$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d40291f-2150-45d8-89bb-42dd21ed51c3.roa File: 6d40291f-2150-45d8-89bb-42dd21ed51c3.roa (raw, json) Hash identifier: 4+UDREJ53QggwRj0r4YeDf8dYqOkKE1X22nMwjjjWpE= Subject key identifier: 16:F0:0D:21:1D:17:47:FF:EA:6D:5A:A4:F8:8B:69:FD:C2:D8:D3:C1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 172AEDA10660CB2AA3722FC8F8759E40300E3BF3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d40291f-2150-45d8-89bb-42dd21ed51c3.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 16.157.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:2a:ed:a1:06:60:cb:2a:a3:72:2f:c8:f8:75:9e:40:30:0e:3b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=bb9d4cdc3ff7241d7bb06fe087a5d5c6d49a7d7b11a6467e4b6b5c235dd9043f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6c:a0:45:04:c1:96:a5:11:76:8e:5d:e5:98: 65:02:28:96:a2:07:d2:dd:69:c6:22:1f:0a:51:8c: d4:9f:91:c3:72:71:10:e4:ee:a3:66:bf:0b:5e:92: 6b:2e:a3:01:f8:d5:be:60:51:d4:fa:21:48:28:bb: 1f:33:d1:2e:46:70:c5:81:4c:57:01:30:94:8f:d2: 69:2a:45:5f:5c:6e:f2:a5:bd:c0:14:3b:2a:64:50: cd:b9:96:b2:50:2d:ca:be:cd:f3:ca:c9:7f:cd:16: b0:a5:9f:ba:7e:b0:c6:26:2d:2e:9c:a9:9f:41:c4: ab:7d:6e:45:84:bb:77:0f:43:d4:5e:34:75:74:e0: 5d:ae:c8:fd:32:82:73:4b:e3:3e:98:71:56:b2:85: 28:ee:76:f1:d0:3c:0f:e1:0e:42:8d:d4:5c:7e:68: 62:10:bd:fb:87:3b:d7:59:6a:25:2e:18:e0:9e:bf: 66:94:fc:69:d6:5d:53:de:a3:4d:59:58:64:9e:2a: 43:49:7f:7c:f6:f9:ff:7e:aa:f2:e0:97:d7:8a:ca: 00:bb:27:b7:44:cd:f0:92:13:f4:e7:61:ae:c5:f6: fd:16:07:13:93:4b:5d:f5:ef:62:77:81:6c:54:ee: c8:2f:b9:0b:63:c0:cb:82:de:28:87:c2:92:5f:5a: ad:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F0:0D:21:1D:17:47:FF:EA:6D:5A:A4:F8:8B:69:FD:C2:D8:D3:C1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d40291f-2150-45d8-89bb-42dd21ed51c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.157.0.0/16 Signature Algorithm: sha256WithRSAEncryption 09:32:17:e6:10:b2:9d:d0:2f:33:bd:1a:bf:24:68:8c:d2:b0: 69:73:f5:f3:e2:33:40:17:02:e1:db:27:14:ea:a1:33:e0:52: 26:e6:8a:17:2f:40:73:5c:eb:b3:df:3a:2a:95:01:ab:eb:e3: 11:aa:94:0d:80:75:32:83:14:e9:b2:82:0d:a9:67:3b:cf:ca: 5d:b4:2d:60:df:d4:a3:20:16:ec:42:01:e8:ab:a3:ab:8d:6d: 61:65:f9:21:72:ff:ff:39:97:2b:88:0b:c1:d1:d8:6e:0b:60: fb:62:33:09:d8:4b:4d:5c:3e:c3:54:c0:7e:0a:74:f3:79:21: d6:6a:fa:01:66:06:07:13:9f:31:7e:b1:d0:50:31:df:1d:2d: db:e5:04:a0:13:42:9d:d1:81:42:82:c1:2d:0d:37:47:d2:9f: 45:17:28:d2:f0:db:b8:ad:07:75:a7:bb:96:f2:81:63:39:f8: 06:50:4a:dc:3b:d9:43:91:b8:6c:b9:d4:fa:3f:8f:21:c2:b0: b7:81:3b:8a:d0:12:75:54:9a:b6:4d:31:5c:29:49:76:38:c1: 1e:f8:ac:d6:70:b8:12:52:f3:0f:a3:40:86:f0:12:1b:3e:e3: ac:d9:14:d9:30:c3:ba:55:ee:af:76:27:c7:3c:4b:cf:d9:31: 47:ab:df:b5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFyrtoQZgyyqjci/I+HWeQDAOO/MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjlkNGNkYzNmZjcyNDFkN2JiMDZmZTA4N2E1ZDVjNmQ0 OWE3ZDdiMTFhNjQ2N2U0YjZiNWMyMzVkZDkwNDNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIbKBFBMGWpRF2jl3lmGUCKJaiB9LdacYiHwpRjNSfkcNy cRDk7qNmvwtekmsuowH41b5gUdT6IUgoux8z0S5GcMWBTFcBMJSP0mkqRV9cbvKl vcAUOypkUM25lrJQLcq+zfPKyX/NFrCln7p+sMYmLS6cqZ9BxKt9bkWEu3cPQ9Re NHV04F2uyP0ygnNL4z6YcVayhSjudvHQPA/hDkKN1Fx+aGIQvfuHO9dZaiUuGOCe v2aU/GnWXVPeo01ZWGSeKkNJf3z2+f9+qvLgl9eKygC7J7dEzfCSE/TnYa7F9v0W BxOTS13172J3gWxU7sgvuQtjwMuC3iiHwpJfWq0DAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUFvANIR0XR//qbVqk+Itp/cLY08EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZkNDAyOTFmLTIxNTAtNDVkOC04OWJiLTQyZGQyMWVkNTFjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQnTANBgkqhkiG9w0BAQsFAAOCAQEACTIX5hCyndAvM70avyRojNKwaXP1 8+IzQBcC4dsnFOqhM+BSJuaKFy9Ac1zrs986KpUBq+vjEaqUDYB1MoMU6bKCDaln O8/KXbQtYN/UoyAW7EIB6Kujq41tYWX5IXL//zmXK4gLwdHYbgtg+2IzCdhLTVw+ w1TAfgp083kh1mr6AWYGBxOfMX6x0FAx3x0t2+UEoBNCndGBQoLBLQ03R9KfRRco 0vDbuK0Hdae7lvKBYzn4BlBK3DvZQ5G4bLnU+j+PIcKwt4E7itASdVSatk0xXClJ djjBHvis1nC4ElLzD6NAhvASGz7jrNkU2TDDulXur3YnxzxLz9kxR6vftQ== -----END CERTIFICATE-----Generated at Fri Apr 26 08:25:31 2024 by rpki-client on console-ams.rpki-client.org