$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/435a4520-90a7-4288-a55a-b74a6879fd02.roa File: 435a4520-90a7-4288-a55a-b74a6879fd02.roa (raw, json) Hash identifier: h9fu/iwCIYdLkOLnuK6tgml0P3IBYjk8SGavLYjtq0s= Subject key identifier: D8:6C:48:92:4F:EA:53:74:E9:17:E1:D0:60:93:EC:84:65:88:36:0C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 503F1E9C981C9B70CEAC74EA3FD08C46FD7D536A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/435a4520-90a7-4288-a55a-b74a6879fd02.roa Signing time: Mon 28 Aug 2023 00:00:00 +0000 ROA not before: Mon 28 Aug 2023 00:00:00 +0000 ROA not after: Mon 02 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Aug 2023 04:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:3f:1e:9c:98:1c:9b:70:ce:ac:74:ea:3f:d0:8c:46:fd:7d:53:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 28 00:00:00 2023 GMT Not After : Oct 2 23:59:59 2023 GMT Subject: serialNumber=1a8c50f3623b7f29306cc5e81bd02081274b3e86516af0ce3d9c1d4faedbe847, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:24:46:01:e3:59:7a:4f:e8:3e:4e:9a:d2:2e: cf:72:01:65:11:6b:bf:cd:3f:5d:fc:61:4e:f8:71: 0c:d7:5a:36:1a:46:8b:5c:97:1f:20:ac:77:be:25: 2f:d6:23:e0:4f:5a:b3:00:db:d3:7c:12:c8:78:46: 30:0f:d8:4c:a5:a0:10:ec:7b:55:0c:c8:67:0b:c0: c7:67:b7:04:af:e7:83:e8:ff:8d:34:cf:58:ad:2d: 79:88:dd:35:8a:cb:75:3c:eb:b7:78:4a:3a:77:ad: ac:42:16:70:26:b6:f1:84:7b:5a:13:a6:22:41:4b: 7c:9b:70:49:72:32:ce:a1:7b:3e:f4:49:52:a5:42: 46:89:0b:8e:01:4f:a5:0b:d0:fc:5f:ca:81:6f:10: b1:8c:b7:a7:74:a1:5a:a3:e4:c3:10:71:2d:87:06: 3d:e0:83:5b:19:d9:df:cc:88:b4:96:85:d8:0c:88: 93:82:61:78:87:6e:81:fb:f5:a3:f5:24:1f:46:13: 44:4c:0b:ac:da:ad:76:5c:f5:4c:b1:52:8d:1e:97: a1:05:2a:13:44:e0:a6:16:dd:5b:f8:f8:de:ac:dc: 92:23:8b:d8:aa:e7:b5:f2:fe:98:2f:c2:55:84:4b: 75:7e:ae:79:bd:9c:78:01:7c:45:7b:27:7a:52:2f: a0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6C:48:92:4F:EA:53:74:E9:17:E1:D0:60:93:EC:84:65:88:36:0C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/435a4520-90a7-4288-a55a-b74a6879fd02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.128.0/19 Signature Algorithm: sha256WithRSAEncryption 21:b2:ee:92:5f:f6:d2:dc:33:9d:3f:a2:99:2d:15:7f:58:ee: be:75:bd:82:d6:97:c2:f1:70:b2:37:d6:c2:9b:e4:a6:a2:b8: 93:21:37:1c:d4:81:b9:a2:5b:20:c9:b0:bd:10:1c:0a:95:88: 48:95:41:4c:54:7d:dd:b7:88:ba:89:79:90:14:6b:01:13:25: c0:74:9a:d6:ed:eb:f9:cb:0b:d0:b0:c0:d7:e0:0d:08:12:a3: ac:c8:4a:06:38:98:b6:1a:c4:12:6b:c5:22:cf:9d:a1:c4:71: 3f:84:0b:83:23:03:38:fb:62:f8:ec:86:6d:c8:fe:05:70:29: 35:e6:af:3c:70:d9:c9:51:47:67:69:78:66:d4:9b:55:bf:d0: 0e:34:be:6c:8b:51:dc:2e:ec:76:72:ee:0d:4b:9f:c8:63:3c: 8b:93:39:88:5b:70:6a:4b:20:ae:cd:87:b4:fc:ca:8d:0a:ef: fc:0b:89:e0:a8:51:1f:6c:36:1e:5c:5e:6a:da:93:4a:33:db: d3:24:9e:69:12:c6:c5:6a:be:d2:6a:35:62:95:a1:53:1d:9d: 4d:43:72:2b:56:f7:77:74:63:4d:db:7b:89:67:b9:dc:ce:05: 49:4b:7b:68:12:e3:39:ed:9b:77:12:d0:2d:76:91:e6:2f:7b: d1:9a:03:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUD8enJgcm3DOrHTqP9CMRv19U2owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwODI4MDAwMDAwWhcNMjMxMDAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYThjNTBmMzYyM2I3ZjI5MzA2Y2M1ZTgxYmQwMjA4MTI3 NGIzZTg2NTE2YWYwY2UzZDljMWQ0ZmFlZGJlODQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvJEYB41l6T+g+TprSLs9yAWURa7/NP138YU74cQzXWjYa Rotclx8grHe+JS/WI+BPWrMA29N8Esh4RjAP2EyloBDse1UMyGcLwMdntwSv54Po /400z1itLXmI3TWKy3U867d4Sjp3raxCFnAmtvGEe1oTpiJBS3ybcElyMs6hez70 SVKlQkaJC44BT6UL0PxfyoFvELGMt6d0oVqj5MMQcS2HBj3gg1sZ2d/MiLSWhdgM iJOCYXiHboH79aP1JB9GE0RMC6zarXZc9UyxUo0el6EFKhNE4KYW3Vv4+N6s3JIj i9iq57Xy/pgvwlWES3V+rnm9nHgBfEV7J3pSL6CBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2GxIkk/qU3TpF+HQYJPshGWINgwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQzNWE0NTIwLTkwYTctNDI4OC1hNTVhLWI3NGE2ODc5ZmQwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVM34AwDQYJKoZIhvcNAQELBQADggEBACGy7pJf9tLcM50/opktFX9Y7r51 vYLWl8LxcLI31sKb5KaiuJMhNxzUgbmiWyDJsL0QHAqViEiVQUxUfd23iLqJeZAU awETJcB0mtbt6/nLC9CwwNfgDQgSo6zISgY4mLYaxBJrxSLPnaHEcT+EC4MjAzj7 Yvjshm3I/gVwKTXmrzxw2clRR2dpeGbUm1W/0A40vmyLUdwu7HZy7g1Ln8hjPIuT OYhbcGpLIK7Nh7T8yo0K7/wLieCoUR9sNh5cXmrak0oz29MknmkSxsVqvtJqNWKV oVMdnU1DcitW93d0Y03be4lnudzOBUlLe2gS4zntm3cS0C12keYve9GaA98= -----END CERTIFICATE-----Generated at Mon Aug 28 16:48:54 2023 by rpki-client on console-ams.rpki-client.org