$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c657a704-c318-426e-bcfb-5ac6ddf49d2b.roa File: c657a704-c318-426e-bcfb-5ac6ddf49d2b.roa (raw, json) Hash identifier: /zwQjz+55bpzOCtcsvVFeCrxQGo51vKG/3dYgj52YRE= Subject key identifier: 0C:7B:D7:FC:C9:E8:B3:1A:06:00:41:75:2C:84:DB:8D:8D:79:F6:77 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E2BC07945C50BC7D4065E857615FB1B0FF42CCF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c657a704-c318-426e-bcfb-5ac6ddf49d2b.roa Signing time: Fri 12 Apr 2024 00:00:00 +0000 ROA not before: Fri 12 Apr 2024 00:00:00 +0000 ROA not after: Fri 17 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 16.12.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:2b:c0:79:45:c5:0b:c7:d4:06:5e:85:76:15:fb:1b:0f:f4:2c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:00:00 2024 GMT Not After : May 17 23:59:59 2024 GMT Subject: serialNumber=3c82bdb16da96883b362d9e5c4897b57f5b42075cfe96a0bdcb26df33c96e437, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d5:c0:8a:f8:ff:7b:92:fd:ae:ad:61:57:82: b4:d3:8e:12:f4:41:a9:39:01:72:0d:25:5c:13:cf: da:96:a1:3f:4e:67:15:db:e9:09:ce:d5:7b:45:13: dd:b0:d9:43:fe:83:86:6e:01:22:aa:43:f7:23:7b: 50:03:66:47:b5:e7:f2:a5:83:79:21:6a:ff:07:3a: 09:50:12:ba:7f:40:6b:d3:93:e0:10:27:62:75:3b: 58:18:74:60:7a:9f:96:ef:ac:c7:74:c5:c6:fc:cb: 25:d4:31:62:4f:5e:3d:17:bd:75:e1:d4:32:20:89: 71:0b:d2:00:29:14:c3:cf:11:b9:f7:b1:ef:17:5d: 67:2c:77:dd:38:b4:8c:1d:c2:ed:59:b9:d7:99:53: 77:2f:44:a8:b7:fd:d5:90:85:bc:fe:bf:13:82:41: b5:bf:59:bf:7f:9f:67:06:0c:a6:44:86:53:7c:4b: 51:d4:2b:13:35:a1:43:47:81:d8:6a:15:9f:4f:57: ef:13:5a:2f:bd:c4:7b:45:23:7a:13:9c:e4:37:0d: 48:23:89:98:5d:8d:c7:11:7c:f1:f8:bc:13:2b:48: 38:34:21:a5:4c:e4:6b:56:67:df:1d:3b:88:40:5a: 22:c4:9d:b6:2e:f2:aa:ea:dd:71:e4:ed:85:b5:f4: f5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7B:D7:FC:C9:E8:B3:1A:06:00:41:75:2C:84:DB:8D:8D:79:F6:77 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c657a704-c318-426e-bcfb-5ac6ddf49d2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.12.16.0/23 Signature Algorithm: sha256WithRSAEncryption b4:5c:17:6f:1f:b4:dc:6e:f5:85:7f:f2:bc:b0:d1:c2:a7:51: 24:bf:f3:16:8c:9d:b4:50:0c:66:e2:44:40:e9:35:ce:d6:69: af:b2:db:a5:71:ff:9a:65:8c:95:60:f2:b3:34:33:bd:e4:06: 57:05:e0:30:ed:a5:5a:63:65:d0:2a:21:26:82:86:75:2c:69: 3b:ed:93:4f:6d:3c:a5:1b:46:05:30:79:fc:a5:7f:89:1b:37: d7:c2:81:92:21:e8:62:25:c4:74:5e:21:4f:5f:a7:fe:cb:9c: 33:04:9d:d2:20:cd:4e:38:90:e3:ba:d3:0d:bb:b5:cd:41:96: 66:cd:91:5a:12:ad:f7:30:29:24:98:f6:a8:53:91:97:b0:a6: 12:a4:ec:d7:95:b0:44:f3:db:dd:fd:4f:3b:a8:ac:3b:62:d3: 0c:39:c5:01:00:0c:88:95:61:d3:70:ce:da:c3:ed:bf:dd:03: b7:39:cc:e4:72:19:60:3a:c8:70:8c:ef:9c:93:a0:23:a7:0b: dc:f5:fc:74:10:bc:eb:e9:8d:1a:19:3a:94:8a:08:9b:27:97: be:a6:54:31:59:91:9b:36:84:ca:cd:5a:17:45:19:ad:8e:05: fc:a1:d7:a3:5a:31:c5:7e:76:a7:88:83:d5:4e:0a:0b:21:92: 1b:02:53:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTivAeUXFC8fUBl6FdhX7Gw/0LM8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEyMDAwMDAwWhcNMjQwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzgyYmRiMTZkYTk2ODgzYjM2MmQ5ZTVjNDg5N2I1N2Y1 YjQyMDc1Y2ZlOTZhMGJkY2IyNmRmMzNjOTZlNDM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv1cCK+P97kv2urWFXgrTTjhL0Qak5AXINJVwTz9qWoT9O ZxXb6QnO1XtFE92w2UP+g4ZuASKqQ/cje1ADZke15/Klg3khav8HOglQErp/QGvT k+AQJ2J1O1gYdGB6n5bvrMd0xcb8yyXUMWJPXj0XvXXh1DIgiXEL0gApFMPPEbn3 se8XXWcsd904tIwdwu1ZudeZU3cvRKi3/dWQhbz+vxOCQbW/Wb9/n2cGDKZEhlN8 S1HUKxM1oUNHgdhqFZ9PV+8TWi+9xHtFI3oTnOQ3DUgjiZhdjccRfPH4vBMrSDg0 IaVM5GtWZ98dO4hAWiLEnbYu8qrq3XHk7YW19PXrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDHvX/MnosxoGAEF1LITbjY159ncwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M2NTdhNzA0LWMzMTgtNDI2ZS1iY2ZiLTVhYzZkZGY0OWQyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEQDBAwDQYJKoZIhvcNAQELBQADggEBALRcF28ftNxu9YV/8ryw0cKnUSS/ 8xaMnbRQDGbiREDpNc7Waa+y26Vx/5pljJVg8rM0M73kBlcF4DDtpVpjZdAqISaC hnUsaTvtk09tPKUbRgUwefylf4kbN9fCgZIh6GIlxHReIU9fp/7LnDMEndIgzU44 kOO60w27tc1BlmbNkVoSrfcwKSSY9qhTkZewphKk7NeVsETz2939TzuorDti0ww5 xQEADIiVYdNwztrD7b/dA7c5zORyGWA6yHCM75yToCOnC9z1/HQQvOvpjRoZOpSK CJsnl76mVDFZkZs2hMrNWhdFGa2OBfyh16NaMcV+dqeIg9VOCgshkhsCU8Y= -----END CERTIFICATE-----Generated at Wed Apr 17 01:26:23 2024 by rpki-client on console-ams.rpki-client.org