$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c0b5b21-cbfe-4013-8056-ec2e5c54343c.roa File: 9c0b5b21-cbfe-4013-8056-ec2e5c54343c.roa (raw, json) Hash identifier: NCaU1m5Rfrl5YEOVGgjNVnPNGJphGpLmK6mtkqvHHKo= Subject key identifier: 9C:5B:84:C6:87:0B:40:A8:B5:8C:1A:B1:24:86:D1:EB:19:03:18:D6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5352CB3E6C805153EE8A55FF7E26E2E402C69FF1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c0b5b21-cbfe-4013-8056-ec2e5c54343c.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 56.157.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:52:cb:3e:6c:80:51:53:ee:8a:55:ff:7e:26:e2:e4:02:c6:9f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=e3ee05ddf93468cdfa1baed819d20dcba4eada34692dfdd17e006b0ece3db02a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9a:f1:d7:a4:fe:20:8d:db:80:bf:14:bd:03: b3:16:29:e9:a1:47:60:0c:3d:ca:8a:b9:92:9f:cd: 3d:ca:bf:57:aa:97:d3:6e:11:f3:12:26:df:6b:1a: 78:dc:dc:8d:bc:ea:c6:a8:5f:42:ae:6d:6b:12:53: 2a:d9:43:06:22:c0:fa:40:e9:a6:b7:85:89:f8:08: 99:9f:14:59:6c:21:86:d4:03:37:9e:68:5f:7e:59: 41:a6:d8:de:9d:a0:74:9a:51:ee:e1:dc:1d:27:f1: c9:da:dc:e0:57:6d:73:55:96:5c:d1:cb:25:66:76: 2e:8b:7d:15:0a:d4:7d:0f:ff:3a:3d:f9:8f:73:30: 25:4e:fe:14:c1:ea:a7:2a:cf:1d:76:e3:fd:c6:1e: f4:06:c3:4a:aa:64:4b:d3:af:47:66:71:a6:30:81: 3f:a7:be:53:ea:a3:7a:35:17:50:45:de:07:8c:78: ac:77:3c:1b:1d:98:52:ed:60:cc:cb:e5:15:81:dc: c2:a8:d9:72:70:5b:d0:ba:0e:5e:8f:c9:1b:77:25: 62:ab:71:c9:91:14:8b:c8:8e:bb:cb:b5:4e:e2:6a: ab:c2:54:f4:89:3c:21:65:f0:45:b9:d5:b8:09:ee: d1:a4:ef:10:fb:f8:81:ed:45:6e:1a:37:ee:e0:b5: d0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5B:84:C6:87:0B:40:A8:B5:8C:1A:B1:24:86:D1:EB:19:03:18:D6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c0b5b21-cbfe-4013-8056-ec2e5c54343c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.157.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1a:70:c1:c6:72:5d:a6:35:cb:7c:d4:3b:37:56:c1:8f:88:8a: 89:54:6c:ea:8b:15:30:ea:b2:dd:b4:77:e9:32:c1:7c:97:fe: cc:96:11:df:40:2d:a5:3b:e7:de:83:00:ae:0c:aa:f1:f8:c5: 71:7a:d6:92:f2:36:b6:e3:af:ec:e2:3d:13:4b:5a:f7:96:af: 14:30:3c:53:c8:bd:42:74:42:d4:4b:f7:d2:ed:10:5d:bc:78: 4f:7c:44:4d:18:ac:ba:fa:bb:a4:57:fc:22:95:8e:37:33:c1: bb:ba:7e:26:3b:9d:24:07:81:ff:19:07:04:b4:b7:69:f5:e4: d5:06:06:5e:63:72:51:27:99:f9:59:aa:bf:22:14:1c:d1:c8: e0:35:fc:43:1e:c4:23:65:4d:57:f9:dc:d3:d1:9d:3a:2b:df: 52:07:9a:92:84:b4:41:29:78:f4:3c:32:75:0b:cd:c1:ad:4d: 86:a3:77:82:a1:ac:78:3b:4b:e4:c0:55:df:76:1d:6b:b8:79: 55:ff:e1:70:78:7f:1e:e2:05:fc:cf:cd:cc:64:ba:9f:13:0b: cb:f4:f0:b3:73:fe:cf:46:03:07:39:10:23:82:ef:a0:b4:51: 4c:7f:fe:34:41:1a:32:4b:09:bc:cc:86:ff:93:80:87:dd:b2: ba:dc:ba:05 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUU1LLPmyAUVPuilX/fibi5ALGn/EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlM2VlMDVkZGY5MzQ2OGNkZmExYmFlZDgxOWQyMGRjYmE0 ZWFkYTM0NjkyZGZkZDE3ZTAwNmIwZWNlM2RiMDJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcmvHXpP4gjduAvxS9A7MWKemhR2AMPcqKuZKfzT3Kv1eq l9NuEfMSJt9rGnjc3I286saoX0KubWsSUyrZQwYiwPpA6aa3hYn4CJmfFFlsIYbU AzeeaF9+WUGm2N6doHSaUe7h3B0n8cna3OBXbXNVllzRyyVmdi6LfRUK1H0P/zo9 +Y9zMCVO/hTB6qcqzx124/3GHvQGw0qqZEvTr0dmcaYwgT+nvlPqo3o1F1BF3geM eKx3PBsdmFLtYMzL5RWB3MKo2XJwW9C6Dl6PyRt3JWKrccmRFIvIjrvLtU7iaqvC VPSJPCFl8EW51bgJ7tGk7xD7+IHtRW4aN+7gtdC1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUnFuExocLQKi1jBqxJIbR6xkDGNYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzljMGI1YjIxLWNiZmUtNDAxMy04MDU2LWVjMmU1YzU0MzQzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4nTANBgkqhkiG9w0BAQsFAAOCAQEAGnDBxnJdpjXLfNQ7N1bBj4iKiVRs 6osVMOqy3bR36TLBfJf+zJYR30AtpTvn3oMArgyq8fjFcXrWkvI2tuOv7OI9E0ta 95avFDA8U8i9QnRC1Ev30u0QXbx4T3xETRisuvq7pFf8IpWONzPBu7p+JjudJAeB /xkHBLS3afXk1QYGXmNyUSeZ+VmqvyIUHNHI4DX8Qx7EI2VNV/nc09GdOivfUgea koS0QSl49DwydQvNwa1NhqN3gqGseDtL5MBV33Yda7h5Vf/hcHh/HuIF/M/NzGS6 nxMLy/Tws3P+z0YDBzkQI4LvoLRRTH/+NEEaMksJvMyG/5OAh92yuty6BQ== -----END CERTIFICATE-----Generated at Thu May 2 00:52:10 2024 by rpki-client on console-ams.rpki-client.org