$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d851a357-86cc-4fe6-b155-d32f5acae997.roa File: d851a357-86cc-4fe6-b155-d32f5acae997.roa (raw, json) Hash identifier: LbUqC63z6mN9gJHvBt5xnskP3nGY3P7LNzEn8La+Ero= Subject key identifier: EA:55:15:CE:21:2A:03:10:39:31:53:74:D0:A9:DF:B6:F2:C9:23:6A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3946702269F38B967581D43AF7FE7FC51A0C4113 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d851a357-86cc-4fe6-b155-d32f5acae997.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 56.208.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:46:70:22:69:f3:8b:96:75:81:d4:3a:f7:fe:7f:c5:1a:0c:41:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=09c78090b91df2c164db38b0f21d5e24b2c1d9a4c3ba5e184d6755aa9fc57522, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:55:c0:84:69:27:0b:fd:32:d8:6f:ac:93:de: 9d:71:06:30:f4:8b:f4:0c:26:23:e5:34:b0:60:90: 4c:7d:f0:ca:dc:06:11:89:30:52:c5:ad:42:62:f1: 47:30:68:b7:a0:52:99:7b:93:2b:31:df:92:b8:0e: 12:71:d6:a4:b0:2c:a7:fe:13:10:7a:b0:08:54:a9: 3e:c7:fe:07:eb:52:49:f2:c5:44:20:19:a6:f9:04: b5:51:4a:2f:99:a4:2f:88:24:4b:c9:34:d7:40:40: 6d:62:cc:3c:94:09:bf:43:f8:55:8f:f0:62:67:51: 6b:e4:5b:de:22:91:4d:24:c9:f2:0d:b4:ce:4e:00: 48:dd:fa:f1:8a:fc:0d:bf:1c:c0:3f:73:fc:ae:4a: 5c:cb:31:b4:83:f2:41:3d:5b:3a:53:e3:15:57:dc: bd:f5:86:c3:8f:b3:9d:a7:3c:15:34:8b:19:a8:6f: 31:e1:d3:fc:02:98:33:36:13:e7:d5:37:84:1a:5c: 85:ea:55:0f:0b:11:73:21:9f:a9:41:4f:7a:d4:b5: a4:5d:10:dc:85:42:8b:82:90:3a:c7:f5:3e:09:6d: 44:55:f7:f6:bb:d9:62:3d:08:d0:1b:4d:94:30:10: b4:4b:b4:93:63:da:03:50:9a:60:90:7c:14:2a:ad: c2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:55:15:CE:21:2A:03:10:39:31:53:74:D0:A9:DF:B6:F2:C9:23:6A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d851a357-86cc-4fe6-b155-d32f5acae997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.208.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9d:06:e6:df:ff:b1:38:83:d1:3f:48:7a:1b:fa:38:a5:58:83: 23:b7:e8:94:78:43:8c:9c:4f:66:f2:97:f8:61:0a:d8:86:61: e2:61:08:c9:dc:27:07:af:8c:ec:36:e4:e1:e2:a8:b7:4b:13: 30:f1:e6:58:b7:c9:cf:a1:e1:98:1c:d9:7a:45:77:85:49:21: 9f:ff:31:24:dc:43:9b:f1:39:fd:cf:7e:77:28:39:59:07:f9: ee:e8:b7:19:c1:20:73:c3:ca:27:30:71:28:a0:64:fc:53:35: 15:0f:47:cf:4f:c5:7a:92:24:07:4a:f2:de:a4:1a:08:7d:8a: 25:ab:ca:9b:a6:b0:c7:40:15:47:89:07:c5:a9:5e:6d:61:3f: e7:95:14:c7:13:2d:29:d1:7d:a6:ba:4e:2b:7c:36:21:a6:32: 4f:09:4a:51:26:d8:28:f7:54:bf:8c:8d:89:57:71:02:1e:22: 3f:64:74:b1:7b:c8:24:f8:c1:37:7a:9c:aa:d3:b6:b2:26:c8: 9b:4b:39:5e:4d:76:6a:5f:68:dc:00:51:0f:d1:82:90:61:9e: 39:5f:64:1e:58:43:dd:f1:be:16:75:f2:3a:c6:d7:80:bc:8f: 25:a3:6c:f8:18:38:16:f5:17:55:7e:a1:f4:38:5a:a8:c7:2a: 1d:f9:12:ed -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOUZwImnzi5Z1gdQ69/5/xRoMQRMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOWM3ODA5MGI5MWRmMmMxNjRkYjM4YjBmMjFkNWUyNGIy YzFkOWE0YzNiYTVlMTg0ZDY3NTVhYTlmYzU3NTIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnVcCEaScL/TLYb6yT3p1xBjD0i/QMJiPlNLBgkEx98Mrc BhGJMFLFrUJi8UcwaLegUpl7kysx35K4DhJx1qSwLKf+ExB6sAhUqT7H/gfrUkny xUQgGab5BLVRSi+ZpC+IJEvJNNdAQG1izDyUCb9D+FWP8GJnUWvkW94ikU0kyfIN tM5OAEjd+vGK/A2/HMA/c/yuSlzLMbSD8kE9WzpT4xVX3L31hsOPs52nPBU0ixmo bzHh0/wCmDM2E+fVN4QaXIXqVQ8LEXMhn6lBT3rUtaRdENyFQouCkDrH9T4JbURV 9/a72WI9CNAbTZQwELRLtJNj2gNQmmCQfBQqrcKDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU6lUVziEqAxA5MVN00KnftvLJI2owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4NTFhMzU3LTg2Y2MtNGZlNi1iMTU1LWQzMmY1YWNhZTk5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA40DANBgkqhkiG9w0BAQsFAAOCAQEAnQbm3/+xOIPRP0h6G/o4pViDI7fo lHhDjJxPZvKX+GEK2IZh4mEIydwnB6+M7Dbk4eKot0sTMPHmWLfJz6HhmBzZekV3 hUkhn/8xJNxDm/E5/c9+dyg5WQf57ui3GcEgc8PKJzBxKKBk/FM1FQ9Hz0/FepIk B0ry3qQaCH2KJavKm6awx0AVR4kHxalebWE/55UUxxMtKdF9prpOK3w2IaYyTwlK USbYKPdUv4yNiVdxAh4iP2R0sXvIJPjBN3qcqtO2sibIm0s5Xk12al9o3ABRD9GC kGGeOV9kHlhD3fG+FnXyOsbXgLyPJaNs+Bg4FvUXVX6h9DhaqMcqHfkS7Q== -----END CERTIFICATE-----Generated at Thu May 2 12:23:13 2024 by rpki-client on console-ams.rpki-client.org