$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72cd03e2-58d5-4b71-8356-410af74040dc.roa File: 72cd03e2-58d5-4b71-8356-410af74040dc.roa (raw, json) Hash identifier: PjPtAjbwjnexvTJ/rRZjAeX+LXlM2ZcUzrHT61e+krw= Subject key identifier: 52:EE:04:AC:97:44:3E:37:86:CB:07:2A:BE:D1:82:2C:95:F8:65:34 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6FA16953D4A6B8C0149AED7FD54BBE86F5C7B319 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72cd03e2-58d5-4b71-8356-410af74040dc.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 16.165.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a1:69:53:d4:a6:b8:c0:14:9a:ed:7f:d5:4b:be:86:f5:c7:b3:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=df72b92f5a7c55ead7e5e56c65c648bb8af6bd3ecf837c80f12329e94f56516b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:af:2e:a4:dc:58:63:30:cf:5b:da:17:7f:8e: b9:92:18:cc:5a:db:46:d2:23:5f:63:9f:57:ef:da: b2:04:65:aa:30:bb:e9:9d:53:33:9f:66:4f:ba:5e: d6:37:e2:0c:6b:0f:e4:5b:2a:b7:32:ae:87:06:21: ad:a4:e8:ca:bc:31:84:93:01:00:10:e6:a6:39:dd: 7d:92:f3:d2:b4:5e:e1:b4:84:cf:c6:12:2c:39:17: 6b:3d:a6:74:98:c2:9b:28:ac:d9:13:15:4b:ae:47: eb:5a:5c:2a:45:92:05:31:6e:b8:04:57:a1:67:77: a6:56:dc:5f:8e:6f:ab:8e:fd:f3:d5:a6:90:9d:c9: c6:8b:b5:c3:5f:86:c5:e7:0e:2b:56:1f:b3:f6:47: 04:98:d8:2f:e7:76:25:ed:48:f3:4e:8b:80:96:70: 04:2f:66:26:45:b8:52:3d:aa:ab:6e:de:51:26:9f: 2a:0e:55:34:c3:02:71:a1:50:13:d4:b9:87:1c:5f: eb:77:4e:57:47:f7:88:24:ee:44:d9:f8:c2:41:96: 28:87:e2:33:60:09:21:78:4c:2b:45:33:b6:d8:0a: 7f:c8:19:7c:21:d0:24:95:31:62:d4:39:d0:b3:39: 55:fc:53:31:e1:d5:e2:50:65:d4:c5:9e:1a:de:a8: e3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EE:04:AC:97:44:3E:37:86:CB:07:2A:BE:D1:82:2C:95:F8:65:34 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72cd03e2-58d5-4b71-8356-410af74040dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.165.0.0/16 Signature Algorithm: sha256WithRSAEncryption b8:d1:28:eb:85:c9:93:84:73:7d:40:56:ed:b2:28:55:87:48: 57:49:5f:2f:2a:6c:4b:88:a7:6c:1f:95:48:75:79:7c:cd:f7: 51:17:e8:65:f7:ae:4f:55:dd:ef:53:f2:8a:45:3f:2b:6e:9c: ca:94:90:52:4a:18:29:38:bc:81:34:51:1a:e5:71:ea:07:81: ba:63:b7:18:3f:c7:87:95:db:b7:e2:27:c7:67:54:67:18:4b: 9f:3d:94:f1:36:48:43:eb:b5:f3:6d:ac:ba:a8:d4:cb:21:09: 4d:dd:8a:04:c1:3b:3c:63:85:69:29:96:34:3d:97:0a:e9:66: 84:65:27:5a:fb:9a:62:3a:06:26:6f:17:0c:6a:ae:ad:d7:87: 8e:97:80:45:a3:d5:0e:a9:bc:f4:af:b4:0f:75:d7:97:bf:0a: 11:b3:3e:23:d1:56:aa:fc:39:07:a1:89:20:3a:0f:39:c9:15: 2c:d8:7f:81:f5:ca:76:36:38:60:b8:90:c6:0f:87:9d:ab:75: 83:b8:f0:5f:7d:2c:19:8b:a7:98:c4:d2:fb:b9:c0:71:89:f0: 00:0a:44:9a:fd:3d:6d:fc:c8:e9:cd:62:6c:18:1d:61:d9:78: 68:3c:cf:c0:2f:2a:51:e3:02:d2:a4:e7:5f:55:5c:b2:02:9a: 21:90:39:a9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUb6FpU9SmuMAUmu1/1Uu+hvXHsxkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjcyYjkyZjVhN2M1NWVhZDdlNWU1NmM2NWM2NDhiYjhh ZjZiZDNlY2Y4MzdjODBmMTIzMjllOTRmNTY1MTZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD5ry6k3FhjMM9b2hd/jrmSGMxa20bSI19jn1fv2rIEZaow u+mdUzOfZk+6XtY34gxrD+RbKrcyrocGIa2k6Mq8MYSTAQAQ5qY53X2S89K0XuG0 hM/GEiw5F2s9pnSYwpsorNkTFUuuR+taXCpFkgUxbrgEV6Fnd6ZW3F+Ob6uO/fPV ppCdycaLtcNfhsXnDitWH7P2RwSY2C/ndiXtSPNOi4CWcAQvZiZFuFI9qqtu3lEm nyoOVTTDAnGhUBPUuYccX+t3TldH94gk7kTZ+MJBliiH4jNgCSF4TCtFM7bYCn/I GXwh0CSVMWLUOdCzOVX8UzHh1eJQZdTFnhreqONtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUUu4ErJdEPjeGywcqvtGCLJX4ZTQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcyY2QwM2UyLTU4ZDUtNGI3MS04MzU2LTQxMGFmNzQwNDBkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQpTANBgkqhkiG9w0BAQsFAAOCAQEAuNEo64XJk4RzfUBW7bIoVYdIV0lf LypsS4inbB+VSHV5fM33URfoZfeuT1Xd71PyikU/K26cypSQUkoYKTi8gTRRGuVx 6geBumO3GD/Hh5Xbt+Inx2dUZxhLnz2U8TZIQ+u1822suqjUyyEJTd2KBME7PGOF aSmWND2XCulmhGUnWvuaYjoGJm8XDGqurdeHjpeARaPVDqm89K+0D3XXl78KEbM+ I9FWqvw5B6GJIDoPOckVLNh/gfXKdjY4YLiQxg+Hnat1g7jwX30sGYunmMTS+7nA cYnwAApEmv09bfzI6c1ibBgdYdl4aDzPwC8qUeMC0qTnX1VcsgKaIZA5qQ== -----END CERTIFICATE-----Generated at Thu May 2 08:51:03 2024 by rpki-client on console-fra.rpki-client.org