$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bbfa43c-f958-48fe-9452-5ceecb5658f9.roa File: 5bbfa43c-f958-48fe-9452-5ceecb5658f9.roa (raw, json) Hash identifier: GeJzgqhcZUnY8I6UztXDYUny4GaiAwNoSKJ8M1Afk8w= Subject key identifier: 2B:37:79:EA:41:F1:DF:E9:59:D2:ED:F5:62:20:F3:37:D5:DA:46:A0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 281C3C0EBE6CCC42674B147F855F8190B68D90A7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bbfa43c-f958-48fe-9452-5ceecb5658f9.roa Signing time: Wed 24 Apr 2024 00:00:00 +0000 ROA not before: Wed 24 Apr 2024 00:00:00 +0000 ROA not after: Wed 29 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 16.57.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1c:3c:0e:be:6c:cc:42:67:4b:14:7f:85:5f:81:90:b6:8d:90:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 24 00:00:00 2024 GMT Not After : May 29 23:59:59 2024 GMT Subject: serialNumber=8e566293684b5bd6a7a60e26039edfd15bdf5d9842f501c9ac42662984a10677, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a1:a5:55:7d:84:9e:0c:e5:de:a9:c2:68:bf: ec:88:dd:7c:9e:1d:d8:14:01:ae:0b:57:be:29:7c: db:ac:72:41:60:98:bf:fc:38:18:5b:e2:62:4d:db: 7b:ce:51:8c:f8:ef:54:80:5a:47:99:a8:21:c9:82: 0e:8a:01:be:36:01:a1:ca:55:2d:0d:6b:da:c4:91: 36:76:39:bf:79:10:8a:8b:0b:0e:10:bf:46:db:46: 78:64:df:f0:c3:c4:3c:c9:2e:c6:62:36:9e:25:f5: ad:aa:e2:9c:b5:60:a7:cf:ea:ae:af:84:b2:3e:9c: af:52:1a:2d:3e:04:b1:5d:07:8f:ad:53:69:ab:7c: 57:56:a9:88:ef:ac:45:ea:12:88:28:05:ce:3a:97: 77:4d:b0:cb:da:ac:f7:ad:fa:06:ff:6d:f0:27:54: b6:68:37:57:55:75:4b:ab:a4:dd:fe:59:ea:bd:33: f1:1c:6a:27:c5:25:7a:f4:fe:b7:2d:a7:21:7e:1b: 6e:2d:1b:1a:00:3c:ca:d9:a1:d0:3a:4f:72:f1:31: e9:9b:61:6b:84:f8:5c:77:b4:0e:41:03:80:83:39: b9:e4:f6:8f:03:27:ac:ec:54:0a:4b:25:8f:19:6e: 1c:87:4e:4e:f9:f7:60:93:d3:d1:b5:04:27:6f:55: b5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:37:79:EA:41:F1:DF:E9:59:D2:ED:F5:62:20:F3:37:D5:DA:46:A0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bbfa43c-f958-48fe-9452-5ceecb5658f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.57.0.0/18 Signature Algorithm: sha256WithRSAEncryption 59:a4:c5:f5:67:b1:f4:38:b2:f5:db:8d:b5:9d:17:e2:38:53: b2:62:d1:cb:4b:10:d0:42:13:86:29:0d:57:80:0e:c2:d9:bb: 7b:af:8c:10:86:a3:93:5f:fc:e9:6f:68:ac:b3:0a:ac:1f:96: 9f:a1:a1:b5:dd:8a:1b:88:22:03:ec:46:9c:65:56:c0:c9:da: 8d:91:d6:d2:f3:58:81:7a:3a:81:ee:14:86:29:d7:63:b0:b4: 8f:fd:1d:94:8a:7a:17:e1:81:cd:96:c6:0b:0a:d9:28:7f:97: 84:01:d2:c9:9b:8b:b8:bf:55:26:fa:5c:24:26:d2:fd:36:06: 2f:f1:84:55:ce:19:68:c1:b1:17:cc:6a:93:17:57:ce:19:8b: bb:44:7a:a4:59:5f:b5:41:71:14:63:75:b4:4f:37:fd:b0:0e: e8:60:3a:d5:28:e3:56:25:91:55:9d:91:f4:99:bb:4e:0e:82: ec:4d:0c:e4:ff:db:7e:f2:18:06:6d:46:4e:9a:4c:7a:4b:fa: 8c:a2:cc:94:72:e6:5d:cd:4f:17:d3:dd:64:45:45:53:a5:29: 32:be:8b:24:c8:98:90:f8:61:5d:34:86:52:cb:5c:6d:62:f0: e7:50:7e:4d:aa:42:81:6d:e4:82:66:f5:7f:84:eb:b4:0a:12: 1f:59:62:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKBw8Dr5szEJnSxR/hV+BkLaNkKcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDI0MDAwMDAwWhcNMjQwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTU2NjI5MzY4NGI1YmQ2YTdhNjBlMjYwMzllZGZkMTVi ZGY1ZDk4NDJmNTAxYzlhYzQyNjYyOTg0YTEwNjc3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMoaVVfYSeDOXeqcJov+yI3XyeHdgUAa4LV74pfNusckFg mL/8OBhb4mJN23vOUYz471SAWkeZqCHJgg6KAb42AaHKVS0Na9rEkTZ2Ob95EIqL Cw4Qv0bbRnhk3/DDxDzJLsZiNp4l9a2q4py1YKfP6q6vhLI+nK9SGi0+BLFdB4+t U2mrfFdWqYjvrEXqEogoBc46l3dNsMvarPet+gb/bfAnVLZoN1dVdUurpN3+Weq9 M/EcaifFJXr0/rctpyF+G24tGxoAPMrZodA6T3LxMembYWuE+Fx3tA5BA4CDObnk 9o8DJ6zsVApLJY8ZbhyHTk7592CT09G1BCdvVbUjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKzd56kHx3+lZ0u31YiDzN9XaRqAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzViYmZhNDNjLWY5NTgtNDhmZS05NDUyLTVjZWVjYjU2NThmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYQOQAwDQYJKoZIhvcNAQELBQADggEBAFmkxfVnsfQ4svXbjbWdF+I4U7Ji 0ctLENBCE4YpDVeADsLZu3uvjBCGo5Nf/OlvaKyzCqwflp+hobXdihuIIgPsRpxl VsDJ2o2R1tLzWIF6OoHuFIYp12OwtI/9HZSKehfhgc2WxgsK2Sh/l4QB0smbi7i/ VSb6XCQm0v02Bi/xhFXOGWjBsRfMapMXV84Zi7tEeqRZX7VBcRRjdbRPN/2wDuhg OtUo41YlkVWdkfSZu04OguxNDOT/237yGAZtRk6aTHpL+oyizJRy5l3NTxfT3WRF RVOlKTK+iyTImJD4YV00hlLLXG1i8OdQfk2qQoFt5IJm9X+E67QKEh9ZYn4= -----END CERTIFICATE-----Generated at Thu May 2 20:48:37 2024 by rpki-client on console-fra.rpki-client.org