$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d15b818-f019-40e0-8b56-fede468949cc.roa File: 7d15b818-f019-40e0-8b56-fede468949cc.roa (raw, json) Hash identifier: NtL2UD7v66j/HodTjg2opMBFf0EBc/xdYC0bLL6Y5lM= Subject key identifier: 14:FF:3F:4B:0E:F9:04:CF:E5:FA:17:16:3C:DF:E2:C9:90:D9:2C:52 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 433B2E58A200D4D034711866F893D6A4B334B9DB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d15b818-f019-40e0-8b56-fede468949cc.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 56.82.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:3b:2e:58:a2:00:d4:d0:34:71:18:66:f8:93:d6:a4:b3:34:b9:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=4bbb618b5aacc4504f6c3d502fb1317d3252952c514a62cd9502bcbf06c7c8d4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3e:1e:80:b1:1f:e1:c4:a6:cf:87:a4:74:4a: a3:3b:d5:51:66:25:6a:57:8f:01:b6:9b:0f:07:86: d7:a0:e8:a9:3f:c8:55:a9:1b:cf:c2:af:34:41:fe: ea:d7:df:67:f1:9e:b7:c4:76:a3:fe:85:93:64:a1: 8e:68:21:61:11:5b:fc:a4:70:da:4d:99:0a:81:53: 33:63:8d:09:05:6c:34:7a:db:fc:2f:7f:a9:a4:14: fd:8b:52:a0:39:26:94:8b:71:14:c9:3e:a5:ba:60: 4a:86:fb:43:12:8d:3a:12:0c:c3:3d:bb:6b:e9:67: a2:4a:04:45:f8:e7:d6:67:5b:b9:97:68:26:8f:a0: dc:91:f1:e7:23:f9:d6:a6:4c:3e:87:84:07:ff:a7: 04:7b:07:92:36:5f:88:53:33:4c:aa:63:5f:98:d2: 46:94:e9:1a:1d:bb:41:cf:a8:ff:eb:cc:58:84:db: 0f:33:d5:23:0f:a5:ca:be:68:93:70:ca:4f:ba:cd: ac:83:ec:77:76:7a:3b:50:b3:02:54:4b:80:cd:53: c0:0f:3a:33:07:13:41:5c:a0:20:cf:86:8e:c1:e2: 04:5b:02:db:b8:ce:ac:18:21:a0:24:51:45:92:8a: 9b:68:08:81:22:a7:a9:51:73:a1:c3:bd:58:11:07: e1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FF:3F:4B:0E:F9:04:CF:E5:FA:17:16:3C:DF:E2:C9:90:D9:2C:52 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d15b818-f019-40e0-8b56-fede468949cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.82.0.0/16 Signature Algorithm: sha256WithRSAEncryption aa:dc:0f:80:ee:2a:a4:49:c2:16:2f:6d:bc:31:5d:d3:77:d8: 55:7b:d8:31:0c:fe:d2:ec:56:15:bc:ac:04:7a:43:49:8f:64: 1e:e9:7c:77:02:fd:82:cf:2d:b3:07:24:80:d9:48:0e:2f:91: 9b:b1:1e:41:fb:5c:53:da:02:d3:f0:d3:9a:e6:6d:2e:52:c9: 51:8a:a8:48:1a:6f:fc:3a:1c:74:3e:98:93:7e:91:a7:35:67: 87:10:8c:3f:db:7e:d0:3f:1d:ba:34:3b:40:ca:75:77:d7:cc: af:82:f9:29:96:97:b8:24:b1:68:a9:3d:38:43:c8:9e:b9:b7: e6:e7:93:ff:f4:e6:56:45:81:97:a9:2f:3c:88:31:81:55:23: 3b:6a:10:81:3f:b9:d2:56:25:f2:eb:36:55:aa:1e:0f:3e:25: 85:69:b4:4f:c9:ed:86:c5:20:15:3c:b3:24:ed:bd:d2:d8:da: 6a:fb:b4:d9:17:a2:84:81:e4:9a:45:06:62:e6:48:30:1f:9a: be:57:00:f3:c7:d4:40:4f:95:fb:e4:08:1b:40:79:99:db:0b: 55:92:29:c5:89:38:4f:2d:42:95:16:55:31:9a:2f:83:d0:1a: 98:8a:c6:f4:15:ad:c8:b0:7b:8c:23:1f:4b:c2:c6:48:2a:a3: 33:1a:1f:7c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQzsuWKIA1NA0cRhm+JPWpLM0udswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YmJiNjE4YjVhYWNjNDUwNGY2YzNkNTAyZmIxMzE3ZDMy NTI5NTJjNTE0YTYyY2Q5NTAyYmNiZjA2YzdjOGQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmPh6AsR/hxKbPh6R0SqM71VFmJWpXjwG2mw8Hhteg6Kk/ yFWpG8/CrzRB/urX32fxnrfEdqP+hZNkoY5oIWERW/ykcNpNmQqBUzNjjQkFbDR6 2/wvf6mkFP2LUqA5JpSLcRTJPqW6YEqG+0MSjToSDMM9u2vpZ6JKBEX459ZnW7mX aCaPoNyR8ecj+damTD6HhAf/pwR7B5I2X4hTM0yqY1+Y0kaU6Rodu0HPqP/rzFiE 2w8z1SMPpcq+aJNwyk+6zayD7Hd2ejtQswJUS4DNU8APOjMHE0FcoCDPho7B4gRb Atu4zqwYIaAkUUWSiptoCIEip6lRc6HDvVgRB+EpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUFP8/Sw75BM/l+hcWPN/iyZDZLFIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkMTViODE4LWYwMTktNDBlMC04YjU2LWZlZGU0Njg5NDljYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4UjANBgkqhkiG9w0BAQsFAAOCAQEAqtwPgO4qpEnCFi9tvDFd03fYVXvY MQz+0uxWFbysBHpDSY9kHul8dwL9gs8tswckgNlIDi+Rm7EeQftcU9oC0/DTmuZt LlLJUYqoSBpv/DocdD6Yk36RpzVnhxCMP9t+0D8dujQ7QMp1d9fMr4L5KZaXuCSx aKk9OEPInrm35ueT//TmVkWBl6kvPIgxgVUjO2oQgT+50lYl8us2VaoeDz4lhWm0 T8nthsUgFTyzJO290tjaavu02ReihIHkmkUGYuZIMB+avlcA88fUQE+V++QIG0B5 mdsLVZIpxYk4Ty1ClRZVMZovg9AamIrG9BWtyLB7jCMfS8LGSCqjMxoffA== -----END CERTIFICATE-----Generated at Thu May 2 06:12:42 2024 by rpki-client on console-fra.rpki-client.org