$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc0cfc1a-62af-4984-9516-b068332cb387.roa File: cc0cfc1a-62af-4984-9516-b068332cb387.roa (raw, json) Hash identifier: 0R0oaHct+qgavaCY3iHIozhMXKHNVFqiAW52uiYoERI= Subject key identifier: 8C:52:8A:0A:57:EA:A1:5A:71:73:1D:97:D3:66:CB:86:95:D3:BB:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70F1824E2E8EBE47B2A9C65ADB67C759AC7A29C9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc0cfc1a-62af-4984-9516-b068332cb387.roa Signing time: Wed 24 Apr 2024 00:00:00 +0000 ROA not before: Wed 24 Apr 2024 00:00:00 +0000 ROA not after: Wed 29 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 56.86.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f1:82:4e:2e:8e:be:47:b2:a9:c6:5a:db:67:c7:59:ac:7a:29:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 24 00:00:00 2024 GMT Not After : May 29 23:59:59 2024 GMT Subject: serialNumber=c03c502f3385ef36390d2259aebffd1ebb531ec3ac7ab15bfaaf988f911c7faa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:90:6c:f0:ed:f8:f5:11:d9:e4:ff:17:cb:95: 7c:8e:e6:43:1a:e9:9c:ba:e2:d4:b6:bb:96:8b:84: a7:ef:2b:8a:b5:5a:e8:36:94:34:35:9b:b5:0f:6c: a7:d5:fc:f6:55:92:b8:bf:b8:14:73:e3:aa:75:f5: 97:c1:d8:fd:fc:ec:32:80:cc:48:6c:3c:84:75:6c: 53:f4:35:68:1d:1a:18:41:a6:0d:3a:02:a0:f5:7d: f4:6c:ee:c3:d3:08:95:b0:87:eb:74:b3:5d:e5:53: 5c:3c:59:ca:ee:11:c8:e8:a3:ac:64:c3:fc:08:1c: 66:34:cb:f9:77:1d:b6:d9:aa:65:2b:15:4d:6d:f8: 94:e1:03:35:11:fa:a0:d2:9d:7f:ef:d8:a3:df:d7: ed:c9:d6:65:c2:38:b2:8d:e9:29:99:9a:6a:3d:7f: 7c:30:59:50:ce:e3:80:21:46:9d:36:65:06:cf:4a: b2:f2:81:37:32:96:b8:fe:09:88:c0:8a:e8:22:07: 48:b9:cb:59:36:46:5c:70:f8:28:51:62:0e:c0:c2: a4:17:63:73:fe:ae:bf:89:6e:5f:4c:18:46:17:d1: fe:45:1a:6c:3e:de:bc:67:f0:a7:e0:50:b6:96:63: 43:e6:c5:f5:e1:42:be:8f:7a:85:74:c7:1a:e5:f9: 55:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:52:8A:0A:57:EA:A1:5A:71:73:1D:97:D3:66:CB:86:95:D3:BB:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc0cfc1a-62af-4984-9516-b068332cb387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.86.0.0/16 Signature Algorithm: sha256WithRSAEncryption c9:c7:91:6d:91:3c:ef:bc:2d:4c:a4:bf:d1:db:bf:87:c7:c1: 50:2b:7d:f7:35:2b:a1:d6:ec:bb:b0:7b:cf:27:31:52:ae:ac: 78:85:68:fa:69:67:65:68:73:2e:13:01:c1:5e:4c:b6:b6:d1: 00:a2:47:b5:59:4c:ea:72:16:9e:b9:3d:54:b9:e0:59:11:3e: 1c:98:f2:08:e4:86:38:1d:1c:c3:e6:f2:cb:a3:79:b1:2b:8f: 88:4d:4a:fa:22:7a:93:d8:f8:98:35:a9:89:2a:18:b5:08:0a: 2a:ec:17:78:ca:00:d6:5c:f2:4a:c7:82:f4:41:d0:b8:5c:73: b8:af:93:31:8a:7b:b6:e6:85:89:54:93:d1:ef:3d:1d:84:fc: 17:4f:eb:2c:df:02:01:cb:a2:54:73:58:f0:98:c6:36:12:4c: 3c:5a:f5:b1:07:e9:ba:db:47:29:d7:9e:4a:00:16:e1:ce:8b: 30:6a:bf:7c:4e:03:49:6c:96:ee:33:1e:53:99:12:5f:a0:c4: 10:f8:74:5b:b4:15:8b:dc:82:45:31:a3:29:0f:84:c8:48:97: a0:59:d7:65:bf:aa:c5:9b:32:e3:01:f7:95:fd:c5:cb:7a:26: ea:2f:04:6a:52:c4:12:64:91:9f:03:c0:28:d8:85:4d:6d:bc: 47:b9:03:74 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcPGCTi6OvkeyqcZa22fHWax6KckwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDI0MDAwMDAwWhcNMjQwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMDNjNTAyZjMzODVlZjM2MzkwZDIyNTlhZWJmZmQxZWJi NTMxZWMzYWM3YWIxNWJmYWFmOTg4ZjkxMWM3ZmFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLkGzw7fj1Ednk/xfLlXyO5kMa6Zy64tS2u5aLhKfvK4q1 Wug2lDQ1m7UPbKfV/PZVkri/uBRz46p19ZfB2P387DKAzEhsPIR1bFP0NWgdGhhB pg06AqD1ffRs7sPTCJWwh+t0s13lU1w8WcruEcjoo6xkw/wIHGY0y/l3HbbZqmUr FU1t+JThAzUR+qDSnX/v2KPf1+3J1mXCOLKN6SmZmmo9f3wwWVDO44AhRp02ZQbP SrLygTcylrj+CYjAiugiB0i5y1k2Rlxw+ChRYg7AwqQXY3P+rr+Jbl9MGEYX0f5F Gmw+3rxn8KfgULaWY0PmxfXhQr6PeoV0xxrl+VXLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUjFKKClfqoVpxcx2X02bLhpXTu+EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NjMGNmYzFhLTYyYWYtNDk4NC05NTE2LWIwNjgzMzJjYjM4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4VjANBgkqhkiG9w0BAQsFAAOCAQEAyceRbZE877wtTKS/0du/h8fBUCt9 9zUrodbsu7B7zycxUq6seIVo+mlnZWhzLhMBwV5MtrbRAKJHtVlM6nIWnrk9VLng WRE+HJjyCOSGOB0cw+byy6N5sSuPiE1K+iJ6k9j4mDWpiSoYtQgKKuwXeMoA1lzy SseC9EHQuFxzuK+TMYp7tuaFiVST0e89HYT8F0/rLN8CAcuiVHNY8JjGNhJMPFr1 sQfputtHKdeeSgAW4c6LMGq/fE4DSWyW7jMeU5kSX6DEEPh0W7QVi9yCRTGjKQ+E yEiXoFnXZb+qxZsy4wH3lf3Fy3om6i8EalLEEmSRnwPAKNiFTW28R7kDdA== -----END CERTIFICATE-----Generated at Thu May 2 17:17:17 2024 by rpki-client on console-ams.rpki-client.org