$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5831f36f-50de-43df-b1e3-ee6e835954e3.roa File: 5831f36f-50de-43df-b1e3-ee6e835954e3.roa (raw, json) Hash identifier: 6OmqTPC7AJKjetCR/25CavWSOLhjNOE7+aJ4ymgdaxY= Subject key identifier: 30:78:CD:EE:80:BB:6B:99:81:07:ED:8A:39:D1:62:D8:5E:88:19:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C32828ED4362C4C94FF421655D66CEA7C57F98A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5831f36f-50de-43df-b1e3-ee6e835954e3.roa Signing time: Sat 27 Apr 2024 00:00:00 +0000 ROA not before: Sat 27 Apr 2024 00:00:00 +0000 ROA not after: Sat 01 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 16.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:32:82:8e:d4:36:2c:4c:94:ff:42:16:55:d6:6c:ea:7c:57:f9:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 27 00:00:00 2024 GMT Not After : Jun 1 23:59:59 2024 GMT Subject: serialNumber=7bc5acbdd033d9019b819c2b3e95404906cf1e26ad851911f5bcc05f1091504c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5c:4a:08:ca:0d:a6:d5:01:f6:91:a0:05:a0: 69:b2:96:46:9d:0a:26:49:5b:fb:14:89:6d:4f:a7: 8a:25:a9:e0:13:92:00:e2:e5:da:17:13:f7:42:dd: 23:49:e9:e0:42:73:9c:ff:71:10:2a:e1:0c:2b:8a: 83:00:3a:b3:cc:c2:5c:5d:ae:ec:db:c7:01:7a:dd: ce:d3:a3:66:49:af:1f:6a:47:e3:84:5a:b8:2e:0d: b1:fe:a5:12:26:7e:39:d5:51:1f:3b:11:3c:49:7d: bf:1d:e8:5c:1d:ac:3c:4f:c7:7b:0a:bd:f3:14:ba: 69:67:8d:fd:d7:ce:ae:da:f8:e5:cb:da:4b:6d:21: 21:31:99:b0:9d:23:f6:37:73:40:fa:38:37:cb:d4: eb:43:22:16:19:cc:15:20:3b:f8:1e:5e:bc:ed:7a: 64:87:d4:84:f8:65:19:36:c6:fa:bc:5a:92:c1:3d: 47:b3:2c:ed:a9:8a:c7:8c:8d:6c:92:16:41:70:67: 10:91:40:51:83:92:ce:d3:9d:88:8d:0a:fd:ec:f8: bd:31:56:19:3a:60:48:09:65:b5:37:46:c4:5e:96: a6:12:43:14:ef:7a:38:2f:48:0f:9c:ca:ed:30:c8: b7:d5:c3:10:6f:69:3e:36:d9:6c:b6:be:8c:11:f3: ae:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:78:CD:EE:80:BB:6B:99:81:07:ED:8A:39:D1:62:D8:5E:88:19:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5831f36f-50de-43df-b1e3-ee6e835954e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.66.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0a:42:d6:5f:fd:1e:6a:b9:f9:8b:dd:ce:89:26:cc:98:83:d6: 37:6e:7e:cd:d8:8b:1c:2d:2e:cb:52:25:f4:2f:f6:53:f5:e1: 83:a2:8e:db:20:ee:f8:f1:6b:d0:c8:59:85:83:ab:a4:ed:37: c1:a2:7e:f7:bc:33:d1:51:3f:01:dd:7a:3c:ea:28:9b:7e:62: 32:4d:cd:33:49:6e:95:cc:d6:a6:00:0a:b3:5f:cf:ad:fe:4a: d9:37:96:cc:3c:d7:9c:8b:eb:16:1d:24:e1:d7:c2:62:98:e7: 01:e1:07:c5:d1:e2:50:ee:34:eb:0d:ce:31:be:e0:db:60:dd: 19:60:4b:b1:00:20:ad:64:e6:5f:a4:20:f8:87:31:ee:de:7f: f7:68:de:6c:9a:da:eb:aa:ac:19:e9:7b:f6:fb:91:cb:26:c3: 6b:09:c6:3f:5b:25:fc:4b:1a:3c:62:34:74:04:c0:b3:45:c6: 08:c2:21:6e:bb:99:10:51:9d:ed:c7:35:3b:d1:e8:19:62:7a: 5e:22:9e:ac:00:e0:54:71:ba:30:ba:f6:6b:82:e4:fa:f3:aa: 94:74:2e:8a:c2:dc:6c:7a:75:1b:15:7e:3c:0b:cc:fb:f7:d3: 9c:93:5d:fd:45:15:ee:0c:6e:38:67:c4:e2:c5:7d:65:af:2e: 04:35:5f:aa -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPDKCjtQ2LEyU/0IWVdZs6nxX+YowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDI3MDAwMDAwWhcNMjQwNjAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YmM1YWNiZGQwMzNkOTAxOWI4MTljMmIzZTk1NDA0OTA2 Y2YxZTI2YWQ4NTE5MTFmNWJjYzA1ZjEwOTE1MDRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZXEoIyg2m1QH2kaAFoGmylkadCiZJW/sUiW1Pp4olqeAT kgDi5doXE/dC3SNJ6eBCc5z/cRAq4QwrioMAOrPMwlxdruzbxwF63c7To2ZJrx9q R+OEWrguDbH+pRImfjnVUR87ETxJfb8d6FwdrDxPx3sKvfMUumlnjf3Xzq7a+OXL 2kttISExmbCdI/Y3c0D6ODfL1OtDIhYZzBUgO/geXrztemSH1IT4ZRk2xvq8WpLB PUezLO2piseMjWySFkFwZxCRQFGDks7TnYiNCv3s+L0xVhk6YEgJZbU3RsRelqYS QxTvejgvSA+cyu0wyLfVwxBvaT422Wy2vowR865TAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUMHjN7oC7a5mBB+2KOdFi2F6IGXwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU4MzFmMzZmLTUwZGUtNDNkZi1iMWUzLWVlNmU4MzU5NTRlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQQjANBgkqhkiG9w0BAQsFAAOCAQEACkLWX/0earn5i93OiSbMmIPWN25+ zdiLHC0uy1Il9C/2U/Xhg6KO2yDu+PFr0MhZhYOrpO03waJ+97wz0VE/Ad16POoo m35iMk3NM0lulczWpgAKs1/Prf5K2TeWzDzXnIvrFh0k4dfCYpjnAeEHxdHiUO40 6w3OMb7g22DdGWBLsQAgrWTmX6Qg+Icx7t5/92jebJra66qsGel79vuRyybDawnG P1sl/EsaPGI0dATAs0XGCMIhbruZEFGd7cc1O9HoGWJ6XiKerADgVHG6MLr2a4Lk +vOqlHQuisLcbHp1GxV+PAvM+/fTnJNd/UUV7gxuOGfE4sV9Za8uBDVfqg== -----END CERTIFICATE-----Generated at Thu May 2 17:17:10 2024 by rpki-client on console-ams.rpki-client.org