$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78f5b473-02bd-4a3a-a396-ce1267992825.roa File: 78f5b473-02bd-4a3a-a396-ce1267992825.roa (raw, json) Hash identifier: r3MRb/uM9r2oRTniXFEIA/eGZEzfjvTmrAkSSvpOu1A= Subject key identifier: 24:84:68:D1:CA:28:1B:F4:32:09:E5:C4:F9:FE:95:BE:CC:39:8D:D9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6F3131EC0972C457878E88EFEAD2305B152CF825 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78f5b473-02bd-4a3a-a396-ce1267992825.roa Signing time: Wed 10 Apr 2024 00:00:00 +0000 ROA not before: Wed 10 Apr 2024 00:00:00 +0000 ROA not after: Wed 15 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 56.230.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:31:31:ec:09:72:c4:57:87:8e:88:ef:ea:d2:30:5b:15:2c:f8:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 10 00:00:00 2024 GMT Not After : May 15 23:59:59 2024 GMT Subject: serialNumber=f59169f57d761786132ae2edeb025637f3683a6ad7d2ed3ecf5e4a47bb67e39d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:83:f6:08:df:f7:a1:9a:d1:6f:b8:58:32: 01:62:d8:25:90:1f:de:7e:14:9e:3f:49:48:ec:18: 15:49:40:7d:5b:d2:32:a7:4d:b6:71:e6:e9:3a:7b: a6:e1:2e:67:41:50:0d:d8:0b:54:dc:4d:b9:e5:6d: 05:bb:dd:e9:0a:f8:ec:6a:12:05:82:e3:4e:44:92: 2f:c6:51:db:d2:44:47:1f:96:66:db:4c:8d:3d:b0: 25:ca:66:53:df:b9:c1:32:d9:7a:b1:92:d3:27:4a: 60:97:65:21:8b:31:b3:aa:59:c3:e3:cc:02:e6:78: 47:3a:49:68:f2:ce:93:84:a7:be:65:0c:23:a1:57: 18:54:b5:bf:1c:dc:4f:e1:d0:50:90:b3:25:ef:76: 50:34:5a:f9:7d:99:10:15:0b:26:7b:a3:be:90:36: d2:95:e1:cf:74:d0:21:08:76:7e:8c:39:ec:3e:d9: 3c:8c:8d:63:7f:40:c8:23:bb:5c:2e:54:09:d8:a7: 6a:7e:bb:45:e0:4f:47:e0:b2:78:ab:ae:bf:95:7e: 69:68:06:22:1b:e0:4c:4e:d9:ec:d3:51:17:51:ab: 47:a1:0d:46:65:ce:d3:68:38:67:2c:82:cb:d8:e6: 7a:e3:0e:dc:1f:88:bf:10:cb:e4:86:34:59:d5:16: ab:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:84:68:D1:CA:28:1B:F4:32:09:E5:C4:F9:FE:95:BE:CC:39:8D:D9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78f5b473-02bd-4a3a-a396-ce1267992825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.230.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6c:55:88:99:a3:ce:ad:da:a8:5f:46:9a:d6:64:f4:2d:06:f0: c3:a6:ee:cd:a0:21:c5:26:d2:26:4d:82:8b:a2:dc:c0:17:25: b6:9b:42:92:b3:53:56:28:4f:62:7e:26:5e:e5:49:71:cd:2d: fd:fe:d0:77:ad:78:79:cf:77:81:cc:a0:cc:8b:5f:e6:6a:6f: 21:3e:79:0c:7e:ef:85:9d:fc:1b:33:2e:03:7e:e4:a4:7f:71: 23:50:c6:51:6e:be:f1:e9:0c:af:62:c2:15:12:ff:9e:20:42: 06:8d:24:c7:56:f1:5a:ca:8c:04:75:2f:05:4a:b1:e5:04:41: e9:dc:cf:96:21:49:1a:2a:c1:4b:10:bb:c6:d6:15:1c:d5:d3: 73:46:d8:f6:68:c7:b0:31:a3:99:d7:cb:2f:7c:3e:d6:64:da: 43:4a:76:b7:a6:1d:25:a8:eb:0e:97:d2:1e:2e:15:71:fc:72: 10:16:a5:27:8d:32:df:41:95:b4:8c:05:cd:5c:6c:ca:c1:4f: 98:ab:41:53:29:ce:4b:5b:8b:a2:a0:44:f0:4b:41:44:9a:0e: 8b:76:d0:8a:2a:82:30:95:76:90:d9:7a:ec:3f:4a:0a:2e:73: fe:a0:1d:97:30:d7:fa:c0:72:c6:27:ff:c7:1d:cd:8d:73:76: f6:e9:4a:3f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbzEx7AlyxFeHjojv6tIwWxUs+CUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEwMDAwMDAwWhcNMjQwNTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTkxNjlmNTdkNzYxNzg2MTMyYWUyZWRlYjAyNTYzN2Yz NjgzYTZhZDdkMmVkM2VjZjVlNGE0N2JiNjdlMzlkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9+4P2CN/3oZrRb7hYMgFi2CWQH95+FJ4/SUjsGBVJQH1b 0jKnTbZx5uk6e6bhLmdBUA3YC1TcTbnlbQW73ekK+OxqEgWC405Eki/GUdvSREcf lmbbTI09sCXKZlPfucEy2XqxktMnSmCXZSGLMbOqWcPjzALmeEc6SWjyzpOEp75l DCOhVxhUtb8c3E/h0FCQsyXvdlA0Wvl9mRAVCyZ7o76QNtKV4c900CEIdn6MOew+ 2TyMjWN/QMgju1wuVAnYp2p+u0XgT0fgsnirrr+VfmloBiIb4ExO2ezTURdRq0eh DUZlztNoOGcsgsvY5nrjDtwfiL8Qy+SGNFnVFqsXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUJIRo0cooG/QyCeXE+f6Vvsw5jdkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4ZjViNDczLTAyYmQtNGEzYS1hMzk2LWNlMTI2Nzk5MjgyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA45jANBgkqhkiG9w0BAQsFAAOCAQEAbFWImaPOrdqoX0aa1mT0LQbww6bu zaAhxSbSJk2Ci6LcwBcltptCkrNTVihPYn4mXuVJcc0t/f7Qd614ec93gcygzItf 5mpvIT55DH7vhZ38GzMuA37kpH9xI1DGUW6+8ekMr2LCFRL/niBCBo0kx1bxWsqM BHUvBUqx5QRB6dzPliFJGirBSxC7xtYVHNXTc0bY9mjHsDGjmdfLL3w+1mTaQ0p2 t6YdJajrDpfSHi4VcfxyEBalJ40y30GVtIwFzVxsysFPmKtBUynOS1uLoqBE8EtB RJoOi3bQiiqCMJV2kNl67D9KCi5z/qAdlzDX+sByxif/xx3NjXN29ulKPw== -----END CERTIFICATE-----Generated at Tue Apr 23 18:30:33 2024 by rpki-client on console-fra.rpki-client.org