$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a89f90f-351c-4b35-924c-b2987e9921d6.roa File: 0a89f90f-351c-4b35-924c-b2987e9921d6.roa (raw, json) Hash identifier: IDWHLtw48QqnadXXU148tmu6yc2Nr+FEbCtUMcnGHsA= Subject key identifier: 44:9A:C6:AE:BE:7B:E9:15:6D:A2:EF:CA:2F:71:9C:8D:88:79:90:69 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 470AAE730EA2B7C5BC79C24E8AB83546C3870463 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a89f90f-351c-4b35-924c-b2987e9921d6.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f21:4000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:0a:ae:73:0e:a2:b7:c5:bc:79:c2:4e:8a:b8:35:46:c3:87:04:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=19661826e93dc145b71525e6514df93627142260bb44c6bdd2720d9e650fa50e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bd:e7:59:50:70:49:b0:ef:a5:20:e9:de:06: fc:26:b4:4d:b7:48:ef:d9:72:df:ea:ed:4b:30:c4: 24:43:38:34:b2:d3:ee:7a:cf:b6:b4:8f:8b:32:78: 2b:5f:20:29:c1:73:2b:92:c3:a5:a0:51:28:68:d3: c1:7a:6a:7a:76:af:5a:78:7e:1f:40:1b:92:36:5c: 1b:22:2e:b7:ef:92:df:59:48:f6:a4:3e:ba:fd:85: be:0c:95:2d:70:84:e2:20:84:c4:c8:d7:8c:52:f9: 63:be:8b:b3:85:fd:db:f0:5e:0e:9f:a0:c3:45:8a: b5:16:6a:4f:8c:be:f2:45:a6:77:51:95:ee:b3:4a: ce:d2:fe:65:23:e9:5c:11:40:92:2a:c7:02:3b:ba: 48:a1:4f:6c:3f:c2:76:6c:2c:17:f9:f6:7b:80:fb: 14:1e:44:a0:6c:0e:c4:45:88:fc:28:e3:ad:40:2c: 53:d5:28:9f:4d:ed:3e:40:93:47:e5:90:73:41:91: cf:41:f3:98:da:84:b8:52:d4:4a:7b:91:1e:9f:f2: f1:df:eb:12:68:69:1e:9c:66:2e:6a:e1:78:f9:d4: b5:a4:46:be:2e:d5:82:9d:c4:6b:9c:fd:6c:9e:24: 91:b1:2c:56:93:16:da:41:17:40:54:6b:08:b2:13: 6a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9A:C6:AE:BE:7B:E9:15:6D:A2:EF:CA:2F:71:9C:8D:88:79:90:69 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a89f90f-351c-4b35-924c-b2987e9921d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f21:4000::/36 Signature Algorithm: sha256WithRSAEncryption a7:bf:c2:2f:cd:ea:e6:cf:c5:12:e2:c9:09:e5:8b:87:81:4a: 75:85:e3:54:81:66:c4:11:7b:a5:eb:10:2d:e4:37:53:e3:b6: 9f:80:a7:9a:4b:74:1d:24:6e:2b:72:41:b3:6e:e6:21:09:6c: 44:3b:2e:f1:d4:e1:0d:78:5d:be:4d:77:8e:74:4b:4d:9e:a2: 38:ef:a8:2d:76:16:49:5d:e3:d6:72:69:bf:74:3c:ca:0f:b1: 76:34:54:71:d4:c9:8e:f5:e3:4b:7e:66:a5:b7:46:4b:65:0d: 1c:e1:15:19:fa:9b:ce:65:33:26:88:34:3b:29:a9:3e:b0:b3: ee:74:a6:d5:6f:d5:2b:4d:fd:55:12:3f:94:5b:d5:d6:3d:79: 3f:72:af:97:3f:d7:f3:17:2e:1d:3d:9e:24:a5:c3:1b:24:d9: c9:7a:4f:51:07:47:62:20:66:22:f0:08:6f:e7:76:ee:bb:ff: 1d:05:07:2e:f0:43:db:50:ca:5b:7c:c0:94:88:2a:72:44:12: f0:c0:4d:2f:f8:79:d8:cc:96:28:f6:f1:d3:83:dc:d1:3f:83: a4:d6:eb:65:44:53:78:00:d6:ca:c4:94:d7:aa:64:f3:80:58: a9:79:04:3d:b0:ec:58:62:ad:88:d2:97:a3:ab:3c:fc:64:20: 68:cb:12:aa -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURwqucw6it8W8ecJOirg1RsOHBGMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTY2MTgyNmU5M2RjMTQ1YjcxNTI1ZTY1MTRkZjkzNjI3 MTQyMjYwYmI0NGM2YmRkMjcyMGQ5ZTY1MGZhNTBlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFvedZUHBJsO+lIOneBvwmtE23SO/Zct/q7UswxCRDODSy 0+56z7a0j4syeCtfICnBcyuSw6WgUSho08F6anp2r1p4fh9AG5I2XBsiLrfvkt9Z SPakPrr9hb4MlS1whOIghMTI14xS+WO+i7OF/dvwXg6foMNFirUWak+MvvJFpndR le6zSs7S/mUj6VwRQJIqxwI7ukihT2w/wnZsLBf59nuA+xQeRKBsDsRFiPwo461A LFPVKJ9N7T5Ak0flkHNBkc9B85jahLhS1Ep7kR6f8vHf6xJoaR6cZi5q4Xj51LWk Rr4u1YKdxGuc/WyeJJGxLFaTFtpBF0BUawiyE2ohAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQURJrGrr576RVtou/KL3GcjYh5kGkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBhODlmOTBmLTM1MWMtNGIzNS05MjRjLWIyOTg3ZTk5MjFkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8hQDANBgkqhkiG9w0BAQsFAAOCAQEAp7/CL83q5s/FEuLJCeWLh4FK dYXjVIFmxBF7pesQLeQ3U+O2n4Cnmkt0HSRuK3JBs27mIQlsRDsu8dThDXhdvk13 jnRLTZ6iOO+oLXYWSV3j1nJpv3Q8yg+xdjRUcdTJjvXjS35mpbdGS2UNHOEVGfqb zmUzJog0OympPrCz7nSm1W/VK039VRI/lFvV1j15P3Kvlz/X8xcuHT2eJKXDGyTZ yXpPUQdHYiBmIvAIb+d27rv/HQUHLvBD21DKW3zAlIgqckQS8MBNL/h52MyWKPbx 04Pc0T+DpNbrZURTeADWysSU16pk84BYqXkEPbDsWGKtiNKXo6s8/GQgaMsSqg== -----END CERTIFICATE-----Generated at Thu May 2 08:50:51 2024 by rpki-client on console-fra.rpki-client.org