$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ca82d2-6384-465b-9cc8-584997578e14.roa File: 05ca82d2-6384-465b-9cc8-584997578e14.roa (raw, json) Hash identifier: j4Z6sqfWQzyTSr0p0hkp0+mZVyeaT2ekYEQ1xUrFBh0= Subject key identifier: 12:FC:94:16:53:A9:95:2E:58:A7:F7:2F:F1:1B:32:5B:19:E4:48:24 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 61170BAE3D572BC2EBF24375386150BCD52AE847 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ca82d2-6384-465b-9cc8-584997578e14.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 56.218.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:17:0b:ae:3d:57:2b:c2:eb:f2:43:75:38:61:50:bc:d5:2a:e8:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=2b370bf66f4bb8db749aa80ec8f5e3d29a9cea7c048c88667b6f03d0039c78fe, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:13:5a:77:b5:cf:97:7f:5f:08:d9:4c:60:de: 34:cf:4c:35:42:35:da:53:eb:e3:b9:59:24:be:0c: 65:93:84:cd:bf:5b:a4:55:52:33:a3:87:51:18:8f: 4c:86:49:fa:fd:36:7b:0a:31:8c:4c:ec:88:ab:1f: 83:c9:0a:af:70:3b:76:35:a6:9e:05:a6:f4:f0:f7: a2:e2:0c:f7:b3:90:40:d5:88:dc:06:94:67:d5:ed: 97:91:6b:c0:10:fe:a7:05:f6:10:3a:d6:8e:a7:dc: 6a:9e:db:c7:d8:fb:95:23:7b:c3:d0:c5:d6:e3:20: 1b:91:df:77:76:db:f5:0a:6c:6f:30:50:93:42:eb: a8:ac:81:33:cb:f6:43:b9:ce:38:8e:52:03:09:58: e9:c2:eb:24:cf:ca:86:ed:0e:98:98:d5:2c:db:13: 65:d0:44:48:01:29:19:87:0e:23:d0:07:3a:28:30: 0e:99:2d:9a:1b:53:49:ed:29:56:75:76:8b:d4:94: 6c:32:ac:57:ea:ac:f1:f1:52:76:05:4a:c1:45:53: 99:13:e6:d2:37:b5:59:a8:0f:63:7e:85:b1:38:18: 58:bc:70:6a:49:04:88:fb:f0:a5:df:e1:6f:d7:a9: d8:ad:7b:ee:df:b7:13:70:e7:49:36:fa:ed:81:1d: 82:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FC:94:16:53:A9:95:2E:58:A7:F7:2F:F1:1B:32:5B:19:E4:48:24 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ca82d2-6384-465b-9cc8-584997578e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.218.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2a:ba:6b:05:8f:e4:21:f1:5b:09:1f:b5:68:23:5d:fa:59:0f: e6:bd:35:7d:6d:6d:8f:be:f3:d0:eb:b3:1f:94:91:a1:cb:f3: 4e:fa:4d:21:6d:1c:cf:83:45:be:c5:53:aa:45:d9:c3:7c:cf: 2f:41:e2:27:72:6b:25:06:c7:b1:cd:78:2d:28:f2:a6:fd:e4: 3a:13:cc:58:c0:4d:f0:0b:a8:57:a5:b3:08:aa:74:91:16:49: 29:24:5f:63:56:66:4e:9e:e7:bb:c4:61:44:f5:90:eb:fd:21: 06:c7:3f:2c:e2:c7:2f:43:73:05:0b:fa:90:b4:21:d8:66:a5: 4a:2b:a1:6c:14:a3:31:8c:b8:3e:5b:39:08:4a:d7:8c:f4:70: f2:24:81:ec:55:7a:28:9b:e0:06:93:5b:40:8e:f4:3c:d6:77: 5f:67:c9:2d:ff:ce:14:74:9d:57:dc:16:80:d1:7c:0a:b3:53: 6f:ea:c2:1a:f7:0b:0f:0a:67:3f:a5:8f:25:20:61:7d:26:6c: 8d:84:8a:cd:00:f6:3f:29:80:8e:6a:11:95:f0:f8:0c:fd:08: 89:d0:a0:63:a7:bb:bc:b2:81:93:fe:98:7d:70:d7:46:65:c8: ce:d1:d5:d7:37:bb:c4:43:fd:e0:bb:8d:1e:7d:dc:c5:f3:db: cb:f6:ce:80 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYRcLrj1XK8Lr8kN1OGFQvNUq6EcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjM3MGJmNjZmNGJiOGRiNzQ5YWE4MGVjOGY1ZTNkMjlh OWNlYTdjMDQ4Yzg4NjY3YjZmMDNkMDAzOWM3OGZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcE1p3tc+Xf18I2Uxg3jTPTDVCNdpT6+O5WSS+DGWThM2/ W6RVUjOjh1EYj0yGSfr9NnsKMYxM7IirH4PJCq9wO3Y1pp4FpvTw96LiDPezkEDV iNwGlGfV7ZeRa8AQ/qcF9hA61o6n3Gqe28fY+5Uje8PQxdbjIBuR33d22/UKbG8w UJNC66isgTPL9kO5zjiOUgMJWOnC6yTPyobtDpiY1SzbE2XQREgBKRmHDiPQBzoo MA6ZLZobU0ntKVZ1dovUlGwyrFfqrPHxUnYFSsFFU5kT5tI3tVmoD2N+hbE4GFi8 cGpJBIj78KXf4W/Xqdite+7ftxNw50k2+u2BHYI7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUEvyUFlOplS5Yp/cv8RsyWxnkSCQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1Y2E4MmQyLTYzODQtNDY1Yi05Y2M4LTU4NDk5NzU3OGUxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA42jANBgkqhkiG9w0BAQsFAAOCAQEAKrprBY/kIfFbCR+1aCNd+lkP5r01 fW1tj77z0OuzH5SRocvzTvpNIW0cz4NFvsVTqkXZw3zPL0HiJ3JrJQbHsc14LSjy pv3kOhPMWMBN8AuoV6WzCKp0kRZJKSRfY1ZmTp7nu8RhRPWQ6/0hBsc/LOLHL0Nz BQv6kLQh2GalSiuhbBSjMYy4Pls5CErXjPRw8iSB7FV6KJvgBpNbQI70PNZ3X2fJ Lf/OFHSdV9wWgNF8CrNTb+rCGvcLDwpnP6WPJSBhfSZsjYSKzQD2PymAjmoRlfD4 DP0IidCgY6e7vLKBk/6YfXDXRmXIztHV1ze7xEP94LuNHn3cxfPby/bOgA== -----END CERTIFICATE-----Generated at Thu May 2 11:33:08 2024 by rpki-client on console-fra.rpki-client.org