$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70654f85-bde6-46bd-8880-47ebd7ba7843.roa File: 70654f85-bde6-46bd-8880-47ebd7ba7843.roa (raw, json) Hash identifier: o6xDVhJX+pTXaneRck8knFkNyvgpoRCd1JJFS+O/y/E= Subject key identifier: FA:AE:1D:4C:F1:0C:D2:FF:08:D8:F9:C1:DD:E3:92:50:86:EC:0D:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 32B0C454C2B900266B65D572DD355B8F476B10C0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70654f85-bde6-46bd-8880-47ebd7ba7843.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 16.190.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b0:c4:54:c2:b9:00:26:6b:65:d5:72:dd:35:5b:8f:47:6b:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=ccb65b3db7487b4643a2b7063a34c913f53fdaf28ab5e2b354bc574272de6368, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:56:5d:7e:db:15:74:7c:50:b3:6a:a0:33:fa: 2e:46:cf:c0:9f:99:85:c3:50:b7:07:d9:f0:c1:52: 60:76:d3:f2:d9:18:a6:c1:a8:f3:f9:82:13:2d:02: eb:81:c5:db:95:4b:62:46:c9:63:e8:cc:ff:4c:2e: cd:e3:0b:88:39:0f:6f:fd:61:7c:4e:f0:e8:b0:db: ed:b9:92:d4:55:fc:8e:75:6b:c4:22:a0:75:7b:c7: 69:f2:04:57:16:ea:9f:12:6d:c7:b6:4a:3c:a0:5e: 91:20:c7:38:d8:bc:05:3f:89:8d:31:9b:0e:ba:e2: 0a:94:bc:97:db:ca:d5:e3:9b:c5:14:64:3e:e9:3a: 12:68:49:0f:5a:06:30:2b:89:71:41:1b:19:d6:5f: 82:58:b2:f9:d3:28:81:38:a2:07:96:18:b6:94:32: 3d:5d:24:7a:2e:ef:9b:ae:6f:92:1f:e1:8e:3b:a8: 56:cb:27:24:50:a3:e9:2f:a8:00:ea:73:0e:58:b0: 97:43:8d:f2:7e:6b:f4:61:2a:4b:3c:af:06:6f:0f: 02:dd:b5:49:34:0e:f5:86:74:af:37:d0:1b:62:d7: e8:a2:da:bc:2a:a6:44:24:df:8a:85:d3:46:32:93: 3d:c5:c0:f7:ff:18:46:4b:f6:86:ff:91:c0:5f:27: ea:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AE:1D:4C:F1:0C:D2:FF:08:D8:F9:C1:DD:E3:92:50:86:EC:0D:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70654f85-bde6-46bd-8880-47ebd7ba7843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.190.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5e:40:7f:e7:b6:7f:c3:28:8a:9a:2a:70:01:82:15:a0:73:bc: 40:71:45:9f:9d:ff:b0:45:32:44:0e:dd:81:73:5c:7b:53:83: 28:48:3e:bf:3c:00:61:01:f1:73:e5:65:95:2d:0f:43:67:b8: d3:fa:75:4c:d5:3a:92:5c:e1:96:2a:52:2d:2a:0d:82:57:5b: 85:0f:0e:75:01:3e:62:aa:f9:7d:33:ca:c7:ef:9d:cd:17:2e: 72:7e:e0:a7:2a:a2:49:ca:08:7c:30:9a:b0:fe:36:49:ba:5f: 34:aa:b6:d9:f1:ac:26:38:f9:ad:fa:8c:f2:f1:01:c1:d4:cc: 9c:a3:30:87:c6:03:0d:7f:a5:03:9b:04:91:f8:bc:38:30:20: fe:29:ce:bd:25:f2:5f:45:5b:b4:9a:e0:a6:a2:58:b2:6e:98: 06:f0:c1:e1:66:5b:ed:fc:a8:d1:c8:bd:b4:31:8c:39:6e:23: bb:99:f7:32:3f:ba:89:6f:ae:e5:e0:ab:96:78:d5:d6:e8:d6: 1d:6f:7e:47:b3:5e:c5:da:a7:15:f2:72:83:86:4a:4f:63:7b: 70:93:d1:4e:27:cd:c4:be:d7:3d:11:00:ea:a1:56:0f:3a:7f: cb:09:4f:18:a7:cf:60:e4:ee:fc:17:5b:88:8e:3b:4f:c5:0a: e1:c7:22:59 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMrDEVMK5ACZrZdVy3TVbj0drEMAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjY2I2NWIzZGI3NDg3YjQ2NDNhMmI3MDYzYTM0YzkxM2Y1 M2ZkYWYyOGFiNWUyYjM1NGJjNTc0MjcyZGU2MzY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIVl1+2xV0fFCzaqAz+i5Gz8CfmYXDULcH2fDBUmB20/LZ GKbBqPP5ghMtAuuBxduVS2JGyWPozP9MLs3jC4g5D2/9YXxO8Oiw2+25ktRV/I51 a8QioHV7x2nyBFcW6p8Sbce2SjygXpEgxzjYvAU/iY0xmw664gqUvJfbytXjm8UU ZD7pOhJoSQ9aBjAriXFBGxnWX4JYsvnTKIE4ogeWGLaUMj1dJHou75uub5If4Y47 qFbLJyRQo+kvqADqcw5YsJdDjfJ+a/RhKks8rwZvDwLdtUk0DvWGdK830Bti1+ii 2rwqpkQk34qF00Yykz3FwPf/GEZL9ob/kcBfJ+rZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU+q4dTPEM0v8I2PnB3eOSUIbsDZkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcwNjU0Zjg1LWJkZTYtNDZiZC04ODgwLTQ3ZWJkN2JhNzg0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQvjANBgkqhkiG9w0BAQsFAAOCAQEAXkB/57Z/wyiKmipwAYIVoHO8QHFF n53/sEUyRA7dgXNce1ODKEg+vzwAYQHxc+VllS0PQ2e40/p1TNU6klzhlipSLSoN gldbhQ8OdQE+Yqr5fTPKx++dzRcucn7gpyqiScoIfDCasP42SbpfNKq22fGsJjj5 rfqM8vEBwdTMnKMwh8YDDX+lA5sEkfi8ODAg/inOvSXyX0VbtJrgpqJYsm6YBvDB 4WZb7fyo0ci9tDGMOW4ju5n3Mj+6iW+u5eCrlnjV1ujWHW9+R7NexdqnFfJyg4ZK T2N7cJPRTifNxL7XPREA6qFWDzp/ywlPGKfPYOTu/BdbiI47T8UK4cciWQ== -----END CERTIFICATE-----Generated at Thu May 2 08:51:03 2024 by rpki-client on console-fra.rpki-client.org