$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fcfb759-dfb5-4af1-8512-f27c02566de0.roa File: 5fcfb759-dfb5-4af1-8512-f27c02566de0.roa (raw, json) Hash identifier: 1rKmh0JrMrvE+TfQl+r+qNRiO0QR4KTQ2D1VCfiFkno= Subject key identifier: 4E:C5:0A:76:41:79:7E:D5:C7:E1:AD:97:F3:3D:F9:95:9D:F4:37:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 553B556B08FD12C4DCDFBC4B2F1617347CD709FB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fcfb759-dfb5-4af1-8512-f27c02566de0.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 54.116.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:3b:55:6b:08:fd:12:c4:dc:df:bc:4b:2f:16:17:34:7c:d7:09:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=b53310324ef573fe116b9e52713d1f084b8c8e81d915f41b05d7d82f6b43727f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4e:bd:10:93:68:d0:92:ce:70:36:15:8a:b1: 98:df:7a:2e:20:09:9d:0d:35:6d:c8:7a:b3:36:b5: 68:f3:00:20:5d:63:4f:ec:8f:90:01:a7:40:15:48: 66:2f:7c:be:5c:cd:c8:05:3f:66:70:62:89:5b:9e: ab:5b:3c:13:a3:02:d8:03:80:73:52:fa:c4:c8:16: 41:0a:7a:58:3d:45:0d:5c:98:d9:cd:9d:e0:c5:f7: fd:1d:9d:9d:a6:9c:9d:05:e7:11:5d:54:54:d6:c5: 7f:b5:e9:9b:e9:c4:80:1d:18:9b:95:65:dc:40:54: 2e:ab:b8:64:bd:b5:58:2a:61:fe:7f:ec:4c:a0:3c: 3f:e2:a7:55:37:17:9d:a6:76:39:9c:2e:90:6c:f5: 77:88:86:4d:28:bb:6b:19:b9:c9:6f:2e:c1:7f:dc: 59:b5:12:e0:68:41:1f:11:00:98:ae:77:7f:ee:d2: ac:de:eb:37:f4:08:8a:22:9e:3b:02:b5:d0:53:87: 7e:b5:3a:a6:38:94:a6:f2:23:ea:9a:04:36:6f:cf: bf:ab:c2:dc:3e:71:99:95:a3:30:90:41:77:ef:5d: a7:07:a4:93:bd:b5:e2:36:62:c5:8b:76:3f:04:10: 72:94:f8:d5:33:b4:88:c3:47:b7:45:4f:09:24:03: ca:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C5:0A:76:41:79:7E:D5:C7:E1:AD:97:F3:3D:F9:95:9D:F4:37:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fcfb759-dfb5-4af1-8512-f27c02566de0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.116.0.0/16 Signature Algorithm: sha256WithRSAEncryption 18:c4:e0:de:33:35:df:cd:11:e6:35:b8:6c:c7:9d:18:cb:c6: f6:26:f7:8f:c0:09:b5:9f:23:82:04:f3:1c:b9:c8:d9:b2:98: 53:c3:c0:e8:fb:b0:60:23:11:c4:c6:50:95:b1:6a:bb:16:b0: e1:5f:e0:6b:c8:2f:37:d3:c9:39:79:73:81:20:a2:5e:05:e9: a5:b8:e6:11:f4:9e:34:47:fd:b4:2c:4b:79:b3:56:78:38:87: 78:64:a2:90:e4:91:bb:3d:08:de:74:2f:1f:35:01:4e:09:e5: b3:bb:9b:12:97:54:25:5e:79:b6:8b:28:39:b0:de:e2:7e:fd: 7d:c7:74:22:65:8d:33:2a:e8:db:ea:53:bb:b1:b2:70:d7:61: ff:83:52:47:70:a8:5c:b4:75:ff:15:ae:da:b8:3c:2b:b7:34: 50:81:92:97:14:9e:b4:8e:15:e9:4f:8b:2e:c1:35:75:56:12: 61:09:b1:e1:1c:e7:3f:b6:fc:e6:df:b4:a4:3b:79:c4:b7:0f: cf:ff:0a:7a:28:dd:01:56:55:c0:3e:e2:e6:0a:63:e6:c7:63: 08:28:27:2e:49:33:79:3e:10:5a:ba:4a:81:e4:15:9a:11:1e: fc:ca:d0:04:fa:19:13:45:c1:78:e1:6e:c8:f9:85:8b:b8:84: 9b:1a:f7:08 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVTtVawj9EsTc37xLLxYXNHzXCfswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTMzMTAzMjRlZjU3M2ZlMTE2YjllNTI3MTNkMWYwODRi OGM4ZTgxZDkxNWY0MWIwNWQ3ZDgyZjZiNDM3MjdmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3Tr0Qk2jQks5wNhWKsZjfei4gCZ0NNW3IerM2tWjzACBd Y0/sj5ABp0AVSGYvfL5czcgFP2ZwYolbnqtbPBOjAtgDgHNS+sTIFkEKelg9RQ1c mNnNneDF9/0dnZ2mnJ0F5xFdVFTWxX+16ZvpxIAdGJuVZdxAVC6ruGS9tVgqYf5/ 7EygPD/ip1U3F52mdjmcLpBs9XeIhk0ou2sZuclvLsF/3Fm1EuBoQR8RAJiud3/u 0qze6zf0CIoinjsCtdBTh361OqY4lKbyI+qaBDZvz7+rwtw+cZmVozCQQXfvXacH pJO9teI2YsWLdj8EEHKU+NUztIjDR7dFTwkkA8rjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUTsUKdkF5ftXH4a2X8z35lZ30NxQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVmY2ZiNzU5LWRmYjUtNGFmMS04NTEyLWYyN2MwMjU2NmRlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2dDANBgkqhkiG9w0BAQsFAAOCAQEAGMTg3jM1380R5jW4bMedGMvG9ib3 j8AJtZ8jggTzHLnI2bKYU8PA6PuwYCMRxMZQlbFquxaw4V/ga8gvN9PJOXlzgSCi XgXppbjmEfSeNEf9tCxLebNWeDiHeGSikOSRuz0I3nQvHzUBTgnls7ubEpdUJV55 tosoObDe4n79fcd0ImWNMyro2+pTu7GycNdh/4NSR3CoXLR1/xWu2rg8K7c0UIGS lxSetI4V6U+LLsE1dVYSYQmx4RznP7b85t+0pDt5xLcPz/8KeijdAVZVwD7i5gpj 5sdjCCgnLkkzeT4QWrpKgeQVmhEe/MrQBPoZE0XBeOFuyPmFi7iEmxr3CA== -----END CERTIFICATE-----Generated at Fri Apr 26 00:40:18 2024 by rpki-client on console-fra.rpki-client.org