$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/682b8fc9-2940-42f6-80bc-4697ab951098.roa File: 682b8fc9-2940-42f6-80bc-4697ab951098.roa (raw, json) Hash identifier: xHF1EH1dgcK2ssrC5nKe459AHyaKJzFMcD6HZhpu1dM= Subject key identifier: D0:52:D0:82:C3:B6:81:EA:33:8D:5C:9D:DA:36:E5:C7:C8:DE:BD:A3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1C04F44E95BDDB8B241860B13AEA3B198E686F57 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/682b8fc9-2940-42f6-80bc-4697ab951098.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 56.48.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:04:f4:4e:95:bd:db:8b:24:18:60:b1:3a:ea:3b:19:8e:68:6f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=b5788d93640f1547347d1500181dfceda05938baa8704c643aa58a4499a529bd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:37:8b:04:75:26:a0:6e:a6:83:f3:ee:2b:5c: 4a:d5:6f:6e:77:d2:a1:44:2e:4a:72:a2:e2:93:ee: bc:87:b9:ad:48:e5:ff:dd:f2:9f:ec:89:7b:15:51: fe:98:7b:e4:96:f5:bb:73:56:a8:bd:04:d6:98:be: f9:17:e3:e9:f8:f5:0b:77:d0:46:e8:53:15:8f:c2: ff:24:5d:66:1a:0c:a1:fa:f2:e7:06:36:f7:15:aa: 9a:20:d2:75:0b:8c:f0:aa:1b:4e:60:64:d4:22:fa: 32:15:b2:70:75:0a:bb:b5:4f:f8:bf:9e:df:3b:cf: 87:0f:47:b5:c4:eb:0e:d8:c5:56:b6:5c:b6:70:bd: e3:cf:64:a8:46:a7:a4:97:51:25:35:bd:bb:81:16: 96:a4:8e:21:28:19:99:16:4a:ee:17:5c:0e:22:9e: 0f:67:8e:d2:5d:f7:c1:a1:2a:32:ef:0f:e1:ee:cd: 5a:78:5c:06:bb:39:f3:81:c6:c4:c4:2e:60:e9:c0: 5b:93:fe:4a:be:a5:77:49:6d:96:28:a0:4b:49:80: f1:95:bc:7a:a5:57:66:89:cc:41:42:b2:c3:09:88: 1c:57:2a:72:58:09:86:8b:20:bc:25:3d:af:a7:f8: 67:11:49:cb:3f:e0:d7:25:a0:12:e6:ac:a9:aa:bb: 59:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:52:D0:82:C3:B6:81:EA:33:8D:5C:9D:DA:36:E5:C7:C8:DE:BD:A3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/682b8fc9-2940-42f6-80bc-4697ab951098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.48.0.0/16 Signature Algorithm: sha256WithRSAEncryption 16:e9:bb:95:70:98:49:33:7f:0e:ef:fa:15:b4:5e:ce:14:e2: f2:65:b5:6a:e6:2b:ee:5a:38:da:49:09:44:3d:ba:eb:18:43: b9:43:73:20:98:b9:33:11:7a:71:02:85:24:1e:dd:df:4f:1c: 42:1e:eb:64:b2:0c:14:3f:1b:3d:07:b4:91:70:eb:ef:15:75: 53:b4:cf:71:0b:3f:4a:bf:77:fe:27:08:c7:36:b8:84:09:b5: 92:a1:36:5f:3c:14:9e:ae:46:fe:b3:e5:1c:1d:17:e9:fc:c8: f9:05:0c:ec:99:66:40:c8:d2:0e:03:0b:02:0a:72:fa:9a:6c: 82:71:82:12:0f:2b:c8:e7:86:3c:65:cb:65:3d:13:45:6b:8c: fe:4f:98:bb:fe:e9:e6:f4:d9:1c:33:40:39:1a:35:23:71:37: 5a:7d:ac:79:25:5a:0c:32:77:53:52:42:68:30:bb:0c:58:28: bc:3c:77:24:bb:11:62:79:f9:9b:b0:eb:58:2b:3e:f2:7a:be: 6b:fe:0e:d4:35:66:40:4f:58:9a:10:b5:f5:93:d9:77:c7:44: 46:bb:58:bb:3d:33:62:36:51:60:6c:d9:2d:3f:92:4d:bd:ba: fd:ee:a5:f2:c9:f9:cd:89:1b:f9:a3:3c:4b:26:9d:0c:95:9a: 14:d5:78:8b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHAT0TpW924skGGCxOuo7GY5ob1cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTc4OGQ5MzY0MGYxNTQ3MzQ3ZDE1MDAxODFkZmNlZGEw NTkzOGJhYTg3MDRjNjQzYWE1OGE0NDk5YTUyOWJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSN4sEdSagbqaD8+4rXErVb2530qFELkpyouKT7ryHua1I 5f/d8p/siXsVUf6Ye+SW9btzVqi9BNaYvvkX4+n49Qt30EboUxWPwv8kXWYaDKH6 8ucGNvcVqpog0nULjPCqG05gZNQi+jIVsnB1Cru1T/i/nt87z4cPR7XE6w7YxVa2 XLZwvePPZKhGp6SXUSU1vbuBFpakjiEoGZkWSu4XXA4ing9njtJd98GhKjLvD+Hu zVp4XAa7OfOBxsTELmDpwFuT/kq+pXdJbZYooEtJgPGVvHqlV2aJzEFCssMJiBxX KnJYCYaLILwlPa+n+GcRScs/4NcloBLmrKmqu1kBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU0FLQgsO2geozjVyd2jblx8jevaMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4MmI4ZmM5LTI5NDAtNDJmNi04MGJjLTQ2OTdhYjk1MTA5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4MDANBgkqhkiG9w0BAQsFAAOCAQEAFum7lXCYSTN/Du/6FbRezhTi8mW1 auYr7lo42kkJRD266xhDuUNzIJi5MxF6cQKFJB7d308cQh7rZLIMFD8bPQe0kXDr 7xV1U7TPcQs/Sr93/icIxza4hAm1kqE2XzwUnq5G/rPlHB0X6fzI+QUM7JlmQMjS DgMLAgpy+ppsgnGCEg8ryOeGPGXLZT0TRWuM/k+Yu/7p5vTZHDNAORo1I3E3Wn2s eSVaDDJ3U1JCaDC7DFgovDx3JLsRYnn5m7DrWCs+8nq+a/4O1DVmQE9YmhC19ZPZ d8dERrtYuz0zYjZRYGzZLT+STb26/e6l8sn5zYkb+aM8SyadDJWaFNV4iw== -----END CERTIFICATE-----Generated at Thu May 9 17:46:52 2024 by rpki-client on console-ams.rpki-client.org