$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af889b26-8d83-496e-82b3-12cfaef1a338.roa File: af889b26-8d83-496e-82b3-12cfaef1a338.roa (raw, json) Hash identifier: X/PKGCCBZkdlLmYYSy0G+NO5vkhfaRGQ8BXtRzZ0Sfc= Subject key identifier: 4A:B5:2E:FB:A2:16:91:7F:F8:AE:EB:6D:39:E1:1C:16:8A:13:6C:9F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2D855D4738EC71F1DEB3FA32BD566AAD63C13121 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af889b26-8d83-496e-82b3-12cfaef1a338.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 57.198.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:85:5d:47:38:ec:71:f1:de:b3:fa:32:bd:56:6a:ad:63:c1:31:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=2161278e5ae149b0ea273e106bcdc42fab525dfeb7b61bad7c9a2f5b5ea086f0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e8:d1:ce:18:fc:68:c6:90:3b:47:0f:70:47: 27:7f:5a:53:27:1c:1e:49:51:55:7d:b1:41:6c:b6: 32:e7:54:f5:77:f2:28:80:ac:9f:bd:40:71:a9:14: 34:0c:ba:5c:7d:61:56:79:e9:37:c6:ff:95:51:a3: 66:f6:cb:54:fd:3b:21:12:15:a3:86:16:51:fd:71: 6e:24:75:b5:5e:f9:6d:c0:db:84:d2:61:5c:db:cb: a9:69:65:6e:ac:df:dd:21:e6:82:ce:b5:0e:af:79: 4d:6e:84:3e:b0:cf:37:64:d5:56:4b:d9:6b:61:71: 42:ff:65:3e:99:41:65:3b:30:5b:c1:d0:ab:59:a1: 3f:01:e1:ab:f0:74:66:25:1f:b5:22:b2:1c:05:f6: e5:b5:7c:25:d8:27:ce:22:6d:65:53:2a:1d:27:e5: b8:c5:3c:36:94:0e:1d:9e:2e:42:c4:15:5d:59:f7: 11:b9:09:21:1d:81:1c:33:82:ff:ac:a6:8f:d4:69: 1e:31:5e:6c:31:f9:e8:3c:f1:03:fa:1f:f1:22:06: 2d:ff:03:f7:c3:43:4e:bb:a6:d9:14:5d:37:1d:bd: 07:f7:ae:d3:1f:21:b6:c1:50:15:71:26:bd:23:8b: 78:ad:ad:f5:89:d7:d7:a4:b3:b7:f3:bf:a4:0c:7c: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B5:2E:FB:A2:16:91:7F:F8:AE:EB:6D:39:E1:1C:16:8A:13:6C:9F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af889b26-8d83-496e-82b3-12cfaef1a338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.198.0.0/16 Signature Algorithm: sha256WithRSAEncryption 16:25:14:40:23:0f:12:7e:5c:e3:35:13:db:90:30:36:53:0f: 8e:88:e1:4f:af:80:7a:bd:90:fd:12:f7:01:2f:6d:72:d8:0e: bb:ac:cf:08:7e:6f:25:23:47:47:29:47:c8:a1:02:fb:05:1b: c6:34:26:c7:65:89:e7:4e:ce:ec:c3:03:9f:02:8a:06:15:e8: 1b:82:f2:8a:41:cd:1f:88:78:c1:01:94:15:4a:28:8e:f2:85: ab:c0:08:b5:66:a2:98:c4:38:8c:85:e7:a5:ed:2b:29:f2:68: ef:de:d5:ec:ee:a8:68:47:20:b5:92:1f:b0:1b:e7:f0:74:28: d9:e3:1f:07:f7:3e:bf:6f:c7:51:eb:bd:11:2b:01:f3:c1:81: 7c:5d:68:ea:86:86:0c:66:e5:7f:a2:df:d1:27:2f:11:74:a7: 34:42:f0:da:5a:d3:05:24:14:d5:2b:c3:30:41:24:03:73:1c: 56:40:3a:f7:93:59:a5:5e:7a:8c:06:46:db:04:a3:28:75:e9: 8a:3f:e2:10:13:b8:4d:e3:ce:4b:0f:79:6d:87:30:59:07:9a: 2f:43:b1:28:6d:16:c8:33:e2:a7:65:c0:d4:26:4d:9c:bf:39: 9c:34:7d:94:b9:4f:0a:3b:52:e4:f6:e3:91:02:77:bf:2a:84: 30:37:ce:df -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULYVdRzjscfHes/oyvVZqrWPBMSEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTYxMjc4ZTVhZTE0OWIwZWEyNzNlMTA2YmNkYzQyZmFi NTI1ZGZlYjdiNjFiYWQ3YzlhMmY1YjVlYTA4NmYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDj6NHOGPxoxpA7Rw9wRyd/WlMnHB5JUVV9sUFstjLnVPV3 8iiArJ+9QHGpFDQMulx9YVZ56TfG/5VRo2b2y1T9OyESFaOGFlH9cW4kdbVe+W3A 24TSYVzby6lpZW6s390h5oLOtQ6veU1uhD6wzzdk1VZL2WthcUL/ZT6ZQWU7MFvB 0KtZoT8B4avwdGYlH7UishwF9uW1fCXYJ84ibWVTKh0n5bjFPDaUDh2eLkLEFV1Z 9xG5CSEdgRwzgv+spo/UaR4xXmwx+eg88QP6H/EiBi3/A/fDQ067ptkUXTcdvQf3 rtMfIbbBUBVxJr0ji3itrfWJ19eks7fzv6QMfATTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUSrUu+6IWkX/4ruttOeEcFooTbJ8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmODg5YjI2LThkODMtNDk2ZS04MmIzLTEyY2ZhZWYxYTMzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA5xjANBgkqhkiG9w0BAQsFAAOCAQEAFiUUQCMPEn5c4zUT25AwNlMPjojh T6+Aer2Q/RL3AS9tctgOu6zPCH5vJSNHRylHyKEC+wUbxjQmx2WJ507O7MMDnwKK BhXoG4LyikHNH4h4wQGUFUoojvKFq8AItWaimMQ4jIXnpe0rKfJo797V7O6oaEcg tZIfsBvn8HQo2eMfB/c+v2/HUeu9ESsB88GBfF1o6oaGDGblf6Lf0ScvEXSnNELw 2lrTBSQU1SvDMEEkA3McVkA695NZpV56jAZG2wSjKHXpij/iEBO4TePOSw95bYcw WQeaL0OxKG0WyDPip2XA1CZNnL85nDR9lLlPCjtS5PbjkQJ3vyqEMDfO3w== -----END CERTIFICATE-----Generated at Thu May 2 06:12:46 2024 by rpki-client on console-fra.rpki-client.org