$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c929294d-dce6-4c9d-a0ac-e762a7c9451f.roa File: c929294d-dce6-4c9d-a0ac-e762a7c9451f.roa (raw, json) Hash identifier: r9PhRB4VSXV0HvG34sKtGZNN2pPfM+lMLoSTp8AsfnA= Subject key identifier: B0:37:AB:B0:D4:05:D4:ED:D5:4C:BC:0F:8A:5C:BD:76:FA:2A:D1:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B187D5E78CEAFC07E80FC60D0617EE4837F9A2A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c929294d-dce6-4c9d-a0ac-e762a7c9451f.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 56.104.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:18:7d:5e:78:ce:af:c0:7e:80:fc:60:d0:61:7e:e4:83:7f:9a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=444fda65bee3ccc63d3f03c919b76414b407ee807276157a97e8695129f70400, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3b:68:9c:75:42:fe:a1:6c:a2:3b:0f:5b:a3: 2e:0a:d3:69:b7:e5:68:05:b9:81:ee:a2:ed:f4:d3: 56:ba:80:9a:1d:22:f0:18:66:88:93:7c:6b:ff:0a: 32:d5:da:65:3e:c9:ab:74:d7:6a:ad:44:c3:b7:b0: 50:b0:a5:e3:00:b1:f1:32:43:6b:61:40:d7:d9:3e: d7:39:4d:45:0c:a3:8c:4b:52:47:26:7a:64:dc:79: 20:e4:4c:73:8b:89:bf:b8:29:7c:55:c4:4b:91:d1: 0b:cb:e7:00:ba:b7:c9:79:0c:f2:8b:2c:d2:36:54: 2b:75:4d:9e:88:71:fd:80:8a:66:09:ed:88:c8:fb: d6:4c:41:72:a1:3b:b9:28:02:15:a6:2b:ff:d1:48: 6b:26:e4:61:6c:62:16:93:ed:0a:dd:ca:0e:da:02: 66:81:a1:4b:3d:8f:95:9a:90:84:2b:b2:fd:65:cc: ef:81:3f:09:c0:ce:35:5d:96:12:82:e2:f4:ad:f7: cb:f3:e2:64:2f:d1:81:6e:95:a2:da:44:69:7d:cf: bb:5e:24:b4:76:d9:16:1b:15:4d:51:1e:be:bd:08: aa:90:da:ed:0c:50:2a:3d:45:30:6a:49:6d:e2:1a: b8:4c:c6:37:b0:5e:19:92:85:f2:9b:e1:a9:a2:8e: 93:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:37:AB:B0:D4:05:D4:ED:D5:4C:BC:0F:8A:5C:BD:76:FA:2A:D1:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c929294d-dce6-4c9d-a0ac-e762a7c9451f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.104.0.0/16 Signature Algorithm: sha256WithRSAEncryption 22:ea:cd:59:62:b8:35:6e:2f:e4:5e:08:2b:5d:fd:c1:ce:07: 31:3a:c1:0f:9a:93:2f:4a:64:1b:40:83:1e:89:1e:23:5b:12: 88:ad:f5:d1:96:aa:5f:81:81:f2:ae:62:7a:23:3c:73:86:f9: 41:ad:d0:32:d3:75:d8:e0:1d:51:d7:a5:c8:2d:42:09:7a:f7: 4a:8b:52:13:64:28:7a:93:4e:79:34:ae:d7:12:bf:48:11:46: c1:fc:09:23:bd:6d:30:fb:75:c4:ab:c8:d0:cb:3f:f9:fd:03: 00:6b:eb:39:a4:91:6b:19:66:79:68:39:e2:5d:0d:2d:3e:0c: a4:1e:75:61:48:fa:cf:70:fd:b5:8c:ac:5a:f3:8a:81:73:ae: ce:ea:dc:d6:b6:b0:ab:0f:3d:11:a3:9a:76:8c:e3:4d:53:47: 2b:07:be:6b:74:06:56:7b:a5:1c:da:8e:69:e8:bb:7e:94:dc: 05:74:f4:6c:94:9d:66:44:2b:5b:d3:85:1e:ef:bc:6e:18:b9: dc:54:1c:d6:93:e9:ce:46:1e:56:79:68:c4:5a:7c:e1:0e:a9: e8:5b:f2:16:51:df:f0:89:a7:6e:1c:aa:41:91:ec:1b:56:e1: 2e:2e:5a:02:bd:16:4a:fb:57:dc:6c:61:10:09:27:1a:e1:ea: 8f:b4:89:8e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOxh9XnjOr8B+gPxg0GF+5IN/miowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NDRmZGE2NWJlZTNjY2M2M2QzZjAzYzkxOWI3NjQxNGI0 MDdlZTgwNzI3NjE1N2E5N2U4Njk1MTI5ZjcwNDAwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNO2icdUL+oWyiOw9boy4K02m35WgFuYHuou3001a6gJod IvAYZoiTfGv/CjLV2mU+yat012qtRMO3sFCwpeMAsfEyQ2thQNfZPtc5TUUMo4xL UkcmemTceSDkTHOLib+4KXxVxEuR0QvL5wC6t8l5DPKLLNI2VCt1TZ6Icf2AimYJ 7YjI+9ZMQXKhO7koAhWmK//RSGsm5GFsYhaT7Qrdyg7aAmaBoUs9j5WakIQrsv1l zO+BPwnAzjVdlhKC4vSt98vz4mQv0YFulaLaRGl9z7teJLR22RYbFU1RHr69CKqQ 2u0MUCo9RTBqSW3iGrhMxjewXhmShfKb4amijpP5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUsDersNQF1O3VTLwPily9dvoq0VgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M5MjkyOTRkLWRjZTYtNGM5ZC1hMGFjLWU3NjJhN2M5NDUxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4aDANBgkqhkiG9w0BAQsFAAOCAQEAIurNWWK4NW4v5F4IK139wc4HMTrB D5qTL0pkG0CDHokeI1sSiK310ZaqX4GB8q5ieiM8c4b5Qa3QMtN12OAdUdelyC1C CXr3SotSE2QoepNOeTSu1xK/SBFGwfwJI71tMPt1xKvI0Ms/+f0DAGvrOaSRaxlm eWg54l0NLT4MpB51YUj6z3D9tYysWvOKgXOuzurc1rawqw89EaOadozjTVNHKwe+ a3QGVnulHNqOaei7fpTcBXT0bJSdZkQrW9OFHu+8bhi53FQc1pPpzkYeVnloxFp8 4Q6p6FvyFlHf8ImnbhyqQZHsG1bhLi5aAr0WSvtX3GxhEAknGuHqj7SJjg== -----END CERTIFICATE-----Generated at Thu May 2 11:33:24 2024 by rpki-client on console-fra.rpki-client.org