$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bfb393b-5503-4a8f-902d-e53cea616159.roa File: 4bfb393b-5503-4a8f-902d-e53cea616159.roa (raw, json) Hash identifier: OEhYlG0wdTgj/7Rlpen+4pXvGWI+L13h9OYdQ4nkbyY= Subject key identifier: 8B:A5:A9:68:A6:EB:B6:F0:CE:FC:E7:9F:DD:0E:2C:F2:27:04:BF:04 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 018E4C9E00D6D9ABD46C024894FC5ABB01539C0C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bfb393b-5503-4a8f-902d-e53cea616159.roa Signing time: Tue 07 May 2024 00:00:00 +0000 ROA not before: Tue 07 May 2024 00:00:00 +0000 ROA not after: Tue 11 Jun 2024 23:59:59 +0000 asID: 8987 IP address blocks: 16.120.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:4c:9e:00:d6:d9:ab:d4:6c:02:48:94:fc:5a:bb:01:53:9c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:00:00 2024 GMT Not After : Jun 11 23:59:59 2024 GMT Subject: serialNumber=dd971cebae36ecd50a10d288a84e5046e436fa17eb411e537137ca0f01b31f8e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:39:54:fb:8c:fd:de:83:ff:65:85:94:cb:26: 63:bd:1e:75:56:74:73:34:07:18:28:0e:80:45:84: 16:12:7b:39:a1:a0:0c:65:5d:d5:ef:fa:9e:70:3e: 86:fe:9b:f8:40:46:e6:2a:f8:a1:e2:89:bd:e5:00: 08:28:de:98:b8:00:69:f7:2c:52:80:6c:7a:35:7d: e0:17:f0:a7:7a:b9:14:88:e7:3b:18:03:3a:0d:32: 94:07:ec:c4:7e:2e:6a:ef:ad:1e:40:20:01:cf:76: 65:5b:ca:6d:93:ef:ff:75:69:ce:c5:ab:8e:fb:e6: 85:11:68:14:c7:43:8e:57:3c:48:5d:05:ab:dd:c0: c2:f5:c3:19:27:78:62:30:aa:9e:ec:46:44:56:e5: 4b:29:d4:0f:2c:0b:e5:66:30:be:2b:64:0d:3c:8e: 79:69:ba:04:21:ac:bf:80:d9:43:0c:f0:96:4a:6d: f4:48:63:1c:71:90:d5:55:83:d0:34:44:f0:f7:10: 6a:11:a2:72:2d:40:4d:43:1d:0e:5c:c1:f2:c3:47: cc:bf:6d:9b:65:ba:f3:54:32:a6:b6:e2:4f:de:41: de:5b:30:e7:37:94:02:9e:41:9b:c6:ca:ed:68:ed: ed:e2:58:96:12:0b:0a:c1:d3:b9:20:b3:7d:c5:78: 1e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A5:A9:68:A6:EB:B6:F0:CE:FC:E7:9F:DD:0E:2C:F2:27:04:BF:04 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bfb393b-5503-4a8f-902d-e53cea616159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.120.0.0/16 Signature Algorithm: sha256WithRSAEncryption 50:8f:f6:19:7a:bc:63:99:80:b6:40:7a:1a:32:bb:d1:27:a6: 43:56:42:b1:ca:cb:96:9e:5a:8b:cc:50:b5:59:67:95:ce:ab: 05:b1:35:d3:f5:97:93:63:43:8a:0e:42:df:7f:c9:2a:ac:b5: 0f:12:ed:48:10:ff:76:27:2e:76:c8:83:f0:71:3e:6d:1b:ea: 65:cf:fc:38:18:50:fa:83:97:da:24:c2:02:0d:59:c0:cd:16: 5c:11:ff:92:b6:30:5e:0c:a4:56:8c:f7:40:7d:ee:9f:7c:47: 22:c0:ec:09:3b:a0:15:04:7b:ab:fc:97:09:c3:da:15:7f:b2: 7a:48:57:64:a7:82:79:05:a3:12:fc:dd:12:7b:cc:38:16:87: b5:16:49:c1:67:e6:90:84:2b:c1:e6:43:20:3d:95:4d:86:63: 72:d9:3c:b5:75:18:b9:75:88:13:9c:9a:26:6d:92:e9:b0:75: 0c:ca:98:7b:3a:df:9d:37:f0:1a:fa:30:da:36:a1:bc:d1:3a: 50:04:fd:4a:5f:8e:30:ae:ab:45:76:70:72:3a:84:d1:f9:0b: db:df:06:cd:c0:de:0d:58:da:c7:32:c3:36:cf:38:cd:ec:dd: 47:34:aa:de:42:ee:d4:79:13:42:db:8a:16:f4:ea:63:ad:65: 64:ee:c0:02 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAY5MngDW2avUbAJIlPxauwFTnAwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTA3MDAwMDAwWhcNMjQwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDk3MWNlYmFlMzZlY2Q1MGExMGQyODhhODRlNTA0NmU0 MzZmYTE3ZWI0MTFlNTM3MTM3Y2EwZjAxYjMxZjhlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkOVT7jP3eg/9lhZTLJmO9HnVWdHM0BxgoDoBFhBYSezmh oAxlXdXv+p5wPob+m/hARuYq+KHiib3lAAgo3pi4AGn3LFKAbHo1feAX8Kd6uRSI 5zsYAzoNMpQH7MR+LmrvrR5AIAHPdmVbym2T7/91ac7Fq4775oURaBTHQ45XPEhd BavdwML1wxkneGIwqp7sRkRW5Usp1A8sC+VmML4rZA08jnlpugQhrL+A2UMM8JZK bfRIYxxxkNVVg9A0RPD3EGoRonItQE1DHQ5cwfLDR8y/bZtluvNUMqa24k/eQd5b MOc3lAKeQZvGyu1o7e3iWJYSCwrB07kgs33FeB7FAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUi6WpaKbrtvDO/Oef3Q4s8icEvwQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRiZmIzOTNiLTU1MDMtNGE4Zi05MDJkLWU1M2NlYTYxNjE1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQeDANBgkqhkiG9w0BAQsFAAOCAQEAUI/2GXq8Y5mAtkB6GjK70SemQ1ZC scrLlp5ai8xQtVlnlc6rBbE10/WXk2NDig5C33/JKqy1DxLtSBD/dicudsiD8HE+ bRvqZc/8OBhQ+oOX2iTCAg1ZwM0WXBH/krYwXgykVoz3QH3un3xHIsDsCTugFQR7 q/yXCcPaFX+yekhXZKeCeQWjEvzdEnvMOBaHtRZJwWfmkIQrweZDID2VTYZjctk8 tXUYuXWIE5yaJm2S6bB1DMqYezrfnTfwGvow2jahvNE6UAT9Sl+OMK6rRXZwcjqE 0fkL298GzcDeDVjaxzLDNs84zezdRzSq3kLu1HkTQtuKFvTqY61lZO7AAg== -----END CERTIFICATE-----Generated at Thu May 9 15:19:30 2024 by rpki-client on console-fra.rpki-client.org