$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0365a68b-c17b-4977-9811-b5e8e861bcfa.roa File: 0365a68b-c17b-4977-9811-b5e8e861bcfa.roa (raw, json) Hash identifier: pBV+4/HLtP0r7UHdycXF79I3+B41sQXurbOKigz65+8= Subject key identifier: A7:55:DA:1D:83:6F:BF:A9:DE:EA:F8:36:90:F0:BE:4D:67:C3:2A:D8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 424DE4DAFB5CD5751691B2EA4935AD415D706614 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0365a68b-c17b-4977-9811-b5e8e861bcfa.roa Signing time: Fri 26 Apr 2024 00:00:00 +0000 ROA not before: Fri 26 Apr 2024 00:00:00 +0000 ROA not after: Fri 31 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 149.114.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4d:e4:da:fb:5c:d5:75:16:91:b2:ea:49:35:ad:41:5d:70:66:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 26 00:00:00 2024 GMT Not After : May 31 23:59:59 2024 GMT Subject: serialNumber=ebea245c1b776d2006d029b5f4ac3e1366899979bbff9b67b60ab75edb77301b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:44:d1:25:77:d3:26:da:52:f0:af:fa:cd:fc: 77:e0:82:da:de:f7:dd:0f:9d:87:d9:82:8d:2b:c8: 28:df:1f:77:ab:29:74:4c:23:c0:b2:02:a8:79:24: 5d:c1:ad:44:c5:93:92:6a:2e:6f:f1:bd:04:cc:27: 46:f8:ec:5e:50:11:f4:aa:a6:83:9d:20:51:21:b3: ba:2b:90:e6:25:7c:30:9f:fb:49:cd:55:90:ab:0a: ed:d3:01:8d:1a:55:f2:b0:c1:65:a2:6a:0d:44:ae: 86:28:4c:63:72:95:42:a7:3a:2d:82:ad:39:79:10: 49:01:93:82:b0:1d:54:6f:33:84:3c:d1:9f:37:44: cd:70:80:31:57:1b:f7:7d:53:c6:ff:76:e0:60:48: e5:af:cc:4f:31:ee:f4:77:23:97:8b:93:88:fa:ff: d7:43:69:ba:35:4c:05:0b:aa:64:d6:e8:0c:f0:44: 81:e9:9f:bb:62:ab:9b:c7:a4:31:d3:15:be:07:fd: 4f:45:9e:d4:bd:54:2b:18:36:59:6a:1b:c2:47:bf: 7c:f8:26:55:2c:20:27:7f:e3:be:0c:83:a0:4e:1f: 99:51:0b:cd:a1:4b:8a:54:53:26:b6:8d:cb:5a:a8: 0a:2b:52:dd:02:11:e9:56:3a:45:4d:79:9e:7a:ba: d7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:55:DA:1D:83:6F:BF:A9:DE:EA:F8:36:90:F0:BE:4D:67:C3:2A:D8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0365a68b-c17b-4977-9811-b5e8e861bcfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.114.0.0/16 Signature Algorithm: sha256WithRSAEncryption cb:ae:70:ee:4e:ef:67:02:1e:a2:ae:9b:e7:cb:9e:bc:80:97: c5:7e:10:4b:76:03:33:8e:5c:d2:6c:ed:2b:ed:80:1c:a1:e3: eb:59:d4:4b:80:e2:8b:8a:85:5e:89:7b:fb:e3:ec:1d:f2:df: a8:56:04:fe:58:75:81:1d:70:8d:a3:15:77:21:93:21:29:9e: 2c:76:8d:fc:7a:37:3b:38:eb:fe:5f:4e:ed:19:ff:89:99:25: 43:7a:cc:f0:c9:ca:bf:4c:40:65:b2:83:76:8c:a8:61:bf:9e: 71:82:88:14:4c:4c:5f:6c:fd:bb:a9:1f:0c:d4:01:46:75:d9: 68:a4:d2:9e:0c:4c:e5:eb:6a:4f:fb:5c:fa:c8:03:11:ce:bb: 4e:72:2d:22:97:2c:3a:ba:15:3e:b5:1b:1c:54:19:9f:d1:fb: b0:a3:92:1a:c3:8e:2b:b5:e7:c7:9d:7d:db:ab:d7:68:59:b3: 5a:24:77:3a:e0:c2:c9:f6:4b:4d:30:54:f6:0a:37:90:e2:4d: 06:fc:77:56:fb:a2:67:28:e2:b2:1b:78:58:2a:b9:6c:47:3a: ee:ac:de:17:29:7d:79:0d:f4:6d:a6:cb:59:8d:4c:64:00:54: fc:74:d5:75:02:5a:e6:36:74:46:a5:e2:5e:ae:eb:c9:c4:cf: 2e:f4:af:90 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQk3k2vtc1XUWkbLqSTWtQV1wZhQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDI2MDAwMDAwWhcNMjQwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYmVhMjQ1YzFiNzc2ZDIwMDZkMDI5YjVmNGFjM2UxMzY2 ODk5OTc5YmJmZjliNjdiNjBhYjc1ZWRiNzczMDFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHRNEld9Mm2lLwr/rN/Hfggtre990PnYfZgo0ryCjfH3er KXRMI8CyAqh5JF3BrUTFk5JqLm/xvQTMJ0b47F5QEfSqpoOdIFEhs7orkOYlfDCf +0nNVZCrCu3TAY0aVfKwwWWiag1EroYoTGNylUKnOi2CrTl5EEkBk4KwHVRvM4Q8 0Z83RM1wgDFXG/d9U8b/duBgSOWvzE8x7vR3I5eLk4j6/9dDabo1TAULqmTW6Azw RIHpn7tiq5vHpDHTFb4H/U9FntS9VCsYNllqG8JHv3z4JlUsICd/474Mg6BOH5lR C82hS4pUUya2jctaqAorUt0CEelWOkVNeZ56utdtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUp1XaHYNvv6ne6vg2kPC+TWfDKtgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzNjVhNjhiLWMxN2ItNDk3Ny05ODExLWI1ZThlODYxYmNmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCVcjANBgkqhkiG9w0BAQsFAAOCAQEAy65w7k7vZwIeoq6b58uevICXxX4Q S3YDM45c0mztK+2AHKHj61nUS4Dii4qFXol7++PsHfLfqFYE/lh1gR1wjaMVdyGT ISmeLHaN/Ho3Ozjr/l9O7Rn/iZklQ3rM8MnKv0xAZbKDdoyoYb+ecYKIFExMX2z9 u6kfDNQBRnXZaKTSngxM5etqT/tc+sgDEc67TnItIpcsOroVPrUbHFQZn9H7sKOS GsOOK7Xnx51926vXaFmzWiR3OuDCyfZLTTBU9go3kOJNBvx3VvuiZyjisht4WCq5 bEc67qzeFyl9eQ30babLWY1MZABU/HTVdQJa5jZ0RqXiXq7rycTPLvSvkA== -----END CERTIFICATE-----Generated at Thu May 9 01:25:17 2024 by rpki-client on console-fra.rpki-client.org