$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df69f35a-768d-40b7-8803-70b1db9c187c.roa File: df69f35a-768d-40b7-8803-70b1db9c187c.roa (raw, json) Hash identifier: gXB25/7WAgzGC02tMat3FhxcyJdkQ4Q+Vjp64OHKFik= Subject key identifier: F5:05:3B:0C:96:5A:49:68:60:14:AB:74:7A:A2:2C:29:41:7C:BD:E6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 715E9BBDB00A6BD1C35529C2B69C688D4220FCFF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df69f35a-768d-40b7-8803-70b1db9c187c.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 16.31.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:5e:9b:bd:b0:0a:6b:d1:c3:55:29:c2:b6:9c:68:8d:42:20:fc:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=80655d5580355f19bc187dae406cba8da6b4735a8e6863eef310a56dffd43738, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9b:14:93:da:a3:6a:ea:95:63:4b:bb:dc:d7: f7:4a:05:0f:bc:4e:ee:aa:8b:d5:f7:3b:ac:71:63: e3:8f:05:8d:e9:78:f8:fa:b4:fb:83:40:63:d3:6a: be:0a:cd:c2:26:c7:b7:fd:02:5b:f6:ba:aa:09:90: 16:c7:a1:e6:9a:93:ba:3e:91:07:a1:e0:44:f3:e0: e8:e7:45:6f:de:a7:03:a4:28:b9:36:ad:cf:f2:a8: ce:ab:98:7b:f7:d7:61:41:a0:49:71:97:6f:42:d7: 99:61:c8:8e:42:1a:e7:d3:c6:ee:4e:4f:98:75:40: 29:a3:2a:57:3d:32:16:55:3e:c8:d9:bd:1c:98:a9: a1:16:01:6b:3c:e0:8c:f5:1e:42:c3:1e:95:76:9a: b0:25:c0:33:c0:60:86:70:f1:73:d6:26:6e:cd:1e: 31:61:d9:a3:61:f8:9e:e6:c6:cb:af:73:38:ee:95: 6e:a4:7f:41:8f:97:3c:82:0f:5b:fe:6f:74:92:fd: 20:b0:55:00:e0:8c:5a:5a:a8:99:64:a6:99:6f:80: 48:41:cb:43:a7:e0:70:24:d0:3a:f0:84:67:6a:23: f8:ce:bb:aa:98:e1:a8:dd:5e:54:69:97:6d:ea:09: 46:07:dc:9d:b9:59:21:1f:12:d9:7b:56:1b:18:5e: 4b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:05:3B:0C:96:5A:49:68:60:14:AB:74:7A:A2:2C:29:41:7C:BD:E6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df69f35a-768d-40b7-8803-70b1db9c187c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.31.0.0/16 Signature Algorithm: sha256WithRSAEncryption 42:6e:5e:ed:e1:c7:f7:9a:d1:a6:50:9d:58:38:66:5a:2d:38: 70:20:06:a1:d5:3a:68:77:15:83:4e:da:33:57:89:ce:19:e0: 86:be:bd:bf:18:a7:70:df:32:2d:d8:b0:93:e5:cf:9a:bd:21: be:67:9d:c9:10:0d:d5:04:2a:e4:46:06:d9:ad:96:9c:85:1b: 9e:b0:aa:76:4b:b4:31:fe:3e:ca:a6:35:3d:aa:96:b0:ab:7f: 5b:86:5d:e4:6f:13:06:e4:2a:72:69:fc:f1:95:13:f7:46:93: c9:9b:83:dd:47:39:73:9a:8d:f5:33:2a:1e:bb:e6:a9:d3:e0: 4f:49:28:45:c5:ea:78:8b:59:17:e1:6b:70:cc:69:67:90:07: a1:e1:de:6a:09:a5:43:dd:8d:d8:fd:0f:eb:e6:8c:69:28:fb: d7:2c:83:16:8a:24:7a:ea:a7:d6:cc:3e:b5:ba:db:10:6d:1f: 08:3f:36:2f:10:68:92:fe:d1:29:df:b1:3e:ae:3d:5a:a0:5a: d8:04:e8:f6:a6:78:90:ac:d1:2a:58:53:4d:81:83:51:1b:ac: e7:0d:f2:d6:98:30:40:dc:ca:13:52:b0:22:01:36:61:4b:0f: bf:28:1b:be:25:77:c0:eb:7c:a1:fd:6a:d3:eb:91:a8:63:a9: 76:2d:53:30 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcV6bvbAKa9HDVSnCtpxojUIg/P8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDY1NWQ1NTgwMzU1ZjE5YmMxODdkYWU0MDZjYmE4ZGE2 YjQ3MzVhOGU2ODYzZWVmMzEwYTU2ZGZmZDQzNzM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDamxST2qNq6pVjS7vc1/dKBQ+8Tu6qi9X3O6xxY+OPBY3p ePj6tPuDQGPTar4KzcImx7f9Alv2uqoJkBbHoeaak7o+kQeh4ETz4OjnRW/epwOk KLk2rc/yqM6rmHv312FBoElxl29C15lhyI5CGufTxu5OT5h1QCmjKlc9MhZVPsjZ vRyYqaEWAWs84Iz1HkLDHpV2mrAlwDPAYIZw8XPWJm7NHjFh2aNh+J7mxsuvczju lW6kf0GPlzyCD1v+b3SS/SCwVQDgjFpaqJlkpplvgEhBy0On4HAk0DrwhGdqI/jO u6qY4ajdXlRpl23qCUYH3J25WSEfEtl7VhsYXku7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU9QU7DJZaSWhgFKt0eqIsKUF8veYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RmNjlmMzVhLTc2OGQtNDBiNy04ODAzLTcwYjFkYjljMTg3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQHzANBgkqhkiG9w0BAQsFAAOCAQEAQm5e7eHH95rRplCdWDhmWi04cCAG odU6aHcVg07aM1eJzhnghr69vxincN8yLdiwk+XPmr0hvmedyRAN1QQq5EYG2a2W nIUbnrCqdku0Mf4+yqY1PaqWsKt/W4Zd5G8TBuQqcmn88ZUT90aTyZuD3Uc5c5qN 9TMqHrvmqdPgT0koRcXqeItZF+FrcMxpZ5AHoeHeagmlQ92N2P0P6+aMaSj71yyD Fookeuqn1sw+tbrbEG0fCD82LxBokv7RKd+xPq49WqBa2ATo9qZ4kKzRKlhTTYGD URus5w3y1pgwQNzKE1KwIgE2YUsPvygbviV3wOt8of1q0+uRqGOpdi1TMA== -----END CERTIFICATE-----Generated at Thu May 2 11:33:25 2024 by rpki-client on console-fra.rpki-client.org