$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02a1d776-e314-4a95-8913-ace3fa04cde1.roa File: 02a1d776-e314-4a95-8913-ace3fa04cde1.roa (raw, json) Hash identifier: sCAGCh0HZO0Dann+veLUtufrocIpMMwrS2MuHEB2fM0= Subject key identifier: 30:4E:87:1F:9A:E2:B1:D1:99:FA:FE:7E:38:E0:3B:F6:AE:F4:82:B0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C7A9D15FC0807EE9E6466ED9F045F6BBDB448E5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02a1d776-e314-4a95-8913-ace3fa04cde1.roa Signing time: Mon 06 May 2024 00:00:00 +0000 ROA not before: Mon 06 May 2024 00:00:00 +0000 ROA not after: Mon 10 Jun 2024 23:59:59 +0000 asID: 8987 IP address blocks: 16.151.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:7a:9d:15:fc:08:07:ee:9e:64:66:ed:9f:04:5f:6b:bd:b4:48:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 6 00:00:00 2024 GMT Not After : Jun 10 23:59:59 2024 GMT Subject: serialNumber=2677a5b628c950102f12cb6a3565db2092d001d6691f4868435f599d9e982d7b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:01:a1:f5:29:8c:0a:59:42:b5:1e:9b:f7:6f: 39:e7:1e:85:9c:d1:cf:91:18:f9:44:e5:ea:01:80: b7:11:38:6b:24:5a:80:1f:11:a9:14:92:f2:3c:61: 13:e4:24:e6:06:99:63:3d:b1:5c:0f:66:e4:48:ea: 11:7d:84:aa:81:98:62:b7:8f:1d:7d:dc:d0:6f:d0: dd:ba:67:c7:2e:7b:5f:00:d3:ce:de:09:5c:41:45: bc:e8:c0:8a:ad:61:ed:52:91:3a:5c:69:43:51:e2: 9c:36:de:d9:d7:b7:a1:75:5f:3a:44:72:14:eb:ad: f9:f1:16:27:dc:54:a3:5b:92:3b:4d:6f:5c:66:87: 83:d2:b9:4d:5a:96:55:56:7b:bd:d2:1f:09:c9:91: 6f:0f:28:10:5d:1b:0d:df:29:1c:ec:bb:d7:1c:6d: 28:fb:c1:ac:97:fa:10:ca:58:d7:5b:90:04:25:56: 7d:18:7f:25:15:82:2b:b3:2e:d9:5b:b9:9a:5a:65: a4:1a:0f:16:4b:ee:42:40:db:26:f2:3d:bf:3b:85: 63:01:34:37:a0:f7:db:af:36:79:17:5b:41:b0:df: 4c:26:c4:7b:8f:5d:58:f3:09:71:cd:9f:89:f4:ad: dc:89:3d:e7:eb:e0:a9:43:93:cd:29:b2:1e:09:4c: f9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4E:87:1F:9A:E2:B1:D1:99:FA:FE:7E:38:E0:3B:F6:AE:F4:82:B0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02a1d776-e314-4a95-8913-ace3fa04cde1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.151.0.0/16 Signature Algorithm: sha256WithRSAEncryption 00:76:19:74:f5:93:30:5d:37:f1:d5:59:f5:db:51:4a:26:68: ab:de:41:4a:08:db:ba:f9:ca:24:01:a4:b4:c7:f8:18:3b:b4: e6:f1:27:06:2f:2e:d1:60:85:36:f2:60:9a:ea:5b:f5:a2:a7: 11:6f:a4:7b:7e:fd:10:7e:c2:88:6e:19:17:f6:75:0d:2b:27: 84:bb:67:96:77:a9:21:0b:29:1a:02:ba:dc:51:9c:d0:69:61: 44:3c:08:8f:7b:c9:4a:58:b0:1a:e6:41:52:ea:41:ee:37:aa: 25:47:23:6d:62:73:70:0b:25:b8:0d:6e:d0:12:ff:49:ea:11: 09:e9:b3:50:9a:0c:97:dc:d7:3b:6a:d1:ee:45:e8:71:49:36: 65:37:b2:83:6f:31:2e:29:0b:5d:21:97:18:9a:e3:db:1e:7b: 30:4d:61:83:49:21:d7:99:b1:4a:17:71:23:41:9e:cc:9a:1e: a5:79:b5:8d:36:4b:c1:aa:ef:a4:c7:8b:da:8e:8e:ba:d0:ea: a3:52:49:93:2d:ac:ab:b9:10:ae:6c:a0:8a:cd:c9:8e:07:4c: bd:51:98:53:ea:73:6c:dc:2e:58:e7:77:83:a2:b7:f5:ad:32: 11:cf:20:14:02:33:a6:4a:9e:15:5f:34:d4:59:c1:85:29:c1: 77:7d:4e:de -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPHqdFfwIB+6eZGbtnwRfa720SOUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTA2MDAwMDAwWhcNMjQwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNjc3YTViNjI4Yzk1MDEwMmYxMmNiNmEzNTY1ZGIyMDky ZDAwMWQ2NjkxZjQ4Njg0MzVmNTk5ZDllOTgyZDdiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDeAaH1KYwKWUK1Hpv3bznnHoWc0c+RGPlE5eoBgLcROGsk WoAfEakUkvI8YRPkJOYGmWM9sVwPZuRI6hF9hKqBmGK3jx193NBv0N26Z8cue18A 087eCVxBRbzowIqtYe1SkTpcaUNR4pw23tnXt6F1XzpEchTrrfnxFifcVKNbkjtN b1xmh4PSuU1allVWe73SHwnJkW8PKBBdGw3fKRzsu9ccbSj7wayX+hDKWNdbkAQl Vn0YfyUVgiuzLtlbuZpaZaQaDxZL7kJA2ybyPb87hWMBNDeg99uvNnkXW0Gw30wm xHuPXVjzCXHNn4n0rdyJPefr4KlDk80psh4JTPm7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUME6HH5risdGZ+v5+OOA79q70grAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyYTFkNzc2LWUzMTQtNGE5NS04OTEzLWFjZTNmYTA0Y2RlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQlzANBgkqhkiG9w0BAQsFAAOCAQEAAHYZdPWTMF038dVZ9dtRSiZoq95B SgjbuvnKJAGktMf4GDu05vEnBi8u0WCFNvJgmupb9aKnEW+ke379EH7CiG4ZF/Z1 DSsnhLtnlnepIQspGgK63FGc0GlhRDwIj3vJSliwGuZBUupB7jeqJUcjbWJzcAsl uA1u0BL/SeoRCemzUJoMl9zXO2rR7kXocUk2ZTeyg28xLikLXSGXGJrj2x57ME1h g0kh15mxShdxI0GezJoepXm1jTZLwarvpMeL2o6OutDqo1JJky2sq7kQrmygis3J jgdMvVGYU+pzbNwuWOd3g6K39a0yEc8gFAIzpkqeFV801FnBhSnBd31O3g== -----END CERTIFICATE-----Generated at Thu May 9 01:25:17 2024 by rpki-client on console-fra.rpki-client.org