$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f1478bd-0368-4be8-84fb-de534059055f.roa File: 5f1478bd-0368-4be8-84fb-de534059055f.roa (raw, json) Hash identifier: UV3g3w4egSmzqooKgq/Ovs0+2GX9I6mc/anaiUwaJn4= Subject key identifier: BD:DA:65:4D:B6:CB:64:E2:8B:1A:44:71:27:FF:A3:41:83:6E:9A:30 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7125EC42B9E25E7DCB052FC51361ACC4FCD3D6C7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f1478bd-0368-4be8-84fb-de534059055f.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 162.250.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:25:ec:42:b9:e2:5e:7d:cb:05:2f:c5:13:61:ac:c4:fc:d3:d6:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=f46764264920939d773d32c3559e0b9668ef9f124661b65c5efbaf2736243d12, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:af:9a:1f:84:2d:6d:87:72:0f:26:0a:f5: 04:be:b9:8f:77:fe:5f:22:ae:6a:8a:fd:1e:c0:be: 8f:2a:1b:86:9e:7f:69:c5:1c:64:39:ce:00:a9:12: d2:84:67:20:43:9e:94:23:84:89:b8:6c:b9:57:ec: 7a:17:ea:87:a1:5e:50:2f:f3:dc:c6:a5:6a:c7:91: 31:01:1b:b1:82:ef:21:fe:69:dd:0c:55:76:9b:a4: 0b:6c:52:d5:73:90:f6:7e:d8:7c:4d:16:04:88:42: 59:f1:9e:2d:27:84:77:20:97:1d:3f:c7:f7:e5:21: 96:47:5e:5c:34:94:24:67:ad:e5:2a:9e:a2:51:cb: e3:72:30:34:35:ec:23:73:90:fd:27:8b:bc:6f:46: 2b:ba:f8:cb:80:cc:2e:0b:72:45:4e:04:0b:07:fa: 64:7d:5d:46:66:4e:c3:87:2c:36:d0:fb:9f:d0:3c: 60:b3:c2:98:92:4d:40:fe:78:bc:13:d9:00:97:fd: 37:28:e1:d7:f5:a4:f0:63:68:43:ee:ba:d4:15:df: ad:28:72:e4:43:66:3b:43:d0:89:95:de:ed:bd:00: 38:95:4f:70:cb:67:ff:7b:10:5b:fc:89:44:f3:3f: df:f1:44:6b:83:e1:79:90:f9:3d:fe:93:5c:20:c3: 4e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DA:65:4D:B6:CB:64:E2:8B:1A:44:71:27:FF:A3:41:83:6E:9A:30 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f1478bd-0368-4be8-84fb-de534059055f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.250.236.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:da:8b:cb:cc:20:bc:08:74:2e:f7:48:25:46:be:06:4b:45: c7:ce:e6:b9:be:a1:cc:60:5e:1b:76:29:4a:87:12:d7:47:36: 8a:27:8a:84:da:61:be:35:5b:8d:9f:16:c0:5d:6d:31:a2:b8: a4:0f:f1:f7:dd:aa:d0:df:ee:9f:18:eb:64:46:80:89:f1:37: 85:a4:6b:7c:24:dc:94:6a:3d:32:a4:ea:3d:be:0e:77:57:66: c2:8f:cf:40:a9:77:06:4b:26:8e:9f:5b:27:74:ae:be:7a:0d: 1e:4d:d5:03:fd:92:9d:c8:56:3c:d6:28:ea:0a:3f:fb:28:87: e2:39:08:8a:80:5e:c7:51:5f:f4:45:22:0d:01:40:71:ee:23: b1:08:f7:c6:14:8e:0a:f4:76:28:d1:3b:ad:a1:75:80:9d:d8: 77:bc:e1:6f:1d:ba:3d:9d:ea:4d:fc:ad:2e:1a:d2:bd:0d:c6: 8e:dd:2d:fd:70:a5:6b:04:10:0c:da:7b:ee:00:c1:dc:ae:11: 68:3b:40:58:f6:33:dc:4e:ff:eb:6b:31:61:65:7e:86:be:6d: 2c:44:76:3e:ce:cd:20:f1:f3:8b:ba:66:fe:b8:36:ae:18:92: 3d:2c:ee:d2:ed:e0:67:64:cc:90:bf:7f:0e:5e:46:d3:6b:af: 5f:71:fb:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcSXsQrniXn3LBS/FE2GsxPzT1scwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNDY3NjQyNjQ5MjA5MzlkNzczZDMyYzM1NTllMGI5NjY4 ZWY5ZjEyNDY2MWI2NWM1ZWZiYWYyNzM2MjQzZDEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCAK+aH4QtbYdyDyYK9QS+uY93/l8irmqK/R7Avo8qG4ae f2nFHGQ5zgCpEtKEZyBDnpQjhIm4bLlX7HoX6oehXlAv89zGpWrHkTEBG7GC7yH+ ad0MVXabpAtsUtVzkPZ+2HxNFgSIQlnxni0nhHcglx0/x/flIZZHXlw0lCRnreUq nqJRy+NyMDQ17CNzkP0ni7xvRiu6+MuAzC4LckVOBAsH+mR9XUZmTsOHLDbQ+5/Q PGCzwpiSTUD+eLwT2QCX/Tco4df1pPBjaEPuutQV360ocuRDZjtD0ImV3u29ADiV T3DLZ/97EFv8iUTzP9/xRGuD4XmQ+T3+k1wgw06vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvdplTbbLZOKLGkRxJ/+jQYNumjAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVmMTQ3OGJkLTAzNjgtNGJlOC04NGZiLWRlNTM0MDU5MDU1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKi+uwwDQYJKoZIhvcNAQELBQADggEBAC/ai8vMILwIdC73SCVGvgZLRcfO 5rm+ocxgXht2KUqHEtdHNoonioTaYb41W42fFsBdbTGiuKQP8ffdqtDf7p8Y62RG gInxN4Wka3wk3JRqPTKk6j2+DndXZsKPz0CpdwZLJo6fWyd0rr56DR5N1QP9kp3I VjzWKOoKP/soh+I5CIqAXsdRX/RFIg0BQHHuI7EI98YUjgr0dijRO62hdYCd2He8 4W8duj2d6k38rS4a0r0Nxo7dLf1wpWsEEAzae+4AwdyuEWg7QFj2M9xO/+trMWFl foa+bSxEdj7OzSDx84u6Zv64Nq4Ykj0s7tLt4GdkzJC/fw5eRtNrr19x+8I= -----END CERTIFICATE-----Generated at Thu May 9 01:25:31 2024 by rpki-client on console-fra.rpki-client.org