$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/825fa423-a735-4a65-a380-17d1eb42f29a.roa File: 825fa423-a735-4a65-a380-17d1eb42f29a.roa (raw, json) Hash identifier: NZIGTGtWftxa97ln61t05cU8mH/7rqZtGw0LlfaOrTg= Subject key identifier: 79:AF:BC:86:57:D1:1D:26:ED:73:53:BB:CF:61:79:DD:7B:7F:17:81 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E4DDB2FF4703FE31A253E42D0387D1D729D7659 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/825fa423-a735-4a65-a380-17d1eb42f29a.roa Signing time: Fri 31 May 2024 00:00:00 +0000 ROA not before: Fri 31 May 2024 00:00:00 +0000 ROA not after: Fri 05 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:4d:db:2f:f4:70:3f:e3:1a:25:3e:42:d0:38:7d:1d:72:9d:76:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 31 00:00:00 2024 GMT Not After : Jul 5 23:59:59 2024 GMT Subject: serialNumber=3b328613e79b4fe5451dd19d1a7e20a89d206f0b9347dbd3499446171023a19d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:20:54:2b:ad:4d:3a:d2:46:4d:f8:c6:8a:1e: 35:88:e2:5f:98:76:1c:15:45:4e:61:1e:f2:28:34: 3d:10:ae:71:1b:c5:7f:40:36:cd:1a:32:0a:4a:37: 4d:d7:f8:41:35:37:1b:a3:57:b3:7d:de:4f:bb:e2: 27:a8:43:2b:af:41:8b:3e:17:2f:17:cc:bb:a1:8c: 26:2c:f4:78:9d:ac:10:5c:b1:88:6e:30:96:f3:39: bb:95:5c:af:5d:ff:25:87:ea:9b:30:8b:aa:a7:d1: 65:23:29:eb:9a:f4:70:4e:66:68:f8:37:2f:6f:b2: da:7f:83:9a:05:84:cc:11:46:e7:e3:ca:4c:4b:77: fb:e0:df:7b:57:4c:14:12:35:a1:5f:c2:73:06:d0: cf:49:f6:70:82:66:48:75:8a:cd:a5:59:af:85:d4: 88:a7:23:ae:7b:c7:0c:b2:59:f9:8e:a3:d9:a8:fa: a3:96:9c:4a:7f:26:38:3e:3f:08:58:a5:c5:22:9c: d5:eb:99:4e:0b:f0:b9:68:fd:17:65:11:6c:90:79: d6:06:63:e3:91:84:39:be:fd:07:f0:52:07:ed:6e: f2:df:be:58:e4:f0:42:ef:87:7c:6e:86:c9:2f:70: b4:b9:5f:d8:fd:8f:95:b2:1a:35:f6:63:93:16:8d: 40:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AF:BC:86:57:D1:1D:26:ED:73:53:BB:CF:61:79:DD:7B:7F:17:81 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/825fa423-a735-4a65-a380-17d1eb42f29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.0.0/17 Signature Algorithm: sha256WithRSAEncryption d7:d8:82:0e:1e:73:71:b2:9d:a3:84:19:bc:a0:bf:96:c0:07: 84:e7:d1:6e:56:7a:f4:77:a1:4a:ea:bb:52:a0:3a:cc:a7:2e: 03:1e:e2:9e:64:0a:01:57:b9:4b:b2:09:31:5a:3e:b8:a6:92: b4:d8:b8:20:08:55:bc:54:c8:c8:e1:71:82:90:6d:58:8b:59: 46:ed:9b:d3:0d:ab:c0:98:0c:bb:92:05:ac:85:d8:62:07:19: 86:f3:a8:10:cf:7e:95:d3:08:4d:55:9b:29:21:55:2c:7f:4c: bf:b5:11:00:fe:8a:92:28:54:43:5b:81:4e:d7:c8:3f:eb:12: 16:7d:fa:5c:33:bc:e6:67:7c:18:dd:17:50:24:62:84:46:49: df:71:8d:54:bb:5a:14:ac:fc:ad:9a:46:3f:85:bc:1c:f9:1e: 8d:f0:7c:a3:26:a4:70:d1:42:93:85:ec:ff:b1:69:e0:5c:2c: ce:a6:d7:92:53:ee:cd:50:81:fe:50:ad:c3:fc:c1:0d:1c:a2: bc:05:88:e9:89:f9:75:a8:f7:3f:1e:66:1d:65:52:c5:6e:32: 3f:00:bf:ce:a0:87:fc:5e:7b:3b:99:16:7e:02:23:4e:b0:d5: 9b:35:ed:dd:bd:a6:8a:11:e5:0f:42:fd:70:ec:29:57:3f:a6: 04:87:ce:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULk3bL/RwP+MaJT5C0Dh9HXKddlkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTMxMDAwMDAwWhcNMjQwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjMyODYxM2U3OWI0ZmU1NDUxZGQxOWQxYTdlMjBhODlk MjA2ZjBiOTM0N2RiZDM0OTk0NDYxNzEwMjNhMTlkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3IFQrrU060kZN+MaKHjWI4l+YdhwVRU5hHvIoND0QrnEb xX9ANs0aMgpKN03X+EE1NxujV7N93k+74ieoQyuvQYs+Fy8XzLuhjCYs9HidrBBc sYhuMJbzObuVXK9d/yWH6pswi6qn0WUjKeua9HBOZmj4Ny9vstp/g5oFhMwRRufj ykxLd/vg33tXTBQSNaFfwnMG0M9J9nCCZkh1is2lWa+F1IinI657xwyyWfmOo9mo +qOWnEp/Jjg+PwhYpcUinNXrmU4L8Llo/RdlEWyQedYGY+ORhDm+/QfwUgftbvLf vljk8ELvh3xuhskvcLS5X9j9j5WyGjX2Y5MWjUBTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUea+8hlfRHSbtc1O7z2F53Xt/F4EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgyNWZhNDIzLWE3MzUtNGE2NS1hMzgwLTE3ZDFlYjQyZjI5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdM3wAwDQYJKoZIhvcNAQELBQADggEBANfYgg4ec3GynaOEGbygv5bAB4Tn 0W5WevR3oUrqu1KgOsynLgMe4p5kCgFXuUuyCTFaPrimkrTYuCAIVbxUyMjhcYKQ bViLWUbtm9MNq8CYDLuSBayF2GIHGYbzqBDPfpXTCE1VmykhVSx/TL+1EQD+ipIo VENbgU7XyD/rEhZ9+lwzvOZnfBjdF1AkYoRGSd9xjVS7WhSs/K2aRj+FvBz5Ho3w fKMmpHDRQpOF7P+xaeBcLM6m15JT7s1Qgf5QrcP8wQ0corwFiOmJ+XWo9z8eZh1l UsVuMj8Av86gh/xeezuZFn4CI06w1Zs17d29pooR5Q9C/XDsKVc/pgSHzig= -----END CERTIFICATE-----Generated at Sun Jun 2 02:06:57 2024 by rpki-client on console-fra.rpki-client.org