$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76f7de8a-b4fa-4433-a358-37d13c6b3a4f.roa File: 76f7de8a-b4fa-4433-a358-37d13c6b3a4f.roa (raw, json) Hash identifier: gQXLUO+UKBnbmz6qNMKxD1Ih9oCJz3aTnLypfZ8YTx0= Subject key identifier: 36:DC:46:56:4F:64:21:D4:F8:E7:8B:68:B5:F4:6C:37:92:CD:93:44 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 58DCD6B1EDBDCC002B749E9850A93893A4053681 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76f7de8a-b4fa-4433-a358-37d13c6b3a4f.roa Signing time: Thu 18 Apr 2024 00:00:00 +0000 ROA not before: Thu 18 Apr 2024 00:00:00 +0000 ROA not after: Thu 23 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 206.217.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:dc:d6:b1:ed:bd:cc:00:2b:74:9e:98:50:a9:38:93:a4:05:36:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:00:00 2024 GMT Not After : May 23 23:59:59 2024 GMT Subject: serialNumber=16a222f93c5f5561884ad3ae90e49c83859082b5a214f20d51926683f25e7125, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:fd:b2:8c:d2:d8:a2:c4:f5:8b:d4:dd:c4: 19:e5:f4:ea:3c:9b:65:0a:a6:02:bd:a8:4e:5e:a9: ee:a7:be:85:36:ab:ab:34:05:af:2d:f3:43:2e:e2: c2:2f:0a:f7:82:c3:67:2e:77:ea:50:43:e9:14:66: bc:20:32:35:43:6e:59:2c:4f:41:fb:e1:e8:2a:9d: c2:bd:f9:c6:2c:62:97:81:32:7a:b7:1e:eb:8e:e0: 55:06:57:ab:cb:de:3f:ef:0f:1c:8c:b4:11:38:da: 48:ca:27:39:5a:e2:8a:f0:83:4a:3f:21:1c:3f:c4: 73:e0:dd:28:a0:6b:03:21:56:a3:be:1a:ea:69:2c: 98:ff:13:62:c9:dd:94:9b:6a:59:52:8c:0b:fa:0d: ab:f0:63:12:3f:79:ab:32:34:d3:81:09:fa:ac:38: db:af:43:52:d7:ea:7b:b2:6a:7b:65:ae:f9:e7:90: a7:fe:63:54:cb:bf:e0:7b:3a:cf:5b:3f:d6:84:bd: 64:01:2a:e0:95:46:30:24:30:e4:23:77:5c:e9:e7: 83:12:51:d1:3b:64:f3:0f:d4:3c:e2:35:88:b3:fc: 76:e0:26:d2:00:70:15:78:53:c9:c4:17:73:21:93: 7a:78:2b:a1:98:f8:b5:12:48:1e:1c:40:76:b1:4d: 71:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DC:46:56:4F:64:21:D4:F8:E7:8B:68:B5:F4:6C:37:92:CD:93:44 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76f7de8a-b4fa-4433-a358-37d13c6b3a4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.217.32.0/19 Signature Algorithm: sha256WithRSAEncryption 11:85:84:f7:8c:6f:0c:a2:eb:fc:11:34:7a:76:7b:76:88:a3: 02:64:11:a4:10:61:f9:57:17:99:57:af:50:03:0e:3f:03:b6: 84:f7:e5:52:53:bf:d9:b5:9b:9d:dc:b3:d9:dd:99:1e:30:0a: dd:6e:cf:0f:5c:f6:b8:43:ad:80:53:ca:9c:e8:44:fa:44:51: 2e:30:4a:df:96:df:ad:2f:90:23:e8:db:df:83:32:25:48:3c: 9b:78:c5:fe:b1:28:cb:d5:fb:ec:cb:36:02:77:db:99:59:6a: 22:d8:13:a4:a9:1c:9d:cc:5b:88:1f:00:29:a5:fe:32:25:9a: c4:a9:8b:97:87:7c:57:50:c6:23:d6:ea:dc:72:8d:88:35:d5: cc:51:e4:45:69:d3:a6:47:28:b8:b4:30:48:c2:1e:af:f6:02: 4f:db:23:f2:9f:08:a3:b5:98:d5:d5:c0:11:86:65:5c:8f:87: 1d:88:95:25:65:9a:bd:94:8b:ae:13:db:64:8d:f4:9a:8a:f7: 07:39:58:92:0e:cb:ce:7e:af:74:84:72:83:9b:45:38:59:32: 33:4a:b1:79:7e:e4:7f:6a:55:43:74:15:22:c0:66:55:7a:c7: ef:99:ff:79:b4:1e:2c:53:ed:e8:d5:a3:3e:2f:43:9f:05:a2: 6f:cc:f6:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWNzWse29zAArdJ6YUKk4k6QFNoEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE4MDAwMDAwWhcNMjQwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNmEyMjJmOTNjNWY1NTYxODg0YWQzYWU5MGU0OWM4Mzg1 OTA4MmI1YTIxNGYyMGQ1MTkyNjY4M2YyNWU3MTI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCg8f2yjNLYosT1i9TdxBnl9Oo8m2UKpgK9qE5eqe6nvoU2 q6s0Ba8t80Mu4sIvCveCw2cud+pQQ+kUZrwgMjVDblksT0H74egqncK9+cYsYpeB Mnq3HuuO4FUGV6vL3j/vDxyMtBE42kjKJzla4orwg0o/IRw/xHPg3SigawMhVqO+ GuppLJj/E2LJ3ZSballSjAv6DavwYxI/easyNNOBCfqsONuvQ1LX6nuyantlrvnn kKf+Y1TLv+B7Os9bP9aEvWQBKuCVRjAkMOQjd1zp54MSUdE7ZPMP1DziNYiz/Hbg JtIAcBV4U8nEF3Mhk3p4K6GY+LUSSB4cQHaxTXFXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNtxGVk9kIdT454totfRsN5LNk0QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc2ZjdkZThhLWI0ZmEtNDQzMy1hMzU4LTM3ZDEzYzZiM2E0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXO2SAwDQYJKoZIhvcNAQELBQADggEBABGFhPeMbwyi6/wRNHp2e3aIowJk EaQQYflXF5lXr1ADDj8DtoT35VJTv9m1m53cs9ndmR4wCt1uzw9c9rhDrYBTypzo RPpEUS4wSt+W360vkCPo29+DMiVIPJt4xf6xKMvV++zLNgJ325lZaiLYE6SpHJ3M W4gfACml/jIlmsSpi5eHfFdQxiPW6txyjYg11cxR5EVp06ZHKLi0MEjCHq/2Ak/b I/KfCKO1mNXVwBGGZVyPhx2IlSVlmr2Ui64T22SN9JqK9wc5WJIOy85+r3SEcoOb RThZMjNKsXl+5H9qVUN0FSLAZlV6x++Z/3m0HixT7ejVoz4vQ58Fom/M9rY= -----END CERTIFICATE-----Generated at Thu May 9 01:26:17 2024 by rpki-client on console-ams.rpki-client.org