$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d137cbf3-b7ec-4133-a54c-708ebc2ae87a.roa File: d137cbf3-b7ec-4133-a54c-708ebc2ae87a.roa (raw, json) Hash identifier: Rwr8CEFbD/Ace2fQy+PvLFQh0413vNte8py7JzjY3Mw= Subject key identifier: 9D:36:FA:2D:CD:D4:0E:10:BA:17:91:3C:88:AE:9A:6E:5A:0E:D1:7B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4564A9538416E0272242C8469BF7EB39372C7792 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d137cbf3-b7ec-4133-a54c-708ebc2ae87a.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 16.78.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:64:a9:53:84:16:e0:27:22:42:c8:46:9b:f7:eb:39:37:2c:77:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=7a61ed6c58138bb6f2ab784219c7fd7b9f9f886a8aa0aecd78b66f5793e251b5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:30:43:b9:d0:96:c6:ac:61:b6:39:25:13:91: 61:85:f5:32:b8:2c:f9:3c:5f:e4:a4:80:11:01:60: fb:ea:ef:f0:18:69:2e:94:3b:7f:c7:86:96:35:4f: 8f:4e:40:93:0e:33:a4:4a:35:49:ec:de:d8:e1:da: f8:7a:99:a7:38:7a:60:be:b7:38:5c:bf:c0:d1:32: 3d:a3:66:f1:2e:f1:3c:a1:d1:95:d0:03:30:f7:56: 2e:6e:7f:b0:dc:5e:cd:1d:51:ba:ac:fc:2c:32:71: 2c:29:9a:a8:98:38:08:92:db:63:df:7a:63:74:d2: 91:13:cf:c5:fb:88:c0:b5:48:3c:93:40:72:2d:bc: cc:88:ae:5b:0b:e6:93:41:c4:bd:23:7b:a2:2d:9d: 8b:74:b5:43:85:8f:ba:50:5f:78:6b:90:13:cb:e9: e4:b5:b1:ad:38:ad:3f:cc:b8:a9:a5:06:36:1c:20: 9c:03:52:e9:64:ff:f4:20:28:ce:cf:8f:82:39:d7: 03:37:0c:26:eb:f9:ec:8e:e7:b0:cc:10:66:9f:a6: 45:12:fc:28:f1:db:ee:e0:ea:b5:be:6d:e7:ab:79: 14:bc:d4:40:89:65:ba:9b:df:7f:f2:f4:b7:ad:53: 61:9e:f7:19:62:73:11:0b:8c:49:14:eb:c0:88:95: 12:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:36:FA:2D:CD:D4:0E:10:BA:17:91:3C:88:AE:9A:6E:5A:0E:D1:7B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d137cbf3-b7ec-4133-a54c-708ebc2ae87a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.78.0.0/15 Signature Algorithm: sha256WithRSAEncryption 8f:2b:e3:6b:7a:bc:db:02:ff:7a:72:a7:10:a6:28:c1:c8:34: 06:83:26:d8:55:3f:40:c6:2b:19:4c:99:d5:29:ce:2c:72:14: 2e:45:8b:b8:17:7a:9e:4c:39:64:f3:c5:75:f0:64:c6:7e:ac: 64:86:39:8c:7e:d2:e5:5d:76:f8:27:30:a2:68:61:1a:f6:d0: 6b:af:e7:a1:11:ad:d7:ac:2c:8a:15:16:e6:9b:77:7c:39:3d: 19:d6:55:a3:f6:ec:df:4f:3d:6e:41:d1:e5:18:00:af:3c:75: fa:5a:28:aa:f0:cf:1f:43:f1:35:de:b6:50:79:b1:d1:56:5e: 6f:7f:8d:b4:f5:2c:d2:49:b9:db:a6:c8:fd:28:9f:c6:41:db: 77:09:7f:68:2f:12:2d:ba:a9:55:78:c4:79:77:59:01:d8:dc: ae:e5:2a:b5:ed:d4:08:8a:e2:03:0b:93:81:7a:77:ba:2f:52: 25:19:8a:94:b9:0c:10:66:35:eb:78:6e:76:64:07:d6:44:70: 3f:3c:ae:15:af:14:05:82:e7:49:79:28:7b:b4:89:3c:28:9d: 43:b4:38:77:ab:d2:22:94:5a:2c:5d:0a:e7:77:da:f5:ce:fd: a6:17:b4:82:7c:e0:3e:6f:26:99:9a:64:08:0c:46:e1:0b:fb: 1c:29:00:a4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURWSpU4QW4CciQshGm/frOTcsd5IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTYxZWQ2YzU4MTM4YmI2ZjJhYjc4NDIxOWM3ZmQ3Yjlm OWY4ODZhOGFhMGFlY2Q3OGI2NmY1NzkzZTI1MWI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcMEO50JbGrGG2OSUTkWGF9TK4LPk8X+SkgBEBYPvq7/AY aS6UO3/HhpY1T49OQJMOM6RKNUns3tjh2vh6mac4emC+tzhcv8DRMj2jZvEu8Tyh 0ZXQAzD3Vi5uf7DcXs0dUbqs/CwycSwpmqiYOAiS22PfemN00pETz8X7iMC1SDyT QHItvMyIrlsL5pNBxL0je6ItnYt0tUOFj7pQX3hrkBPL6eS1sa04rT/MuKmlBjYc IJwDUulk//QgKM7Pj4I51wM3DCbr+eyO57DMEGafpkUS/Cjx2+7g6rW+beereRS8 1ECJZbqb33/y9LetU2Ge9xlicxELjEkU68CIlRJVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUnTb6Lc3UDhC6F5E8iK6abloO0XswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QxMzdjYmYzLWI3ZWMtNDEzMy1hNTRjLTcwOGViYzJhZTg3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEQTjANBgkqhkiG9w0BAQsFAAOCAQEAjyvja3q82wL/enKnEKYowcg0BoMm 2FU/QMYrGUyZ1SnOLHIULkWLuBd6nkw5ZPPFdfBkxn6sZIY5jH7S5V12+Ccwomhh GvbQa6/noRGt16wsihUW5pt3fDk9GdZVo/bs3089bkHR5RgArzx1+looqvDPH0Px Nd62UHmx0VZeb3+NtPUs0km526bI/SifxkHbdwl/aC8SLbqpVXjEeXdZAdjcruUq te3UCIriAwuTgXp3ui9SJRmKlLkMEGY163hudmQH1kRwPzyuFa8UBYLnSXkoe7SJ PCidQ7Q4d6vSIpRaLF0K53fa9c79phe0gnzgPm8mmZpkCAxG4Qv7HCkApA== -----END CERTIFICATE-----Generated at Thu May 9 01:25:48 2024 by rpki-client on console-fra.rpki-client.org