3b9d759e5a.roa Signing time: Tue 09 Apr 2024 00:00:00 +0000 ROA not before: Tue 09 Apr 2024 00:00:00 +0000 ROA not after: Tue 14 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 54.25.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f8:36:d8:6d:4f:31:03:c1:a9:26:2d:8c:65:d5:7e:69:0f:7f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:00:00 2024 GMT Not After : May 14 23:59:59 2024 GMT Subject: serialNumber=8c70191452092e2e8725c945977f7c633328ada14d40e0ae09f4adf3516584d1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0f:b4:1b:b5:3d:f4:eb:b3:64:d9:47:97:51: 77:c5:71:8f:93:25:c8:97:14:7a:5d:5e:f9:1b:b7: fb:83:da:8f:c4:26:96:c6:bd:3b:56:0b:1d:24:7b: 56:8b:32:f6:08:32:b7:8f:52:d9:a2:0e:6e:d7:47: ee:8e:3e:79:7a:68:d9:9c:bb:f7:14:d9:14:d2:d1: c1:e3:b2:9a:c3:68:b6:d7:f6:dd:f5:c4:58:8c:05: 98:1a:09:fc:c2:cc:4a:cf:3a:05:12:43:fd:e0:1e: f8:f8:6a:e4:01:3d:97:02:a7:4c:75:8e:d3:d2:cb: 49:5f:9e:e6:df:9a:c6:f5:ed:f7:03:3b:ae:83:4a: 56:20:49:16:02:f6:3a:93:36:4e:1d:4e:bb:0d:e5: aa:e5:54:69:5f:f5:ca:19:c9:f9:eb:53:5c:7a:18: 59:8f:fe:ff:55:64:85:a9:76:32:e7:5c:2e:0a:80: 2c:41:c3:6e:22:dd:a3:16:8a:db:0f:ee:0b:50:89: d0:ab:df:1b:9c:cd:9f:32:58:fc:67:80:6f:61:c7: 73:05:6e:68:9c:db:39:77:87:25:07:59:09:94:10: 2d:5e:4a:49:5d:7e:f7:28:20:e7:52:b7:65:c8:17: 9f:8a:42:dc:37:97:fe:ee:16:99:47:a9:bd:01:b8: b0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1A:EB:23:AE:F3:D6:76:74:4F:F9:27:57:A4:5F:8D:12:6D:67:C3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/465952ef-7d24-4eb8-9c9c-9f3b9d759e5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.25.82.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:b0:ad:95:cf:51:dc:e8:20:08:9a:ff:35:01:93:1a:bd:9e: 09:0b:db:6c:a6:96:9c:e8:94:c1:94:45:96:e8:81:66:37:0e: e4:83:19:d1:91:f6:5e:3c:f4:e1:f0:93:6d:df:2e:82:cc:92: 41:f5:52:e5:55:53:9f:6f:46:87:dd:24:b7:ae:39:47:79:e8: ae:1c:82:05:53:33:4d:90:3f:a5:e1:29:ac:63:ea:02:b7:7f: 03:25:ec:3b:fb:72:d6:1a:44:b8:6a:37:bb:14:9c:87:a8:b6: c5:d7:74:26:0e:f8:f0:c3:4e:95:fe:2a:a7:67:58:83:70:f4: 37:e4:71:5a:92:f5:f0:da:f0:da:2f:87:1c:08:19:73:e7:76: 25:49:ec:a6:3d:38:8c:1c:58:81:4d:de:8e:86:9c:af:83:c0: be:a0:94:bd:51:df:54:b2:ed:93:34:92:90:86:80:b3:16:e8: 41:d0:e2:10:8e:e5:95:7d:7e:81:fa:9f:3b:8b:74:37:83:3f: b8:f9:ea:f3:e0:b2:56:00:69:27:1b:13:46:bb:53:b4:78:68: 54:f8:73:c3:20:d7:23:0c:86:f9:f8:94:7b:13:be:fa:d1:93: 89:a8:01:87:19:dc:92:e9:3c:be:27:f2:4d:59:b5:fe:83:26: e1:ff:8b:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdPg22G1PMQPBqSYtjGXVfmkPf54wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA5MDAwMDAwWhcNMjQwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzcwMTkxNDUyMDkyZTJlODcyNWM5NDU5NzdmN2M2MzMz MjhhZGExNGQ0MGUwYWUwOWY0YWRmMzUxNjU4NGQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBD7QbtT3067Nk2UeXUXfFcY+TJciXFHpdXvkbt/uD2o/E JpbGvTtWCx0ke1aLMvYIMrePUtmiDm7XR+6OPnl6aNmcu/cU2RTS0cHjsprDaLbX 9t31xFiMBZgaCfzCzErPOgUSQ/3gHvj4auQBPZcCp0x1jtPSy0lfnubfmsb17fcD O66DSlYgSRYC9jqTNk4dTrsN5arlVGlf9coZyfnrU1x6GFmP/v9VZIWpdjLnXC4K gCxBw24i3aMWitsP7gtQidCr3xuczZ8yWPxngG9hx3MFbmic2zl3hyUHWQmUEC1e SkldfvcoIOdSt2XIF5+KQtw3l/7uFplHqb0BuLCHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpRrrI67z1nZ0T/knV6RfjRJtZ8MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2NTk1MmVmLTdkMjQtNGViOC05YzljLTlmM2I5ZDc1OWU1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2GVIwDQYJKoZIhvcNAQELBQADggEBAB6wrZXPUdzoIAia/zUBkxq9ngkL 22ymlpzolMGURZbogWY3DuSDGdGR9l489OHwk23fLoLMkkH1UuVVU59vRofdJLeu OUd56K4cggVTM02QP6XhKaxj6gK3fwMl7Dv7ctYaRLhqN7sUnIeotsXXdCYO+PDD TpX+KqdnWINw9DfkcVqS9fDa8NovhxwIGXPndiVJ7KY9OIwcWIFN3o6GnK+DwL6g lL1R31Sy7ZM0kpCGgLMW6EHQ4hCO5ZV9foH6nzuLdDeDP7j56vPgslYAaScbE0a7 U7R4aFT4c8Mg1yMMhvn4lHsTvvrRk4moAYcZ3JLpPL4n8k1Ztf6DJuH/i+8= -----END CERTIFICATE-----Generated at Thu May 2 11:33:14 2024 by rpki-client on console-fra.rpki-client.org