$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c186747-e358-4d19-8457-c1e7d14e1944.roa File: 0c186747-e358-4d19-8457-c1e7d14e1944.roa (raw, json) Hash identifier: yuFANBAGKFlU7N9hj6B8I89KTmugo8FvDm4D6RkJ60c= Subject key identifier: BA:2F:D7:3F:50:B7:54:DC:5B:14:4C:1B:FA:33:85:52:36:F3:61:85 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 129BC288641B82152F4A4D1147BEA37038288C3D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c186747-e358-4d19-8457-c1e7d14e1944.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 194.148.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:9b:c2:88:64:1b:82:15:2f:4a:4d:11:47:be:a3:70:38:28:8c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=9017c907863ceb01442d9619af21ac71e792b1243d4db8236db2faf1c0964678, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:20:7e:36:62:69:d4:3d:b1:b5:57:a8:58: 23:02:a8:30:76:06:aa:ee:fc:df:d4:15:a0:0e:09: 67:c4:28:1b:ba:9f:ff:83:9f:d6:db:44:21:47:60: a2:1b:be:55:70:9f:34:1a:0c:11:50:c5:28:b1:c1: 6c:20:69:39:19:54:6b:c8:d2:4b:62:28:8a:84:6b: 9e:17:f7:e9:2f:ae:ec:e2:53:18:49:7f:0d:34:a9: b4:c0:48:42:53:ad:52:a2:a6:9c:0a:1c:ab:36:bf: 30:2d:1c:66:dc:b8:44:5d:bc:4a:1b:79:bd:55:d6: a4:51:d9:60:45:74:59:65:4e:e1:40:57:bf:42:7b: f2:d1:ed:d9:97:6d:45:09:fb:5d:4f:7b:f1:85:94: 64:ca:3f:af:38:69:d4:41:f3:55:54:96:b9:aa:4e: 63:c1:b5:04:72:ce:52:f1:15:dc:c3:07:d0:6b:a3: 87:37:08:5c:ad:10:5f:4c:53:09:7a:1b:a3:77:df: d4:a7:07:b1:e8:ad:e3:ac:3b:f8:e9:27:ef:be:37: 8b:ac:19:71:06:90:68:b8:11:f3:77:eb:da:df:ac: 5e:1f:6f:f7:3e:6f:a5:09:95:40:91:07:12:1a:d5: 7b:14:88:a0:ee:ea:03:e3:8b:4b:b4:9c:63:c4:07: 25:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2F:D7:3F:50:B7:54:DC:5B:14:4C:1B:FA:33:85:52:36:F3:61:85 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c186747-e358-4d19-8457-c1e7d14e1944.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.148.64.0/19 Signature Algorithm: sha256WithRSAEncryption 8b:8a:48:cd:94:91:75:0f:78:74:e5:3c:41:f4:ff:89:ec:72: 49:f5:21:ba:c0:42:2f:d1:a7:65:11:67:63:a6:47:75:23:17: f3:8b:a6:18:d6:f1:27:ed:59:f5:29:07:82:b3:50:f5:39:20: 42:65:a0:44:8e:e8:79:b9:77:e2:be:b0:72:73:6a:0d:1e:99: fe:db:bf:73:63:5c:ec:8b:16:03:3d:c1:e4:be:1a:a5:78:16: 78:ed:df:72:e9:1a:be:5a:78:f5:f0:21:9f:47:8f:b4:2a:6f: 51:63:e7:5d:07:19:03:a5:05:a5:be:ca:f6:e0:f8:ee:60:fe: 2f:c2:01:33:c4:f8:fe:ef:a6:fa:c0:84:c5:03:4f:7c:24:b8: 6a:ae:2a:e5:c3:33:6e:78:d9:d6:63:c7:39:db:ca:50:9a:0f: 01:f7:b0:0e:c4:47:23:91:39:4c:44:59:c0:bd:26:74:6d:31: c1:49:3c:84:e9:85:1f:fd:4e:c0:ef:7d:d2:aa:fd:dc:03:40: 0f:65:d2:ad:5c:67:ee:31:1f:a1:cb:5f:5e:f0:a2:35:47:41: e7:95:9f:dc:aa:ba:37:ef:7c:f3:14:b1:32:04:33:30:9a:d6: 4f:27:6e:29:2d:88:2c:20:3c:6e:fd:d5:87:91:8e:f3:bd:90: 0a:67:6e:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEpvCiGQbghUvSk0RR76jcDgojD0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDE3YzkwNzg2M2NlYjAxNDQyZDk2MTlhZjIxYWM3MWU3 OTJiMTI0M2Q0ZGI4MjM2ZGIyZmFmMWMwOTY0Njc4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpCiB+NmJp1D2xtVeoWCMCqDB2Bqru/N/UFaAOCWfEKBu6 n/+Dn9bbRCFHYKIbvlVwnzQaDBFQxSixwWwgaTkZVGvI0ktiKIqEa54X9+kvruzi UxhJfw00qbTASEJTrVKippwKHKs2vzAtHGbcuERdvEobeb1V1qRR2WBFdFllTuFA V79Ce/LR7dmXbUUJ+11Pe/GFlGTKP684adRB81VUlrmqTmPBtQRyzlLxFdzDB9Br o4c3CFytEF9MUwl6G6N339SnB7HoreOsO/jpJ+++N4usGXEGkGi4EfN369rfrF4f b/c+b6UJlUCRBxIa1XsUiKDu6gPji0u0nGPEByUTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUui/XP1C3VNxbFEwb+jOFUjbzYYUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBjMTg2NzQ3LWUzNTgtNGQxOS04NDU3LWMxZTdkMTRlMTk0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXClEAwDQYJKoZIhvcNAQELBQADggEBAIuKSM2UkXUPeHTlPEH0/4nsckn1 IbrAQi/Rp2URZ2OmR3UjF/OLphjW8SftWfUpB4KzUPU5IEJloESO6Hm5d+K+sHJz ag0emf7bv3NjXOyLFgM9weS+GqV4Fnjt33LpGr5aePXwIZ9Hj7Qqb1Fj510HGQOl BaW+yvbg+O5g/i/CATPE+P7vpvrAhMUDT3wkuGquKuXDM2542dZjxznbylCaDwH3 sA7ERyOROUxEWcC9JnRtMcFJPITphR/9TsDvfdKq/dwDQA9l0q1cZ+4xH6HLX17w ojVHQeeVn9yqujfvfPMUsTIEMzCa1k8nbiktiCwgPG791YeRjvO9kApnbrY= -----END CERTIFICATE-----Generated at Thu May 2 06:12:27 2024 by rpki-client on console-fra.rpki-client.org