$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d8a1b36-3855-4b0a-8d07-ec0c2baf4fe8.roa File: 6d8a1b36-3855-4b0a-8d07-ec0c2baf4fe8.roa (raw, json) Hash identifier: wntXe+bZfGLELiA3DdGdJtJx7ukeM1nkRqyv9w0q9W0= Subject key identifier: D6:8E:8C:31:E5:63:D8:C8:A8:7D:E6:A5:DD:7A:7D:89:67:3E:03:CA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E291E0A4247FEFDB251E40DFC3E92271C601DDD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d8a1b36-3855-4b0a-8d07-ec0c2baf4fe8.roa Signing time: Fri 12 Apr 2024 00:00:00 +0000 ROA not before: Fri 12 Apr 2024 00:00:00 +0000 ROA not after: Fri 17 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 35.28.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:29:1e:0a:42:47:fe:fd:b2:51:e4:0d:fc:3e:92:27:1c:60:1d:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:00:00 2024 GMT Not After : May 17 23:59:59 2024 GMT Subject: serialNumber=414fed1d2717d48341aefd92f75f5690606cf0a007b4372f591ccb79432e064e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:6d:a9:d6:13:b2:b7:41:7e:87:b0:47:10: d9:75:e0:1d:e1:29:c0:06:45:52:23:5f:4e:ee:64: e9:0a:ad:c2:2a:ce:4a:71:f2:12:6e:b7:e5:9b:45: 58:a5:0e:b9:f3:b7:58:00:28:89:11:b1:b4:ee:05: 11:b0:e4:1d:51:bf:b1:ce:4e:16:f1:24:57:cd:58: 77:32:5e:48:da:32:0e:a7:c6:ac:2a:76:57:e4:d9: 29:dc:76:dd:ba:71:f9:f8:95:21:3f:38:73:56:a9: 9b:48:81:5e:6d:00:66:00:5c:d7:64:9b:b6:bb:35: 95:c4:7d:af:11:e4:00:26:f8:a6:95:62:4e:13:16: 6f:93:0c:b9:e6:8c:63:e8:71:f8:c0:db:d5:36:c9: e8:02:5a:36:ab:0d:9f:d2:8e:5b:ad:0c:07:69:18: df:39:f7:3e:45:8d:e6:47:f5:54:7c:bf:dd:f8:23: ae:35:da:85:f8:38:1d:1e:01:3e:0f:80:ab:90:46: 7c:45:a3:6d:cd:16:17:62:1e:25:18:86:e7:43:36: d6:3e:3b:51:fc:89:8e:1d:f1:fe:e8:b5:af:60:7a: b3:a6:05:f8:d4:97:f8:9c:b5:f5:c7:4e:56:7d:c8: eb:15:88:8b:a6:8b:9e:4d:c8:bd:06:7d:74:a7:61: 10:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8E:8C:31:E5:63:D8:C8:A8:7D:E6:A5:DD:7A:7D:89:67:3E:03:CA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d8a1b36-3855-4b0a-8d07-ec0c2baf4fe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.28.0.0/15 Signature Algorithm: sha256WithRSAEncryption 1a:28:fa:e7:30:b1:ef:54:6b:9e:25:4e:de:ac:5c:52:12:d0: cf:4c:3f:52:db:b3:a0:30:72:f9:b9:34:f1:50:fb:a7:68:48: a1:9c:e7:ae:4e:9b:7a:46:49:ad:b0:d7:bd:7b:11:2a:0b:82: 2e:a3:ff:af:78:a7:5c:0f:25:6d:3c:04:05:43:fd:ad:3c:ef: 00:ea:9e:3f:82:ad:56:c4:ed:e3:6c:b4:30:e1:62:1e:45:dc: 61:11:05:65:da:8c:94:61:ab:a7:c2:3d:9c:41:c2:f6:83:3e: c7:c2:c0:41:8e:aa:b6:ab:86:7f:38:13:87:3b:12:1a:ba:cb: 93:2a:cb:e5:1b:ac:56:73:e1:cb:1b:b6:21:4b:fb:3e:39:9f: 62:27:56:17:01:26:24:3d:5f:3f:d9:40:ba:7e:7f:f6:7e:31: 94:ee:a1:98:88:11:a9:28:87:2f:1e:3a:a7:00:aa:68:9a:b3: b1:c2:0f:c1:1a:dc:cc:d7:32:1b:17:48:c4:b8:c9:a5:73:ed: c6:aa:0b:99:3e:ce:5e:48:aa:e6:10:c4:21:cb:73:6a:2d:31: 30:fe:3f:78:91:cb:82:f2:a9:e9:27:63:97:96:45:4a:bb:03: 87:98:30:3b:d8:9f:44:82:ee:43:d7:b8:9c:be:a0:56:d1:92: 6d:ab:19:2f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXikeCkJH/v2yUeQN/D6SJxxgHd0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEyMDAwMDAwWhcNMjQwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTRmZWQxZDI3MTdkNDgzNDFhZWZkOTJmNzVmNTY5MDYw NmNmMGEwMDdiNDM3MmY1OTFjY2I3OTQzMmUwNjRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvgG2p1hOyt0F+h7BHENl14B3hKcAGRVIjX07uZOkKrcIq zkpx8hJut+WbRVilDrnzt1gAKIkRsbTuBRGw5B1Rv7HOThbxJFfNWHcyXkjaMg6n xqwqdlfk2Sncdt26cfn4lSE/OHNWqZtIgV5tAGYAXNdkm7a7NZXEfa8R5AAm+KaV Yk4TFm+TDLnmjGPocfjA29U2yegCWjarDZ/SjlutDAdpGN859z5FjeZH9VR8v934 I6412oX4OB0eAT4PgKuQRnxFo23NFhdiHiUYhudDNtY+O1H8iY4d8f7ota9gerOm BfjUl/ictfXHTlZ9yOsViIumi55NyL0GfXSnYRAfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU1o6MMeVj2Miofeal3Xp9iWc+A8owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZkOGExYjM2LTM4NTUtNGIwYS04ZDA3LWVjMGMyYmFmNGZlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEjHDANBgkqhkiG9w0BAQsFAAOCAQEAGij65zCx71RrniVO3qxcUhLQz0w/ UtuzoDBy+bk08VD7p2hIoZznrk6bekZJrbDXvXsRKguCLqP/r3inXA8lbTwEBUP9 rTzvAOqeP4KtVsTt42y0MOFiHkXcYREFZdqMlGGrp8I9nEHC9oM+x8LAQY6qtquG fzgThzsSGrrLkyrL5RusVnPhyxu2IUv7PjmfYidWFwEmJD1fP9lAun5/9n4xlO6h mIgRqSiHLx46pwCqaJqzscIPwRrczNcyGxdIxLjJpXPtxqoLmT7OXkiq5hDEIctz ai0xMP4/eJHLgvKp6Sdjl5ZFSrsDh5gwO9ifRILuQ9e4nL6gVtGSbasZLw== -----END CERTIFICATE-----Generated at Fri May 3 01:27:58 2024 by rpki-client on console-fra.rpki-client.org