$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c71b170-bfdf-499d-9192-c03a6456f276.roa File: 8c71b170-bfdf-499d-9192-c03a6456f276.roa (raw, json) Hash identifier: EhlO5Rc5NNfEHniI7dTZ+nkMPOWisLFPpNLPw5j3y6I= Subject key identifier: AF:96:F5:55:23:69:F9:BB:51:3D:3A:45:90:AF:BC:E6:BD:23:EC:81 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7FB30457693DA61CED41A9E2CC2DBAD73248C756 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c71b170-bfdf-499d-9192-c03a6456f276.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 16.166.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b3:04:57:69:3d:a6:1c:ed:41:a9:e2:cc:2d:ba:d7:32:48:c7:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=d36ce8dabc60dd6da75bc376229eca31e711c22db5d94215d677937cac831362, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:80:51:ad:d3:13:53:e3:7c:bf:9e:5b:e5: 92:9e:d9:67:b2:cb:65:e5:de:c3:ce:3e:2f:fe:b7: 50:07:59:82:fe:79:db:d7:de:e6:02:26:94:a9:4a: da:55:47:40:b2:fd:27:93:33:8f:db:cf:a7:d0:05: e3:1f:2f:20:8a:a0:e3:a9:eb:72:6f:71:25:99:a3: 15:d0:38:38:3d:40:0c:19:dd:6c:93:de:2e:4a:9b: 25:f9:94:2b:ea:6b:49:db:bc:62:9e:44:82:18:cf: 54:77:12:08:c8:ea:2e:a5:03:98:1d:7b:2b:a5:16: 82:ad:52:44:e4:d2:1b:32:48:59:b2:a2:78:02:d6: 29:0a:ad:9a:43:9d:01:81:0f:f4:e5:c3:ee:90:b7: fe:e1:91:58:64:53:39:6c:d4:e5:84:70:dc:32:1a: 19:6a:07:ef:7b:94:6c:89:ba:a5:93:ff:b5:2c:86: 55:87:27:39:ab:da:eb:c6:67:2f:ad:20:96:f4:f3: 02:36:60:d2:8b:c5:dc:b5:73:69:72:b2:63:a3:81: 35:58:c7:63:f9:73:42:42:57:e1:5e:15:7d:4f:53: 65:9b:b9:fc:c4:5a:34:bd:9a:1a:24:53:60:2c:4a: 0a:49:87:39:ad:3e:2d:c6:a6:df:d0:24:ea:61:69: 2c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:96:F5:55:23:69:F9:BB:51:3D:3A:45:90:AF:BC:E6:BD:23:EC:81 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c71b170-bfdf-499d-9192-c03a6456f276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.166.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0d:df:81:c7:aa:58:1c:24:69:c2:d1:3e:6a:42:dd:fe:c8:42: 8e:c2:53:13:84:1e:49:7d:be:f9:67:c2:39:8d:dc:28:d9:10: fd:5c:17:c6:31:2b:00:43:23:6f:88:ec:f2:b2:75:01:56:ce: 23:54:a0:cf:11:a0:0e:5a:d0:18:31:f9:00:10:fa:43:84:dd: 56:8d:7a:77:b9:5d:4e:22:95:58:70:b4:cf:a8:39:9f:8f:f7: 62:48:7b:e0:c5:14:c9:36:ad:c8:ca:bf:46:30:31:6a:84:ac: 02:95:28:9c:ec:cd:9a:9b:65:f7:6d:33:7b:3d:48:36:3d:14: 57:8f:9f:30:15:b0:07:77:43:99:5d:0f:db:85:ec:74:13:e0: 6d:f8:77:86:f2:f2:82:8b:97:8f:42:2e:22:76:4e:00:58:06: be:94:3c:1b:43:ce:dc:d4:34:34:80:30:2a:95:d0:28:a0:b5: 50:b2:95:4d:a7:dc:f3:f0:c2:59:30:3c:10:14:51:90:1e:d5: ed:9d:1c:b9:02:8a:7c:d2:bd:ec:3f:de:c2:1d:61:11:8d:98: 31:e0:94:e0:72:85:cf:51:db:d5:ad:31:01:1d:33:f7:6c:4d: 1b:41:a0:3f:41:0c:84:97:a3:a3:6c:8d:a6:a8:75:bd:33:af: a7:e6:2e:6e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUf7MEV2k9phztQanizC261zJIx1YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzZjZThkYWJjNjBkZDZkYTc1YmMzNzYyMjllY2EzMWU3 MTFjMjJkYjVkOTQyMTVkNjc3OTM3Y2FjODMxMzYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsK4BRrdMTU+N8v55b5ZKe2Weyy2Xl3sPOPi/+t1AHWYL+ edvX3uYCJpSpStpVR0Cy/SeTM4/bz6fQBeMfLyCKoOOp63JvcSWZoxXQODg9QAwZ 3WyT3i5KmyX5lCvqa0nbvGKeRIIYz1R3EgjI6i6lA5gdeyulFoKtUkTk0hsySFmy ongC1ikKrZpDnQGBD/Tlw+6Qt/7hkVhkUzls1OWEcNwyGhlqB+97lGyJuqWT/7Us hlWHJzmr2uvGZy+tIJb08wI2YNKLxdy1c2lysmOjgTVYx2P5c0JCV+FeFX1PU2Wb ufzEWjS9mhokU2AsSgpJhzmtPi3Gpt/QJOphaSznAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUr5b1VSNp+btRPTpFkK+85r0j7IEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhjNzFiMTcwLWJmZGYtNDk5ZC05MTkyLWMwM2E2NDU2ZjI3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQpjANBgkqhkiG9w0BAQsFAAOCAQEADd+Bx6pYHCRpwtE+akLd/shCjsJT E4QeSX2++WfCOY3cKNkQ/VwXxjErAEMjb4js8rJ1AVbOI1SgzxGgDlrQGDH5ABD6 Q4TdVo16d7ldTiKVWHC0z6g5n4/3Ykh74MUUyTatyMq/RjAxaoSsApUonOzNmptl 920zez1INj0UV4+fMBWwB3dDmV0P24XsdBPgbfh3hvLygouXj0IuInZOAFgGvpQ8 G0PO3NQ0NIAwKpXQKKC1ULKVTafc8/DCWTA8EBRRkB7V7Z0cuQKKfNK97D/ewh1h EY2YMeCU4HKFz1Hb1a0xAR0z92xNG0GgP0EMhJejo2yNpqh1vTOvp+Yubg== -----END CERTIFICATE-----Generated at Thu May 2 08:02:36 2024 by rpki-client on console-ams.rpki-client.org