$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/190ae46a-8382-4f25-be2a-962a31f5eb25.roa File: 190ae46a-8382-4f25-be2a-962a31f5eb25.roa (raw, json) Hash identifier: pMkF3/eKYKOXI1EJuuoOUfeXErp/+ZeKJrW3C5WdM8Y= Subject key identifier: E9:C3:62:17:86:B8:2E:44:E1:4A:A2:78:07:72:86:8C:B9:38:4E:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0D0D1A65F0B3EFF64000CD4AE192701600B36917 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/190ae46a-8382-4f25-be2a-962a31f5eb25.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 56.123.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:0d:1a:65:f0:b3:ef:f6:40:00:cd:4a:e1:92:70:16:00:b3:69:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=cb9220f6cd5674c6dfb61c457dd6bcaaca8c23bcd2f6a7b39b76bb5aa4e59391, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2d:eb:06:31:72:20:b1:7e:a8:5e:fb:cc:99: 49:96:c9:dc:39:78:48:98:b4:d8:55:cb:04:75:0c: 2d:e8:93:f0:4b:8d:7c:5f:b1:a2:45:b6:57:77:6e: 8f:b2:32:34:f8:3c:b7:b3:42:2b:8b:c8:63:d7:53: 0c:8b:89:c3:45:00:8e:9c:fa:e2:31:3f:f6:cc:55: 80:51:cd:fb:51:26:c2:20:3a:1e:fb:6c:5e:eb:14: 43:13:bf:42:a2:56:33:26:af:9a:31:98:9a:50:04: 4a:61:af:18:62:0c:0d:83:80:f3:fe:a8:1f:2b:92: 90:b7:59:e8:f9:07:e5:84:19:78:0b:97:c1:58:49: be:76:40:24:3c:e6:b8:22:95:6f:9d:1d:d3:4e:4e: 0c:88:e7:04:0d:cc:1c:69:62:e9:30:a8:63:e1:40: 8c:c0:98:ac:e4:1f:7b:10:4e:ff:8f:b1:74:a9:38: bb:9b:3c:e3:9e:89:bc:76:8b:c3:60:90:57:3d:25: ff:f0:15:a7:87:44:3b:0d:33:b1:6e:bc:44:72:95: 92:e3:82:68:b2:9d:b6:d6:8c:e8:c8:fe:38:e5:a9: 78:c7:c9:a3:37:e3:79:94:da:ba:d6:ec:dd:7f:66: 09:22:06:2a:a7:1f:dd:40:de:e6:21:15:aa:e1:04: 44:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C3:62:17:86:B8:2E:44:E1:4A:A2:78:07:72:86:8C:B9:38:4E:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/190ae46a-8382-4f25-be2a-962a31f5eb25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.123.0.0/16 Signature Algorithm: sha256WithRSAEncryption b2:60:b7:1d:55:c1:01:6d:30:e1:4f:af:5f:4f:3e:37:42:29: 63:82:04:db:ba:4e:4a:a8:84:cb:a7:1e:b3:2e:e9:5c:67:83: f1:4d:89:8e:28:0d:3c:f0:b9:7d:70:c2:e6:bc:54:54:35:58: a5:99:21:1c:16:72:e4:d3:97:0c:e3:b9:5b:a6:6b:7e:bd:22: 45:b7:02:33:39:fa:91:97:bc:f5:9b:77:95:33:e2:9b:c0:cd: 82:8a:1f:d1:3d:01:85:40:c3:23:0d:79:29:ec:6e:83:7c:79: 36:a7:4a:2d:9d:37:a0:27:ab:b4:ce:85:3b:3e:04:a4:c0:c7: 23:9e:46:8f:f5:5c:4b:0d:3f:4e:d3:e3:00:50:92:9c:ee:4a: 7f:d9:64:f9:cd:6d:c6:e4:7b:ba:98:9c:18:f5:6f:29:0a:df: eb:89:f9:0e:da:0a:8d:7c:63:bb:8a:a1:4b:ad:50:58:65:99: 2a:13:c3:bc:32:cc:55:d4:cf:4c:76:b6:83:ae:ff:0b:a0:d0: aa:aa:3d:a0:12:f6:f5:f9:50:d0:ba:31:64:59:c4:95:26:ca: 45:c9:a1:01:0b:5c:00:f4:70:81:03:21:a9:b7:d7:ee:9f:c6: 11:3a:fb:32:80:fa:05:65:b8:12:f5:c9:cd:63:29:7b:03:64: 4f:5b:cc:2d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDQ0aZfCz7/ZAAM1K4ZJwFgCzaRcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjkyMjBmNmNkNTY3NGM2ZGZiNjFjNDU3ZGQ2YmNhYWNh OGMyM2JjZDJmNmE3YjM5Yjc2YmI1YWE0ZTU5MzkxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrLesGMXIgsX6oXvvMmUmWydw5eEiYtNhVywR1DC3ok/BL jXxfsaJFtld3bo+yMjT4PLezQiuLyGPXUwyLicNFAI6c+uIxP/bMVYBRzftRJsIg Oh77bF7rFEMTv0KiVjMmr5oxmJpQBEphrxhiDA2DgPP+qB8rkpC3Wej5B+WEGXgL l8FYSb52QCQ85rgilW+dHdNOTgyI5wQNzBxpYukwqGPhQIzAmKzkH3sQTv+PsXSp OLubPOOeibx2i8NgkFc9Jf/wFaeHRDsNM7FuvERylZLjgmiynbbWjOjI/jjlqXjH yaM343mU2rrW7N1/ZgkiBiqnH91A3uYhFarhBETRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU6cNiF4a4LkThSqJ4B3KGjLk4TjswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE5MGFlNDZhLTgzODItNGYyNS1iZTJhLTk2MmEzMWY1ZWIyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4ezANBgkqhkiG9w0BAQsFAAOCAQEAsmC3HVXBAW0w4U+vX08+N0IpY4IE 27pOSqiEy6cesy7pXGeD8U2JjigNPPC5fXDC5rxUVDVYpZkhHBZy5NOXDOO5W6Zr fr0iRbcCMzn6kZe89Zt3lTPim8DNgoof0T0BhUDDIw15Kexug3x5NqdKLZ03oCer tM6FOz4EpMDHI55Gj/VcSw0/TtPjAFCSnO5Kf9lk+c1txuR7upicGPVvKQrf64n5 DtoKjXxju4qhS61QWGWZKhPDvDLMVdTPTHa2g67/C6DQqqo9oBL29flQ0LoxZFnE lSbKRcmhAQtcAPRwgQMhqbfX7p/GETr7MoD6BWW4EvXJzWMpewNkT1vMLQ== -----END CERTIFICATE-----Generated at Thu May 2 04:02:28 2024 by rpki-client on console-fra.rpki-client.org