$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70562065-eac3-4bad-8f95-db7a62fc8e6b.roa File: 70562065-eac3-4bad-8f95-db7a62fc8e6b.roa (raw, json) Hash identifier: R21nJFVdYUUbfFvrhXg40Esr7QEtAv0fk3Cl9eReXNE= Subject key identifier: 05:A5:61:A2:25:98:F2:28:7D:C4:F6:19:0F:E1:97:89:6A:8F:99:6F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4C6D92F0A84BB3CFA20003B66B1601CC6A20D30A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70562065-eac3-4bad-8f95-db7a62fc8e6b.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 56.48.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:6d:92:f0:a8:4b:b3:cf:a2:00:03:b6:6b:16:01:cc:6a:20:d3:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=95f31f40c7673771e61c0364345b6d5226669125baf58973a36c6e53f0384012, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:42:d0:8f:36:24:95:fd:9e:ec:6a:df:9a:67: d2:02:69:25:2b:42:10:c9:4d:e1:87:0c:95:93:d9: ec:13:4b:62:a4:39:de:9c:5e:d9:bb:f9:ee:cb:e5: e4:d6:ea:2e:b1:cc:ee:00:68:58:26:ce:fd:b4:b5: e9:05:e4:b8:84:24:6b:27:d7:22:73:ba:ac:2b:c3: 53:c7:8c:7f:42:d0:ef:57:5b:8f:83:d7:63:2f:8c: ec:5f:ed:6b:17:ae:98:c1:8e:78:ff:53:74:de:e7: a8:d7:bd:c1:2c:ea:c9:97:92:92:76:d9:0d:48:14: e9:cf:da:ef:3d:08:e7:c2:6b:1b:0b:bf:32:b0:b9: 45:52:38:47:8a:68:3a:f4:29:59:53:39:e1:2e:c5: 99:b6:34:d5:c0:68:38:33:80:56:d9:10:a9:c1:9c: e2:bb:2f:3c:89:af:2b:89:9a:3b:a8:42:25:b6:41: 35:b0:75:9b:ce:02:a9:db:9b:7c:00:8b:32:8e:44: fe:09:f1:81:e2:8d:46:cc:a8:e8:a9:a1:35:b2:4c: c6:3b:99:1c:74:f9:fe:24:c2:8a:00:ba:5e:b0:f8: 5a:71:5e:27:c6:e8:0e:63:0b:34:55:e6:40:c1:d1: 2b:96:5a:dd:92:cf:d5:b5:14:0c:5e:15:2c:23:40: 0d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A5:61:A2:25:98:F2:28:7D:C4:F6:19:0F:E1:97:89:6A:8F:99:6F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70562065-eac3-4bad-8f95-db7a62fc8e6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.48.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1c:a9:b1:ee:83:47:22:bd:3f:31:5f:cf:7c:0b:57:7c:d5:f3: d4:3f:0d:74:e4:c2:30:bb:44:19:21:16:a5:88:3f:22:f8:ae: f7:d9:f9:83:f5:7b:5a:1c:6c:6e:cc:58:80:5b:44:26:0c:b3: 0e:26:ea:ea:1f:47:e2:6e:c8:88:6c:67:f1:37:27:94:6b:b6: 90:cb:58:38:0d:3c:18:0f:e8:df:79:09:9f:a1:fe:a9:65:2e: 38:f3:a8:3d:fe:d4:32:d3:6e:f2:a0:43:a3:be:6d:91:eb:60: 5f:07:df:f8:ff:98:b7:42:f4:b2:b8:df:f2:e7:9a:99:e8:ad: 39:29:38:e8:d5:66:08:a8:8e:30:01:b4:6c:98:38:a3:29:57: 49:18:72:20:9c:d9:4b:e2:fa:de:38:a9:6c:71:2c:54:70:9e: 2c:56:0c:e0:d2:99:06:fb:db:a4:4d:d6:18:a0:16:d0:26:1e: 22:a2:59:23:83:84:f0:1c:6c:9d:62:e1:5a:3e:49:5b:20:19: 0d:c7:d6:81:0a:c7:77:1e:60:73:b4:ff:1e:51:69:5e:be:09: 7f:03:a9:35:a5:0e:c7:f5:8b:ac:09:dc:23:b6:85:4b:07:91: 84:0f:1b:41:b6:6e:7b:3e:35:21:92:26:72:c3:7b:82:91:5f: 5f:b8:10:fb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTG2S8KhLs8+iAAO2axYBzGog0wowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NWYzMWY0MGM3NjczNzcxZTYxYzAzNjQzNDViNmQ1MjI2 NjY5MTI1YmFmNTg5NzNhMzZjNmU1M2YwMzg0MDEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvQtCPNiSV/Z7sat+aZ9ICaSUrQhDJTeGHDJWT2ewTS2Kk Od6cXtm7+e7L5eTW6i6xzO4AaFgmzv20tekF5LiEJGsn1yJzuqwrw1PHjH9C0O9X W4+D12MvjOxf7WsXrpjBjnj/U3Te56jXvcEs6smXkpJ22Q1IFOnP2u89COfCaxsL vzKwuUVSOEeKaDr0KVlTOeEuxZm2NNXAaDgzgFbZEKnBnOK7LzyJryuJmjuoQiW2 QTWwdZvOAqnbm3wAizKORP4J8YHijUbMqOipoTWyTMY7mRx0+f4kwooAul6w+Fpx XifG6A5jCzRV5kDB0SuWWt2Sz9W1FAxeFSwjQA2pAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUBaVhoiWY8ih9xPYZD+GXiWqPmW8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcwNTYyMDY1LWVhYzMtNGJhZC04Zjk1LWRiN2E2MmZjOGU2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4MDANBgkqhkiG9w0BAQsFAAOCAQEAHKmx7oNHIr0/MV/PfAtXfNXz1D8N dOTCMLtEGSEWpYg/Iviu99n5g/V7WhxsbsxYgFtEJgyzDibq6h9H4m7IiGxn8Tcn lGu2kMtYOA08GA/o33kJn6H+qWUuOPOoPf7UMtNu8qBDo75tketgXwff+P+Yt0L0 srjf8ueameitOSk46NVmCKiOMAG0bJg4oylXSRhyIJzZS+L63jipbHEsVHCeLFYM 4NKZBvvbpE3WGKAW0CYeIqJZI4OE8BxsnWLhWj5JWyAZDcfWgQrHdx5gc7T/HlFp Xr4JfwOpNaUOx/WLrAncI7aFSweRhA8bQbZuez41IZImcsN7gpFfX7gQ+w== -----END CERTIFICATE-----Generated at Thu May 2 08:51:03 2024 by rpki-client on console-fra.rpki-client.org