$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fac04063-f7c8-41ee-b745-4de5efa59aaf.roa File: fac04063-f7c8-41ee-b745-4de5efa59aaf.roa (raw, json) Hash identifier: S03jCzsR2B5MNjOckep9dw/FCgORfito/dp8vfiu9vU= Subject key identifier: 9E:B2:50:3B:82:F4:E8:24:C9:7F:AD:C8:ED:C1:5D:55:D4:F0:F0:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1CC79A386BA8D5E8D4BC8C6DC9A593626A0E5060 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fac04063-f7c8-41ee-b745-4de5efa59aaf.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 16.152.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c7:9a:38:6b:a8:d5:e8:d4:bc:8c:6d:c9:a5:93:62:6a:0e:50:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=12f408d19bdc12933310205ad745b64f9c61532df7388aab02e75b8b21b11ae0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0e:63:08:40:a9:dc:15:d9:31:b7:2a:25:af: 3f:0e:32:fa:11:49:16:de:9c:f1:da:30:11:40:e8: 52:d9:26:69:97:d9:31:70:ab:b6:fa:7d:d3:a0:82: 54:00:19:be:20:9f:1b:53:b6:df:6b:bb:5c:d4:5e: 6c:09:de:3b:1c:9d:24:dc:d2:4d:9b:5f:90:13:cb: ee:a7:6e:28:c9:9c:ac:74:88:04:c6:23:54:7f:31: 74:c1:f5:52:36:a8:46:a0:c9:bf:a8:a2:0f:e5:bd: aa:44:32:c3:cb:6b:5e:8a:49:f2:49:06:2c:cc:ca: ae:cb:39:a0:f3:04:b7:7f:16:5e:8b:79:81:96:f9: 12:3e:70:a5:34:6d:29:a0:52:e5:94:33:fb:f2:a5: 23:40:9a:cf:68:53:0d:f1:b6:37:1a:37:39:f1:6f: 64:c1:92:b9:45:a6:3f:c2:cb:65:64:fc:b4:03:48: 40:c9:af:19:16:ea:3f:8b:26:24:f2:95:86:00:1c: 95:52:71:74:6c:e3:39:81:bb:8d:b2:5e:c8:0e:aa: 5b:61:90:58:e9:30:d8:ae:1a:44:29:c1:79:06:f7: ae:29:a2:51:21:a6:56:fe:25:f8:2d:af:a2:ad:eb: 32:a3:66:3d:8c:bc:1f:72:37:6f:95:be:25:b3:4c: 4a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B2:50:3B:82:F4:E8:24:C9:7F:AD:C8:ED:C1:5D:55:D4:F0:F0:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fac04063-f7c8-41ee-b745-4de5efa59aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.152.0.0/16 Signature Algorithm: sha256WithRSAEncryption 33:18:4c:a7:bc:e2:66:85:c6:22:97:e9:1a:22:ce:5c:d1:73: 0a:88:cd:cd:6d:29:09:1e:21:f2:0c:59:63:87:c5:8d:40:d9: 3a:92:38:ee:b9:bb:27:b6:d6:fa:c6:fe:25:85:f5:1e:e2:57: 99:2c:82:a3:c7:f6:25:b5:04:11:8f:f0:6d:f1:1d:1f:f2:47: 7d:6b:59:c5:57:8e:c7:1e:f8:94:6a:f4:34:6e:be:d8:82:71: 04:1f:74:bc:ab:9f:6f:aa:a3:94:f0:9a:37:ac:01:f0:67:77: 35:33:2b:9d:91:94:b7:8a:6e:3b:03:d9:70:47:9c:7b:48:73: 7e:96:50:39:3e:f2:2d:b8:93:fb:01:79:7e:2e:31:51:04:21: b9:b8:40:5f:9a:d4:33:22:1c:35:10:dc:07:f9:ac:b3:84:43: cb:a5:12:53:bc:ad:b9:aa:3e:63:61:e2:5c:e8:ad:ab:cf:cc: 0a:22:c2:79:93:9f:ed:b6:22:95:ef:7f:cc:1c:1f:c8:77:bc: 5d:53:f4:56:de:e0:c9:67:6c:6d:16:2c:22:7a:ad:c3:96:6f: af:6c:e0:ab:43:89:d6:a9:78:6a:4b:96:db:d3:0b:01:c1:45: af:a7:6d:cc:e4:ef:53:f3:32:0f:dd:7a:f5:10:35:ac:b8:18: 7d:24:b0:8a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHMeaOGuo1ejUvIxtyaWTYmoOUGAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMmY0MDhkMTliZGMxMjkzMzMxMDIwNWFkNzQ1YjY0Zjlj NjE1MzJkZjczODhhYWIwMmU3NWI4YjIxYjExYWUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYDmMIQKncFdkxtyolrz8OMvoRSRbenPHaMBFA6FLZJmmX 2TFwq7b6fdOgglQAGb4gnxtTtt9ru1zUXmwJ3jscnSTc0k2bX5ATy+6nbijJnKx0 iATGI1R/MXTB9VI2qEagyb+oog/lvapEMsPLa16KSfJJBizMyq7LOaDzBLd/Fl6L eYGW+RI+cKU0bSmgUuWUM/vypSNAms9oUw3xtjcaNznxb2TBkrlFpj/Cy2Vk/LQD SEDJrxkW6j+LJiTylYYAHJVScXRs4zmBu42yXsgOqlthkFjpMNiuGkQpwXkG964p olEhplb+Jfgtr6Kt6zKjZj2MvB9yN2+VviWzTEpxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUnrJQO4L06CTJf63I7cFdVdTw8BcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZhYzA0MDYzLWY3YzgtNDFlZS1iNzQ1LTRkZTVlZmE1OWFhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQmDANBgkqhkiG9w0BAQsFAAOCAQEAMxhMp7ziZoXGIpfpGiLOXNFzCojN zW0pCR4h8gxZY4fFjUDZOpI47rm7J7bW+sb+JYX1HuJXmSyCo8f2JbUEEY/wbfEd H/JHfWtZxVeOxx74lGr0NG6+2IJxBB90vKufb6qjlPCaN6wB8Gd3NTMrnZGUt4pu OwPZcEece0hzfpZQOT7yLbiT+wF5fi4xUQQhubhAX5rUMyIcNRDcB/mss4RDy6US U7ytuao+Y2HiXOitq8/MCiLCeZOf7bYile9/zBwfyHe8XVP0Vt7gyWdsbRYsInqt w5Zvr2zgq0OJ1ql4akuW29MLAcFFr6dtzOTvU/MyD9169RA1rLgYfSSwig== -----END CERTIFICATE-----Generated at Fri Apr 19 00:31:44 2024 by rpki-client on console-fra.rpki-client.org