$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb1238dd-b681-4aa0-907a-14db6f0b5c42.roa File: fb1238dd-b681-4aa0-907a-14db6f0b5c42.roa (raw, json) Hash identifier: L8+HGAxPCmJzv6P6Rw4HTcNcVuO2ste3gvZ8lrtkI18= Subject key identifier: 68:89:5C:98:9F:C1:2C:A8:EF:15:69:E0:4B:24:C8:7B:E3:6C:7F:EC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F61DBA6A6C9C70D1676C53479586A742E11EEB3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb1238dd-b681-4aa0-907a-14db6f0b5c42.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 13.134.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:61:db:a6:a6:c9:c7:0d:16:76:c5:34:79:58:6a:74:2e:11:ee:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=e5d73b10161278d6f14390b307a63a41cf14a37837579500cc9df67581ceb39c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:72:72:ab:f8:c6:f1:ce:94:23:d4:b8:94:0f: d7:43:e8:2f:3f:60:f1:c0:5a:c3:73:35:df:66:f6: c9:c9:bc:a5:19:b8:a8:18:7d:9d:dd:3b:73:3e:bb: e9:56:73:50:8d:24:70:b4:3f:cf:87:cd:a1:b8:87: 38:a4:62:48:8e:c1:6d:a5:8e:48:3c:63:6f:ca:47: b9:07:ac:fb:52:ce:8b:83:2a:0c:cf:54:df:80:91: 41:96:d4:0d:98:e4:1b:54:3e:90:a9:3c:00:9c:c2: 3a:16:17:90:e8:d1:d2:c3:88:90:c7:7a:0f:e8:9c: 4b:31:05:dd:30:86:73:42:4d:f6:eb:97:d4:5e:26: 7e:66:d4:f1:e7:10:80:1d:9c:55:06:af:08:a7:0e: 06:c9:4d:30:60:eb:1a:b8:47:db:1d:02:e8:a0:01: 38:b9:6f:7a:86:df:60:1c:d5:a8:6f:38:93:cf:25: a1:1f:32:2a:e5:65:d6:de:8c:1e:09:e4:20:a0:84: ed:07:f5:83:cf:b2:fc:21:2b:78:80:c4:78:1a:92: 12:d3:cf:c1:e2:20:da:b6:aa:ba:a1:18:15:6b:4e: 95:54:26:0c:5a:e8:b8:d4:02:2d:31:44:c9:71:42: 4c:df:bd:4b:60:cf:8e:01:22:fd:6b:47:20:9a:d5: 6a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:89:5C:98:9F:C1:2C:A8:EF:15:69:E0:4B:24:C8:7B:E3:6C:7F:EC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb1238dd-b681-4aa0-907a-14db6f0b5c42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.134.0.0/15 Signature Algorithm: sha256WithRSAEncryption 58:c9:f6:e9:2a:a3:21:ec:77:6e:93:1d:fb:bf:4f:4b:9c:54: b8:21:10:1e:5b:23:f8:c5:28:52:aa:e1:b4:01:e8:3e:2d:7b: af:e8:02:77:a0:03:6c:01:e7:4e:c2:36:33:4f:62:0e:5c:55: cf:75:1c:f2:ab:92:a3:d5:a4:c8:64:87:3d:fd:fc:31:cd:18: e7:dc:5f:e4:3b:42:0e:6b:af:e4:ef:47:80:85:b7:2a:02:a5: 00:84:d0:31:8f:02:77:3d:98:3b:ff:8c:52:f0:e8:b0:71:09: eb:33:ce:a2:45:2f:a6:bc:40:8f:20:2f:92:ea:6d:56:2e:62: 2f:69:f8:51:8b:82:b1:5e:be:76:72:43:3a:9b:58:f7:71:e8: 3e:52:1c:c1:d8:08:d7:8c:e2:cd:25:1c:e6:ab:ec:34:1b:0d: d3:13:f4:49:69:e9:bb:da:e8:98:cb:2c:1b:53:71:1f:7d:10: 92:cd:3c:c8:fa:dc:6b:0e:b2:52:a7:a6:1b:e4:ad:de:84:23: 2d:5f:c9:5f:30:61:ea:7a:ed:5f:ee:18:66:b7:eb:19:84:04: 38:6a:62:4d:6b:1d:5c:a7:1a:08:95:e5:8a:7f:0d:96:8e:39: 68:f6:22:7e:0f:b4:0b:70:de:f8:79:72:8f:08:f8:b0:a3:e3: d6:09:68:4d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUD2HbpqbJxw0WdsU0eVhqdC4R7rMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNWQ3M2IxMDE2MTI3OGQ2ZjE0MzkwYjMwN2E2M2E0MWNm MTRhMzc4Mzc1Nzk1MDBjYzlkZjY3NTgxY2ViMzljMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD3cnKr+MbxzpQj1LiUD9dD6C8/YPHAWsNzNd9m9snJvKUZ uKgYfZ3dO3M+u+lWc1CNJHC0P8+HzaG4hzikYkiOwW2ljkg8Y2/KR7kHrPtSzouD KgzPVN+AkUGW1A2Y5BtUPpCpPACcwjoWF5Do0dLDiJDHeg/onEsxBd0whnNCTfbr l9ReJn5m1PHnEIAdnFUGrwinDgbJTTBg6xq4R9sdAuigATi5b3qG32Ac1ahvOJPP JaEfMirlZdbejB4J5CCghO0H9YPPsvwhK3iAxHgakhLTz8HiINq2qrqhGBVrTpVU Jgxa6LjUAi0xRMlxQkzfvUtgz44BIv1rRyCa1Wo9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUaIlcmJ/BLKjvFWngSyTIe+Nsf+wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZiMTIzOGRkLWI2ODEtNGFhMC05MDdhLTE0ZGI2ZjBiNWM0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwENhjANBgkqhkiG9w0BAQsFAAOCAQEAWMn26SqjIex3bpMd+79PS5xUuCEQ Hlsj+MUoUqrhtAHoPi17r+gCd6ADbAHnTsI2M09iDlxVz3Uc8quSo9WkyGSHPf38 Mc0Y59xf5DtCDmuv5O9HgIW3KgKlAITQMY8Cdz2YO/+MUvDosHEJ6zPOokUvprxA jyAvkuptVi5iL2n4UYuCsV6+dnJDOptY93HoPlIcwdgI14zizSUc5qvsNBsN0xP0 SWnpu9romMssG1NxH30Qks08yPrcaw6yUqemG+St3oQjLV/JXzBh6nrtX+4YZrfr GYQEOGpiTWsdXKcaCJXlin8Nlo45aPYifg+0C3De+Hlyjwj4sKPj1gloTQ== -----END CERTIFICATE-----Generated at Fri Apr 26 11:00:26 2024 by rpki-client on console-ams.rpki-client.org