$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde53854-8680-43c2-8178-8283b5e040e2.roa File: bde53854-8680-43c2-8178-8283b5e040e2.roa (raw, json) Hash identifier: wTAk9w/HSAcFYJ2xoUKJF2qiO59xKy4M4qt/HyRckMw= Subject key identifier: B2:8B:C3:12:68:6D:DE:BC:FF:0A:F5:4F:4A:E5:95:D1:18:15:BD:71 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3AA00B5854959E835A74D2F135EBF681B6C44BEA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde53854-8680-43c2-8178-8283b5e040e2.roa Signing time: Fri 10 May 2024 00:00:00 +0000 ROA not before: Fri 10 May 2024 00:00:00 +0000 ROA not after: Fri 14 Jun 2024 23:59:59 +0000 asID: 8987 IP address blocks: 149.177.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a0:0b:58:54:95:9e:83:5a:74:d2:f1:35:eb:f6:81:b6:c4:4b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:00:00 2024 GMT Not After : Jun 14 23:59:59 2024 GMT Subject: serialNumber=f7c078d7ab3280952a28b70614f3edbe533a45f6e268f590ef33d886679ad724, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d7:d5:74:e2:26:33:19:fa:c9:37:a0:f3:a5: 08:e5:fd:dd:02:7e:d1:3a:61:db:2f:d7:95:d5:97: f6:a9:00:dc:37:64:72:86:ad:e4:5a:aa:f9:a8:2d: 37:96:2a:5a:b2:3f:62:37:a1:30:b9:6a:d7:34:bc: 87:bd:af:53:e8:d7:86:63:9c:27:e3:c3:12:02:ad: 0b:ee:1d:17:6e:fa:19:53:f7:e8:e6:d4:f2:b6:6f: 95:07:71:4f:45:0e:71:e2:5d:97:34:af:38:0f:70: f7:b6:e5:78:e6:70:f6:77:0e:00:d3:7d:6c:91:0d: c2:52:ae:5c:67:6d:14:b5:b2:72:b9:c8:df:78:a4: 46:33:0b:91:e7:bd:ab:89:7c:4b:30:96:6d:49:50: e8:df:e2:d5:1b:d7:6e:30:4f:80:33:d5:2a:95:47: ff:47:2b:b2:45:2e:41:44:cc:a8:57:23:5c:36:5e: 27:66:6d:d6:04:17:4f:42:32:9f:1b:53:d1:5c:50: ef:49:36:d6:b1:fe:c0:0f:4b:f4:1b:49:6a:2b:29: 57:7a:48:e4:77:e5:cc:35:5d:89:e3:cb:4d:7f:bb: 78:de:5c:ef:d0:ee:1e:b6:b8:15:76:88:5d:67:28: 6c:b7:be:89:86:b5:e9:9d:88:c1:a9:d1:b1:00:6c: a0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8B:C3:12:68:6D:DE:BC:FF:0A:F5:4F:4A:E5:95:D1:18:15:BD:71 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde53854-8680-43c2-8178-8283b5e040e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.177.0.0/17 Signature Algorithm: sha256WithRSAEncryption 4d:cb:30:1b:93:63:b0:9d:db:eb:80:cb:41:f7:bd:4f:e2:da: ef:87:a8:a0:97:a7:9f:4e:53:94:2a:a9:98:7b:5a:09:83:17: 8f:9f:e4:6f:3f:b6:69:b0:6d:d0:c1:da:c7:79:f8:b2:99:f4: 08:7d:d8:90:90:a2:8c:28:c1:f5:8b:35:2f:26:d3:2f:b7:6b: e4:e5:9e:67:a3:e7:02:45:d7:ac:66:ee:05:c5:c6:0c:76:96: a7:53:80:ba:b6:58:c4:43:ce:08:4c:2d:a2:7d:cc:d0:d7:9a: e3:86:4f:93:0b:4e:a7:68:d4:c9:45:a6:2d:a1:8e:e4:d2:f8: aa:01:dc:9d:1e:a6:0d:35:6b:fa:18:1c:58:1b:3e:b3:69:fe: 79:3e:d6:3d:7a:93:45:47:7f:22:22:ce:2c:56:f6:c0:14:95: a0:44:47:8c:9f:c3:7a:5c:66:dd:37:ed:cf:ef:67:26:d4:0b: 04:51:60:98:7e:7c:fb:d1:b3:8e:34:78:b3:85:41:96:89:17: fb:ef:63:fa:51:71:46:a7:d7:47:1a:ad:56:c4:8b:e6:a3:52: e6:5d:a0:36:50:80:ff:f5:d8:f7:92:3a:da:1d:ca:1e:e9:c8: a0:be:ea:57:7d:37:ee:19:0c:fe:09:73:ac:e2:24:01:7e:7c: 93:d9:3f:7c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOqALWFSVnoNadNLxNev2gbbES+owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTEwMDAwMDAwWhcNMjQwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmN2MwNzhkN2FiMzI4MDk1MmEyOGI3MDYxNGYzZWRiZTUz M2E0NWY2ZTI2OGY1OTBlZjMzZDg4NjY3OWFkNzI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+19V04iYzGfrJN6DzpQjl/d0CftE6Ydsv15XVl/apANw3 ZHKGreRaqvmoLTeWKlqyP2I3oTC5atc0vIe9r1Po14ZjnCfjwxICrQvuHRdu+hlT 9+jm1PK2b5UHcU9FDnHiXZc0rzgPcPe25XjmcPZ3DgDTfWyRDcJSrlxnbRS1snK5 yN94pEYzC5HnvauJfEswlm1JUOjf4tUb124wT4Az1SqVR/9HK7JFLkFEzKhXI1w2 XidmbdYEF09CMp8bU9FcUO9JNtax/sAPS/QbSWorKVd6SOR35cw1XYnjy01/u3je XO/Q7h62uBV2iF1nKGy3vomGtemdiMGp0bEAbKBFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsovDEmht3rz/CvVPSuWV0RgVvXEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkZTUzODU0LTg2ODAtNDNjMi04MTc4LTgyODNiNWUwNDBlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeVsQAwDQYJKoZIhvcNAQELBQADggEBAE3LMBuTY7Cd2+uAy0H3vU/i2u+H qKCXp59OU5QqqZh7WgmDF4+f5G8/tmmwbdDB2sd5+LKZ9Ah92JCQoowowfWLNS8m 0y+3a+Tlnmej5wJF16xm7gXFxgx2lqdTgLq2WMRDzghMLaJ9zNDXmuOGT5MLTqdo 1MlFpi2hjuTS+KoB3J0epg01a/oYHFgbPrNp/nk+1j16k0VHfyIizixW9sAUlaBE R4yfw3pcZt037c/vZybUCwRRYJh+fPvRs440eLOFQZaJF/vvY/pRcUan10carVbE i+ajUuZdoDZQgP/12PeSOtodyh7pyKC+6ld9N+4ZDP4Jc6ziJAF+fJPZP3w= -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:38 2024 by rpki-client on console-ams.rpki-client.org