$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a96e1ea-dca4-4559-a1ca-30445df555a2.roa File: 4a96e1ea-dca4-4559-a1ca-30445df555a2.roa (raw, json) Hash identifier: 9VU0MEdr7wxDPcyBv0p2XmAlMPjWsW1P83o+v2ONFeQ= Subject key identifier: 58:91:E5:5A:9E:49:CE:FB:EC:FB:DE:03:D4:79:AF:12:39:4B:F2:A0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2051B10C789C73EC2BD5AE2C9586867FD6F92A2A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a96e1ea-dca4-4559-a1ca-30445df555a2.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 16.95.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:51:b1:0c:78:9c:73:ec:2b:d5:ae:2c:95:86:86:7f:d6:f9:2a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=ecf5b43a38c5b8a4831bb2508e9b78ea0ab325cc975cb0b8e4fe52cdf00be1a7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ae:b4:bc:dc:f4:34:5d:4a:43:5c:2c:de:62: 8c:07:f8:86:42:72:a6:bd:0d:32:dc:05:63:10:d3: e3:8c:34:75:cd:42:41:33:d4:8f:26:c5:64:08:90: c8:bb:e3:95:af:59:ce:ba:57:7c:2b:c9:02:72:ac: f1:60:0a:81:5c:01:98:14:50:3f:c8:8e:58:ee:f5: 8d:23:7f:bc:22:99:89:e0:e7:e7:79:a0:ea:b6:63: 90:f1:24:9b:5e:35:ca:56:e4:1a:48:8a:a7:59:1c: 73:70:4b:14:8e:24:0a:36:6e:49:67:8e:2e:fd:e8: db:0e:29:26:7a:48:3c:38:34:ea:ba:eb:ed:69:e1: 1e:b0:90:76:04:77:9c:bd:33:7f:49:7d:cf:66:71: b6:55:bd:0f:c8:9d:e3:bb:35:fe:40:85:92:e5:cb: 7a:35:a3:ee:1b:ef:84:f3:77:f2:40:2e:57:bc:d1: f2:64:2a:70:83:0b:f9:f9:fc:18:47:e6:2c:65:a7: ac:de:0c:0f:99:8b:ad:38:dc:17:5b:3b:3f:91:8a: 36:94:d9:f7:ac:0e:cc:3e:16:a8:a1:75:32:2b:e8: 03:a7:3e:d3:00:58:f8:a8:cb:b8:35:72:d3:89:9d: be:2f:cd:02:59:06:3f:68:32:f6:be:f1:6d:5f:47: 9f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:91:E5:5A:9E:49:CE:FB:EC:FB:DE:03:D4:79:AF:12:39:4B:F2:A0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a96e1ea-dca4-4559-a1ca-30445df555a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.95.0.0/16 Signature Algorithm: sha256WithRSAEncryption c0:3c:c7:28:3e:2c:8c:b3:88:51:a1:2e:43:85:bb:30:6d:a3: af:45:0f:7c:23:47:39:b8:c5:02:d4:f0:7c:ca:35:82:8b:3b: 65:ba:1b:64:e3:4b:37:e4:ff:0b:a1:9c:58:82:30:a4:46:18: 9a:30:53:fa:8d:12:7f:1e:a1:47:82:4b:44:f4:4b:eb:29:7b: 4a:aa:47:50:25:17:cd:2c:0f:96:f8:0f:ba:ef:08:bf:fd:75: ac:7f:90:4a:c5:35:87:94:14:c7:3f:f7:d7:de:5b:fa:35:1d: a3:5e:d0:91:f7:e8:00:4f:65:e2:4b:92:4e:f9:6d:ab:6b:d8: 8d:d2:92:dd:a4:93:9c:92:d0:f0:97:2b:e9:fa:41:6a:ac:38: 69:1e:f0:c7:db:79:59:a8:7c:09:c9:84:34:3a:77:69:51:88: 33:08:d6:47:6f:ae:a0:61:c3:a1:3f:fe:12:71:bd:08:6d:12: 6e:33:26:60:b1:d9:ec:fe:dd:cf:2b:7a:32:50:c7:40:21:25: 51:d2:8e:c4:8b:8b:97:21:3f:83:b7:92:2f:b2:57:6a:ce:7a: 4e:55:87:a0:18:fe:06:a5:4f:f5:74:97:3d:ec:dc:68:ba:1a: 2a:1d:67:50:f9:fc:3a:2d:cf:b2:c5:bc:f7:59:9b:0b:3e:38: 2b:7e:c6:a6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIFGxDHicc+wr1a4slYaGf9b5KiowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlY2Y1YjQzYTM4YzViOGE0ODMxYmIyNTA4ZTliNzhlYTBh YjMyNWNjOTc1Y2IwYjhlNGZlNTJjZGYwMGJlMWE3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCirrS83PQ0XUpDXCzeYowH+IZCcqa9DTLcBWMQ0+OMNHXN QkEz1I8mxWQIkMi745WvWc66V3wryQJyrPFgCoFcAZgUUD/Ijlju9Y0jf7wimYng 5+d5oOq2Y5DxJJteNcpW5BpIiqdZHHNwSxSOJAo2bklnji796NsOKSZ6SDw4NOq6 6+1p4R6wkHYEd5y9M39Jfc9mcbZVvQ/IneO7Nf5AhZLly3o1o+4b74Tzd/JALle8 0fJkKnCDC/n5/BhH5ixlp6zeDA+Zi6043BdbOz+RijaU2fesDsw+FqihdTIr6AOn PtMAWPioy7g1ctOJnb4vzQJZBj9oMva+8W1fR5/FAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUWJHlWp5Jzvvs+94D1HmvEjlL8qAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhOTZlMWVhLWRjYTQtNDU1OS1hMWNhLTMwNDQ1ZGY1NTVhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQXzANBgkqhkiG9w0BAQsFAAOCAQEAwDzHKD4sjLOIUaEuQ4W7MG2jr0UP fCNHObjFAtTwfMo1gos7ZbobZONLN+T/C6GcWIIwpEYYmjBT+o0Sfx6hR4JLRPRL 6yl7SqpHUCUXzSwPlvgPuu8Iv/11rH+QSsU1h5QUxz/3195b+jUdo17QkffoAE9l 4kuSTvltq2vYjdKS3aSTnJLQ8Jcr6fpBaqw4aR7wx9t5Wah8CcmENDp3aVGIMwjW R2+uoGHDoT/+EnG9CG0SbjMmYLHZ7P7dzyt6MlDHQCElUdKOxIuLlyE/g7eSL7JX as56TlWHoBj+BqVP9XSXPezcaLoaKh1nUPn8Oi3PssW891mbCz44K37Gpg== -----END CERTIFICATE-----Generated at Thu May 2 12:23:04 2024 by rpki-client on console-ams.rpki-client.org