$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f995e99-d87b-4f5a-ac9f-17287ca50041.roa File: 8f995e99-d87b-4f5a-ac9f-17287ca50041.roa (raw, json) Hash identifier: XMthegsGSzg4Mo9HAyD3U3nXnoTFIPcxa6F2rctiQdc= Subject key identifier: 8D:6A:2C:78:05:82:C0:AC:2C:9E:BE:92:43:B1:DF:81:46:DB:FB:4C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 15BC448F64EC600788A3D38F1B750B90702146FC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f995e99-d87b-4f5a-ac9f-17287ca50041.roa Signing time: Fri 12 Apr 2024 00:00:00 +0000 ROA not before: Fri 12 Apr 2024 00:00:00 +0000 ROA not after: Fri 17 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 56.40.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:bc:44:8f:64:ec:60:07:88:a3:d3:8f:1b:75:0b:90:70:21:46:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:00:00 2024 GMT Not After : May 17 23:59:59 2024 GMT Subject: serialNumber=d09358829096fcccc79bb66794d754dd0575328f8b9d23e1644e0a3bf610b449, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d3:3d:9a:44:53:c5:e3:a1:08:ab:23:97:b4: 98:f6:07:3b:87:71:00:1b:85:39:82:7d:80:d2:2a: 53:cd:70:0c:d0:05:89:fa:88:2a:fd:61:56:2f:d3: f0:b8:da:97:d8:67:a3:74:23:e2:97:9f:87:20:e5: 03:d3:51:52:f4:19:da:f3:f6:c8:74:d4:5d:3d:30: 8d:48:a0:77:64:09:85:20:1a:b3:81:05:4d:48:57: 75:ef:cf:a1:9c:18:65:ab:0f:70:02:6b:81:d4:7c: cc:b9:11:6e:4f:2f:ab:f8:03:e7:9e:73:97:ea:25: 36:8c:37:72:7c:03:dd:a0:10:e2:cd:00:29:ab:7c: 99:9b:1a:89:6a:d7:1d:e1:02:d0:f6:ca:8d:0a:9f: 14:83:5d:6f:55:c2:92:71:a6:49:fd:56:3b:09:db: 74:21:64:e2:84:3c:bf:af:76:ca:fb:69:0a:51:e9: 0a:3f:00:b8:04:38:c0:38:f4:0b:66:8f:76:13:81: 9e:f0:d7:1e:75:5c:bf:89:60:a7:58:2f:49:2f:5e: 5f:80:bb:45:c4:91:76:d8:e2:c1:2d:73:cd:b0:51: 7a:67:6a:a7:39:2c:0b:22:1e:05:8b:a8:24:69:f6: fa:fa:d2:b7:cd:32:d8:f0:34:32:97:f5:19:31:a6: 36:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6A:2C:78:05:82:C0:AC:2C:9E:BE:92:43:B1:DF:81:46:DB:FB:4C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f995e99-d87b-4f5a-ac9f-17287ca50041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.40.0.0/16 Signature Algorithm: sha256WithRSAEncryption ca:20:04:53:c6:39:9e:fa:75:44:42:26:34:3a:3d:f3:ca:9d: db:5b:5c:8f:ed:56:a6:81:11:ce:12:5c:bf:7d:b5:49:22:51: 83:fe:d1:b3:c4:51:30:79:4c:71:20:45:90:6e:bf:53:27:cf: 3b:c3:2a:7a:a5:78:53:bb:e2:31:84:0b:b2:e9:58:22:42:98: 41:8d:07:09:8b:10:9b:20:6f:a7:9a:5d:10:d1:d2:eb:8d:da: d1:fb:f9:e7:c9:6b:f4:dc:0f:8b:52:8c:fe:79:d6:e6:51:ac: b8:4d:2f:bf:61:02:f4:e4:f9:d4:62:4b:d9:b3:6c:a4:59:22: 91:37:75:fe:8a:01:7e:f2:15:28:84:81:1b:38:bd:2b:1f:b6: 38:0f:9b:4a:31:cc:2e:91:e4:6a:b8:1b:e5:9e:bc:9c:1a:af: c3:f2:8b:d6:78:72:04:bf:3c:2f:3a:78:a2:ae:bb:22:fc:28: 9f:ba:28:3c:f6:05:fd:0c:25:26:37:57:2a:d6:38:4e:5d:a7: ee:7c:96:1a:37:08:6d:76:60:5f:4f:f0:96:e5:97:2a:13:bb: c2:7d:33:6a:84:6e:f4:b2:6b:67:51:c3:ef:6b:be:cb:d9:25: 9b:f5:35:8b:a9:31:5c:38:d1:9e:64:39:10:7d:21:bd:8d:35: b1:0d:f6:61 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFbxEj2TsYAeIo9OPG3ULkHAhRvwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEyMDAwMDAwWhcNMjQwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDkzNTg4MjkwOTZmY2NjYzc5YmI2Njc5NGQ3NTRkZDA1 NzUzMjhmOGI5ZDIzZTE2NDRlMGEzYmY2MTBiNDQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDv0z2aRFPF46EIqyOXtJj2BzuHcQAbhTmCfYDSKlPNcAzQ BYn6iCr9YVYv0/C42pfYZ6N0I+KXn4cg5QPTUVL0Gdrz9sh01F09MI1IoHdkCYUg GrOBBU1IV3Xvz6GcGGWrD3ACa4HUfMy5EW5PL6v4A+eec5fqJTaMN3J8A92gEOLN ACmrfJmbGolq1x3hAtD2yo0KnxSDXW9VwpJxpkn9VjsJ23QhZOKEPL+vdsr7aQpR 6Qo/ALgEOMA49Atmj3YTgZ7w1x51XL+JYKdYL0kvXl+Au0XEkXbY4sEtc82wUXpn aqc5LAsiHgWLqCRp9vr60rfNMtjwNDKX9RkxpjbvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUjWoseAWCwKwsnr6SQ7HfgUbb+0wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhmOTk1ZTk5LWQ4N2ItNGY1YS1hYzlmLTE3Mjg3Y2E1MDA0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4KDANBgkqhkiG9w0BAQsFAAOCAQEAyiAEU8Y5nvp1REImNDo988qd21tc j+1WpoERzhJcv321SSJRg/7Rs8RRMHlMcSBFkG6/UyfPO8MqeqV4U7viMYQLsulY IkKYQY0HCYsQmyBvp5pdENHS643a0fv558lr9NwPi1KM/nnW5lGsuE0vv2EC9OT5 1GJL2bNspFkikTd1/ooBfvIVKISBGzi9Kx+2OA+bSjHMLpHkargb5Z68nBqvw/KL 1nhyBL88Lzp4oq67Ivwon7ooPPYF/QwlJjdXKtY4Tl2n7nyWGjcIbXZgX0/wluWX KhO7wn0zaoRu9LJrZ1HD72u+y9klm/U1i6kxXDjRnmQ5EH0hvY01sQ32YQ== -----END CERTIFICATE-----Generated at Wed May 1 20:48:04 2024 by rpki-client on console-ams.rpki-client.org