$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68598716-8ef3-4659-8c2a-ea94e7225c46.roa File: 68598716-8ef3-4659-8c2a-ea94e7225c46.roa (raw, json) Hash identifier: I1tRZSYO4t8+hRvWmosDh63jqnovHdk50GQSYIZ5c2E= Subject key identifier: 8E:98:52:6A:0E:FF:BC:45:FF:FD:99:E9:99:FC:FC:1A:40:BE:5F:BE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 644A095FC07E183BFA2720DBC55C6A231C0A8943 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68598716-8ef3-4659-8c2a-ea94e7225c46.roa Signing time: Fri 12 Apr 2024 00:00:00 +0000 ROA not before: Fri 12 Apr 2024 00:00:00 +0000 ROA not after: Fri 17 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 40.167.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:4a:09:5f:c0:7e:18:3b:fa:27:20:db:c5:5c:6a:23:1c:0a:89:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:00:00 2024 GMT Not After : May 17 23:59:59 2024 GMT Subject: serialNumber=86d7729131b2466124a7ec2232b7dcf9d708bb59e6c118b9866d4fa33fe89b4c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f1:f4:fe:4e:38:2d:12:03:c1:4a:c0:b1:31: 69:58:ae:3c:1f:cd:71:25:1c:ed:f7:c8:35:f7:e4: fa:4b:69:84:08:7c:3f:64:e3:63:33:07:a3:67:3d: 78:93:6d:8a:72:4c:00:a8:29:4f:8f:ca:de:a2:60: 98:f1:ba:d9:67:2a:cf:e3:77:a7:7d:cd:f3:78:a7: a2:bb:d8:fa:09:dc:6a:28:d1:06:51:1a:8a:5d:76: 72:76:41:1a:23:9c:03:ad:93:2e:2d:fb:98:3f:8b: cd:b4:91:7b:4e:ae:16:74:97:43:66:d5:d5:df:b9: 36:af:fd:10:4d:34:85:0f:11:1f:15:bd:ae:f0:9d: 27:52:fb:f2:ab:46:4f:78:cd:d7:88:6e:ea:8b:98: 33:14:ad:c6:3a:ae:5a:69:d8:6d:0a:bf:7c:85:32: 77:2e:b5:a1:7a:be:e8:52:4a:ef:61:3b:62:91:50: d7:55:b1:bf:da:1b:06:a5:c9:53:06:44:f1:33:db: a7:c5:cc:10:b6:61:2c:6d:df:22:b3:a4:53:7f:a5: db:52:53:93:99:43:1f:20:bf:4b:b4:08:54:8e:a1: 05:8b:e1:aa:04:c4:ef:2c:b4:1d:3f:aa:6b:dd:95: 4d:c9:34:71:e2:04:3f:92:70:c6:ea:3a:8f:b0:2e: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:98:52:6A:0E:FF:BC:45:FF:FD:99:E9:99:FC:FC:1A:40:BE:5F:BE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68598716-8ef3-4659-8c2a-ea94e7225c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.167.0.0/16 Signature Algorithm: sha256WithRSAEncryption b3:3f:13:9f:07:ad:af:07:9a:f3:74:91:3c:53:c1:b6:1a:52: 95:1f:6a:b7:49:63:cb:b5:98:2e:cf:16:0f:48:64:f4:fd:bd: 66:a4:94:61:61:21:ac:a8:b6:92:57:89:4a:a0:d9:48:d2:81: 9c:16:ba:a0:2b:a6:98:17:c5:63:dc:0d:e3:9d:ba:74:ca:8c: 07:db:00:ee:fe:76:c3:ba:6c:e6:7f:2b:f2:8e:ba:17:4d:0f: b5:b1:55:41:e5:83:c1:a4:33:70:bf:98:7f:d2:bd:94:4b:82: f2:d9:51:5a:1f:96:97:2d:6a:e8:f2:36:bd:21:91:e7:3b:6b: cf:b0:06:68:b6:69:db:4e:7a:9a:bc:a6:76:3c:b3:5d:41:b7: 70:51:d8:da:6b:bb:54:6b:ab:14:cc:f5:b6:0e:79:bc:3b:fb: ef:0b:ce:7b:c5:46:33:ac:31:f0:59:dc:a5:db:39:42:91:a4: 51:76:a4:d9:59:61:c7:54:76:35:28:a2:be:4a:73:12:73:3f: 9f:5d:a6:54:d8:6f:9a:b9:82:41:b8:ea:03:ad:75:79:22:55: a3:88:fe:8d:4c:e4:21:3f:f8:b7:f9:f9:d2:1d:c7:d0:7f:cf: 0d:c8:d7:06:e5:4e:a5:6d:a2:af:b2:f5:6c:0b:9e:3b:ff:74: 1d:91:9a:5f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZEoJX8B+GDv6JyDbxVxqIxwKiUMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEyMDAwMDAwWhcNMjQwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NmQ3NzI5MTMxYjI0NjYxMjRhN2VjMjIzMmI3ZGNmOWQ3 MDhiYjU5ZTZjMTE4Yjk4NjZkNGZhMzNmZTg5YjRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCK8fT+TjgtEgPBSsCxMWlYrjwfzXElHO33yDX35PpLaYQI fD9k42MzB6NnPXiTbYpyTACoKU+Pyt6iYJjxutlnKs/jd6d9zfN4p6K72PoJ3Goo 0QZRGopddnJ2QRojnAOtky4t+5g/i820kXtOrhZ0l0Nm1dXfuTav/RBNNIUPER8V va7wnSdS+/KrRk94zdeIbuqLmDMUrcY6rlpp2G0Kv3yFMncutaF6vuhSSu9hO2KR UNdVsb/aGwalyVMGRPEz26fFzBC2YSxt3yKzpFN/pdtSU5OZQx8gv0u0CFSOoQWL 4aoExO8stB0/qmvdlU3JNHHiBD+ScMbqOo+wLg4bAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUjphSag7/vEX//Znpmfz8GkC+X74wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4NTk4NzE2LThlZjMtNDY1OS04YzJhLWVhOTRlNzIyNWM0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAopzANBgkqhkiG9w0BAQsFAAOCAQEAsz8Tnwetrwea83SRPFPBthpSlR9q t0ljy7WYLs8WD0hk9P29ZqSUYWEhrKi2kleJSqDZSNKBnBa6oCummBfFY9wN4526 dMqMB9sA7v52w7ps5n8r8o66F00PtbFVQeWDwaQzcL+Yf9K9lEuC8tlRWh+Wly1q 6PI2vSGR5ztrz7AGaLZp2056mrymdjyzXUG3cFHY2mu7VGurFMz1tg55vDv77wvO e8VGM6wx8Fncpds5QpGkUXak2Vlhx1R2NSiivkpzEnM/n12mVNhvmrmCQbjqA611 eSJVo4j+jUzkIT/4t/n50h3H0H/PDcjXBuVOpW2ir7L1bAueO/90HZGaXw== -----END CERTIFICATE-----Generated at Fri Apr 26 00:40:19 2024 by rpki-client on console-fra.rpki-client.org