$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc82918a-5122-4e41-961f-f830125f0d5d.roa File: dc82918a-5122-4e41-961f-f830125f0d5d.roa (raw, json) Hash identifier: g0XED0PBvEDfg3C7h67r5Nx01BJizgsVXKb5u6QsGsA= Subject key identifier: D3:BE:D7:5D:63:C2:DD:E7:02:79:EC:6A:FA:90:95:F2:25:E0:61:FD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 094BAF55F0CBA8F700DAD934F0EACA80E4A0D364 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc82918a-5122-4e41-961f-f830125f0d5d.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 99.83.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:4b:af:55:f0:cb:a8:f7:00:da:d9:34:f0:ea:ca:80:e4:a0:d3:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=e42c46a636e2fc36e8cb877549fdb7a6e3d40ca5caab0b6c31f6b1a9a8c11d58, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:17:db:e4:d8:40:d3:54:76:4e:d8:3c:8b:83: 2d:ed:06:71:4a:f2:c2:13:56:f5:fc:4d:fb:a9:d5: e0:b4:2c:8b:34:ac:b0:d3:62:2c:41:76:60:98:36: ab:2b:c2:53:e6:28:f5:99:f3:75:d4:af:f5:3a:b3: 31:20:5b:e4:ce:a0:26:67:32:64:5b:1b:1f:3a:6d: ce:b1:2e:3e:11:72:15:d7:f7:08:56:46:33:d7:ed: 0f:5f:df:63:29:ec:cf:f1:d5:cc:6e:ff:54:a0:d7: 95:9d:65:99:03:42:c7:18:28:85:ae:57:f4:eb:d5: bf:da:6d:85:af:60:5c:14:61:0f:33:cc:af:00:a0: 1f:27:aa:f7:fc:7c:fa:72:d3:1e:f0:bb:9a:ee:26: d4:92:0a:e8:2e:0b:7f:7e:8d:3f:a7:1a:8c:5d:0f: a2:56:b2:62:ba:1b:26:43:10:86:5b:44:50:8b:5f: a1:4c:08:6d:41:df:05:b0:f2:bd:1d:87:82:76:42: fc:e0:84:3c:29:72:bd:d8:66:05:5c:77:24:9d:4f: 9b:99:05:5b:51:96:81:90:01:1d:95:b2:e2:bf:dc: d3:14:eb:11:37:4a:0e:34:ea:ef:8b:7a:43:b5:19: 60:61:08:2e:46:e5:a6:08:2a:61:c5:b4:2f:45:41: f9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BE:D7:5D:63:C2:DD:E7:02:79:EC:6A:FA:90:95:F2:25:E0:61:FD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc82918a-5122-4e41-961f-f830125f0d5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.83.102.0/24 Signature Algorithm: sha256WithRSAEncryption d1:b1:34:8d:43:72:2e:db:3e:ef:12:80:5b:65:68:5a:92:d9: d4:7d:cc:d2:af:87:b9:8c:d4:a2:35:9c:a8:f4:26:8d:f2:23: 04:30:0e:a9:5d:d9:a6:fd:74:d7:ca:d2:78:3d:79:84:c2:0c: d3:93:fc:f0:9c:c4:62:19:67:1f:ba:48:88:80:1e:d9:c4:ea: f9:9e:8a:a6:26:c9:ae:2a:7e:56:6c:09:a7:e2:37:bf:43:e2: 5b:11:c1:e0:2d:fc:40:8e:56:b6:71:13:b1:44:0a:c2:88:2f: cd:37:df:2c:0f:69:39:0f:4f:52:19:05:e7:43:1b:55:3e:d5: 6e:f6:c9:71:5d:41:4d:42:f7:d3:50:26:94:5e:d5:fb:56:61: 1b:eb:4c:fc:8b:55:ef:2a:6b:01:79:c6:2c:3d:19:59:5a:84: dd:85:0f:af:7f:f4:bd:18:6d:6f:65:60:71:89:9b:a6:d2:45: a9:33:54:65:5a:1e:87:57:cd:20:0d:df:7f:23:c8:af:63:5c: bd:a8:e9:e7:3e:31:7e:15:50:87:74:52:29:63:8f:90:d4:01: 8f:f0:1c:6c:57:68:16:76:f4:70:ef:0f:fe:2e:2f:29:07:4e: 25:b0:24:6c:73:97:49:ca:76:3e:4d:f6:12:12:55:76:10:4e: 93:b9:80:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCUuvVfDLqPcA2tk08OrKgOSg02QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDJjNDZhNjM2ZTJmYzM2ZThjYjg3NzU0OWZkYjdhNmUz ZDQwY2E1Y2FhYjBiNmMzMWY2YjFhOWE4YzExZDU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7F9vk2EDTVHZO2DyLgy3tBnFK8sITVvX8Tfup1eC0LIs0 rLDTYixBdmCYNqsrwlPmKPWZ83XUr/U6szEgW+TOoCZnMmRbGx86bc6xLj4RchXX 9whWRjPX7Q9f32Mp7M/x1cxu/1Sg15WdZZkDQscYKIWuV/Tr1b/abYWvYFwUYQ8z zK8AoB8nqvf8fPpy0x7wu5ruJtSSCuguC39+jT+nGoxdD6JWsmK6GyZDEIZbRFCL X6FMCG1B3wWw8r0dh4J2QvzghDwpcr3YZgVcdySdT5uZBVtRloGQAR2VsuK/3NMU 6xE3Sg406u+LekO1GWBhCC5G5aYIKmHFtC9FQfkXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU077XXWPC3ecCeexq+pCV8iXgYf0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RjODI5MThhLTUxMjItNGU0MS05NjFmLWY4MzAxMjVmMGQ1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjU2YwDQYJKoZIhvcNAQELBQADggEBANGxNI1Dci7bPu8SgFtlaFqS2dR9 zNKvh7mM1KI1nKj0Jo3yIwQwDqld2ab9dNfK0ng9eYTCDNOT/PCcxGIZZx+6SIiA HtnE6vmeiqYmya4qflZsCafiN79D4lsRweAt/ECOVrZxE7FECsKIL8033ywPaTkP T1IZBedDG1U+1W72yXFdQU1C99NQJpRe1ftWYRvrTPyLVe8qawF5xiw9GVlahN2F D69/9L0YbW9lYHGJm6bSRakzVGVaHodXzSAN338jyK9jXL2o6ec+MX4VUId0Uilj j5DUAY/wHGxXaBZ29HDvD/4uLykHTiWwJGxzl0nKdj5N9hISVXYQTpO5gCo= -----END CERTIFICATE-----Generated at Fri Apr 26 11:00:24 2024 by rpki-client on console-ams.rpki-client.org