$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/789e08e1-94bd-458e-ab49-16492240f27e.roa File: 789e08e1-94bd-458e-ab49-16492240f27e.roa (raw, json) Hash identifier: MdHsVIp0huVx6qUhzqSLFIFmpTx7Lb4ZC8iNPreaK+o= Subject key identifier: B3:B2:EE:EE:69:D6:F2:5D:09:ED:8D:5F:C7:2A:A9:B7:5F:28:21:42 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3E0DC10DB32445E880BB58F1CEA1A0C00ACCBADB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/789e08e1-94bd-458e-ab49-16492240f27e.roa Signing time: Thu 18 Apr 2024 00:00:00 +0000 ROA not before: Thu 18 Apr 2024 00:00:00 +0000 ROA not after: Thu 23 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 207.223.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:0d:c1:0d:b3:24:45:e8:80:bb:58:f1:ce:a1:a0:c0:0a:cc:ba:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:00:00 2024 GMT Not After : May 23 23:59:59 2024 GMT Subject: serialNumber=76982ad3ffaf81e545d4a90f870c11202544a21e22f6f1a655bd3d9cee28bd2a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:03:eb:72:48:43:ef:c7:4b:96:fe:8d:b1:13: a6:24:7d:10:8d:3c:c5:52:3f:09:8c:5e:47:50:ff: 0f:c1:f1:21:b0:33:8a:e3:f5:b4:09:9a:7a:4a:c7: 9d:0e:a1:67:46:5e:e0:4c:06:b9:7f:60:fe:40:e3: 42:db:7a:e0:6a:a8:04:f2:7a:40:13:cd:39:79:59: ea:ce:58:5f:a5:d7:3f:39:d4:6a:69:d5:1e:25:02: dc:c4:72:1b:50:77:e7:90:74:79:ef:ce:fe:54:72: 81:d1:dd:61:9b:63:3b:10:42:d1:0c:c3:5a:40:ac: 4a:11:e1:c0:4f:5f:a4:65:d8:3b:c7:b0:62:d9:05: 89:36:d5:7e:6c:a5:21:21:7b:2d:9f:c5:14:85:16: e0:4b:7c:7f:72:30:d7:10:26:70:43:6c:a6:ac:c1: 40:75:4a:f2:14:3a:a6:92:29:3e:6a:9f:3e:d3:70: 1c:ab:35:80:43:f3:ed:e9:94:fd:fe:04:97:a7:47: f0:54:11:67:40:88:e3:07:8e:c6:62:eb:38:61:62: 8a:1f:50:c8:49:4a:16:5a:64:35:11:c8:cf:40:41: 3d:39:5a:8f:83:2c:e5:03:67:69:0b:f4:63:b0:dd: 4e:5e:31:22:3f:67:2a:7f:78:0c:7a:79:66:24:f9: 78:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B2:EE:EE:69:D6:F2:5D:09:ED:8D:5F:C7:2A:A9:B7:5F:28:21:42 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/789e08e1-94bd-458e-ab49-16492240f27e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.223.192.0/19 Signature Algorithm: sha256WithRSAEncryption 74:57:c8:53:a9:f8:12:a1:9e:3e:51:9f:6b:cb:99:8f:05:ac: 0e:50:51:27:12:81:57:be:9a:55:49:02:3c:59:dd:fa:bc:f9: b2:f5:11:34:96:7f:e6:cb:8f:c8:cf:b5:15:b1:21:ee:67:d9: 1c:f4:d3:5e:d6:26:bf:d1:43:85:e3:69:41:81:be:e5:6a:29: 70:86:c6:75:a1:40:d6:e9:4d:ef:92:5a:f8:9b:31:97:f6:7d: 9c:e9:73:95:95:1b:89:1a:45:d1:32:f0:45:fb:52:c8:8e:a2: 50:14:88:ab:ce:4c:a3:c9:df:2b:92:2f:20:49:74:59:23:16: a3:dd:a1:d6:f7:4b:74:67:ca:a6:1f:09:36:c1:ad:94:db:61: ed:33:7f:20:10:cc:f0:04:ee:22:1e:a7:54:c9:86:29:9b:35: 6b:24:a5:3d:a8:0c:dc:30:f4:14:31:e1:4b:e2:8b:0f:a8:00: 21:6a:5e:a3:72:49:d1:45:fa:c3:e4:29:d5:8d:41:b9:ce:f1: be:94:8a:e7:78:19:e2:2f:07:19:79:d7:e1:83:33:69:df:9d: 15:9c:bf:06:a8:b8:9f:e0:66:9a:dc:23:f4:eb:28:c7:75:56: 4f:38:4b:01:02:ef:a7:2e:83:7d:f3:59:dd:72:ad:e8:45:d7: 33:e9:da:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPg3BDbMkReiAu1jxzqGgwArMutswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE4MDAwMDAwWhcNMjQwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3Njk4MmFkM2ZmYWY4MWU1NDVkNGE5MGY4NzBjMTEyMDI1 NDRhMjFlMjJmNmYxYTY1NWJkM2Q5Y2VlMjhiZDJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDA+tySEPvx0uW/o2xE6YkfRCNPMVSPwmMXkdQ/w/B8SGw M4rj9bQJmnpKx50OoWdGXuBMBrl/YP5A40LbeuBqqATyekATzTl5WerOWF+l1z85 1Gpp1R4lAtzEchtQd+eQdHnvzv5UcoHR3WGbYzsQQtEMw1pArEoR4cBPX6Rl2DvH sGLZBYk21X5spSEhey2fxRSFFuBLfH9yMNcQJnBDbKaswUB1SvIUOqaSKT5qnz7T cByrNYBD8+3plP3+BJenR/BUEWdAiOMHjsZi6zhhYoofUMhJShZaZDURyM9AQT05 Wo+DLOUDZ2kL9GOw3U5eMSI/Zyp/eAx6eWYk+XgRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUs7Lu7mnW8l0J7Y1fxyqpt18oIUIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4OWUwOGUxLTk0YmQtNDU4ZS1hYjQ5LTE2NDkyMjQwZjI3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXP38AwDQYJKoZIhvcNAQELBQADggEBAHRXyFOp+BKhnj5Rn2vLmY8FrA5Q UScSgVe+mlVJAjxZ3fq8+bL1ETSWf+bLj8jPtRWxIe5n2Rz0017WJr/RQ4XjaUGB vuVqKXCGxnWhQNbpTe+SWvibMZf2fZzpc5WVG4kaRdEy8EX7UsiOolAUiKvOTKPJ 3yuSLyBJdFkjFqPdodb3S3RnyqYfCTbBrZTbYe0zfyAQzPAE7iIep1TJhimbNWsk pT2oDNww9BQx4Uviiw+oACFqXqNySdFF+sPkKdWNQbnO8b6Uiud4GeIvBxl51+GD M2nfnRWcvwaouJ/gZprcI/TrKMd1Vk84SwEC76cug33zWd1yrehF1zPp2n8= -----END CERTIFICATE-----Generated at Thu May 2 12:23:08 2024 by rpki-client on console-ams.rpki-client.org