$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef414d28-7d98-4c41-931b-d7958ded262d.roa File: ef414d28-7d98-4c41-931b-d7958ded262d.roa (raw, json) Hash identifier: 9p/A1ijkMDTrqD1EKlAyw0qxIANkbd3gdSh2MXHFVH0= Subject key identifier: 39:55:33:84:5C:98:B9:CB:34:61:42:96:11:DC:3B:2E:00:11:BC:90 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4223782F31B58F7D126C7EBF1240D795CA69DE0E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef414d28-7d98-4c41-931b-d7958ded262d.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 57.89.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:23:78:2f:31:b5:8f:7d:12:6c:7e:bf:12:40:d7:95:ca:69:de:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=56fc1a5a15943c044221df6807f2e5f06ede612e92d9bd58b5083776847f5e5e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8f:03:3b:21:0d:72:90:04:fd:5d:c8:e9:f7: 54:a0:e4:29:de:2f:ec:88:17:3b:08:56:76:98:ce: c5:89:56:1a:d8:9f:d6:8b:a0:16:49:fa:9b:5b:37: d3:5e:6c:bc:67:a2:dd:0f:b5:c7:ef:f1:5f:02:15: 93:73:3a:45:52:a3:b5:9a:51:5c:5a:28:7c:aa:a1: 04:5b:34:9e:2c:03:82:cc:8a:22:75:78:98:fb:12: 70:ba:90:0f:c8:20:e6:96:c7:6c:71:dd:bf:3f:30: 00:27:e1:0f:d5:8a:51:99:7f:8c:e9:0f:7a:71:16: 39:66:d1:03:bd:33:d4:fe:14:d6:f4:36:f7:ac:84: be:d3:cc:3b:4f:47:8e:90:8a:f2:54:24:dc:1d:47: ab:07:34:76:36:4a:54:59:9e:23:6a:2a:2f:68:02: 93:1d:f2:12:3d:46:6e:da:d6:ab:a9:6a:36:ae:84: 9a:0f:1b:74:62:de:03:34:86:58:93:85:74:1a:b5: 6d:5b:01:d8:8f:69:9f:bd:85:e8:88:93:80:07:9f: 2d:7e:bf:2e:5d:4e:cd:6c:a3:d5:08:71:35:de:8f: e1:bc:de:70:1c:35:df:82:46:18:4a:8b:dd:97:e8: b7:ca:5a:1c:d4:d6:83:6b:84:c9:3d:73:25:ba:3b: e9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:55:33:84:5C:98:B9:CB:34:61:42:96:11:DC:3B:2E:00:11:BC:90 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef414d28-7d98-4c41-931b-d7958ded262d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.89.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1c:07:c2:35:51:20:50:2d:91:44:12:9a:df:ba:45:7b:f5:9c: 06:03:c8:fd:dd:76:df:d6:74:44:7d:1a:c0:1d:a6:27:b2:eb: 01:e9:3a:37:49:32:2d:71:a2:a6:50:0d:93:65:a9:a0:c8:2f: a2:ee:9c:44:b2:c6:1e:9f:3f:92:50:7e:8f:cd:ad:dd:bc:e7: b6:0e:e3:43:90:19:9c:20:76:be:eb:23:d8:dc:be:7b:19:19: 04:f9:c2:99:e4:7f:23:97:ed:0f:3c:40:61:f9:c0:65:84:29: b9:9e:7a:52:d7:2f:f9:7a:1b:33:89:a9:02:f9:45:7b:8f:60: ac:c9:92:d7:77:58:fa:a8:dc:43:c2:61:ae:ff:e2:dd:07:0c: f0:73:94:f5:64:ea:3b:60:a7:57:74:48:05:9d:8c:0a:87:41: 43:67:bc:31:49:a7:61:ae:43:6f:32:72:13:2d:57:b9:6d:c4: 55:a7:d0:a5:4a:f9:df:b7:1a:4e:61:46:80:27:ee:e0:25:32: af:ee:57:ef:ac:93:48:17:2b:0f:72:ed:1b:c5:bc:db:b1:e6: 07:95:da:68:ad:a7:ce:81:b2:40:18:ac:d3:6c:5c:9d:b3:c2: 0b:df:4c:0b:e3:b5:41:d6:61:5b:11:6b:c2:5e:a8:ea:8c:98: 5c:0d:ba:e7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQiN4LzG1j30SbH6/EkDXlcpp3g4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NmZjMWE1YTE1OTQzYzA0NDIyMWRmNjgwN2YyZTVmMDZl ZGU2MTJlOTJkOWJkNThiNTA4Mzc3Njg0N2Y1ZTVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWjwM7IQ1ykAT9Xcjp91Sg5CneL+yIFzsIVnaYzsWJVhrY n9aLoBZJ+ptbN9NebLxnot0Ptcfv8V8CFZNzOkVSo7WaUVxaKHyqoQRbNJ4sA4LM iiJ1eJj7EnC6kA/IIOaWx2xx3b8/MAAn4Q/VilGZf4zpD3pxFjlm0QO9M9T+FNb0 NveshL7TzDtPR46QivJUJNwdR6sHNHY2SlRZniNqKi9oApMd8hI9Rm7a1qupajau hJoPG3Ri3gM0hliThXQatW1bAdiPaZ+9heiIk4AHny1+vy5dTs1so9UIcTXej+G8 3nAcNd+CRhhKi92X6LfKWhzU1oNrhMk9cyW6O+mDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUOVUzhFyYucs0YUKWEdw7LgARvJAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VmNDE0ZDI4LTdkOTgtNGM0MS05MzFiLWQ3OTU4ZGVkMjYyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA5WTANBgkqhkiG9w0BAQsFAAOCAQEAHAfCNVEgUC2RRBKa37pFe/WcBgPI /d1239Z0RH0awB2mJ7LrAek6N0kyLXGiplANk2WpoMgvou6cRLLGHp8/klB+j82t 3bzntg7jQ5AZnCB2vusj2Ny+exkZBPnCmeR/I5ftDzxAYfnAZYQpuZ56Utcv+Xob M4mpAvlFe49grMmS13dY+qjcQ8Jhrv/i3QcM8HOU9WTqO2CnV3RIBZ2MCodBQ2e8 MUmnYa5DbzJyEy1XuW3EVafQpUr537caTmFGgCfu4CUyr+5X76yTSBcrD3LtG8W8 27HmB5XaaK2nzoGyQBis02xcnbPCC99MC+O1QdZhWxFrwl6o6oyYXA265w== -----END CERTIFICATE-----Generated at Thu May 2 17:17:19 2024 by rpki-client on console-ams.rpki-client.org