$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31d26a18-48f4-4b3c-b1c1-123ef7f7f237.roa File: 31d26a18-48f4-4b3c-b1c1-123ef7f7f237.roa (raw, json) Hash identifier: Ap4gjOou9DCeLRhJfxupHpkRza62OR7FYWpX2CLPAaA= Subject key identifier: 8A:1C:E8:9E:66:68:91:79:DE:8C:42:93:85:2C:C3:B8:64:CC:BB:38 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 620378182A67D199332C536D6F95BDAD1450C327 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31d26a18-48f4-4b3c-b1c1-123ef7f7f237.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 72.29.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:03:78:18:2a:67:d1:99:33:2c:53:6d:6f:95:bd:ad:14:50:c3:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=96fca5b776f6ac8cb7f447b3f677e7fe7275f263b5efd6239a509e06b75509e5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:71:78:06:01:5d:d5:7b:4d:f1:66:fd:11:17: 91:46:81:d6:4f:6c:90:c0:18:ac:bf:4d:69:a3:c1: 25:27:e9:2e:ff:c1:8a:f9:83:6a:a4:2d:56:c8:aa: 5f:13:4b:0e:c4:d5:fe:41:b8:70:2b:28:c4:70:ae: f7:b2:ca:0a:cf:ad:5e:ca:6a:31:93:bf:62:e1:4f: 4c:6d:6d:55:df:6e:30:50:42:4f:66:8d:63:21:2a: aa:e4:09:d4:74:01:66:e0:a9:d7:4d:f8:fa:51:ca: 12:9a:f4:fc:3d:85:24:02:19:21:a7:ec:e1:1d:51: 8f:5e:de:40:96:ea:6a:14:29:47:d3:2c:03:4a:5b: 78:02:6c:57:71:9b:20:01:8a:93:ab:1d:d3:47:21: ce:34:53:30:57:d6:40:0f:ed:3e:fc:ca:f9:a6:44: 42:2f:e6:0d:f4:5d:81:b8:d4:40:f5:68:c3:bd:5e: e5:f9:c3:c0:2a:ed:69:89:90:36:49:73:3b:15:29: 26:67:52:a2:e9:e8:31:1a:fa:d0:d6:d9:42:13:76: d6:ba:d6:ff:8f:d5:32:cf:e1:f4:ed:e7:03:eb:5c: 49:44:bc:f5:bc:e0:09:1f:6f:5e:62:fa:47:97:93: 5f:f5:39:5a:7a:8a:e1:01:95:da:cf:63:af:2b:d9: 88:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1C:E8:9E:66:68:91:79:DE:8C:42:93:85:2C:C3:B8:64:CC:BB:38 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31d26a18-48f4-4b3c-b1c1-123ef7f7f237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.29.0.0/19 Signature Algorithm: sha256WithRSAEncryption a8:75:d4:33:5b:5f:90:67:7d:15:f8:cc:ef:0b:51:a5:36:24: 5b:95:a7:9d:62:23:cc:12:6b:c9:3f:83:93:41:65:5e:f8:d4: db:c2:18:ef:d6:28:58:16:0a:8b:12:79:51:09:59:67:3a:d9: 7a:86:30:e6:a6:0a:d8:9e:2d:6b:0f:f7:55:55:3c:4f:a7:95: 4c:bb:45:e9:40:60:bb:86:be:09:e8:95:54:fe:e0:4a:96:b5: 2d:ad:95:14:7d:ee:df:26:df:47:d9:6a:5e:84:51:7d:39:2a: 76:f3:e2:61:c6:c9:b4:a6:23:6f:1d:96:8b:28:79:39:7a:a0: 9d:0a:4c:f6:ad:84:67:4b:65:c4:96:bc:ba:2f:39:1c:9c:97: 08:8d:2c:91:c0:88:4b:5f:d2:3f:eb:46:9b:d2:d7:b6:1b:a9: 36:ea:2c:d4:3e:96:ba:c0:93:10:89:d9:94:48:70:d0:b8:5e: 53:ed:f8:5c:81:3e:17:fd:77:60:a0:a5:2e:15:e0:42:4e:a8: 20:04:58:40:07:13:50:a8:0d:84:11:d1:d0:17:07:40:30:d2: 88:ab:a9:4f:cd:85:10:0a:40:5c:85:a4:ac:3f:65:a0:98:ee: 72:db:37:07:3a:ca:90:36:a9:f7:5e:6b:d9:45:4b:fe:ae:5d: e7:c4:1b:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYgN4GCpn0ZkzLFNtb5W9rRRQwycwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NmZjYTViNzc2ZjZhYzhjYjdmNDQ3YjNmNjc3ZTdmZTcy NzVmMjYzYjVlZmQ2MjM5YTUwOWUwNmI3NTUwOWU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYcXgGAV3Ve03xZv0RF5FGgdZPbJDAGKy/TWmjwSUn6S7/ wYr5g2qkLVbIql8TSw7E1f5BuHArKMRwrveyygrPrV7KajGTv2LhT0xtbVXfbjBQ Qk9mjWMhKqrkCdR0AWbgqddN+PpRyhKa9Pw9hSQCGSGn7OEdUY9e3kCW6moUKUfT LANKW3gCbFdxmyABipOrHdNHIc40UzBX1kAP7T78yvmmREIv5g30XYG41ED1aMO9 XuX5w8Aq7WmJkDZJczsVKSZnUqLp6DEa+tDW2UITdta61v+P1TLP4fTt5wPrXElE vPW84Akfb15i+keXk1/1OVp6iuEBldrPY68r2YhxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUihzonmZokXnejEKThSzDuGTMuzgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMxZDI2YTE4LTQ4ZjQtNGIzYy1iMWMxLTEyM2VmN2Y3ZjIzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVIHQAwDQYJKoZIhvcNAQELBQADggEBAKh11DNbX5BnfRX4zO8LUaU2JFuV p51iI8wSa8k/g5NBZV741NvCGO/WKFgWCosSeVEJWWc62XqGMOamCtieLWsP91VV PE+nlUy7RelAYLuGvgnolVT+4EqWtS2tlRR97t8m30fZal6EUX05Knbz4mHGybSm I28dlosoeTl6oJ0KTPathGdLZcSWvLovORyclwiNLJHAiEtf0j/rRpvS17YbqTbq LNQ+lrrAkxCJ2ZRIcNC4XlPt+FyBPhf9d2CgpS4V4EJOqCAEWEAHE1CoDYQR0dAX B0Aw0oirqU/NhRAKQFyFpKw/ZaCY7nLbNwc6ypA2qfdea9lFS/6uXefEG40= -----END CERTIFICATE-----Generated at Mon May 6 00:48:41 2024 by rpki-client on console-fra.rpki-client.org