$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a3aefdd-2281-4c50-a86b-248569ce3189.roa File: 2a3aefdd-2281-4c50-a86b-248569ce3189.roa (raw, json) Hash identifier: DtDsKhsoApcjH+PS1O6Z+QnRhsCCyPpwOnD5eL96Njo= Subject key identifier: 62:5D:75:55:07:5E:36:E5:E8:B1:B8:F6:A8:C7:70:6E:7D:3E:3F:85 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5976A4B2D90A9E199FABA82E7BD76E7C4956D629 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a3aefdd-2281-4c50-a86b-248569ce3189.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 72.150.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:76:a4:b2:d9:0a:9e:19:9f:ab:a8:2e:7b:d7:6e:7c:49:56:d6:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=e04eb7f4a7b7f7775862a50029103fa5bf10e175f5d71436afa37b18e62c9b59, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:48:a3:ce:4a:d5:2f:6c:ae:44:83:de:b2: 66:50:ca:ce:e4:ce:09:3c:87:cf:2e:0b:2b:ed:91: 69:de:af:58:b9:69:07:37:17:d4:79:19:ff:8d:91: 70:86:0f:8c:d0:1e:d1:ec:e9:fb:55:a7:1e:7b:bd: 72:48:23:e8:01:3c:2a:7a:2f:35:21:45:b5:b4:1c: a7:a2:f4:43:19:f0:58:81:f4:0f:7d:c8:b6:ee:f6: 9c:c4:a4:dd:15:10:f2:09:c7:22:51:6a:c9:bc:e0: e7:3c:fc:50:e7:d9:db:d0:f0:07:ff:3c:f3:c5:71: e5:f8:25:47:24:4a:dd:92:f9:40:92:3f:34:1e:f2: 65:71:3b:09:e4:31:15:28:da:1b:97:6b:90:17:d2: 8f:c2:f2:14:d3:9a:e9:f3:ef:97:95:92:4a:31:7e: fc:b0:cf:ed:1f:35:51:66:c6:87:94:c5:cd:01:fc: 3b:ff:0e:9e:2d:10:8f:d1:2a:42:bf:8d:0f:17:f9: 0a:84:48:59:59:0b:96:df:f3:2e:28:16:d9:40:b2: e9:3e:66:2a:f0:dc:36:5f:34:9d:1b:71:6d:1c:72: 15:b0:7b:92:ed:38:09:51:f8:44:95:5e:9d:43:90: 40:b3:5b:ad:6f:d9:ea:cb:df:f2:23:17:5a:ee:10: 5c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5D:75:55:07:5E:36:E5:E8:B1:B8:F6:A8:C7:70:6E:7D:3E:3F:85 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a3aefdd-2281-4c50-a86b-248569ce3189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.150.0.0/16 Signature Algorithm: sha256WithRSAEncryption b8:6d:d9:00:81:7d:9e:38:75:1c:25:97:7a:e1:4a:15:7b:14: e9:7a:f3:68:c0:29:1e:80:8b:69:38:7c:6f:1f:66:9e:13:4d: 60:ad:0a:60:d8:ee:13:28:46:be:25:a9:fc:09:11:ff:36:4c: 73:78:95:d6:3e:dd:29:29:30:df:d5:a3:1a:b3:0c:4b:94:03: 07:3c:d2:1f:18:2d:59:9e:28:fe:23:3d:36:76:48:a3:c4:5e: d7:4c:6e:da:cd:66:02:71:9b:38:5f:c2:06:1b:64:28:6d:28: bd:09:73:f5:21:1f:76:28:f5:16:3c:1c:06:d8:10:3b:91:f4: 95:a6:f8:44:f3:3f:ac:85:ab:1f:c1:ca:66:42:d3:4f:b5:12: 61:93:d1:fa:b3:2b:b6:8c:cb:6e:a7:e4:3b:57:e3:5a:44:1b: be:e8:b7:86:56:c0:f6:ef:d1:a2:91:dd:5e:d8:84:1e:d2:2c: f1:f2:77:3b:1a:39:d3:ac:70:be:da:25:75:89:d6:87:47:25: ae:a0:73:74:4b:ff:23:a4:51:f9:6c:ff:32:9e:dc:b9:fa:0d: e0:fc:42:7b:8b:25:7e:a2:a6:67:b4:9d:82:96:06:6e:c3:b0: 30:c9:be:4c:fd:4c:8b:b1:7f:dd:98:76:f5:d2:ac:30:86:cf: 2f:1a:63:7d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWXakstkKnhmfq6gue9dufElW1ikwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMDRlYjdmNGE3YjdmNzc3NTg2MmE1MDAyOTEwM2ZhNWJm MTBlMTc1ZjVkNzE0MzZhZmEzN2IxOGU2MmM5YjU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzd0ijzkrVL2yuRIPesmZQys7kzgk8h88uCyvtkWner1i5 aQc3F9R5Gf+NkXCGD4zQHtHs6ftVpx57vXJII+gBPCp6LzUhRbW0HKei9EMZ8FiB 9A99yLbu9pzEpN0VEPIJxyJRasm84Oc8/FDn2dvQ8Af/PPPFceX4JUckSt2S+UCS PzQe8mVxOwnkMRUo2huXa5AX0o/C8hTTmunz75eVkkoxfvywz+0fNVFmxoeUxc0B /Dv/Dp4tEI/RKkK/jQ8X+QqESFlZC5bf8y4oFtlAsuk+Zirw3DZfNJ0bcW0cchWw e5LtOAlR+ESVXp1DkECzW61v2erL3/IjF1ruEFzTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUYl11VQdeNuXosbj2qMdwbn0+P4UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhM2FlZmRkLTIyODEtNGM1MC1hODZiLTI0ODU2OWNlMzE4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBIljANBgkqhkiG9w0BAQsFAAOCAQEAuG3ZAIF9njh1HCWXeuFKFXsU6Xrz aMApHoCLaTh8bx9mnhNNYK0KYNjuEyhGviWp/AkR/zZMc3iV1j7dKSkw39WjGrMM S5QDBzzSHxgtWZ4o/iM9NnZIo8Re10xu2s1mAnGbOF/CBhtkKG0ovQlz9SEfdij1 FjwcBtgQO5H0lab4RPM/rIWrH8HKZkLTT7USYZPR+rMrtozLbqfkO1fjWkQbvui3 hlbA9u/RopHdXtiEHtIs8fJ3Oxo506xwvtoldYnWh0clrqBzdEv/I6RR+Wz/Mp7c ufoN4PxCe4slfqKmZ7SdgpYGbsOwMMm+TP1Mi7F/3Zh29dKsMIbPLxpjfQ== -----END CERTIFICATE-----Generated at Fri May 3 00:47:19 2024 by rpki-client on console-ams.rpki-client.org