$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75265645-c36d-4ced-ba03-54398c227c9d.roa File: 75265645-c36d-4ced-ba03-54398c227c9d.roa (raw, json) Hash identifier: H11vyFXva3FJAoOqhXCVI0Wu8uCLDPubQQgWdwW1HPs= Subject key identifier: CA:B2:67:4F:86:31:D2:F6:D4:53:27:26:B4:2D:5B:66:0F:48:13:F3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5335CA8D69B68885C6F0013F1C8945E2014A99EB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75265645-c36d-4ced-ba03-54398c227c9d.roa Signing time: Sat 20 Apr 2024 00:00:00 +0000 ROA not before: Sat 20 Apr 2024 00:00:00 +0000 ROA not after: Sat 25 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 16.207.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:35:ca:8d:69:b6:88:85:c6:f0:01:3f:1c:89:45:e2:01:4a:99:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 20 00:00:00 2024 GMT Not After : May 25 23:59:59 2024 GMT Subject: serialNumber=586b6dcce7f7eb2f9f39731a485957c17064c076ab79c884a494ef21c67991fe, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b5:42:83:32:a5:9c:ed:72:d0:58:c7:11:34: 03:10:cd:c6:8e:2e:e4:a6:af:64:10:1a:e5:e3:a5: b3:3a:ec:dc:da:b2:6e:09:a5:fa:d3:16:e6:8c:76: ef:46:c5:5b:65:9c:ee:64:1d:e4:94:5b:37:e1:7b: ee:dd:33:1e:e4:0b:62:3d:06:58:1d:77:ff:bf:c6: 5c:71:bd:0c:b2:26:73:81:08:32:75:51:28:9a:e2: e4:c5:b8:c5:6a:9b:21:d5:bd:33:59:f5:79:be:59: 12:b3:d1:2d:a0:53:83:a5:f9:c0:3a:25:8c:77:72: 59:20:35:7c:be:6f:d0:dd:1b:9e:3b:87:aa:9e:5f: f5:ef:62:43:c2:2b:ad:6d:c0:3a:6c:14:a3:5f:d2: 06:12:6e:b7:8b:0a:ba:41:f2:a1:0a:98:58:01:ca: c5:82:c7:f6:de:0f:1d:28:b8:61:31:d6:5b:b7:df: 01:ea:70:43:df:9e:99:04:ee:b7:8c:ca:52:4e:9d: 24:04:6b:92:20:4e:c4:56:60:9e:c0:f4:51:ad:18: 7e:97:39:98:3a:76:ad:1e:04:26:70:43:6f:17:71: af:fc:fd:7e:36:38:5d:04:dd:cd:31:e4:56:f5:33: 09:d9:fe:6e:c7:b6:5c:73:18:e2:b1:f9:fd:70:cb: d2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B2:67:4F:86:31:D2:F6:D4:53:27:26:B4:2D:5B:66:0F:48:13:F3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75265645-c36d-4ced-ba03-54398c227c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.207.0.0/16 Signature Algorithm: sha256WithRSAEncryption 50:63:8d:58:09:e1:17:ea:18:b8:57:df:1d:23:89:49:89:c9: 76:95:2e:7e:9b:d9:69:01:a1:86:de:eb:d6:31:f1:17:1e:f4: 26:ac:cd:a5:93:c2:61:0d:7c:a5:96:7c:0e:8b:a9:62:f7:50: f1:1e:f1:ff:3f:0f:4f:79:b6:62:b0:63:f8:55:8f:d7:56:26: e1:50:9e:31:8e:d5:e6:72:41:2c:4f:d8:f2:d5:a7:16:a9:2e: 17:50:0f:75:12:f1:20:76:f8:91:0c:3e:39:49:00:5f:58:99: 09:e1:4b:d0:49:81:98:c2:98:1c:80:c5:fa:1d:58:b3:5f:79: 8e:ce:39:82:bd:d9:46:d7:b7:5a:01:ce:57:d5:ed:75:10:8e: 4f:02:8b:b5:bb:99:c2:10:5c:94:e3:01:1a:0d:42:ae:22:a7: e3:88:33:e1:6e:23:19:33:f7:f9:25:e9:50:08:e9:78:c5:e6: c1:db:45:5b:3a:94:2b:4c:ae:8c:a6:6c:9c:7c:e1:ff:79:c9: 1d:87:14:bf:8d:61:66:e8:00:3b:15:98:8f:c9:24:8d:89:a8: 1e:54:11:50:2b:53:30:22:03:cd:e6:e3:eb:a0:a8:62:93:09: b3:b3:07:78:8b:e5:f3:87:62:8b:e6:d4:14:91:74:f2:94:16: 38:26:bf:dc -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUzXKjWm2iIXG8AE/HIlF4gFKmeswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDIwMDAwMDAwWhcNMjQwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODZiNmRjY2U3ZjdlYjJmOWYzOTczMWE0ODU5NTdjMTcw NjRjMDc2YWI3OWM4ODRhNDk0ZWYyMWM2Nzk5MWZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVtUKDMqWc7XLQWMcRNAMQzcaOLuSmr2QQGuXjpbM67Nza sm4JpfrTFuaMdu9GxVtlnO5kHeSUWzfhe+7dMx7kC2I9Blgdd/+/xlxxvQyyJnOB CDJ1USia4uTFuMVqmyHVvTNZ9Xm+WRKz0S2gU4Ol+cA6JYx3clkgNXy+b9DdG547 h6qeX/XvYkPCK61twDpsFKNf0gYSbreLCrpB8qEKmFgBysWCx/beDx0ouGEx1lu3 3wHqcEPfnpkE7reMylJOnSQEa5IgTsRWYJ7A9FGtGH6XOZg6dq0eBCZwQ28Xca/8 /X42OF0E3c0x5Fb1MwnZ/m7HtlxzGOKx+f1wy9JXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUyrJnT4Yx0vbUUycmtC1bZg9IE/MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1MjY1NjQ1LWMzNmQtNGNlZC1iYTAzLTU0Mzk4YzIyN2M5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQzzANBgkqhkiG9w0BAQsFAAOCAQEAUGONWAnhF+oYuFffHSOJSYnJdpUu fpvZaQGhht7r1jHxFx70JqzNpZPCYQ18pZZ8DoupYvdQ8R7x/z8PT3m2YrBj+FWP 11Ym4VCeMY7V5nJBLE/Y8tWnFqkuF1APdRLxIHb4kQw+OUkAX1iZCeFL0EmBmMKY HIDF+h1Ys195js45gr3ZRte3WgHOV9XtdRCOTwKLtbuZwhBclOMBGg1CriKn44gz 4W4jGTP3+SXpUAjpeMXmwdtFWzqUK0yujKZsnHzh/3nJHYcUv41hZugAOxWYj8kk jYmoHlQRUCtTMCIDzebj66CoYpMJs7MHeIvl84dii+bUFJF08pQWOCa/3A== -----END CERTIFICATE-----Generated at Thu May 9 01:25:34 2024 by rpki-client on console-fra.rpki-client.org