$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2df3f2da-86da-449f-b1e2-009514bc056f.roa File: 2df3f2da-86da-449f-b1e2-009514bc056f.roa (raw, json) Hash identifier: bVwSfmQ1q0Gu1DwA7u1ZeaKbSHS8058vh8lzpzVtnn4= Subject key identifier: 04:1F:5A:2F:50:BD:4B:D0:0A:20:BE:D3:21:48:3C:3E:49:2A:91:3F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 61986F23D3088133F27A4D13A6581FF5AC637E34 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2df3f2da-86da-449f-b1e2-009514bc056f.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 140.200.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:98:6f:23:d3:08:81:33:f2:7a:4d:13:a6:58:1f:f5:ac:63:7e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=477757f10147408f455f04dd9ce2efae495643ba392b0918765de4bc63061806, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:36:8f:eb:9b:9b:80:1c:39:e3:8e:01:93:f2: dd:94:87:6a:03:d3:79:db:8d:da:91:3a:c2:b9:68: 5b:26:34:45:c0:40:45:f9:56:03:ab:4a:17:69:d0: 87:83:1d:bd:77:a3:76:a6:44:4f:65:9c:4e:81:a4: 45:fa:e1:19:66:97:ed:7d:86:1c:39:db:2f:4b:3c: 00:66:6c:d1:9e:be:48:a6:13:a0:29:1b:a1:56:82: 2b:1b:32:b7:0f:5a:35:a5:0e:b0:89:6a:47:06:0f: 48:02:d2:b5:81:c3:60:b4:c6:7c:a1:0b:da:7e:9f: dd:db:38:c8:c3:aa:37:18:a8:26:d9:5c:0e:c0:e3: ff:7f:e0:4d:c4:a3:5b:03:f5:c3:ed:91:db:dd:9a: 46:25:ae:c6:ac:d0:16:5b:21:f7:c7:1b:2e:53:66: f8:eb:85:d5:b7:2b:29:53:5e:28:18:fc:ae:f5:a7: e3:8b:10:b2:e8:e5:34:0d:2b:f5:77:d0:2e:de:d1: 4f:59:43:85:5e:0f:a3:19:68:15:bd:40:b3:0d:d6: ad:e4:dd:87:a7:f3:09:83:90:9f:35:35:48:8e:40: 57:3b:60:26:c7:48:6a:a8:68:7b:04:c6:15:bd:03: 39:33:be:5e:19:e2:c1:3c:a3:75:94:33:03:bb:27: eb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1F:5A:2F:50:BD:4B:D0:0A:20:BE:D3:21:48:3C:3E:49:2A:91:3F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2df3f2da-86da-449f-b1e2-009514bc056f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.200.0.0/16 Signature Algorithm: sha256WithRSAEncryption a0:85:ee:fc:d6:3d:b2:c9:3f:e7:3c:95:7a:06:fc:c0:c1:57: 11:9b:e5:7f:8b:53:cb:4f:9a:0e:5f:d8:d2:c0:88:b6:d9:06: 3e:2c:50:53:9a:27:fb:31:28:92:d7:4b:fd:1b:29:35:90:3b: a0:71:9a:c5:39:b4:9e:56:c5:87:5b:0d:2d:c5:16:90:b7:3a: 89:fb:8b:1e:a4:b6:71:e4:ed:1d:1d:70:c9:bd:eb:cb:43:18: 56:7a:df:dc:d0:17:a6:3d:8e:92:5d:ee:02:1b:8a:68:b5:be: eb:ae:de:3f:6e:1f:ed:c0:9d:c5:30:21:05:c3:8d:5f:81:9f: ed:ed:46:24:17:96:3e:d1:28:df:94:73:1a:1a:e5:94:89:1a: c8:3f:ff:1b:60:08:1a:b7:9a:0e:a5:6e:81:d5:85:28:57:ae: b3:60:12:dc:5e:52:a9:6b:f5:d1:cd:cb:a8:20:3d:6c:83:01: 78:4e:51:e5:fd:f0:01:49:05:a9:46:41:76:80:ea:52:f2:07: 7a:8a:26:0d:a8:3f:09:37:37:3a:5d:8f:0e:3b:17:ad:d9:b6: 6e:f3:13:aa:c4:6b:c9:25:33:24:ad:cb:7d:c8:1e:d0:27:1a: d6:67:e4:2a:a9:d6:d1:0d:a1:95:0c:f9:20:93:42:75:1a:59: 84:62:ac:ac -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYZhvI9MIgTPyek0Tplgf9axjfjQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0Nzc3NTdmMTAxNDc0MDhmNDU1ZjA0ZGQ5Y2UyZWZhZTQ5 NTY0M2JhMzkyYjA5MTg3NjVkZTRiYzYzMDYxODA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFNo/rm5uAHDnjjgGT8t2Uh2oD03nbjdqROsK5aFsmNEXA QEX5VgOrShdp0IeDHb13o3amRE9lnE6BpEX64Rlml+19hhw52y9LPABmbNGevkim E6ApG6FWgisbMrcPWjWlDrCJakcGD0gC0rWBw2C0xnyhC9p+n93bOMjDqjcYqCbZ XA7A4/9/4E3Eo1sD9cPtkdvdmkYlrsas0BZbIffHGy5TZvjrhdW3KylTXigY/K71 p+OLELLo5TQNK/V30C7e0U9ZQ4VeD6MZaBW9QLMN1q3k3Yen8wmDkJ81NUiOQFc7 YCbHSGqoaHsExhW9Azkzvl4Z4sE8o3WUMwO7J+spAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUBB9aL1C9S9AKIL7TIUg8PkkqkT8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJkZjNmMmRhLTg2ZGEtNDQ5Zi1iMWUyLTAwOTUxNGJjMDU2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCMyDANBgkqhkiG9w0BAQsFAAOCAQEAoIXu/NY9ssk/5zyVegb8wMFXEZvl f4tTy0+aDl/Y0sCIttkGPixQU5on+zEoktdL/RspNZA7oHGaxTm0nlbFh1sNLcUW kLc6ifuLHqS2ceTtHR1wyb3ry0MYVnrf3NAXpj2Okl3uAhuKaLW+667eP24f7cCd xTAhBcONX4Gf7e1GJBeWPtEo35RzGhrllIkayD//G2AIGreaDqVugdWFKFeus2AS 3F5SqWv10c3LqCA9bIMBeE5R5f3wAUkFqUZBdoDqUvIHeoomDag/CTc3Ol2PDjsX rdm2bvMTqsRrySUzJK3Lfcge0Cca1mfkKqnW0Q2hlQz5IJNCdRpZhGKsrA== -----END CERTIFICATE-----Generated at Thu May 2 05:57:23 2024 by rpki-client on console-ams.rpki-client.org