$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52cce4c7-7dad-4f14-90e3-82fbccaff0b3.roa File: 52cce4c7-7dad-4f14-90e3-82fbccaff0b3.roa (raw, json) Hash identifier: +KCpewN6bLJ06ZqZwsH5oLFHmfSU1YFvThthe423s18= Subject key identifier: 6E:4F:BC:EF:86:CB:96:A6:B4:B0:87:01:13:3E:25:F9:EC:23:ED:FE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 42333D68156561E74719A5567324D28F987CED3F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52cce4c7-7dad-4f14-90e3-82fbccaff0b3.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 16.175.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:33:3d:68:15:65:61:e7:47:19:a5:56:73:24:d2:8f:98:7c:ed:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=bb08e65dc881d75853f140eecf6cb45c3ff78b00475f8978c1e955ccfa36422a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:e7:d8:92:18:be:64:1f:8a:fc:66:1a:60: dd:27:41:8f:e0:85:fc:7a:bb:8b:23:34:ca:d0:b0: 98:95:f4:48:05:0f:bb:7f:68:b2:d8:45:a1:2c:fa: d1:79:11:ec:ca:57:46:b3:36:63:1d:6a:2c:34:3a: 90:51:2e:58:12:03:66:de:cb:e1:30:bc:3a:8d:c9: 72:38:bb:22:6c:c2:31:4d:a1:d9:02:53:1d:58:0e: c1:9b:f4:4a:b0:76:15:0d:b8:83:12:59:f9:54:2b: a6:d7:c0:ee:40:26:37:5d:4d:e8:3a:4c:3e:67:6d: 6e:a7:9c:b4:d5:1c:8e:af:b0:ac:28:76:f2:60:21: d7:93:57:e5:f4:23:71:6d:6e:b6:68:c5:65:e8:42: 25:10:f3:d9:87:65:b9:d1:56:dd:7c:ea:8a:0b:64: aa:23:7b:21:da:96:4e:a6:36:9e:99:66:4d:d4:b0: 9c:63:01:d0:03:3f:70:4f:c8:f0:e0:e3:2e:b6:30: fd:54:16:cd:71:d6:38:5e:1c:ed:d2:68:11:74:e0: 20:1c:7f:09:ac:af:ae:1f:58:17:0c:fa:4a:ba:4a: b2:4d:84:92:55:93:6a:e6:99:aa:b4:4d:49:c4:42: 5d:12:99:ea:96:81:7f:4d:de:c4:f3:9d:c9:41:ff: cb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4F:BC:EF:86:CB:96:A6:B4:B0:87:01:13:3E:25:F9:EC:23:ED:FE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52cce4c7-7dad-4f14-90e3-82fbccaff0b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.175.0.0/16 Signature Algorithm: sha256WithRSAEncryption 56:09:47:82:3d:59:30:f3:4e:66:67:f1:5b:a2:1f:0c:80:9f: fc:52:d6:8d:ec:ae:09:f6:b1:d1:60:f8:6f:4b:85:1c:2b:3b: de:94:ed:29:f4:3d:dc:b3:3e:1b:f9:b7:84:32:51:14:32:bd: 1f:27:d4:45:be:3e:ba:62:12:d5:5e:40:15:24:11:b6:27:1e: b1:1c:6a:c8:92:2c:b2:b5:48:b9:0d:10:f4:f6:d2:b3:ef:02: 93:1e:34:39:a9:70:e0:04:6d:2c:bc:f3:3a:49:b9:1a:a5:2e: 0d:ce:4b:59:d5:ee:d7:db:f7:a2:00:7c:67:e4:96:e5:28:3c: 42:ff:24:12:97:41:6c:46:39:12:ba:c4:c6:99:07:99:f7:3d: 09:db:4b:35:75:dc:81:f5:7b:c5:2d:55:59:e1:a8:07:78:8e: cf:d2:bf:14:fa:63:0b:68:3c:96:63:75:c9:b6:7c:02:6f:af: 58:9b:6e:8e:99:6b:7f:59:aa:33:c5:4c:d1:d5:79:28:f0:8e: 56:4e:df:74:48:e2:a7:b9:ce:c4:f3:ac:0b:e7:17:ac:a1:b5: 89:17:44:d1:0a:40:5b:44:51:04:c6:83:29:0e:a7:e9:1c:a7: 24:5d:ce:da:f8:36:3c:79:b5:11:24:aa:20:b4:ae:e8:76:22: ba:3d:00:a3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQjM9aBVlYedHGaVWcyTSj5h87T8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjA4ZTY1ZGM4ODFkNzU4NTNmMTQwZWVjZjZjYjQ1YzNm Zjc4YjAwNDc1Zjg5NzhjMWU5NTVjY2ZhMzY0MjJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC6ufYkhi+ZB+K/GYaYN0nQY/ghfx6u4sjNMrQsJiV9EgF D7t/aLLYRaEs+tF5EezKV0azNmMdaiw0OpBRLlgSA2bey+EwvDqNyXI4uyJswjFN odkCUx1YDsGb9EqwdhUNuIMSWflUK6bXwO5AJjddTeg6TD5nbW6nnLTVHI6vsKwo dvJgIdeTV+X0I3FtbrZoxWXoQiUQ89mHZbnRVt186ooLZKojeyHalk6mNp6ZZk3U sJxjAdADP3BPyPDg4y62MP1UFs1x1jheHO3SaBF04CAcfwmsr64fWBcM+kq6SrJN hJJVk2rmmaq0TUnEQl0SmeqWgX9N3sTznclB/8tbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUbk+874bLlqa0sIcBEz4l+ewj7f4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUyY2NlNGM3LTdkYWQtNGYxNC05MGUzLTgyZmJjY2FmZjBiMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQrzANBgkqhkiG9w0BAQsFAAOCAQEAVglHgj1ZMPNOZmfxW6IfDICf/FLW jeyuCfax0WD4b0uFHCs73pTtKfQ93LM+G/m3hDJRFDK9HyfURb4+umIS1V5AFSQR ticesRxqyJIssrVIuQ0Q9PbSs+8Ckx40Oalw4ARtLLzzOkm5GqUuDc5LWdXu19v3 ogB8Z+SW5Sg8Qv8kEpdBbEY5ErrExpkHmfc9CdtLNXXcgfV7xS1VWeGoB3iOz9K/ FPpjC2g8lmN1ybZ8Am+vWJtujplrf1mqM8VM0dV5KPCOVk7fdEjip7nOxPOsC+cX rKG1iRdE0QpAW0RRBMaDKQ6n6RynJF3O2vg2PHm1ESSqILSu6HYiuj0Aow== -----END CERTIFICATE-----Generated at Thu May 2 11:33:15 2024 by rpki-client on console-fra.rpki-client.org