$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9467035e-ac22-4ed7-bdeb-771152f3e853.roa File: 9467035e-ac22-4ed7-bdeb-771152f3e853.roa (raw, json) Hash identifier: HB0CI+S4iPPKDiD99jDGL8hOi4/61UZxt/6mHEF7334= Subject key identifier: CC:6B:62:C4:C1:75:D1:8B:35:37:54:C2:0D:1D:59:8D:A8:8A:42:D5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 286F94FF6C2F6C9414C5468A0A1F8BD79C90E756 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9467035e-ac22-4ed7-bdeb-771152f3e853.roa Signing time: Tue 07 May 2024 00:00:00 +0000 ROA not before: Tue 07 May 2024 00:00:00 +0000 ROA not after: Tue 11 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 170.68.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:6f:94:ff:6c:2f:6c:94:14:c5:46:8a:0a:1f:8b:d7:9c:90:e7:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:00:00 2024 GMT Not After : Jun 11 23:59:59 2024 GMT Subject: serialNumber=434a28b189bc04a0fc50e3ed666f695007904419b19d1db4723d6416c8008d4b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7c:bd:9b:fc:e9:f5:6f:66:c6:22:6f:e8:56: be:85:1b:6e:c0:93:2f:8e:24:c4:d1:a6:11:94:c7: da:12:63:6e:43:84:c3:fd:18:65:58:9f:84:2c:7d: e3:de:47:51:3b:c8:fc:42:cf:35:af:ee:10:ee:45: 11:82:f4:a0:7c:75:2d:0d:5a:f0:92:ee:78:ac:b5: 02:65:49:c0:a9:55:51:39:d7:7b:1d:d4:9c:0f:e4: 72:74:d1:76:ed:14:17:25:5f:4a:e0:18:6a:58:c9: 45:ea:16:9c:d9:73:ae:da:95:6c:33:64:03:54:c6: 96:e2:08:24:ce:50:79:83:42:da:84:f5:9c:93:f6: 5b:1e:db:f1:71:68:8c:10:ba:3b:c2:3a:a9:b5:a6: ba:bd:f3:28:b9:dd:ca:d0:03:18:e7:1d:c7:d8:99: 3c:8c:2a:0b:f4:1e:e2:c4:01:a3:27:b7:77:6c:9e: 63:77:77:d8:7b:70:7e:78:2e:84:73:46:e5:15:df: 58:87:89:d4:f5:14:35:ab:75:dd:cf:cd:df:76:80: ae:c3:8e:1b:f9:99:0b:a3:47:34:f0:e7:fb:ab:be: 51:ec:f4:62:d9:fd:fc:a8:dc:07:aa:84:81:a5:06: 2d:85:59:4d:70:00:8a:9b:57:57:02:19:16:f2:23: e0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6B:62:C4:C1:75:D1:8B:35:37:54:C2:0D:1D:59:8D:A8:8A:42:D5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9467035e-ac22-4ed7-bdeb-771152f3e853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.68.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3f:72:e1:17:f8:0d:e5:2d:87:ff:a6:f3:ce:a0:69:08:88:58: 25:9b:9c:5a:70:7a:b2:2b:e2:c9:ea:02:7b:97:bb:48:e0:64: 41:28:b4:2c:e9:1e:ee:ec:94:71:bf:13:71:0e:7b:d6:23:de: 9c:42:05:32:07:a0:fc:6a:72:25:2a:57:5f:24:01:ba:a9:a6: 4d:df:0c:8f:2c:59:75:02:b3:28:a0:cc:57:86:bf:3a:83:4c: bc:72:0e:70:7a:e3:e5:f7:1a:4b:fb:3e:6a:6a:68:55:9a:38: f0:ad:eb:65:a5:62:79:50:bd:56:74:5c:42:df:95:8c:4b:7c: ac:9b:00:c8:20:45:d9:19:fd:a1:1d:b6:90:08:34:32:62:66: 59:fd:be:4f:b0:71:e1:29:e0:dc:88:a8:a4:46:46:a5:4b:70: 33:d0:74:01:99:9e:94:1b:2c:fb:7e:31:7d:66:8d:1f:dd:9f: 2f:d6:92:10:4e:54:7d:66:df:80:c8:f6:6f:a1:f5:f7:61:3d: a5:59:96:6d:51:63:74:fc:1e:b0:e4:61:b3:45:6a:75:a0:bc: 5e:45:51:4d:52:04:91:76:ff:50:10:44:6f:86:29:43:91:81: 23:c5:87:f3:c4:13:7d:84:72:82:4c:e8:7c:d3:42:d7:d3:82: 70:d3:80:4f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKG+U/2wvbJQUxUaKCh+L15yQ51YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTA3MDAwMDAwWhcNMjQwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MzRhMjhiMTg5YmMwNGEwZmM1MGUzZWQ2NjZmNjk1MDA3 OTA0NDE5YjE5ZDFkYjQ3MjNkNjQxNmM4MDA4ZDRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtfL2b/On1b2bGIm/oVr6FG27Aky+OJMTRphGUx9oSY25D hMP9GGVYn4QsfePeR1E7yPxCzzWv7hDuRRGC9KB8dS0NWvCS7nistQJlScCpVVE5 13sd1JwP5HJ00XbtFBclX0rgGGpYyUXqFpzZc67alWwzZANUxpbiCCTOUHmDQtqE 9ZyT9lse2/FxaIwQujvCOqm1prq98yi53crQAxjnHcfYmTyMKgv0HuLEAaMnt3ds nmN3d9h7cH54LoRzRuUV31iHidT1FDWrdd3Pzd92gK7Djhv5mQujRzTw5/urvlHs 9GLZ/fyo3AeqhIGlBi2FWU1wAIqbV1cCGRbyI+DhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUzGtixMF10Ys1N1TCDR1ZjaiKQtUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk0NjcwMzVlLWFjMjItNGVkNy1iZGViLTc3MTE1MmYzZTg1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCqRDANBgkqhkiG9w0BAQsFAAOCAQEAP3LhF/gN5S2H/6bzzqBpCIhYJZuc WnB6siviyeoCe5e7SOBkQSi0LOke7uyUcb8TcQ571iPenEIFMgeg/GpyJSpXXyQB uqmmTd8MjyxZdQKzKKDMV4a/OoNMvHIOcHrj5fcaS/s+ampoVZo48K3rZaVieVC9 VnRcQt+VjEt8rJsAyCBF2Rn9oR22kAg0MmJmWf2+T7Bx4Sng3IiopEZGpUtwM9B0 AZmelBss+34xfWaNH92fL9aSEE5UfWbfgMj2b6H192E9pVmWbVFjdPwesORhs0Vq daC8XkVRTVIEkXb/UBBEb4YpQ5GBI8WH88QTfYRygkzofNNC19OCcNOATw== -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:30 2024 by rpki-client on console-ams.rpki-client.org