$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/288307d2-faba-4bde-94e4-e14de18a48c9.roa File: 288307d2-faba-4bde-94e4-e14de18a48c9.roa (raw, json) Hash identifier: crvYRyR2GaOHzjmwnWGqV4H+lrezSIimzNPxArBB3ks= Subject key identifier: 54:29:F7:FA:4D:C7:C6:7D:5E:F2:A0:74:67:10:F4:CF:4E:09:54:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 689551482F2E76249D8908309FAFEB7370A388A2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/288307d2-faba-4bde-94e4-e14de18a48c9.roa Signing time: Fri 03 May 2024 00:00:00 +0000 ROA not before: Fri 03 May 2024 00:00:00 +0000 ROA not after: Fri 07 Jun 2024 23:59:59 +0000 asID: 8987 IP address blocks: 56.218.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:95:51:48:2f:2e:76:24:9d:89:08:30:9f:af:eb:73:70:a3:88:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:00:00 2024 GMT Not After : Jun 7 23:59:59 2024 GMT Subject: serialNumber=df3013b93263da334ac40fde871808d8d8ae243c750e4dd3100398e41a568767, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:b3:9e:8a:b5:91:55:27:85:c7:89:47:d9: f1:91:7e:42:9a:79:96:c7:8f:ef:ad:27:c8:77:a0: 5e:a4:a2:37:37:37:eb:dd:56:f3:9f:6a:f9:f3:86: d5:98:35:8e:2a:9c:2e:c2:53:b4:65:d8:18:d6:42: 8f:a8:12:0f:7b:50:b7:a1:ca:66:ac:09:b2:eb:d5: 1d:4d:c1:ed:f0:00:33:df:2d:d6:b4:15:9a:a7:7d: 74:dd:84:0c:98:33:d3:61:3c:93:b5:e1:02:c9:1b: 16:ae:e2:8b:8d:e2:79:0a:46:be:b8:b2:eb:e7:f7: 3f:5d:45:b2:3a:23:18:f9:97:56:64:56:0e:8d:12: 69:32:38:bc:af:ec:c4:5b:2a:c5:34:34:de:1b:76: 7b:ea:04:a4:f1:f9:99:c8:44:e6:be:66:12:78:29: 34:71:51:93:ae:41:da:b3:33:dd:cd:d3:31:53:c8: f9:cc:0d:7f:4d:e5:5b:b6:ca:9c:29:bd:20:28:50: 25:6f:4e:53:7a:ca:d2:1d:a0:72:12:25:ef:51:e4: 6a:79:87:2a:df:aa:a4:59:6d:ef:84:fd:70:d5:d6: 46:82:4c:2b:af:85:40:69:8b:f8:05:05:a2:e5:56: 51:25:2c:9e:96:0f:85:d0:6b:0d:87:2b:7d:45:32: c8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:29:F7:FA:4D:C7:C6:7D:5E:F2:A0:74:67:10:F4:CF:4E:09:54:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/288307d2-faba-4bde-94e4-e14de18a48c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.218.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3b:a0:c7:e3:62:b2:b7:00:5d:4c:6a:5a:11:ab:2b:c7:96:90: ae:dd:f1:f6:a8:18:fb:38:19:ac:7f:b8:8b:cc:d8:f6:39:1b: 3d:b6:bf:dd:49:04:c1:a4:ac:65:23:14:65:05:05:33:2c:eb: 3b:0a:c3:e1:8d:ba:f3:c5:19:ee:37:23:33:c6:fd:36:3b:8f: 4f:ea:8b:b8:f6:6a:f9:00:95:28:47:31:30:76:97:43:92:50: 6c:54:4f:ca:de:0b:69:38:ad:98:9d:5f:fa:13:c0:d9:82:b3: 35:9d:85:78:e7:ce:be:70:79:20:5c:9e:85:68:3d:22:be:3e: 84:6d:ec:2c:58:3d:da:23:36:05:3d:ba:95:44:78:0c:c1:4c: bd:71:b1:8f:32:1f:c4:7e:fe:9c:2c:14:0e:e9:f9:dd:8e:d6: 80:e8:5e:0d:72:e5:d7:7c:b4:2d:9c:7a:77:17:8d:05:dc:49: a5:82:d1:7b:60:04:70:a3:5a:80:be:18:0d:f1:c4:eb:05:0a: 0f:fc:11:e3:0d:7a:e7:4b:7f:62:41:8d:08:0e:df:36:0c:ca: e3:da:7b:87:6c:1f:62:a3:3e:39:68:9e:3e:2d:26:f5:c9:8c: c2:4c:b9:bf:b6:ce:23:00:79:15:3a:38:00:15:e6:3a:97:e1: 54:0e:85:29 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUaJVRSC8udiSdiQgwn6/rc3CjiKIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTAzMDAwMDAwWhcNMjQwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjMwMTNiOTMyNjNkYTMzNGFjNDBmZGU4NzE4MDhkOGQ4 YWUyNDNjNzUwZTRkZDMxMDAzOThlNDFhNTY4NzY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEHrOeirWRVSeFx4lH2fGRfkKaeZbHj++tJ8h3oF6kojc3 N+vdVvOfavnzhtWYNY4qnC7CU7Rl2BjWQo+oEg97ULehymasCbLr1R1Nwe3wADPf Lda0FZqnfXTdhAyYM9NhPJO14QLJGxau4ouN4nkKRr64suvn9z9dRbI6Ixj5l1Zk Vg6NEmkyOLyv7MRbKsU0NN4bdnvqBKTx+ZnIROa+ZhJ4KTRxUZOuQdqzM93N0zFT yPnMDX9N5Vu2ypwpvSAoUCVvTlN6ytIdoHISJe9R5Gp5hyrfqqRZbe+E/XDV1kaC TCuvhUBpi/gFBaLlVlElLJ6WD4XQaw2HK31FMsgVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVCn3+k3Hxn1e8qB0ZxD0z04JVIgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4ODMwN2QyLWZhYmEtNGJkZS05NGU0LWUxNGRlMThhNDhjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA42jANBgkqhkiG9w0BAQsFAAOCAQEAO6DH42KytwBdTGpaEasrx5aQrt3x 9qgY+zgZrH+4i8zY9jkbPba/3UkEwaSsZSMUZQUFMyzrOwrD4Y2688UZ7jcjM8b9 NjuPT+qLuPZq+QCVKEcxMHaXQ5JQbFRPyt4LaTitmJ1f+hPA2YKzNZ2FeOfOvnB5 IFyehWg9Ir4+hG3sLFg92iM2BT26lUR4DMFMvXGxjzIfxH7+nCwUDun53Y7WgOhe DXLl13y0LZx6dxeNBdxJpYLRe2AEcKNagL4YDfHE6wUKD/wR4w1650t/YkGNCA7f NgzK49p7h2wfYqM+OWiePi0m9cmMwky5v7bOIwB5FTo4ABXmOpfhVA6FKQ== -----END CERTIFICATE-----Generated at Thu May 9 01:25:23 2024 by rpki-client on console-fra.rpki-client.org