$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4cd3afc-63d7-4eeb-9234-3814aa0c6649.roa File: a4cd3afc-63d7-4eeb-9234-3814aa0c6649.roa (raw, json) Hash identifier: rbkNn+jgZxhMU7fPTvs3hUQZJEWnQHd59EhWh0zzsCY= Subject key identifier: 63:00:6C:59:BA:C8:CF:71:CC:A1:13:4D:59:B8:07:E9:91:06:82:8A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E4EDED3D20A121B29D70B241FF66AE41742D1B4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4cd3afc-63d7-4eeb-9234-3814aa0c6649.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 99.83.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:4e:de:d3:d2:0a:12:1b:29:d7:0b:24:1f:f6:6a:e4:17:42:d1:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=354af01fb8962c868eeb332c24dbd3c81cb66b5fee2139fe7d9e6bf777133cc1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f4:f4:27:12:5d:5e:5d:94:a2:d3:f6:d1:69: fd:9f:98:dd:94:e2:a5:e7:ce:d4:d2:3d:1c:2f:e3: 7a:20:26:7f:99:d2:b4:65:a3:80:c8:84:de:a1:e5: 81:aa:21:97:70:90:1e:f8:0a:05:cb:f5:f4:e4:3d: a3:0a:a7:aa:04:c5:48:13:f9:e4:15:27:73:06:a1: 4a:e5:2f:a4:6c:8e:35:a9:2b:7c:2f:9e:da:05:93: 7d:e0:03:0c:1b:f0:b4:67:7f:f9:9a:ac:11:af:99: c6:20:55:f9:5e:70:40:0d:21:6c:fc:a7:e4:89:18: 80:7c:87:fa:ba:e1:1b:bf:29:50:ac:f4:85:c3:9f: 9f:e6:70:76:ff:a1:8b:c8:e5:90:3d:89:ba:4d:39: e5:28:7b:58:8e:76:bc:53:7e:99:f7:f9:e6:a9:eb: ce:b9:31:16:3d:6f:c2:95:0a:2f:bc:db:d2:4c:c6: 71:a9:a3:72:fc:2e:cf:42:72:37:28:e3:37:48:22: fa:17:d1:59:d6:81:46:9c:30:e3:97:d3:9b:b4:25: 26:70:8d:a7:13:fa:9c:77:7e:2b:9f:a9:73:90:f5: d5:6e:49:2b:09:a1:56:1f:41:59:99:36:9e:06:e6: cc:98:8d:44:ec:f1:ee:b2:de:72:84:0c:d2:68:d0: 2b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:00:6C:59:BA:C8:CF:71:CC:A1:13:4D:59:B8:07:E9:91:06:82:8A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4cd3afc-63d7-4eeb-9234-3814aa0c6649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.83.64.0/18 Signature Algorithm: sha256WithRSAEncryption 23:74:61:79:e2:68:54:ab:66:fb:a0:97:f4:50:1c:0b:d8:d3: 67:03:55:86:09:99:40:58:bc:65:8d:18:e3:8b:f2:01:59:c2: 66:a1:84:84:99:db:05:14:ef:6a:2e:0f:46:0d:24:20:52:44: 84:31:5a:b2:52:e5:df:93:f8:7e:15:2f:85:3b:3a:7f:ae:8b: b7:ed:eb:16:a6:df:93:91:db:4b:b6:0f:be:83:66:bd:46:d6: 4e:7a:21:37:92:35:59:d0:a4:f6:5a:57:b7:56:32:36:54:75: f2:5b:b1:17:ea:ee:df:46:e7:fa:66:fb:f7:c4:76:83:eb:d6: f6:44:e6:93:8d:41:4a:74:7d:4a:b8:b0:64:5c:a1:87:2c:10: ca:54:ae:ba:5b:c8:1c:be:4d:2f:52:25:bc:f9:22:71:e0:54: 0f:63:e3:c1:0a:88:8e:51:fa:e7:3f:82:ba:89:3a:95:e4:b2: 94:fa:e8:fb:69:8c:f5:41:b2:0b:4e:b1:2a:f2:d7:1a:ff:c7: d6:5b:8e:34:a2:86:6a:53:b1:7a:41:bb:68:bd:f1:bf:1a:df: be:ad:32:e2:21:4a:1f:61:79:e4:c5:1d:b3:9a:fb:81:07:4d: 82:7c:ee:71:7a:d9:3c:2e:4d:05:21:30:9b:8c:19:3f:a7:a0: b1:49:95:43 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfk7e09IKEhsp1wskH/Zq5BdC0bQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTRhZjAxZmI4OTYyYzg2OGVlYjMzMmMyNGRiZDNjODFj YjY2YjVmZWUyMTM5ZmU3ZDllNmJmNzc3MTMzY2MxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCV9PQnEl1eXZSi0/bRaf2fmN2U4qXnztTSPRwv43ogJn+Z 0rRlo4DIhN6h5YGqIZdwkB74CgXL9fTkPaMKp6oExUgT+eQVJ3MGoUrlL6RsjjWp K3wvntoFk33gAwwb8LRnf/marBGvmcYgVflecEANIWz8p+SJGIB8h/q64Ru/KVCs 9IXDn5/mcHb/oYvI5ZA9ibpNOeUoe1iOdrxTfpn3+eap6865MRY9b8KVCi+829JM xnGpo3L8Ls9Ccjco4zdIIvoX0VnWgUacMOOX05u0JSZwjacT+px3fiufqXOQ9dVu SSsJoVYfQVmZNp4G5syYjUTs8e6y3nKEDNJo0CtRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYwBsWbrIz3HMoRNNWbgH6ZEGgoowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E0Y2QzYWZjLTYzZDctNGVlYi05MjM0LTM4MTRhYTBjNjY0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZjU0AwDQYJKoZIhvcNAQELBQADggEBACN0YXniaFSrZvugl/RQHAvY02cD VYYJmUBYvGWNGOOL8gFZwmahhISZ2wUU72ouD0YNJCBSRIQxWrJS5d+T+H4VL4U7 On+ui7ft6xam35OR20u2D76DZr1G1k56ITeSNVnQpPZaV7dWMjZUdfJbsRfq7t9G 5/pm+/fEdoPr1vZE5pONQUp0fUq4sGRcoYcsEMpUrrpbyBy+TS9SJbz5InHgVA9j 48EKiI5R+uc/grqJOpXkspT66PtpjPVBsgtOsSry1xr/x9ZbjjSihmpTsXpBu2i9 8b8a376tMuIhSh9heeTFHbOa+4EHTYJ87nF62TwuTQUhMJuMGT+noLFJlUM= -----END CERTIFICATE-----Generated at Thu May 2 08:02:37 2024 by rpki-client on console-ams.rpki-client.org