$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea01df0a-3da4-444c-afaf-b68711db0997.roa File: ea01df0a-3da4-444c-afaf-b68711db0997.roa (raw, json) Hash identifier: KFVQG6btcWXevyepjqEBi0pxdi2F1h3X3PUwDk56OT0= Subject key identifier: 56:FA:C8:E0:D1:BA:23:04:7C:1D:F6:3D:71:3E:D1:1C:B8:C8:BE:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40A414DF305C65A9CF76BD3882BA6D54005C0801 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea01df0a-3da4-444c-afaf-b68711db0997.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 16.24.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a4:14:df:30:5c:65:a9:cf:76:bd:38:82:ba:6d:54:00:5c:08:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=c967efea6ffba7ea1ea74ef96f076ad5fe7ca8815948765b5f388aadc6dfd162, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ba:10:c5:54:ca:8a:a0:38:e5:05:78:a7:95: 68:0c:3b:0f:97:0c:73:9e:51:e5:d5:11:0e:51:7b: e1:ec:71:68:59:2c:73:9d:82:af:43:f6:50:f6:ea: a6:46:3d:84:68:47:56:f2:9d:0a:48:d1:71:1b:15: fd:e6:0e:e8:19:e4:3b:c2:a3:d8:7a:8c:62:d9:73: 82:9b:c7:06:ea:f3:29:d7:1f:6f:47:fa:77:df:2d: 78:f4:7d:e5:6e:3b:4d:0f:67:03:3e:05:ac:ee:e1: 69:4d:7a:df:34:e2:a6:3a:8e:86:84:8c:82:b9:5e: ba:48:c3:48:6d:d4:ac:ab:01:aa:db:c5:1e:e8:b1: b4:74:88:b4:c1:cc:ab:b5:37:7a:0a:7c:d8:ed:a9: 84:d8:2a:7b:b9:b4:00:75:0b:29:0f:87:92:12:7b: 3d:4e:93:6f:75:c2:c9:2e:46:fa:a5:62:9d:c0:ea: 4e:94:20:36:ca:6f:bc:d5:c7:65:23:99:6f:90:a7: 6e:56:25:f9:af:61:7b:4f:dc:c3:52:1b:f8:93:db: e9:14:51:6f:b2:4c:0f:57:6f:38:86:16:0f:84:a6: bd:4e:ee:de:fd:1b:ed:ef:1e:66:cc:fa:42:6d:9c: 11:68:02:58:8d:c5:5a:30:ee:84:ae:dd:f4:56:5c: ca:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FA:C8:E0:D1:BA:23:04:7C:1D:F6:3D:71:3E:D1:1C:B8:C8:BE:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea01df0a-3da4-444c-afaf-b68711db0997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.24.0.0/16 Signature Algorithm: sha256WithRSAEncryption d3:ca:f7:09:55:9c:65:46:6d:04:df:a3:90:28:62:25:61:cc: a5:65:bf:c0:c9:d9:39:08:bd:1d:c6:55:bb:1c:8b:e7:75:35: 42:2f:0a:94:49:43:78:44:be:07:06:1f:db:3d:12:cc:0d:03: ee:0c:79:ff:45:14:25:7e:ae:2d:bb:30:ab:b0:87:91:a7:7b: f6:73:ed:d5:89:6d:b6:ae:25:71:b4:2e:d6:af:ea:78:c7:f0: b4:45:62:0e:22:f5:f3:b0:3e:67:07:c0:40:8a:8e:97:55:96: d2:64:ec:d3:4e:7b:c0:1b:a9:17:3e:83:a3:7d:7d:4b:6d:d2: 44:50:b1:ec:19:78:c3:45:e3:e2:1a:04:28:cc:86:95:8d:d4: ae:85:99:eb:d5:32:86:c0:91:c9:20:e8:d8:40:48:8f:ec:12: 33:fd:54:af:26:c1:b1:05:05:14:fa:6d:f6:c8:d8:f2:c7:01: 0e:18:ca:f2:ee:32:75:62:06:f7:e0:81:68:da:98:31:9c:cd: 69:a8:31:da:8d:b4:b3:0d:5b:8b:21:64:6e:ae:3d:97:cd:ca: b6:3f:9a:76:aa:79:fd:30:f1:49:75:e0:12:53:2f:f3:b2:17: 48:fb:16:36:57:6d:07:6e:f8:ea:c8:50:6e:d7:c5:6e:90:06: 90:d5:50:31 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQKQU3zBcZanPdr04grptVABcCAEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOTY3ZWZlYTZmZmJhN2VhMWVhNzRlZjk2ZjA3NmFkNWZl N2NhODgxNTk0ODc2NWI1ZjM4OGFhZGM2ZGZkMTYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCruhDFVMqKoDjlBXinlWgMOw+XDHOeUeXVEQ5Re+HscWhZ LHOdgq9D9lD26qZGPYRoR1bynQpI0XEbFf3mDugZ5DvCo9h6jGLZc4Kbxwbq8ynX H29H+nffLXj0feVuO00PZwM+Bazu4WlNet804qY6joaEjIK5XrpIw0ht1KyrAarb xR7osbR0iLTBzKu1N3oKfNjtqYTYKnu5tAB1CykPh5ISez1Ok291wskuRvqlYp3A 6k6UIDbKb7zVx2UjmW+Qp25WJfmvYXtP3MNSG/iT2+kUUW+yTA9XbziGFg+Epr1O 7t79G+3vHmbM+kJtnBFoAliNxVow7oSu3fRWXMrRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVvrI4NG6IwR8HfY9cT7RHLjIvhcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VhMDFkZjBhLTNkYTQtNDQ0Yy1hZmFmLWI2ODcxMWRiMDk5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQGDANBgkqhkiG9w0BAQsFAAOCAQEA08r3CVWcZUZtBN+jkChiJWHMpWW/ wMnZOQi9HcZVuxyL53U1Qi8KlElDeES+BwYf2z0SzA0D7gx5/0UUJX6uLbswq7CH kad79nPt1Ylttq4lcbQu1q/qeMfwtEViDiL187A+ZwfAQIqOl1WW0mTs0057wBup Fz6Do319S23SRFCx7Bl4w0Xj4hoEKMyGlY3UroWZ69UyhsCRySDo2EBIj+wSM/1U rybBsQUFFPpt9sjY8scBDhjK8u4ydWIG9+CBaNqYMZzNaagx2o20sw1biyFkbq49 l83Ktj+adqp5/TDxSXXgElMv87IXSPsWNldtB2746shQbtfFbpAGkNVQMQ== -----END CERTIFICATE-----Generated at Tue Apr 23 18:30:50 2024 by rpki-client on console-fra.rpki-client.org