$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7016bb7d-f3cc-4800-9235-15983606a24c.roa File: 7016bb7d-f3cc-4800-9235-15983606a24c.roa (raw, json) Hash identifier: h71yGxexOOSbxM8hrMKxzhtIJ0XtMe/IZRV1K9nSmpA= Subject key identifier: F7:AD:4D:0C:4A:D1:8F:84:1F:54:7E:83:E6:DB:42:F6:0A:42:B1:77 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 50C0E7D54005032DF6308A4BDC3ABDEB84BB1BEF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7016bb7d-f3cc-4800-9235-15983606a24c.roa Signing time: Fri 12 Apr 2024 00:00:00 +0000 ROA not before: Fri 12 Apr 2024 00:00:00 +0000 ROA not after: Fri 17 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 56.155.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c0:e7:d5:40:05:03:2d:f6:30:8a:4b:dc:3a:bd:eb:84:bb:1b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:00:00 2024 GMT Not After : May 17 23:59:59 2024 GMT Subject: serialNumber=410f369c09d50ae2b4ec40f23e4d5ef4b09c247ef935de5ff94f34b8a796c63d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1f:98:5b:24:2e:8f:c2:d7:0e:69:23:73:0f: fa:10:d6:1e:ed:eb:5f:a9:04:d0:b4:ca:53:e8:c8: 25:30:fc:3e:49:e8:ab:ba:19:7c:0c:c1:01:b6:6d: 83:cb:0a:e5:a4:15:4d:5a:4e:ac:a0:24:50:d3:88: 79:6b:a7:60:6d:3b:c4:e0:9c:1f:95:73:35:ec:67: ea:1a:88:36:ee:fe:d8:59:29:eb:0b:16:21:4c:29: c8:2a:91:5a:96:57:0b:80:13:8a:5a:c3:15:0c:c0: df:d1:75:59:f6:a6:d9:f4:18:15:fc:e2:8b:04:54: 1e:fb:6a:c2:82:85:39:90:84:da:2d:ba:da:fa:70: 8e:75:3d:02:58:3b:41:0e:6c:ed:1a:b0:32:23:5d: 0c:a2:be:80:1b:02:d9:e8:2e:37:a6:40:c4:b4:f7: 47:66:27:ff:cd:6d:0f:dd:a9:55:a9:30:b9:f9:6d: 84:0c:5f:29:36:d5:a4:3b:94:f5:b1:f1:a6:fd:20: 66:3d:f3:4d:bf:d6:18:1f:c6:79:e1:30:0e:df:f9: 45:4d:a9:ba:65:b9:e0:be:be:fe:af:4c:14:2c:59: 34:96:56:15:a5:28:0e:da:8a:0a:be:56:e6:84:b5: f6:ce:26:c3:de:f1:91:ea:68:d4:b4:69:99:f3:3c: 2f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AD:4D:0C:4A:D1:8F:84:1F:54:7E:83:E6:DB:42:F6:0A:42:B1:77 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7016bb7d-f3cc-4800-9235-15983606a24c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.155.0.0/17 Signature Algorithm: sha256WithRSAEncryption 0c:54:2b:4e:20:71:0b:fe:37:da:00:a7:e3:dc:1a:c0:2b:b4: 29:65:72:58:23:af:d9:39:1f:70:d1:49:91:76:39:fa:40:a9: af:58:b6:ed:96:44:8a:0b:e0:d1:b4:a4:00:4f:ed:78:16:c9: 01:2c:dc:b1:bb:ee:da:94:b7:be:f1:b1:8b:3f:f9:df:b2:67: 1d:5d:44:98:df:01:0b:2c:3f:cc:5c:41:b5:92:92:11:c1:f2: df:12:b4:3d:ea:98:1c:60:ec:ce:b0:1f:85:3e:4d:06:83:47: 96:dd:6a:17:56:a6:2b:4a:c4:85:28:c5:30:cf:28:36:bc:b4: ba:52:b9:0a:7b:58:10:07:66:cb:6e:62:9c:d5:61:65:86:7d: 60:fb:75:db:95:8d:6c:65:7c:fc:bd:e4:d5:4b:88:32:b3:b5: f9:13:f7:f1:e5:d8:e5:3e:39:24:8b:b1:a9:87:51:57:26:70: ef:e4:0c:e1:eb:2b:c9:85:1f:1a:e9:37:50:bf:17:bf:13:74: c5:ff:20:a6:10:f0:29:aa:95:c3:d0:be:85:50:1f:78:b1:73: 74:1e:38:7c:f9:16:a5:94:89:6f:bd:73:fb:98:72:da:f7:19: 0b:9e:93:d3:1f:7c:0d:b6:9d:7f:74:be:0c:b4:50:1b:dc:a1: 75:58:57:f9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUMDn1UAFAy32MIpL3Dq964S7G+8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEyMDAwMDAwWhcNMjQwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTBmMzY5YzA5ZDUwYWUyYjRlYzQwZjIzZTRkNWVmNGIw OWMyNDdlZjkzNWRlNWZmOTRmMzRiOGE3OTZjNjNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUH5hbJC6PwtcOaSNzD/oQ1h7t61+pBNC0ylPoyCUw/D5J 6Ku6GXwMwQG2bYPLCuWkFU1aTqygJFDTiHlrp2BtO8TgnB+VczXsZ+oaiDbu/thZ KesLFiFMKcgqkVqWVwuAE4pawxUMwN/RdVn2ptn0GBX84osEVB77asKChTmQhNot utr6cI51PQJYO0EObO0asDIjXQyivoAbAtnoLjemQMS090dmJ//NbQ/dqVWpMLn5 bYQMXyk21aQ7lPWx8ab9IGY9802/1hgfxnnhMA7f+UVNqbplueC+vv6vTBQsWTSW VhWlKA7aigq+VuaEtfbOJsPe8ZHqaNS0aZnzPC/PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU961NDErRj4QfVH6D5ttC9gpCsXcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcwMTZiYjdkLWYzY2MtNDgwMC05MjM1LTE1OTgzNjA2YTI0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc4mwAwDQYJKoZIhvcNAQELBQADggEBAAxUK04gcQv+N9oAp+PcGsArtCll clgjr9k5H3DRSZF2OfpAqa9Ytu2WRIoL4NG0pABP7XgWyQEs3LG77tqUt77xsYs/ +d+yZx1dRJjfAQssP8xcQbWSkhHB8t8StD3qmBxg7M6wH4U+TQaDR5bdahdWpitK xIUoxTDPKDa8tLpSuQp7WBAHZstuYpzVYWWGfWD7dduVjWxlfPy95NVLiDKztfkT 9/Hl2OU+OSSLsamHUVcmcO/kDOHrK8mFHxrpN1C/F78TdMX/IKYQ8CmqlcPQvoVQ H3ixc3QeOHz5FqWUiW+9c/uYctr3GQuek9MffA22nX90vgy0UBvcoXVYV/k= -----END CERTIFICATE-----Generated at Thu May 2 17:17:12 2024 by rpki-client on console-ams.rpki-client.org