$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/641b68cf-d9ca-474c-bec7-4a74387333c1.roa File: 641b68cf-d9ca-474c-bec7-4a74387333c1.roa (raw, json) Hash identifier: +ha3ZqNOwQAjgHwUBYfyNnBZsajjzRumi8JF2aI0ww8= Subject key identifier: 93:8E:D6:B0:31:AC:99:BF:D3:F5:D3:21:99:70:C4:95:6F:F3:A9:5F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 07F79260AE3C0F900B01FE07DAFC78C81AFD8ACC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/641b68cf-d9ca-474c-bec7-4a74387333c1.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 15.241.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:f7:92:60:ae:3c:0f:90:0b:01:fe:07:da:fc:78:c8:1a:fd:8a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=d42bb59dfb0fff6bde72de2b54d89b007e8f5825bc8c6f984f06ba8f79fed38b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3c:b7:cd:5f:77:c4:37:71:b3:c7:8e:62:1b: d6:f5:a3:19:bd:41:71:54:a0:a2:d2:06:ca:25:80: d0:e9:52:9d:a1:d1:82:93:c3:0c:f6:bb:e5:b2:29: bc:0e:00:80:28:2e:06:6a:41:16:e5:77:18:9a:38: 44:90:e2:59:66:d6:01:46:f8:69:24:f4:5c:f0:4d: 27:0f:b3:b2:83:7e:4e:4d:80:a2:1f:27:26:be:0f: a5:c6:45:49:5e:b5:cb:45:3e:36:89:e8:c1:d5:23: 6c:5f:00:79:cc:b3:37:e5:29:f9:82:10:46:8d:78: 0c:be:f7:c9:3e:8a:2c:68:4c:7b:d5:80:f1:2b:e7: a7:12:48:a2:e8:c9:33:a4:5a:4a:40:fd:90:58:06: aa:9b:21:43:1a:77:d0:d1:b9:69:70:e8:1f:f6:52: 41:ac:f9:59:3b:ec:5d:7b:79:2e:07:99:01:80:ba: 8b:b4:05:a4:47:a5:fb:41:97:9b:9f:cd:52:67:b4: 8c:2b:6a:48:e5:a3:16:3f:84:06:cd:7f:0b:23:ad: d6:f3:49:70:19:73:b4:2f:8f:41:58:6d:33:5d:e0: c1:d7:1d:40:41:ee:a6:7d:d8:55:b0:b6:6f:28:90: ca:b4:aa:61:0b:01:d3:23:c7:ee:f0:48:93:ed:7d: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8E:D6:B0:31:AC:99:BF:D3:F5:D3:21:99:70:C4:95:6F:F3:A9:5F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/641b68cf-d9ca-474c-bec7-4a74387333c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.241.0.0/16 Signature Algorithm: sha256WithRSAEncryption 01:95:36:5d:0c:fd:79:cf:11:e1:e4:62:82:74:61:07:6b:c6: db:e9:d6:0c:54:fd:c1:b6:83:0e:c4:f6:12:6b:34:58:27:d0: 1a:6e:4d:ed:fb:ca:36:e9:9b:00:2e:b2:51:a0:c9:b3:e3:89: 4c:f0:dd:d8:83:7d:6c:95:2a:ee:39:03:b9:ba:44:69:2c:53: 34:9b:45:64:02:51:d4:59:99:f4:c0:03:82:d6:58:6c:3f:59: 54:35:83:29:9a:07:c5:01:b1:7d:99:5c:42:3a:ab:01:71:83: 02:eb:4b:23:9d:83:a1:6a:be:ed:ed:03:04:fc:a7:90:e1:38: 61:80:c2:23:7a:01:a7:85:c0:17:1f:43:db:11:35:bf:a2:7b: ad:0f:30:b4:a0:7c:02:5c:bb:97:c8:42:24:53:e1:57:17:da: 59:94:41:67:e1:b7:02:cf:2e:d7:9e:02:11:e1:94:97:d1:31: 28:57:2d:61:a8:13:fc:3e:99:48:79:54:61:19:55:1d:4d:4e: 64:3a:cc:50:0c:bf:4e:38:96:8f:65:52:9d:1c:fd:25:9b:53: 3c:03:46:3d:93:ab:10:64:10:14:79:f8:23:f3:ec:72:02:98: 41:d6:b5:cf:49:a4:29:22:4b:29:c5:ed:74:4b:38:94:32:71: e6:86:10:02 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUB/eSYK48D5ALAf4H2vx4yBr9iswwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDJiYjU5ZGZiMGZmZjZiZGU3MmRlMmI1NGQ4OWIwMDdl OGY1ODI1YmM4YzZmOTg0ZjA2YmE4Zjc5ZmVkMzhiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCPLfNX3fEN3Gzx45iG9b1oxm9QXFUoKLSBsolgNDpUp2h 0YKTwwz2u+WyKbwOAIAoLgZqQRbldxiaOESQ4llm1gFG+Gkk9FzwTScPs7KDfk5N gKIfJya+D6XGRUletctFPjaJ6MHVI2xfAHnMszflKfmCEEaNeAy+98k+iixoTHvV gPEr56cSSKLoyTOkWkpA/ZBYBqqbIUMad9DRuWlw6B/2UkGs+Vk77F17eS4HmQGA uou0BaRHpftBl5ufzVJntIwrakjloxY/hAbNfwsjrdbzSXAZc7Qvj0FYbTNd4MHX HUBB7qZ92FWwtm8okMq0qmELAdMjx+7wSJPtfY79AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUk47WsDGsmb/T9dMhmXDElW/zqV8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY0MWI2OGNmLWQ5Y2EtNDc0Yy1iZWM3LTRhNzQzODczMzNjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP8TANBgkqhkiG9w0BAQsFAAOCAQEAAZU2XQz9ec8R4eRignRhB2vG2+nW DFT9wbaDDsT2Ems0WCfQGm5N7fvKNumbAC6yUaDJs+OJTPDd2IN9bJUq7jkDubpE aSxTNJtFZAJR1FmZ9MADgtZYbD9ZVDWDKZoHxQGxfZlcQjqrAXGDAutLI52DoWq+ 7e0DBPynkOE4YYDCI3oBp4XAFx9D2xE1v6J7rQ8wtKB8Aly7l8hCJFPhVxfaWZRB Z+G3As8u154CEeGUl9ExKFctYagT/D6ZSHlUYRlVHU1OZDrMUAy/TjiWj2VSnRz9 JZtTPANGPZOrEGQQFHn4I/PscgKYQda1z0mkKSJLKcXtdEs4lDJx5oYQAg== -----END CERTIFICATE-----Generated at Thu May 2 17:41:10 2024 by rpki-client on console-fra.rpki-client.org