$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a65e10-48ad-4936-804e-a92f5d78a1b6.roa File: e9a65e10-48ad-4936-804e-a92f5d78a1b6.roa (raw, json) Hash identifier: juYkyG36QD2cmA0pTJ8ZbrLdNx+44DNy1i1k0h0phcE= Subject key identifier: 3E:9C:63:A9:60:95:AD:99:F3:8C:D8:42:89:6E:C7:E7:01:B7:5F:78 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 392FF6CFE76CD48ED80458EEDEFCB6F5B1E944C2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a65e10-48ad-4936-804e-a92f5d78a1b6.roa Signing time: Tue 23 Apr 2024 00:00:00 +0000 ROA not before: Tue 23 Apr 2024 00:00:00 +0000 ROA not after: Tue 28 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 16.174.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2f:f6:cf:e7:6c:d4:8e:d8:04:58:ee:de:fc:b6:f5:b1:e9:44:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:00:00 2024 GMT Not After : May 28 23:59:59 2024 GMT Subject: serialNumber=a96299168fedf953d5013c67b41bbcb66036a045ea8f01b3c8d5168a85b96751, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:25:4b:96:8b:99:e1:8c:5e:f1:a6:8c:d5:c6: e1:2e:96:d4:d5:61:d5:40:32:8a:62:22:37:95:65: 31:85:fd:a0:24:35:c7:e2:ea:b0:18:31:69:ae:78: 49:0d:96:6d:bb:c2:58:d3:f9:0e:ef:30:a6:67:23: a7:af:a8:c1:54:e4:36:03:60:b6:2c:a4:6a:47:1e: 7e:57:a6:92:19:29:ab:19:5a:0b:18:4a:3d:60:18: e7:8f:ff:9c:17:0c:52:f3:b2:ae:9b:c6:4c:aa:18: 40:1c:80:d2:45:99:24:84:59:cd:cd:00:f0:6c:8f: 9b:b4:0c:ed:c4:59:ab:3f:f2:b2:52:36:39:e9:9d: 49:17:d0:6f:94:77:bd:24:39:99:44:86:aa:5f:c6: 90:fc:ca:77:6d:43:1c:bd:ba:79:0b:7c:5d:a2:29: 53:17:77:74:f3:86:d5:f5:65:56:76:4c:7b:6b:08: 12:28:0b:d8:53:40:a5:33:3a:0e:b3:a7:d1:b2:71: 70:40:46:5b:69:70:86:9b:c9:2f:b8:e3:b3:57:e9: 6b:63:68:9e:11:28:9e:17:16:7a:ba:12:6c:50:1b: 5b:a6:88:ce:95:3d:19:dd:05:dc:48:69:d5:b8:df: 1f:7b:de:ce:bb:2b:5a:e8:39:2e:2c:dc:d0:71:5f: 56:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9C:63:A9:60:95:AD:99:F3:8C:D8:42:89:6E:C7:E7:01:B7:5F:78 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a65e10-48ad-4936-804e-a92f5d78a1b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.174.0.0/16 Signature Algorithm: sha256WithRSAEncryption 17:ae:da:ab:bf:6e:26:20:85:58:74:63:e9:05:80:bd:90:27: d0:77:25:da:80:22:81:94:4c:b4:0a:a4:2d:11:9a:90:94:80: 33:ba:82:fd:ef:66:72:d6:18:82:38:1a:c3:3c:df:94:75:16: e8:c8:ce:af:cd:c4:a3:74:c4:3c:1e:eb:9d:d5:68:08:3b:1c: 6a:35:d6:08:78:00:a4:88:cb:b3:0e:76:0f:83:fd:fa:46:b5: f9:ab:bf:96:b1:0d:a6:27:e6:f5:a0:3f:44:e0:56:eb:0d:6c: 98:2f:22:56:10:3f:c5:a5:a0:20:28:43:a3:87:bf:9b:e8:45: fa:f4:db:83:e4:d1:14:78:e8:ae:33:cf:27:90:8b:d4:f1:2b: 68:66:52:79:f5:2c:98:42:7c:71:a4:96:83:70:68:39:1b:f6: 92:01:1a:cd:cb:35:f9:42:7b:9b:36:49:e9:b7:ed:82:ae:25: 27:1a:f1:76:d3:a4:c1:7b:dd:cc:10:d8:32:ef:9e:ee:91:a4: 8c:14:dd:34:6c:bc:de:48:4d:0e:99:98:bc:10:63:d6:68:cb: b5:ca:50:86:e1:0b:61:57:66:10:f6:5d:b4:ef:a5:be:de:e5: e8:b8:a7:5e:49:a7:66:a4:c9:03:c6:15:fd:eb:b1:06:be:8a: 49:b6:55:10 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOS/2z+ds1I7YBFju3vy29bHpRMIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDIzMDAwMDAwWhcNMjQwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTYyOTkxNjhmZWRmOTUzZDUwMTNjNjdiNDFiYmNiNjYw MzZhMDQ1ZWE4ZjAxYjNjOGQ1MTY4YTg1Yjk2NzUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8JUuWi5nhjF7xpozVxuEultTVYdVAMopiIjeVZTGF/aAk Ncfi6rAYMWmueEkNlm27wljT+Q7vMKZnI6evqMFU5DYDYLYspGpHHn5XppIZKasZ WgsYSj1gGOeP/5wXDFLzsq6bxkyqGEAcgNJFmSSEWc3NAPBsj5u0DO3EWas/8rJS NjnpnUkX0G+Ud70kOZlEhqpfxpD8yndtQxy9unkLfF2iKVMXd3TzhtX1ZVZ2THtr CBIoC9hTQKUzOg6zp9GycXBARltpcIabyS+447NX6WtjaJ4RKJ4XFnq6EmxQG1um iM6VPRndBdxIadW43x973s67K1roOS4s3NBxX1ZVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUPpxjqWCVrZnzjNhCiW7H5wG3X3gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U5YTY1ZTEwLTQ4YWQtNDkzNi04MDRlLWE5MmY1ZDc4YTFiNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQrjANBgkqhkiG9w0BAQsFAAOCAQEAF67aq79uJiCFWHRj6QWAvZAn0Hcl 2oAigZRMtAqkLRGakJSAM7qC/e9mctYYgjgawzzflHUW6MjOr83Eo3TEPB7rndVo CDscajXWCHgApIjLsw52D4P9+ka1+au/lrENpifm9aA/ROBW6w1smC8iVhA/xaWg IChDo4e/m+hF+vTbg+TRFHjorjPPJ5CL1PEraGZSefUsmEJ8caSWg3BoORv2kgEa zcs1+UJ7mzZJ6bftgq4lJxrxdtOkwXvdzBDYMu+e7pGkjBTdNGy83khNDpmYvBBj 1mjLtcpQhuELYVdmEPZdtO+lvt7l6LinXkmnZqTJA8YV/euxBr6KSbZVEA== -----END CERTIFICATE-----Generated at Thu May 2 03:11:38 2024 by rpki-client on console-ams.rpki-client.org