$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8da37f3c-30a7-44cc-8290-e01d3e8b69ea.roa File: 8da37f3c-30a7-44cc-8290-e01d3e8b69ea.roa (raw, json) Hash identifier: dEfAQdFKpmI8lSlaCleNn5nJtamKaCgW8uUBF0lVXZE= Subject key identifier: C8:AF:EA:E8:BA:BA:D2:0B:2E:42:4B:0B:16:66:5E:2A:2C:1E:B7:A8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3BC6C84C22E576567388E0EFAF5DB37421487D4D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8da37f3c-30a7-44cc-8290-e01d3e8b69ea.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 56.157.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c6:c8:4c:22:e5:76:56:73:88:e0:ef:af:5d:b3:74:21:48:7d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=d5dada1921b02eeb8c9f7a5d5b73fb1bd89c913c9c704b5bad594ca0bc3a0c19, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ae:5c:da:8c:6c:43:fb:60:ed:42:c8:62:20: 39:c7:1c:ee:f1:1c:48:01:ec:d5:47:65:80:f8:c7: 27:1a:c5:18:4b:99:ff:26:29:47:c3:84:d2:6e:b1: 41:46:57:71:9b:cc:06:e6:9c:f4:58:b8:c6:37:8f: 22:71:57:eb:d0:19:0b:b8:78:d3:d1:c9:8a:6c:2d: 41:84:a0:ef:90:ce:54:41:67:46:d9:b2:3d:1f:bf: 4b:a2:21:a3:0f:3f:ee:03:34:ae:54:cc:4e:10:52: c2:44:68:9e:d1:da:1f:c7:98:fa:f9:54:d4:4f:5b: 4b:c7:71:c5:76:ff:56:b2:bf:5f:a1:8d:12:62:03: 53:c3:03:bf:8c:dc:3b:2e:17:19:bd:21:85:f9:58: a4:c3:4a:a4:4c:94:1a:e2:48:9c:8c:60:90:88:e3: 7e:6e:fd:f2:ac:9c:7a:18:75:5b:56:4a:4c:50:b0: ff:71:46:9c:e5:07:74:20:1d:ff:02:7f:f4:68:ab: e5:3a:1b:4e:15:2a:57:e0:06:9c:a9:aa:ff:fa:b6: b2:ae:12:f4:80:b7:33:ca:1d:fb:ae:f0:e8:36:b7: 5b:85:27:bd:c8:3c:dd:55:fe:ca:f5:5e:9e:67:ea: ff:85:bc:c0:e5:35:5c:f2:5a:94:df:7e:a8:05:dc: 68:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AF:EA:E8:BA:BA:D2:0B:2E:42:4B:0B:16:66:5E:2A:2C:1E:B7:A8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8da37f3c-30a7-44cc-8290-e01d3e8b69ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.157.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5d:55:21:71:e5:ad:d4:39:c3:7e:b6:72:f8:f4:de:42:61:d0: 3c:14:1d:75:f6:73:f3:c5:4d:d1:7c:28:21:8f:c2:86:05:d7: 4b:a6:06:2e:7a:c4:62:77:a7:85:f6:61:5e:13:74:61:b4:99: c8:8e:44:c5:0c:07:6b:20:d4:6a:32:ff:c6:52:f6:0b:65:7c: 69:ea:f7:81:51:be:be:05:f7:0a:4e:5f:e5:46:18:dc:4d:6b: 16:a4:15:4d:95:46:a1:a7:41:af:30:3d:02:9a:d8:0d:1c:a7: ec:14:42:b0:cc:25:c7:13:fa:1c:e1:1d:3c:cf:d6:20:21:d3: 83:ea:70:ae:04:8b:06:35:9c:c2:0f:a2:0e:7e:99:ab:74:fe: 62:4f:6b:00:67:37:a2:da:0d:ae:7c:76:32:66:bb:a1:cf:21: 5d:09:fe:8f:5f:c0:33:33:59:04:6a:dd:18:2c:69:0b:77:89: a6:9a:2b:dd:4c:cb:cf:e8:5b:57:6d:50:62:d7:ec:fc:a9:ad: 54:88:97:1c:b3:4d:99:2a:9c:2e:f1:86:66:cd:d3:9f:c5:4a: 63:9e:83:57:1a:d7:06:c2:b8:3c:04:64:7d:5b:a5:7b:08:92: 03:63:2c:9b:0b:8f:fc:a7:9e:a7:74:92:78:be:a1:4d:18:02: 1f:62:7b:df -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUO8bITCLldlZziODvr12zdCFIfU0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNWRhZGExOTIxYjAyZWViOGM5ZjdhNWQ1YjczZmIxYmQ4 OWM5MTNjOWM3MDRiNWJhZDU5NGNhMGJjM2EwYzE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0rlzajGxD+2DtQshiIDnHHO7xHEgB7NVHZYD4xycaxRhL mf8mKUfDhNJusUFGV3GbzAbmnPRYuMY3jyJxV+vQGQu4eNPRyYpsLUGEoO+QzlRB Z0bZsj0fv0uiIaMPP+4DNK5UzE4QUsJEaJ7R2h/HmPr5VNRPW0vHccV2/1ayv1+h jRJiA1PDA7+M3DsuFxm9IYX5WKTDSqRMlBriSJyMYJCI435u/fKsnHoYdVtWSkxQ sP9xRpzlB3QgHf8Cf/Roq+U6G04VKlfgBpypqv/6trKuEvSAtzPKHfuu8Og2t1uF J73IPN1V/sr1Xp5n6v+FvMDlNVzyWpTffqgF3GiTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUyK/q6Lq60gsuQksLFmZeKiwet6gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhkYTM3ZjNjLTMwYTctNDRjYy04MjkwLWUwMWQzZThiNjllYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4nTANBgkqhkiG9w0BAQsFAAOCAQEAXVUhceWt1DnDfrZy+PTeQmHQPBQd dfZz88VN0XwoIY/ChgXXS6YGLnrEYnenhfZhXhN0YbSZyI5ExQwHayDUajL/xlL2 C2V8aer3gVG+vgX3Ck5f5UYY3E1rFqQVTZVGoadBrzA9AprYDRyn7BRCsMwlxxP6 HOEdPM/WICHTg+pwrgSLBjWcwg+iDn6Zq3T+Yk9rAGc3otoNrnx2Mma7oc8hXQn+ j1/AMzNZBGrdGCxpC3eJppor3UzLz+hbV21QYtfs/KmtVIiXHLNNmSqcLvGGZs3T n8VKY56DVxrXBsK4PARkfVulewiSA2MsmwuP/Keep3SSeL6hTRgCH2J73w== -----END CERTIFICATE-----Generated at Fri Apr 26 00:40:21 2024 by rpki-client on console-fra.rpki-client.org