$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8af375b7-ca28-4fc2-8295-99cdab600be0.roa File: 8af375b7-ca28-4fc2-8295-99cdab600be0.roa (raw, json) Hash identifier: QGI/2D1lG0kglS6ElEG7PcXoB7zCuu4Z+/JDiC9qGnI= Subject key identifier: 3B:E5:EA:23:46:F8:D7:4D:52:E4:4A:4D:12:06:73:77:61:3D:AA:11 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1CDF5DFFF7CD57073BBCE7CBFE019E21FECF6978 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8af375b7-ca28-4fc2-8295-99cdab600be0.roa Signing time: Tue 07 May 2024 00:00:00 +0000 ROA not before: Tue 07 May 2024 00:00:00 +0000 ROA not after: Tue 11 Jun 2024 23:59:59 +0000 asID: 8987 IP address blocks: 16.89.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:df:5d:ff:f7:cd:57:07:3b:bc:e7:cb:fe:01:9e:21:fe:cf:69:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:00:00 2024 GMT Not After : Jun 11 23:59:59 2024 GMT Subject: serialNumber=f3e0617386761e89296c893b0cef941695d3b7f647166973b9e8de554c7d6d84, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1c:9e:fb:05:e9:ab:da:ea:99:28:36:f9:34: a7:3c:94:9b:60:40:52:4e:ef:a0:8d:b5:1e:ff:ab: b2:a7:89:c1:5a:fe:bd:f8:73:98:48:a0:65:75:82: 3e:eb:22:9f:83:d6:20:c0:33:1d:47:1b:f9:0c:06: 08:ef:a1:33:2c:f5:2d:8e:20:da:8e:e5:19:bd:6c: 80:03:33:da:ea:03:db:ee:6b:b4:88:8e:22:0f:04: 86:90:cf:16:1d:34:e9:a9:2a:13:f8:95:27:99:0d: 44:99:16:21:a3:59:8e:a7:71:99:8e:ad:9c:e5:de: 13:ec:a9:f9:39:d1:0c:d0:4c:47:c3:c0:80:26:54: ca:74:64:b5:08:c3:1b:db:f3:70:3f:84:ee:47:54: 62:37:e4:62:5a:f4:76:ab:65:39:2e:53:96:b6:e9: 23:d5:92:a2:97:a6:13:72:a4:41:5a:e7:f2:44:eb: d2:8f:69:d7:42:d1:9d:62:8c:d1:f8:0b:3d:5e:d3: 76:f7:16:6a:6f:c3:ba:8d:43:5a:5f:53:cb:77:76: 91:66:2e:b9:ae:d1:0a:57:3f:67:a4:26:fc:f6:c5: 26:c2:9f:9a:d2:fa:47:81:14:4e:76:44:6b:bd:95: 69:d8:d4:d5:7f:23:f8:79:d9:23:01:fb:a9:a4:8f: 62:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E5:EA:23:46:F8:D7:4D:52:E4:4A:4D:12:06:73:77:61:3D:AA:11 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8af375b7-ca28-4fc2-8295-99cdab600be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.89.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2b:0d:fa:e5:c2:33:88:ff:f3:be:8d:a1:f6:eb:d8:9b:63:c7: 36:3d:b7:4e:70:ab:eb:ce:b3:a2:5e:7d:11:d4:35:c2:4c:37: 3a:d9:bc:45:ff:01:6b:a0:bf:24:be:a4:bd:2c:1f:0d:95:ca: 4e:71:1a:b7:29:a0:3c:24:1b:a9:c1:4d:b2:8b:9a:b1:17:49: 9e:9f:c1:dc:87:c0:86:ae:22:10:39:de:6a:62:f1:55:34:e3: 87:ed:44:d8:a4:2b:5e:4d:98:28:f6:9b:89:06:34:c7:f7:62: ff:ed:c3:89:da:ba:ec:ed:16:9e:8f:a7:0a:5c:b7:2d:19:e3: b9:28:8a:35:e1:87:71:4a:36:a3:4f:2d:9a:11:d5:dc:be:ce: 06:57:ed:c1:7b:53:b1:43:a7:4f:ae:00:bb:29:b0:73:5c:ab: 11:fc:0d:59:05:29:40:d2:58:20:32:de:19:f8:2a:87:4f:6b: be:2b:ac:99:79:0c:fb:22:31:bd:91:84:26:82:74:79:ce:b7: 01:47:3a:b0:5d:51:c6:19:aa:a2:16:50:f3:c0:92:58:87:87: 36:ff:ff:d1:86:8d:6c:f7:e9:81:08:a6:65:ee:7d:e3:2d:e9: 78:81:ed:8f:8c:f0:81:28:4e:85:b1:ed:38:19:69:ee:69:30: a4:8b:ab:cc -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHN9d//fNVwc7vOfL/gGeIf7PaXgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTA3MDAwMDAwWhcNMjQwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0BmM2UwNjE3Mzg2NzYxZTg5Mjk2Yzg5M2IwY2VmOTQxNjk1 ZDNiN2Y2NDcxNjY5NzNiOWU4ZGU1NTRjN2Q2ZDg0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNHJ77Bemr2uqZKDb5NKc8lJtgQFJO76CNtR7/q7KnicFa /r34c5hIoGV1gj7rIp+D1iDAMx1HG/kMBgjvoTMs9S2OINqO5Rm9bIADM9rqA9vu a7SIjiIPBIaQzxYdNOmpKhP4lSeZDUSZFiGjWY6ncZmOrZzl3hPsqfk50QzQTEfD wIAmVMp0ZLUIwxvb83A/hO5HVGI35GJa9HarZTkuU5a26SPVkqKXphNypEFa5/JE 69KPaddC0Z1ijNH4Cz1e03b3Fmpvw7qNQ1pfU8t3dpFmLrmu0QpXP2ekJvz2xSbC n5rS+keBFE52RGu9lWnY1NV/I/h52SMB+6mkj2KxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUO+XqI0b4101S5EpNEgZzd2E9qhEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhhZjM3NWI3LWNhMjgtNGZjMi04Mjk1LTk5Y2RhYjYwMGJlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQWTANBgkqhkiG9w0BAQsFAAOCAQEAKw365cIziP/zvo2h9uvYm2PHNj23 TnCr686zol59EdQ1wkw3Otm8Rf8Ba6C/JL6kvSwfDZXKTnEatymgPCQbqcFNsoua sRdJnp/B3IfAhq4iEDneamLxVTTjh+1E2KQrXk2YKPabiQY0x/di/+3Didq67O0W no+nCly3LRnjuSiKNeGHcUo2o08tmhHV3L7OBlftwXtTsUOnT64Auymwc1yrEfwN WQUpQNJYIDLeGfgqh09rviusmXkM+yIxvZGEJoJ0ec63AUc6sF1RxhmqohZQ88CS WIeHNv//0YaNbPfpgQimZe594y3peIHtj4zwgShOhbHtOBlp7mkwpIurzA== -----END CERTIFICATE-----Generated at Thu May 9 01:25:37 2024 by rpki-client on console-fra.rpki-client.org