$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61431569-b7fc-4d85-9f62-ad0b12867faf.roa File: 61431569-b7fc-4d85-9f62-ad0b12867faf.roa (raw, json) Hash identifier: eawuxT8Hqb6DkKL6b46En01UZkNuUgRBoOHD6eXYoPg= Subject key identifier: 89:40:AE:57:A6:33:E3:A1:61:16:E1:F5:48:12:6D:2A:18:4A:1A:63 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7B4BCBE704B8C747C6C980D9018D55B747A01DA8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61431569-b7fc-4d85-9f62-ad0b12867faf.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 16.154.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:4b:cb:e7:04:b8:c7:47:c6:c9:80:d9:01:8d:55:b7:47:a0:1d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=d50adfe480ce724cc2ce2c48ba23118a51a08d18f609e1181176c2ab5f2b57bf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b7:47:2d:18:34:bc:fd:5d:3d:23:b4:d8:b3: d4:91:51:57:2c:be:e9:c8:85:9e:b5:88:0b:ce:e7: bc:10:21:c7:71:d5:30:b7:1b:1c:38:e4:03:9d:46: 5a:80:b5:8f:37:e3:7b:bd:a2:87:a7:1b:9e:86:24: 7c:0a:29:39:33:5a:fd:ad:f4:72:9b:29:a9:82:15: 48:c7:6e:e4:f5:c7:46:6d:ae:dc:d5:09:92:04:d6: 5d:f0:43:7e:1a:ef:52:54:49:e9:4c:0d:3e:a4:c8: 96:a8:eb:5c:f6:4b:a1:3b:4c:2b:6e:c8:54:67:90: 9b:19:6b:76:c9:06:f8:6a:8a:94:c8:e2:c6:01:d6: e2:31:77:0f:96:0f:dd:3c:d4:b9:a0:c5:a3:4a:9c: 77:72:4b:be:c0:49:a3:e2:a1:6b:5e:f8:f1:3e:99: 4f:01:eb:30:39:98:b4:c8:dd:a9:64:f2:47:4b:59: 88:1c:40:30:6d:93:e3:21:88:77:09:8c:b3:29:cb: 67:67:b8:2b:02:b5:bd:1e:4e:90:3c:82:0c:5c:f0: fa:a7:ea:b8:8a:14:ad:d3:24:19:9e:f9:23:fa:bd: 0c:4c:ac:00:f5:69:27:e6:44:4c:22:3a:91:47:47: 92:53:42:c8:99:49:b4:04:2e:ba:d1:67:50:c7:3a: 40:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:40:AE:57:A6:33:E3:A1:61:16:E1:F5:48:12:6D:2A:18:4A:1A:63 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61431569-b7fc-4d85-9f62-ad0b12867faf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.154.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2a:fa:5d:81:10:89:92:53:23:90:72:92:80:36:29:82:95:1c: e4:3f:5e:6c:a7:28:f9:c1:27:d1:c8:a8:0b:58:cd:61:2d:3c: c8:55:74:ff:2a:d6:f4:0d:5f:b9:0d:32:ad:fe:db:7a:4f:49: 1d:91:53:53:eb:6f:4b:ed:af:59:3e:60:d3:b8:e0:1b:d2:4a: b2:df:71:9c:e8:d9:79:5b:3a:6b:72:4d:d8:95:78:54:62:73: e3:ea:78:91:b1:80:ea:db:47:37:73:43:ae:07:95:fb:14:3e: d8:f1:cd:5c:7a:ce:03:25:74:fa:05:69:e2:59:b0:df:7d:40: a6:ad:7f:2f:b2:6f:bd:43:a3:3d:33:65:c8:8f:4b:01:d9:3c: 34:38:b1:99:c7:b7:d3:c4:64:bb:dd:d4:15:e2:c4:69:0f:c1: 75:77:9a:91:e1:22:c8:f3:ac:66:55:ab:14:b8:2c:85:ca:69: 38:99:08:cc:22:58:77:6f:53:09:f3:fc:7a:26:b8:5f:b8:63: a2:06:5f:50:64:0e:b6:75:16:45:3f:3e:03:fc:0e:b6:08:bc: 3f:19:00:7a:ca:83:ab:3d:24:d5:08:00:0d:39:d2:67:2e:18: d5:81:3a:a1:82:35:5e:a2:6e:4a:d0:b2:ec:06:60:76:05:1e: 8a:ca:eb:fb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUe0vL5wS4x0fGyYDZAY1Vt0egHagwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTBhZGZlNDgwY2U3MjRjYzJjZTJjNDhiYTIzMTE4YTUx YTA4ZDE4ZjYwOWUxMTgxMTc2YzJhYjVmMmI1N2JmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUt0ctGDS8/V09I7TYs9SRUVcsvunIhZ61iAvO57wQIcdx 1TC3Gxw45AOdRlqAtY8343u9ooenG56GJHwKKTkzWv2t9HKbKamCFUjHbuT1x0Zt rtzVCZIE1l3wQ34a71JUSelMDT6kyJao61z2S6E7TCtuyFRnkJsZa3bJBvhqipTI 4sYB1uIxdw+WD9081LmgxaNKnHdyS77ASaPioWte+PE+mU8B6zA5mLTI3alk8kdL WYgcQDBtk+MhiHcJjLMpy2dnuCsCtb0eTpA8ggxc8Pqn6riKFK3TJBme+SP6vQxM rAD1aSfmREwiOpFHR5JTQsiZSbQELrrRZ1DHOkChAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUiUCuV6Yz46FhFuH1SBJtKhhKGmMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYxNDMxNTY5LWI3ZmMtNGQ4NS05ZjYyLWFkMGIxMjg2N2ZhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQmjANBgkqhkiG9w0BAQsFAAOCAQEAKvpdgRCJklMjkHKSgDYpgpUc5D9e bKco+cEn0cioC1jNYS08yFV0/yrW9A1fuQ0yrf7bek9JHZFTU+tvS+2vWT5g07jg G9JKst9xnOjZeVs6a3JN2JV4VGJz4+p4kbGA6ttHN3NDrgeV+xQ+2PHNXHrOAyV0 +gVp4lmw331Apq1/L7JvvUOjPTNlyI9LAdk8NDixmce308Rku93UFeLEaQ/BdXea keEiyPOsZlWrFLgshcppOJkIzCJYd29TCfP8eia4X7hjogZfUGQOtnUWRT8+A/wO tgi8PxkAesqDqz0k1QgADTnSZy4Y1YE6oYI1XqJuStCy7AZgdgUeisrr+w== -----END CERTIFICATE-----Generated at Thu May 2 03:11:32 2024 by rpki-client on console-ams.rpki-client.org