$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdb608f1-3258-4548-b553-97979fb494e4.roa File: cdb608f1-3258-4548-b553-97979fb494e4.roa (raw, json) Hash identifier: KsY2yKesKB5lY5DlRLU//TJgt9KN/DPSNpilITtSSog= Subject key identifier: 74:B0:9A:6B:95:01:DB:95:38:54:F0:D8:CA:DF:50:AF:7A:C6:1A:BB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 20D4F8DC2EB3A829088BEBE638599BE2B733B497 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdb608f1-3258-4548-b553-97979fb494e4.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 56.104.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d4:f8:dc:2e:b3:a8:29:08:8b:eb:e6:38:59:9b:e2:b7:33:b4:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=74c1e458403bcb85257e6483c3d033a03be486fecdc116f05802f5c4676201a1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:dd:96:e3:49:4d:65:43:52:f4:fd:89:34: 9b:d2:26:51:a2:bc:1a:d5:e5:b5:36:34:a3:9d:63: 72:34:d3:be:2f:f7:dd:40:27:cb:e5:d2:58:16:44: ab:9c:9d:78:aa:85:d9:d6:65:ac:c3:2f:f9:07:0d: 15:bd:4c:b1:34:5f:9a:5e:5b:f8:65:ac:2f:4d:7e: 5f:4a:32:8f:39:c0:78:53:af:8f:f1:25:3b:a6:b6: 1c:fc:db:d9:fb:70:a4:84:42:b3:ed:97:9d:6e:53: eb:68:16:ac:d0:4c:c4:05:a1:a3:93:c8:7d:b3:8b: 10:1a:58:ea:c3:52:3f:8e:68:67:17:fb:8f:0a:c4: 43:c8:f0:53:72:0f:66:1f:89:d3:85:43:ac:18:c3: d0:09:3c:84:b9:17:ff:6e:54:96:5a:1a:b2:d6:42: 4e:65:28:9a:9d:82:2b:01:6a:83:70:97:0f:c8:13: 81:2f:00:91:be:b0:45:91:eb:84:51:85:e7:cd:a4: 1a:69:05:59:c9:e2:42:f7:08:24:d8:52:89:87:da: 6f:75:dd:a9:b6:bb:92:92:60:c6:31:d7:d4:3f:98: df:72:a1:05:94:41:0c:ec:57:5a:67:11:5c:c6:a6: 17:91:c8:7e:12:e3:9e:9d:e9:0a:8a:2d:de:2a:88: aa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B0:9A:6B:95:01:DB:95:38:54:F0:D8:CA:DF:50:AF:7A:C6:1A:BB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdb608f1-3258-4548-b553-97979fb494e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.104.0.0/16 Signature Algorithm: sha256WithRSAEncryption b2:28:e7:a9:47:02:57:5f:5d:4d:fe:12:5e:80:7d:f4:a7:2f: 44:86:55:91:1d:f2:82:63:d8:a7:04:35:d8:48:3b:17:c3:e1: e6:bd:c3:be:b1:33:5a:b1:12:2e:bc:49:ef:29:32:27:02:cc: e1:5b:91:fd:64:2d:07:af:8a:8a:4f:9e:f1:31:c7:0f:84:37: 23:31:56:fd:f3:0e:08:1f:ab:08:be:d7:77:8a:3a:47:b2:40: 25:28:bc:54:45:5b:6d:30:10:d9:65:02:37:b0:8a:95:0e:d3: 58:d8:21:1f:ab:79:54:d6:e8:2a:1b:63:88:80:03:96:48:03: 0b:ee:d0:59:46:11:22:ab:b5:bf:3e:ec:9d:59:2d:33:20:2d: c4:b4:2b:0d:1e:b1:68:fd:62:2b:22:5c:c5:48:3a:11:2c:59: 79:0b:cd:bb:1b:ad:cc:85:c3:2d:ff:f7:bf:80:6a:95:21:be: 61:b4:1f:9a:ed:c1:3f:25:40:67:6e:e6:ee:4d:f2:da:26:b2: b9:64:a8:11:d5:d1:21:91:37:07:12:68:a8:b7:d8:d1:d8:6d: bd:da:07:70:54:c8:65:e2:11:4f:ab:02:58:98:8e:ac:1c:ff: 11:b7:e5:c0:47:05:0c:71:cb:36:43:3d:f3:65:75:8e:34:61: dc:74:53:50 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUINT43C6zqCkIi+vmOFmb4rcztJcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NGMxZTQ1ODQwM2JjYjg1MjU3ZTY0ODNjM2QwMzNhMDNi ZTQ4NmZlY2RjMTE2ZjA1ODAyZjVjNDY3NjIwMWExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChW92W40lNZUNS9P2JNJvSJlGivBrV5bU2NKOdY3I0074v 991AJ8vl0lgWRKucnXiqhdnWZazDL/kHDRW9TLE0X5peW/hlrC9Nfl9KMo85wHhT r4/xJTumthz829n7cKSEQrPtl51uU+toFqzQTMQFoaOTyH2zixAaWOrDUj+OaGcX +48KxEPI8FNyD2YfidOFQ6wYw9AJPIS5F/9uVJZaGrLWQk5lKJqdgisBaoNwlw/I E4EvAJG+sEWR64RRhefNpBppBVnJ4kL3CCTYUomH2m913am2u5KSYMYx19Q/mN9y oQWUQQzsV1pnEVzGpheRyH4S456d6QqKLd4qiKr7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUdLCaa5UB25U4VPDYyt9Qr3rGGrswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkYjYwOGYxLTMyNTgtNDU0OC1iNTUzLTk3OTc5ZmI0OTRlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4aDANBgkqhkiG9w0BAQsFAAOCAQEAsijnqUcCV19dTf4SXoB99KcvRIZV kR3ygmPYpwQ12Eg7F8Ph5r3DvrEzWrESLrxJ7ykyJwLM4VuR/WQtB6+Kik+e8THH D4Q3IzFW/fMOCB+rCL7Xd4o6R7JAJSi8VEVbbTAQ2WUCN7CKlQ7TWNghH6t5VNbo KhtjiIADlkgDC+7QWUYRIqu1vz7snVktMyAtxLQrDR6xaP1iKyJcxUg6ESxZeQvN uxutzIXDLf/3v4BqlSG+YbQfmu3BPyVAZ27m7k3y2iayuWSoEdXRIZE3BxJoqLfY 0dhtvdoHcFTIZeIRT6sCWJiOrBz/EbflwEcFDHHLNkM982V1jjRh3HRTUA== -----END CERTIFICATE-----Generated at Thu May 9 01:25:47 2024 by rpki-client on console-fra.rpki-client.org