$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f3c0ed2-7f49-4325-a2e8-f4202029ebbe.roa File: 9f3c0ed2-7f49-4325-a2e8-f4202029ebbe.roa (raw, json) Hash identifier: j96JMW+KkgXgqE493nM8GX8uFxvYHoo+8yWXkHntRR4= Subject key identifier: 0B:C8:E2:96:FD:66:D3:F7:18:85:5E:2D:44:F6:1C:B2:62:08:36:32 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 647C4A49D4950CF24D15EBF8030BA4D11CB18D54 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f3c0ed2-7f49-4325-a2e8-f4202029ebbe.roa Signing time: Tue 23 Apr 2024 00:00:00 +0000 ROA not before: Tue 23 Apr 2024 00:00:00 +0000 ROA not after: Tue 28 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 40.150.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:7c:4a:49:d4:95:0c:f2:4d:15:eb:f8:03:0b:a4:d1:1c:b1:8d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:00:00 2024 GMT Not After : May 28 23:59:59 2024 GMT Subject: serialNumber=cf445527c6ddafd6d4a1ba4681837e34a2b65fa7ff075ffc91a55aa5598ae783, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4d:ec:aa:7b:6f:9b:bd:93:f2:0f:96:f7:12: 63:0f:59:62:bf:ac:b7:59:0b:37:a8:f7:1e:fe:93: d8:c3:0c:b3:33:3c:51:1d:13:72:46:0d:b1:24:a1: 7c:b9:4e:c9:2a:c4:82:41:69:96:02:3e:28:36:81: 5f:33:92:c5:d6:ac:37:0f:91:be:56:ff:6a:31:9a: ad:37:c2:5d:51:72:96:f2:38:0c:96:a9:cb:45:a3: 37:c9:26:84:2a:ac:4a:77:2f:eb:ba:3e:8e:ab:37: 59:1e:59:f4:ec:7b:c0:4f:30:8f:31:8b:f4:74:fb: a8:6e:cd:39:9a:1b:9a:af:0e:78:d5:db:e5:9f:80: 6d:69:d5:87:6f:5c:86:99:e6:2b:54:f8:93:36:2a: d8:87:21:e0:93:29:fd:c0:56:f3:f6:7b:2f:54:3b: 28:42:7c:58:16:10:aa:8e:f6:19:58:48:4b:98:69: b8:d3:08:b5:f4:bc:91:bc:f0:7c:40:05:56:d3:5a: 21:8c:ec:ab:f9:2a:95:a7:98:5a:7b:1a:44:53:33: 57:f7:1e:8c:a8:3d:f4:47:be:be:43:1c:78:18:a8: 96:f3:4e:2f:7b:b0:5b:04:62:28:4a:f9:48:da:fd: d9:a7:70:9b:e8:3f:d2:18:97:a0:63:fe:1b:41:94: 6b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C8:E2:96:FD:66:D3:F7:18:85:5E:2D:44:F6:1C:B2:62:08:36:32 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f3c0ed2-7f49-4325-a2e8-f4202029ebbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.150.0.0/16 Signature Algorithm: sha256WithRSAEncryption ac:76:27:d3:8f:5e:b7:f5:9b:e9:fa:39:d7:9b:5b:bd:7c:23: 7b:2f:2e:3e:e6:70:1e:2e:24:9b:f4:b1:1c:e5:16:51:83:9b: a7:c0:84:9f:e3:5c:1a:83:1c:f1:e9:8c:f7:fc:d4:e7:bd:48: b9:da:f6:ee:43:30:23:f2:ca:5e:56:fd:cf:4e:a3:5c:ee:fc: 9a:32:49:4e:62:87:16:6f:c2:58:65:d3:9e:f0:1e:95:3f:c2: 16:55:13:d4:52:5f:3a:dd:89:ac:94:1f:db:cd:c4:7d:ab:64: 72:a4:ed:37:37:c7:8e:36:e0:4c:17:f9:7c:ee:cb:24:ae:6e: 1c:e9:59:a2:03:2b:d8:2d:3c:20:ed:3e:b8:f0:4a:db:ea:64: 0f:b6:ad:cf:4e:d0:2d:a5:48:3e:d6:8d:7b:54:6d:b1:74:6d: 28:96:ef:b0:56:b0:5b:97:f6:ae:5a:5f:bf:95:4a:35:53:5a: ce:7b:f2:ba:09:48:3a:79:ab:a7:50:21:15:7a:1b:b7:f3:55: 05:99:26:60:d5:8b:80:27:ac:54:cf:94:70:bb:80:28:ba:43: ce:c4:6f:06:15:b1:14:66:ba:da:0a:69:33:cf:72:fe:7d:da: c5:13:f2:92:8a:8d:e1:f0:52:11:08:29:c9:23:6c:60:22:f9: d3:fb:ea:4d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZHxKSdSVDPJNFev4Awuk0RyxjVQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDIzMDAwMDAwWhcNMjQwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZjQ0NTUyN2M2ZGRhZmQ2ZDRhMWJhNDY4MTgzN2UzNGEy YjY1ZmE3ZmYwNzVmZmM5MWE1NWFhNTU5OGFlNzgzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsTeyqe2+bvZPyD5b3EmMPWWK/rLdZCzeo9x7+k9jDDLMz PFEdE3JGDbEkoXy5TskqxIJBaZYCPig2gV8zksXWrDcPkb5W/2oxmq03wl1Rcpby OAyWqctFozfJJoQqrEp3L+u6Po6rN1keWfTse8BPMI8xi/R0+6huzTmaG5qvDnjV 2+WfgG1p1YdvXIaZ5itU+JM2KtiHIeCTKf3AVvP2ey9UOyhCfFgWEKqO9hlYSEuY abjTCLX0vJG88HxABVbTWiGM7Kv5KpWnmFp7GkRTM1f3HoyoPfRHvr5DHHgYqJbz Ti97sFsEYihK+Uja/dmncJvoP9IYl6Bj/htBlGurAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUC8jilv1m0/cYhV4tRPYcsmIINjIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmM2MwZWQyLTdmNDktNDMyNS1hMmU4LWY0MjAyMDI5ZWJiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAoljANBgkqhkiG9w0BAQsFAAOCAQEArHYn049et/Wb6fo515tbvXwjey8u PuZwHi4km/SxHOUWUYObp8CEn+NcGoMc8emM9/zU571Iudr27kMwI/LKXlb9z06j XO78mjJJTmKHFm/CWGXTnvAelT/CFlUT1FJfOt2JrJQf283EfatkcqTtNzfHjjbg TBf5fO7LJK5uHOlZogMr2C08IO0+uPBK2+pkD7atz07QLaVIPtaNe1RtsXRtKJbv sFawW5f2rlpfv5VKNVNaznvyuglIOnmrp1AhFXobt/NVBZkmYNWLgCesVM+UcLuA KLpDzsRvBhWxFGa62gppM89y/n3axRPykoqN4fBSEQgpySNsYCL50/vqTQ== -----END CERTIFICATE-----Generated at Wed May 1 20:48:05 2024 by rpki-client on console-ams.rpki-client.org