$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3510166e-901e-435d-a0cf-0f645adc2c2f.roa File: 3510166e-901e-435d-a0cf-0f645adc2c2f.roa (raw, json) Hash identifier: DcqBU1gLzKiERZlNdb1wNJ4sLDoa2pEpcVxV9skAUPY= Subject key identifier: CA:B3:82:A0:E3:E4:C0:9B:1A:31:94:A0:D8:C2:4B:EA:8F:0A:19:AC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 479790FA170B1050ECFFF2DBF7AA1E0B15232F34 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3510166e-901e-435d-a0cf-0f645adc2c2f.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 15.134.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:97:90:fa:17:0b:10:50:ec:ff:f2:db:f7:aa:1e:0b:15:23:2f:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=feb6d9c2c886f9ca9092416bee00bd0d848b0b3417e158ae568550a9fdf8d465, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e4:a5:bc:b3:f5:e2:b9:b7:3e:95:c9:8b:12: ee:c2:75:73:e0:13:3e:26:30:8f:bb:18:40:e9:10: 25:41:b5:e1:fb:01:0f:27:c6:0c:ee:56:10:4d:b1: 81:34:92:59:44:72:2b:cf:02:04:e7:59:a2:75:b9: 09:1a:18:7c:07:c9:be:eb:d1:22:68:bb:36:14:4d: f7:e3:43:88:49:e4:4d:54:d7:b9:48:11:e0:85:16: d1:b9:45:d6:be:1e:5f:f7:fa:7b:19:6e:54:87:02: 84:8e:92:52:15:21:89:bf:7f:6f:99:57:d7:ff:27: cb:a2:3e:c8:76:2a:94:6b:50:ef:61:24:0e:80:29: 24:a0:ee:a9:69:58:7a:d0:05:9e:ce:b3:41:9c:6b: ee:c3:9f:82:9a:cf:28:d7:b6:32:5d:5b:ce:45:6c: 19:f0:bc:b2:06:ad:89:a9:a2:f3:ab:d8:a6:3a:7f: b0:35:dc:90:9b:b6:30:75:de:74:ba:84:72:f7:b6: bc:a3:1d:91:04:5b:f2:dd:89:f0:67:10:21:a9:91: c6:d7:82:43:2d:4e:9d:6d:cc:38:df:15:a9:e0:77: 15:26:dc:f2:59:0c:16:75:9d:1d:ec:d1:cb:11:65: 6e:c8:d4:b8:eb:44:2a:f4:e7:9f:6c:42:0b:6e:b6: 55:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B3:82:A0:E3:E4:C0:9B:1A:31:94:A0:D8:C2:4B:EA:8F:0A:19:AC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3510166e-901e-435d-a0cf-0f645adc2c2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.134.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3a:71:db:2a:cf:13:c7:fd:57:ee:42:e1:60:00:95:b1:30:52: 48:9b:a0:85:1d:65:1e:24:96:01:65:97:c2:5e:b1:45:61:5a: cd:3f:c6:d7:63:c3:04:c4:f4:97:d2:18:49:f7:31:86:6e:06: 7c:69:6f:b5:a5:35:62:67:59:c7:c9:aa:bf:61:d0:6b:a1:1b: 5e:f6:0f:7a:be:5f:d0:11:82:4a:35:61:8f:6a:0a:6a:f3:6a: e1:f5:00:57:68:2f:1e:26:36:12:8e:8d:de:e4:f8:f5:f3:e0: 46:70:b8:c1:b6:94:0e:d7:46:a2:a1:33:b8:1e:55:78:6e:38: 73:21:5b:bd:68:37:a4:ee:c2:20:89:48:ff:b9:88:5e:c9:55: 3b:22:30:a9:9c:13:7c:68:2b:cd:e8:4d:ab:5b:f2:44:86:f0: 45:b6:44:b8:83:83:73:e8:11:fe:f4:43:45:77:b0:91:e2:34: 5e:ed:e5:a8:cb:22:f9:50:00:07:80:16:70:ee:35:c3:aa:ae: 08:9f:c1:4c:8e:89:4d:a7:d0:98:87:e8:82:97:a0:8e:e0:bc: da:8c:f0:ea:46:69:b7:6d:b3:71:fe:fb:a6:3a:78:9f:db:1b: 44:a0:8a:c2:48:82:af:f8:fe:54:67:59:1c:ac:52:5c:50:7b: 8e:24:37:69 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUR5eQ+hcLEFDs//Lb96oeCxUjLzQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZWI2ZDljMmM4ODZmOWNhOTA5MjQxNmJlZTAwYmQwZDg0 OGIwYjM0MTdlMTU4YWU1Njg1NTBhOWZkZjhkNDY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX5KW8s/Xiubc+lcmLEu7CdXPgEz4mMI+7GEDpECVBteH7 AQ8nxgzuVhBNsYE0kllEcivPAgTnWaJ1uQkaGHwHyb7r0SJouzYUTffjQ4hJ5E1U 17lIEeCFFtG5Rda+Hl/3+nsZblSHAoSOklIVIYm/f2+ZV9f/J8uiPsh2KpRrUO9h JA6AKSSg7qlpWHrQBZ7Os0Gca+7Dn4KazyjXtjJdW85FbBnwvLIGrYmpovOr2KY6 f7A13JCbtjB13nS6hHL3tryjHZEEW/LdifBnECGpkcbXgkMtTp1tzDjfFangdxUm 3PJZDBZ1nR3s0csRZW7I1LjrRCr0559sQgtutlVRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUyrOCoOPkwJsaMZSg2MJL6o8KGawwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM1MTAxNjZlLTkwMWUtNDM1ZC1hMGNmLTBmNjQ1YWRjMmMyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPhjANBgkqhkiG9w0BAQsFAAOCAQEAOnHbKs8Tx/1X7kLhYACVsTBSSJug hR1lHiSWAWWXwl6xRWFazT/G12PDBMT0l9IYSfcxhm4GfGlvtaU1YmdZx8mqv2HQ a6EbXvYPer5f0BGCSjVhj2oKavNq4fUAV2gvHiY2Eo6N3uT49fPgRnC4wbaUDtdG oqEzuB5VeG44cyFbvWg3pO7CIIlI/7mIXslVOyIwqZwTfGgrzehNq1vyRIbwRbZE uIODc+gR/vRDRXewkeI0Xu3lqMsi+VAAB4AWcO41w6quCJ/BTI6JTafQmIfogpeg juC82ozw6kZpt22zcf77pjp4n9sbRKCKwkiCr/j+VGdZHKxSXFB7jiQ3aQ== -----END CERTIFICATE-----Generated at Thu May 9 17:46:43 2024 by rpki-client on console-ams.rpki-client.org