$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/207913b7-aa22-47cb-be77-26db04244a42.roa File: 207913b7-aa22-47cb-be77-26db04244a42.roa (raw, json) Hash identifier: GdYjG6H3DsRj1mCSl7WBf0GIDdgmXqn8/defa/Ebqtw= Subject key identifier: E7:02:47:40:70:00:C1:96:08:EA:06:A9:95:82:E1:08:EF:94:9A:E6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 34380E8B067902CA683320A82304E9C9C3032528 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/207913b7-aa22-47cb-be77-26db04244a42.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 194.21.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:38:0e:8b:06:79:02:ca:68:33:20:a8:23:04:e9:c9:c3:03:25:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=6f6bb04e1d216a94f0e836d2a1a43d409a2f3a5fa411fb78cb4d856b81548b9c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:d1:21:7c:29:12:24:f3:26:c6:1f:7d:23: 89:93:ba:0e:d8:81:d9:ee:e0:05:4e:39:b8:ed:6b: bd:84:a1:4d:10:22:48:a5:fd:ab:7f:cf:61:d1:4f: 3b:07:ca:3d:94:57:4f:1b:b3:ff:d5:39:a9:4b:1b: 2a:0a:e1:96:66:d4:46:b4:0f:d9:c4:ff:92:24:29: d4:fa:fb:43:eb:35:28:da:42:db:58:64:51:67:8f: 3d:7f:79:a7:76:15:45:af:b9:bc:9c:73:f2:ac:b4: d3:1c:6b:c2:ef:31:8d:26:4e:20:8a:8a:2c:db:57: 6b:1d:c2:aa:7a:5c:35:31:bd:38:e1:cf:ae:42:56: 81:bc:79:91:8c:71:3e:a0:5e:36:63:7a:27:ec:c7: fe:c4:0b:52:dd:55:ba:38:d7:18:26:82:bb:3c:c3: bd:bb:47:f1:25:87:43:46:1d:36:d4:f5:6d:85:3a: d1:1d:ec:43:c5:59:3e:f4:ed:cc:55:a6:f7:95:75: c4:56:4d:3c:18:10:05:5f:9d:0a:9b:f7:15:7d:20: 54:f7:b8:2d:b2:f3:52:08:33:d8:03:c9:71:0a:c7: 56:16:3d:1e:10:a7:f9:65:21:8f:33:48:0f:af:ba: 42:e0:cd:63:a8:f1:0c:02:b9:b8:02:c6:f6:4f:c1: 9b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:02:47:40:70:00:C1:96:08:EA:06:A9:95:82:E1:08:EF:94:9A:E6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/207913b7-aa22-47cb-be77-26db04244a42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.21.128.0/18 Signature Algorithm: sha256WithRSAEncryption 52:2e:33:70:38:20:cd:97:ef:b0:66:1a:43:d0:71:08:ed:74: 54:4d:5c:88:98:31:cb:df:80:77:e5:fb:49:47:64:59:c1:99: 52:4a:dc:7d:bf:72:ac:c7:db:3f:15:aa:ab:22:d4:9a:06:aa: 66:d3:18:82:10:69:64:19:be:37:db:40:97:01:4a:36:c2:42: b2:45:aa:c8:ec:ef:0b:8d:20:6d:f0:06:06:bb:38:82:de:a4: 11:e1:5d:e1:af:4d:e0:89:50:5d:90:cf:05:fc:01:1a:d1:c1: ce:fe:17:87:45:c3:1b:96:0b:77:1e:6a:8b:c4:be:ae:a1:b0: b8:a8:a5:f3:52:03:d8:cf:66:e8:07:4e:c4:64:b0:20:e0:bb: 9f:99:b8:a4:dc:14:23:c9:d7:42:18:86:dc:ce:65:3e:cd:60: 21:80:ee:93:89:67:ab:1e:c2:62:9e:29:f9:cf:f3:a4:a8:c0: ec:e7:07:4f:39:24:23:7c:d0:01:8a:ee:4e:72:ce:ae:01:78: 01:6f:48:10:9b:12:93:ef:12:36:96:f0:1a:1d:7c:18:16:30: ee:1c:b8:44:32:e5:73:de:24:ef:ea:a8:75:e3:f0:83:88:c9: 88:51:7c:16:86:dc:49:c8:8f:6f:93:e8:82:af:c9:55:ad:09: 02:28:76:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNDgOiwZ5AspoMyCoIwTpycMDJSgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZjZiYjA0ZTFkMjE2YTk0ZjBlODM2ZDJhMWE0M2Q0MDlh MmYzYTVmYTQxMWZiNzhjYjRkODU2YjgxNTQ4YjljMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCg7NEhfCkSJPMmxh99I4mTug7Ygdnu4AVOObjta72EoU0Q Ikil/at/z2HRTzsHyj2UV08bs//VOalLGyoK4ZZm1Ea0D9nE/5IkKdT6+0PrNSja QttYZFFnjz1/ead2FUWvubycc/KstNMca8LvMY0mTiCKiizbV2sdwqp6XDUxvTjh z65CVoG8eZGMcT6gXjZjeifsx/7EC1LdVbo41xgmgrs8w727R/Elh0NGHTbU9W2F OtEd7EPFWT707cxVpveVdcRWTTwYEAVfnQqb9xV9IFT3uC2y81IIM9gDyXEKx1YW PR4Qp/llIY8zSA+vukLgzWOo8QwCubgCxvZPwZvnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5wJHQHAAwZYI6gaplYLhCO+UmuYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwNzkxM2I3LWFhMjItNDdjYi1iZTc3LTI2ZGIwNDI0NGE0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbCFYAwDQYJKoZIhvcNAQELBQADggEBAFIuM3A4IM2X77BmGkPQcQjtdFRN XIiYMcvfgHfl+0lHZFnBmVJK3H2/cqzH2z8Vqqsi1JoGqmbTGIIQaWQZvjfbQJcB SjbCQrJFqsjs7wuNIG3wBga7OILepBHhXeGvTeCJUF2QzwX8ARrRwc7+F4dFwxuW C3ceaovEvq6hsLiopfNSA9jPZugHTsRksCDgu5+ZuKTcFCPJ10IYhtzOZT7NYCGA 7pOJZ6sewmKeKfnP86SowOznB085JCN80AGK7k5yzq4BeAFvSBCbEpPvEjaW8Bod fBgWMO4cuEQy5XPeJO/qqHXj8IOIyYhRfBaG3EnIj2+T6IKvyVWtCQIodrI= -----END CERTIFICATE-----Generated at Thu May 2 08:02:26 2024 by rpki-client on console-ams.rpki-client.org