$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf581b9c-8cd7-41f5-ac60-85228b4b2572.roa File: cf581b9c-8cd7-41f5-ac60-85228b4b2572.roa (raw, json) Hash identifier: lBUWuGlfpHibF+94bM6DJQFKlUROBYxzQRc1qOcnZVY= Subject key identifier: 14:E1:1D:1D:43:4B:71:6C:A6:B6:B3:D6:08:F3:1C:59:08:1C:4B:B2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 754DC70E67A3F69A65C7297D07161734A0D8A3A7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf581b9c-8cd7-41f5-ac60-85228b4b2572.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 108.166.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:4d:c7:0e:67:a3:f6:9a:65:c7:29:7d:07:16:17:34:a0:d8:a3:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=28584f3130da3beaff223e0b4e050417def9ef71b6bd14c81f26c68fd3581f85, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:82:d6:eb:8c:f8:cb:2f:07:bb:5e:0d:6f:62: a2:15:63:a4:e6:6f:9b:ee:a1:86:10:53:c3:60:a4: d9:ca:38:a4:eb:33:00:60:83:dc:ed:b8:b3:d7:1f: 99:1b:cf:eb:4b:ed:40:25:7b:7e:a0:83:4d:2a:5f: 66:db:ad:fa:d3:bb:bf:c3:59:04:32:7a:60:8f:e8: 04:3c:79:4f:d2:ba:b0:4d:50:4d:b0:3d:2e:56:96: 7a:85:22:85:ad:cb:f6:7b:cb:00:05:cb:09:04:2f: 72:34:b6:20:82:f9:f1:14:62:4a:64:d7:68:1d:12: 73:eb:38:f2:ab:3c:a1:0e:30:e5:ba:37:30:f1:f4: a8:9e:d6:e5:74:17:b4:14:2e:72:22:97:eb:9e:93: 12:e0:b8:21:58:04:79:a6:8d:a7:ad:2d:b2:51:fe: ac:1b:84:89:9a:c4:9c:57:c3:26:e6:25:c2:08:e6: 41:4a:ce:67:68:c8:16:8c:37:c9:77:50:19:10:30: 8a:d6:11:95:ba:a5:6c:4f:69:e0:35:4b:3d:f8:ec: 8b:78:12:6e:fe:95:e4:76:e7:9f:c8:99:c1:ee:6e: 06:ec:ff:39:44:2c:cf:e9:d6:12:a7:3f:11:0d:72: 8c:29:23:c2:d0:ba:28:98:20:7d:a2:9a:9b:ea:d7: 40:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E1:1D:1D:43:4B:71:6C:A6:B6:B3:D6:08:F3:1C:59:08:1C:4B:B2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf581b9c-8cd7-41f5-ac60-85228b4b2572.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.166.240.0/21 Signature Algorithm: sha256WithRSAEncryption c9:4b:3d:82:c1:d1:d8:90:fd:4e:7f:af:07:56:48:c3:b5:eb: c3:35:46:76:e4:51:a7:1c:fc:33:91:be:99:c2:a7:22:91:82: 24:21:42:d8:9a:e4:75:9c:82:d9:89:8a:5c:03:fd:f6:cb:3f: 65:64:33:b1:a6:00:8f:99:9a:71:f2:48:cf:72:5a:7b:b3:d0: 97:8d:23:b0:b5:3f:f4:b7:10:33:0e:be:c6:72:4b:3f:9f:fb: 48:e0:a7:c3:a2:8d:4a:56:9d:6d:ac:b6:13:9a:43:35:a5:34: 08:aa:69:93:96:fb:0d:68:5a:2a:b0:e1:f6:4d:17:13:20:eb: 3e:69:04:5a:e9:aa:47:5d:1e:7e:bb:fc:bb:79:39:60:13:88: 67:1b:68:ec:25:0f:2c:a4:76:2f:2b:67:b1:02:82:95:25:2f: 9a:af:4c:bc:2e:1e:27:35:b7:d2:0e:62:3f:9a:91:45:29:b0: 10:a1:6f:23:da:b2:3b:d7:80:1f:08:0e:09:9e:da:32:f5:94: ef:bb:18:fd:d6:01:38:eb:1d:26:0e:01:81:d7:d1:b6:87:06: b7:94:4e:4c:cf:23:9a:5b:ae:da:51:f8:eb:2e:38:e4:9f:2e: f5:c3:99:80:b6:ea:ea:c0:d2:7a:8a:f1:ca:39:ea:ef:62:7c: 7a:57:b7:9a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdU3HDmej9pplxyl9BxYXNKDYo6cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyODU4NGYzMTMwZGEzYmVhZmYyMjNlMGI0ZTA1MDQxN2Rl ZjllZjcxYjZiZDE0YzgxZjI2YzY4ZmQzNTgxZjg1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQgtbrjPjLLwe7Xg1vYqIVY6Tmb5vuoYYQU8NgpNnKOKTr MwBgg9ztuLPXH5kbz+tL7UAle36gg00qX2bbrfrTu7/DWQQyemCP6AQ8eU/SurBN UE2wPS5WlnqFIoWty/Z7ywAFywkEL3I0tiCC+fEUYkpk12gdEnPrOPKrPKEOMOW6 NzDx9Kie1uV0F7QULnIil+uekxLguCFYBHmmjaetLbJR/qwbhImaxJxXwybmJcII 5kFKzmdoyBaMN8l3UBkQMIrWEZW6pWxPaeA1Sz347It4Em7+leR255/ImcHubgbs /zlELM/p1hKnPxENcowpI8LQuiiYIH2impvq10AtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFOEdHUNLcWymtrPWCPMcWQgcS7IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmNTgxYjljLThjZDctNDFmNS1hYzYwLTg1MjI4YjRiMjU3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANspvAwDQYJKoZIhvcNAQELBQADggEBAMlLPYLB0diQ/U5/rwdWSMO168M1 RnbkUacc/DORvpnCpyKRgiQhQtia5HWcgtmJilwD/fbLP2VkM7GmAI+ZmnHySM9y Wnuz0JeNI7C1P/S3EDMOvsZySz+f+0jgp8OijUpWnW2sthOaQzWlNAiqaZOW+w1o Wiqw4fZNFxMg6z5pBFrpqkddHn67/Lt5OWATiGcbaOwlDyykdi8rZ7ECgpUlL5qv TLwuHic1t9IOYj+akUUpsBChbyPasjvXgB8IDgme2jL1lO+7GP3WATjrHSYOAYHX 0baHBreUTkzPI5pbrtpR+OsuOOSfLvXDmYC26urA0nqK8co56u9ifHpXt5o= -----END CERTIFICATE-----Generated at Wed Apr 24 15:49:09 2024 by rpki-client on console-ams.rpki-client.org