$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca562efb-efda-4106-b8cb-01e414f05deb.roa File: ca562efb-efda-4106-b8cb-01e414f05deb.roa (raw, json) Hash identifier: mrAaC9EEgQIoTCFnLHrugGxBETVUhA4bmdPXW956gPQ= Subject key identifier: 13:D4:3F:ED:C8:E4:4D:9F:20:B1:7E:D3:3F:36:E6:E1:82:BB:2F:62 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2CADE6CFD139FF2397285B4BBBE42ACCE027239B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca562efb-efda-4106-b8cb-01e414f05deb.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 16.104.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ad:e6:cf:d1:39:ff:23:97:28:5b:4b:bb:e4:2a:cc:e0:27:23:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=d12328ffa9a63c298fa23fe87df2656c5c0578ee5e99a5b183ffa5b7357436e7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dc:aa:9b:4b:2a:26:61:e0:06:6e:e5:e6:22: 4d:26:25:5d:fe:75:fb:67:ec:34:70:b1:3d:32:96: ef:92:89:57:52:e9:d3:40:dd:5e:e4:22:f7:c3:70: 45:b9:53:03:0d:12:7a:66:d8:c5:92:e5:a1:2e:de: 6a:3f:59:59:54:0d:f6:29:1b:60:1c:7c:1e:7f:5a: 4a:77:39:0c:e2:18:3b:8a:87:3b:29:16:28:ad:45: c8:eb:b3:82:45:56:f1:2d:27:50:aa:82:e2:b9:cb: 25:cc:50:7a:4f:3b:d7:ad:c4:c0:2a:c5:43:3f:01: 82:15:c6:97:52:f4:14:1b:64:13:cf:20:68:c4:15: 29:a3:88:34:ba:12:88:aa:6f:cd:54:54:28:78:48: 46:8d:eb:03:72:9f:2a:fc:98:0c:1f:53:45:c7:1b: dc:a2:32:7f:c0:3c:89:18:9f:d3:27:a8:1e:0f:95: a0:96:ac:0f:b5:25:cd:24:3f:13:c9:ba:5f:85:54: c8:3d:28:1d:c3:04:97:82:a8:fb:e3:b3:c7:37:d0: b7:c0:96:d4:ed:22:e7:57:66:20:86:8d:5a:2d:0f: b7:34:79:35:29:1b:4b:33:59:d5:94:0d:0e:bb:e4: c8:47:2a:9b:b0:f2:58:03:58:c3:af:86:21:f5:20: 5c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D4:3F:ED:C8:E4:4D:9F:20:B1:7E:D3:3F:36:E6:E1:82:BB:2F:62 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca562efb-efda-4106-b8cb-01e414f05deb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.104.0.0/16 Signature Algorithm: sha256WithRSAEncryption 55:06:92:15:ce:73:e1:3f:3c:83:5c:dc:47:c8:84:43:c3:36: 38:24:f6:db:cd:f1:b7:6b:30:22:96:f9:e2:2d:90:0e:a3:e9: cd:91:b9:a4:f5:95:d2:eb:b2:42:0c:7e:56:91:91:93:8f:5c: 75:e3:b7:37:10:af:89:a2:51:fc:d0:14:6a:26:e5:0a:68:cb: 08:08:70:3f:23:b1:32:c3:87:ed:ee:a9:cd:7c:db:bb:63:7d: aa:aa:97:98:0d:50:00:6c:1e:41:c9:b9:22:e4:05:13:19:97: 43:c2:49:7d:12:01:22:23:08:b0:58:65:3b:d9:18:a3:e4:a3: 62:ed:3d:ed:13:80:ce:2c:f0:bd:d6:20:10:18:da:ec:2a:ee: 8c:3b:ac:21:08:8a:fc:8c:d6:32:46:03:20:b6:16:5a:43:ee: 8d:d8:5e:45:c0:be:c4:54:fd:26:f3:05:aa:7f:61:48:80:1f: bf:64:58:55:04:3d:d6:3a:e6:f8:a4:83:be:78:a5:c7:e8:0a: 48:a7:e2:2e:c4:6e:d3:cf:9f:c4:29:c7:fd:ca:99:a7:e8:46: 41:36:03:ff:6a:6a:d3:d7:8a:5a:64:d0:c3:66:40:ac:8a:b9: 4b:47:8d:8d:80:ea:96:b9:2c:70:f2:62:ab:cd:32:72:c9:6d: 66:45:29:8b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULK3mz9E5/yOXKFtLu+QqzOAnI5swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTIzMjhmZmE5YTYzYzI5OGZhMjNmZTg3ZGYyNjU2YzVj MDU3OGVlNWU5OWE1YjE4M2ZmYTViNzM1NzQzNmU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw3KqbSyomYeAGbuXmIk0mJV3+dftn7DRwsT0ylu+SiVdS 6dNA3V7kIvfDcEW5UwMNEnpm2MWS5aEu3mo/WVlUDfYpG2AcfB5/Wkp3OQziGDuK hzspFiitRcjrs4JFVvEtJ1CqguK5yyXMUHpPO9etxMAqxUM/AYIVxpdS9BQbZBPP IGjEFSmjiDS6Eoiqb81UVCh4SEaN6wNynyr8mAwfU0XHG9yiMn/APIkYn9MnqB4P laCWrA+1Jc0kPxPJul+FVMg9KB3DBJeCqPvjs8c30LfAltTtIudXZiCGjVotD7c0 eTUpG0szWdWUDQ675MhHKpuw8lgDWMOvhiH1IFyPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUE9Q/7cjkTZ8gsX7TPzbm4YK7L2IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NhNTYyZWZiLWVmZGEtNDEwNi1iOGNiLTAxZTQxNGYwNWRlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQaDANBgkqhkiG9w0BAQsFAAOCAQEAVQaSFc5z4T88g1zcR8iEQ8M2OCT2 283xt2swIpb54i2QDqPpzZG5pPWV0uuyQgx+VpGRk49cdeO3NxCviaJR/NAUaibl CmjLCAhwPyOxMsOH7e6pzXzbu2N9qqqXmA1QAGweQcm5IuQFExmXQ8JJfRIBIiMI sFhlO9kYo+SjYu097ROAzizwvdYgEBja7CrujDusIQiK/IzWMkYDILYWWkPujdhe RcC+xFT9JvMFqn9hSIAfv2RYVQQ91jrm+KSDvnilx+gKSKfiLsRu08+fxCnH/cqZ p+hGQTYD/2pq09eKWmTQw2ZArIq5S0eNjYDqlrkscPJiq80ycsltZkUpiw== -----END CERTIFICATE-----Generated at Thu May 2 06:12:48 2024 by rpki-client on console-fra.rpki-client.org