$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1a1447c-63be-441c-867b-64a338ff41ca.roa File: f1a1447c-63be-441c-867b-64a338ff41ca.roa (raw, json) Hash identifier: Mqf0OtXHSGax5iEbAB/p5UjAkiQ+fyWZeTJFO7KXpgI= Subject key identifier: 69:9E:16:E2:45:72:D5:B2:6E:67:98:2F:EF:0C:7F:14:A6:77:DC:5F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45EC0990D9B82245ACA50B1A9FD6DAAE86F99E0E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1a1447c-63be-441c-867b-64a338ff41ca.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 40.201.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ec:09:90:d9:b8:22:45:ac:a5:0b:1a:9f:d6:da:ae:86:f9:9e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=7614ab1ab108042a4395610b4d77483739307735685c9f121a5544d26a4c7e03, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f6:57:c9:24:9e:6b:21:ba:ef:b0:04:8b:86: eb:5e:06:da:58:95:bf:bb:5d:5f:23:ad:b3:e1:de: 8b:64:a3:d7:7c:cd:f3:88:48:1b:e1:19:bd:88:27: d5:aa:4b:75:81:2f:7d:8b:23:cf:dd:ee:e0:46:9b: bd:3a:bb:9a:a3:ce:80:f5:ef:ef:23:f0:ce:8d:e3: c5:a9:b0:aa:12:01:49:59:6f:12:8e:45:24:b6:18: 84:17:a2:34:ac:be:10:5f:31:59:5a:f2:e1:9d:85: 49:98:8d:af:bf:50:f5:50:52:09:cb:fc:37:d8:49: 3b:f4:53:3e:19:62:dc:b8:9e:3c:a7:62:f8:5c:89: 42:e9:34:e3:c1:f9:8c:9e:e4:6e:d9:ea:f5:d8:0c: bd:f1:c2:0a:7b:3a:6d:0f:5e:81:bc:b3:18:b9:dc: 1a:c9:c1:e5:2a:58:37:0d:34:03:24:50:5d:dd:ff: c8:06:2f:1e:0c:31:f5:58:fc:f6:f2:b2:90:94:4c: 42:96:26:16:96:79:13:6f:e1:9d:1d:f4:1d:0d:fa: 33:bb:aa:4a:22:4b:1d:4e:d7:0b:e3:12:21:5d:c4: 42:d9:61:2c:d3:82:ab:63:27:8d:d6:a7:17:f4:cc: 23:cc:eb:a4:d1:ab:f1:08:e3:66:40:27:27:ad:52: 5a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9E:16:E2:45:72:D5:B2:6E:67:98:2F:EF:0C:7F:14:A6:77:DC:5F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1a1447c-63be-441c-867b-64a338ff41ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.201.0.0/16 Signature Algorithm: sha256WithRSAEncryption 20:0a:c3:b9:ab:90:d6:f8:bd:b9:80:b2:a5:85:4a:7b:3e:08: 73:5e:9b:28:f5:f1:1a:b1:37:2d:3e:27:8b:46:53:fc:e1:07: 5c:45:03:68:12:15:d8:eb:ca:1b:1f:6f:38:eb:85:06:b0:f8: e7:f6:8d:b5:4c:02:08:68:41:f9:c8:0a:d6:b7:fd:a7:c2:93: b6:94:8b:17:ca:a6:d3:c4:cf:2a:d4:70:22:f8:62:16:a0:08: dd:6a:62:80:a2:5b:a2:1e:66:5b:dd:c1:50:6d:c5:e9:7f:cd: d8:16:ac:90:6f:03:9c:09:3f:94:d4:68:dd:a6:a8:82:cb:10: ed:b1:df:22:e9:c1:e6:d7:80:0f:e9:b6:52:8d:24:98:73:80: 4e:98:5b:ee:44:eb:fd:10:98:6e:85:64:76:dd:a4:31:9b:02: e5:0b:55:24:aa:46:e8:bc:8d:5d:7f:b6:63:a0:a2:cb:e5:6b: 68:c8:4b:5b:df:17:1a:16:02:74:46:21:58:02:e4:0e:bc:73: e0:e8:b6:55:08:99:5e:f0:5f:4a:45:da:65:27:9b:01:aa:00: 55:30:bd:b4:39:31:7e:e2:0e:8e:ae:14:17:a0:4d:a5:8c:5a: 7d:2a:4b:55:f5:86:06:43:54:d4:2a:50:3f:9d:0c:2b:62:6f: 5a:14:7e:df -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURewJkNm4IkWspQsan9barob5ng4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NjE0YWIxYWIxMDgwNDJhNDM5NTYxMGI0ZDc3NDgzNzM5 MzA3NzM1Njg1YzlmMTIxYTU1NDRkMjZhNGM3ZTAzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCK9lfJJJ5rIbrvsASLhuteBtpYlb+7XV8jrbPh3otko9d8 zfOISBvhGb2IJ9WqS3WBL32LI8/d7uBGm706u5qjzoD17+8j8M6N48WpsKoSAUlZ bxKORSS2GIQXojSsvhBfMVla8uGdhUmYja+/UPVQUgnL/DfYSTv0Uz4ZYty4njyn YvhciULpNOPB+Yye5G7Z6vXYDL3xwgp7Om0PXoG8sxi53BrJweUqWDcNNAMkUF3d /8gGLx4MMfVY/PbyspCUTEKWJhaWeRNv4Z0d9B0N+jO7qkoiSx1O1wvjEiFdxELZ YSzTgqtjJ43Wpxf0zCPM66TRq/EI42ZAJyetUloXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUaZ4W4kVy1bJuZ5gv7wx/FKZ33F8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YxYTE0NDdjLTYzYmUtNDQxYy04NjdiLTY0YTMzOGZmNDFjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAoyTANBgkqhkiG9w0BAQsFAAOCAQEAIArDuauQ1vi9uYCypYVKez4Ic16b KPXxGrE3LT4ni0ZT/OEHXEUDaBIV2OvKGx9vOOuFBrD45/aNtUwCCGhB+cgK1rf9 p8KTtpSLF8qm08TPKtRwIvhiFqAI3WpigKJboh5mW93BUG3F6X/N2BaskG8DnAk/ lNRo3aaogssQ7bHfIunB5teAD+m2Uo0kmHOATphb7kTr/RCYboVkdt2kMZsC5QtV JKpG6LyNXX+2Y6Ciy+VraMhLW98XGhYCdEYhWALkDrxz4Oi2VQiZXvBfSkXaZSeb AaoAVTC9tDkxfuIOjq4UF6BNpYxafSpLVfWGBkNU1CpQP50MK2JvWhR+3w== -----END CERTIFICATE-----Generated at Thu Apr 18 22:43:59 2024 by rpki-client on console-fra.rpki-client.org