$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3c7f799-6c54-4ca8-97cc-3e7125ce4e58.roa File: a3c7f799-6c54-4ca8-97cc-3e7125ce4e58.roa (raw, json) Hash identifier: xf/MB5nsjMJrIELMpQc3LhZ3EClAJbNBuw8WGpu+RCs= Subject key identifier: 72:1D:3F:F9:33:82:93:FD:E2:C0:9C:1F:3B:49:05:B1:35:AE:2D:5A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F7DBD0ED5C00988B61F136EEFA66E65551C5928 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3c7f799-6c54-4ca8-97cc-3e7125ce4e58.roa Signing time: Wed 24 Apr 2024 00:00:00 +0000 ROA not before: Wed 24 Apr 2024 00:00:00 +0000 ROA not after: Wed 29 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 209.162.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:7d:bd:0e:d5:c0:09:88:b6:1f:13:6e:ef:a6:6e:65:55:1c:59:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 24 00:00:00 2024 GMT Not After : May 29 23:59:59 2024 GMT Subject: serialNumber=e2ba87ee40e953f0a0b3f98e9afdbd9e196105339375c883edb040cb6c06ec25, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:24:0d:da:df:44:03:de:2c:e7:d6:77:c8: a4:5a:e4:e0:91:6f:0d:f7:f0:91:d0:34:0a:c7:1a: 54:e4:5e:ac:69:16:f7:e7:07:0b:46:1f:7b:b0:cb: e1:01:88:61:46:07:7e:55:63:8f:2c:eb:ec:24:29: 03:c0:3d:99:cc:be:53:36:b6:7a:62:20:9b:2f:fd: 59:03:29:bd:3c:ef:2c:35:f4:11:34:fe:72:48:04: d3:2c:be:57:b2:62:17:e0:ee:be:94:84:0a:ca:d8: 23:f3:66:c3:d3:0f:e8:73:08:56:15:a1:51:b6:38: 48:d0:aa:3d:6b:f7:45:98:46:0a:6d:2e:27:42:37: b8:e6:6b:93:d1:76:36:96:f9:34:a9:cb:fa:31:8e: f7:30:9e:86:84:6e:58:4f:51:f6:17:05:eb:49:d5: 47:27:b6:9b:34:87:17:e0:5e:2b:e0:4a:d7:7f:67: 96:66:a2:1e:df:18:5c:53:42:98:d7:75:bb:c0:a4: 26:ed:77:7a:95:b6:99:27:9d:5e:9e:07:12:d8:a9: 78:ec:f7:4c:d3:6b:79:45:13:26:2e:73:64:bd:2a: 45:ad:35:73:56:83:62:9b:64:de:32:bc:d9:cf:35: d7:ca:c4:46:db:39:48:a1:6b:3c:93:af:df:ca:87: 66:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1D:3F:F9:33:82:93:FD:E2:C0:9C:1F:3B:49:05:B1:35:AE:2D:5A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3c7f799-6c54-4ca8-97cc-3e7125ce4e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.162.176.0/20 Signature Algorithm: sha256WithRSAEncryption 0d:2a:8f:64:21:e8:49:0f:9e:d2:e0:97:fd:f8:4a:38:10:d9: 2f:cb:2e:ef:9b:ac:ea:1c:af:9e:35:6f:91:3b:b2:49:e6:70: 8e:2e:cf:18:54:d5:61:d1:f7:25:a0:1f:4e:60:1c:4a:e5:a4: cd:fa:d8:99:74:a8:7e:3a:9b:14:91:e5:7e:6f:b8:e1:ec:f7: 68:7e:45:0d:d6:87:1a:68:4c:5f:79:90:96:3b:7e:dd:58:80: 76:03:ca:b7:4f:d2:2d:4a:1e:b6:59:63:f1:ec:e6:24:29:49: 93:33:c2:6a:ef:57:ef:31:af:c3:c6:83:1b:5a:a2:98:f0:1f: f4:ed:8c:2c:99:f8:60:dd:46:e8:6c:17:86:4e:d7:f1:e2:34: 43:ef:4a:1e:b7:d8:2d:b4:45:50:6a:d0:be:40:60:68:91:e2: 08:fc:71:9b:e4:48:30:04:8f:5c:36:09:13:d0:e5:12:a6:d8: 90:ca:ae:df:f7:51:e7:d2:32:7d:f4:6b:1f:72:94:16:70:3a: 5f:d0:9c:5b:02:e8:9d:f0:0f:cf:95:c6:ca:8d:00:8d:fe:9d: d0:e0:44:c6:08:8e:37:78:43:3d:e0:04:77:2c:a4:61:f6:4a: 0b:21:88:f4:e5:40:4b:b4:1f:bc:d2:a8:df:97:09:bc:8a:55: b2:58:59:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX329DtXACYi2HxNu76ZuZVUcWSgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDI0MDAwMDAwWhcNMjQwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMmJhODdlZTQwZTk1M2YwYTBiM2Y5OGU5YWZkYmQ5ZTE5 NjEwNTMzOTM3NWM4ODNlZGIwNDBjYjZjMDZlYzI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv+SQN2t9EA94s59Z3yKRa5OCRbw338JHQNArHGlTkXqxp FvfnBwtGH3uwy+EBiGFGB35VY48s6+wkKQPAPZnMvlM2tnpiIJsv/VkDKb087yw1 9BE0/nJIBNMsvleyYhfg7r6UhArK2CPzZsPTD+hzCFYVoVG2OEjQqj1r90WYRgpt LidCN7jma5PRdjaW+TSpy/oxjvcwnoaEblhPUfYXBetJ1Ucntps0hxfgXivgStd/ Z5Zmoh7fGFxTQpjXdbvApCbtd3qVtpknnV6eBxLYqXjs90zTa3lFEyYuc2S9KkWt NXNWg2KbZN4yvNnPNdfKxEbbOUihazyTr9/Kh2b9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUch0/+TOCk/3iwJwfO0kFsTWuLVowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EzYzdmNzk5LTZjNTQtNGNhOC05N2NjLTNlNzEyNWNlNGU1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATRorAwDQYJKoZIhvcNAQELBQADggEBAA0qj2Qh6EkPntLgl/34SjgQ2S/L Lu+brOocr541b5E7sknmcI4uzxhU1WHR9yWgH05gHErlpM362Jl0qH46mxSR5X5v uOHs92h+RQ3WhxpoTF95kJY7ft1YgHYDyrdP0i1KHrZZY/Hs5iQpSZMzwmrvV+8x r8PGgxtaopjwH/TtjCyZ+GDdRuhsF4ZO1/HiNEPvSh632C20RVBq0L5AYGiR4gj8 cZvkSDAEj1w2CRPQ5RKm2JDKrt/3UefSMn30ax9ylBZwOl/QnFsC6J3wD8+VxsqN AI3+ndDgRMYIjjd4Qz3gBHcspGH2SgshiPTlQEu0H7zSqN+XCbyKVbJYWQg= -----END CERTIFICATE-----Generated at Thu May 2 17:17:16 2024 by rpki-client on console-ams.rpki-client.org