$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b34cb2d9-3f9e-4644-8f65-3caf38c2e33d.roa File: b34cb2d9-3f9e-4644-8f65-3caf38c2e33d.roa (raw, json) Hash identifier: qhCSqpPNzCKqnlHKp045+BX9/9CuDKB9S8d6dv0ttzs= Subject key identifier: CA:97:9E:04:D0:03:A9:AA:75:BD:CC:98:0A:F6:76:A2:5C:76:91:1E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7138A6085DBB393C9C7D10F836DDF04C260DF953 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b34cb2d9-3f9e-4644-8f65-3caf38c2e33d.roa Signing time: Sat 20 Apr 2024 00:00:00 +0000 ROA not before: Sat 20 Apr 2024 00:00:00 +0000 ROA not after: Sat 25 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 146.206.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:38:a6:08:5d:bb:39:3c:9c:7d:10:f8:36:dd:f0:4c:26:0d:f9:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 20 00:00:00 2024 GMT Not After : May 25 23:59:59 2024 GMT Subject: serialNumber=6d1cc95863146abd95b71de260b1437b773cb175d74c57ebda1b6a7f87b8cfd5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:23:97:b0:e3:2e:2d:7e:54:1f:1a:4a:b7:31: 39:b6:6b:8d:a9:f0:fb:fb:9d:e9:cc:1c:29:ef:46: d3:e0:54:56:b1:18:17:ef:dd:40:37:72:1a:66:b8: 6e:f7:aa:19:c7:16:de:02:50:4d:00:82:cc:a4:d9: be:ae:1b:9a:00:34:e9:47:6b:a6:bb:40:8c:26:e1: b4:bd:02:93:e3:2f:16:9c:66:bc:7d:83:b5:6b:67: 79:dc:65:59:61:72:ca:5d:b7:d8:1c:f2:12:a4:23: ff:9f:82:fd:b5:51:ae:71:46:ee:85:05:10:dc:05: 90:2a:70:6e:10:ec:e0:8c:db:76:d8:86:50:c1:bf: 47:5b:e1:26:03:a1:26:6f:74:39:f1:d1:7e:c6:28: 5a:99:2f:1c:c0:d2:74:79:8f:f4:aa:aa:c5:ed:f4: a7:20:87:90:b1:d2:7d:b6:e6:0c:0d:43:fb:c2:32: 33:bc:26:8b:99:d9:dd:9e:02:3e:ba:46:bf:5f:a0: 83:2a:01:4e:39:62:94:96:a2:f0:8d:fd:b3:a9:c3: 46:35:8b:b5:66:87:7f:1c:71:35:b7:a2:14:26:26: 37:2c:85:aa:45:d8:99:b1:ec:04:c3:98:6a:e2:02: 8b:4c:26:b9:49:86:a3:ce:6f:b0:7e:39:9f:c0:e5: a7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:97:9E:04:D0:03:A9:AA:75:BD:CC:98:0A:F6:76:A2:5C:76:91:1E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b34cb2d9-3f9e-4644-8f65-3caf38c2e33d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.206.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7e:b4:10:c4:00:ca:1f:9e:e5:59:33:b4:70:53:2a:92:8d:3c: ce:cb:63:85:f7:60:1d:f3:c4:2a:33:9c:cb:fe:9d:ec:9b:b8: 84:9d:e2:54:62:05:12:29:41:e1:ba:ad:2e:ca:f7:ae:77:88: 28:5f:44:1a:81:5d:ad:b8:63:71:0c:10:af:9b:27:1d:f3:2a: 19:ba:3b:cd:c6:65:62:1a:da:f2:42:8a:4d:9b:81:d5:e4:82: 9f:f3:7d:18:a0:37:82:fc:b7:53:5c:08:2f:ca:32:0f:45:c6: f1:e8:c0:7e:b3:24:fd:ca:53:11:1e:4e:7d:06:26:7d:c0:69: d8:c4:ad:bb:6a:b8:f4:4c:2b:a7:a7:13:aa:89:a2:09:b9:8f: 04:b2:81:d2:57:d1:e0:3f:32:0c:a0:26:01:b7:99:21:c8:44: 3b:c2:e3:4a:3f:ca:11:fd:ea:02:b0:ca:7e:e7:28:d7:4d:e2: ce:30:5b:a2:b9:33:96:9e:cf:69:af:a9:4a:56:96:6f:f5:ed: cb:07:ab:fd:65:12:96:c7:a9:47:18:c7:7c:a4:d5:cc:81:7d: e7:05:32:8f:7a:95:ed:97:e3:37:f2:45:ed:9a:65:70:51:6d: 89:cd:5d:8b:3b:ac:33:88:5c:06:da:e2:1f:a3:19:1f:a1:94: 68:70:2c:13 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcTimCF27OTycfRD4Nt3wTCYN+VMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDIwMDAwMDAwWhcNMjQwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDFjYzk1ODYzMTQ2YWJkOTViNzFkZTI2MGIxNDM3Yjc3 M2NiMTc1ZDc0YzU3ZWJkYTFiNmE3Zjg3YjhjZmQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8I5ew4y4tflQfGkq3MTm2a42p8Pv7nenMHCnvRtPgVFax GBfv3UA3chpmuG73qhnHFt4CUE0Agsyk2b6uG5oANOlHa6a7QIwm4bS9ApPjLxac Zrx9g7VrZ3ncZVlhcspdt9gc8hKkI/+fgv21Ua5xRu6FBRDcBZAqcG4Q7OCM23bY hlDBv0db4SYDoSZvdDnx0X7GKFqZLxzA0nR5j/SqqsXt9Kcgh5Cx0n225gwNQ/vC MjO8JouZ2d2eAj66Rr9foIMqAU45YpSWovCN/bOpw0Y1i7Vmh38ccTW3ohQmJjcs hapF2Jmx7ATDmGriAotMJrlJhqPOb7B+OZ/A5acpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUypeeBNADqap1vcyYCvZ2olx2kR4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzNGNiMmQ5LTNmOWUtNDY0NC04ZjY1LTNjYWYzOGMyZTMzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCSzjANBgkqhkiG9w0BAQsFAAOCAQEAfrQQxADKH57lWTO0cFMqko08zstj hfdgHfPEKjOcy/6d7Ju4hJ3iVGIFEilB4bqtLsr3rneIKF9EGoFdrbhjcQwQr5sn HfMqGbo7zcZlYhra8kKKTZuB1eSCn/N9GKA3gvy3U1wIL8oyD0XG8ejAfrMk/cpT ER5OfQYmfcBp2MStu2q49Ewrp6cTqomiCbmPBLKB0lfR4D8yDKAmAbeZIchEO8Lj Sj/KEf3qArDKfuco103izjBborkzlp7Paa+pSlaWb/Xtywer/WUSlsepRxjHfKTV zIF95wUyj3qV7ZfjN/JF7ZplcFFtic1dizusM4hcBtriH6MZH6GUaHAsEw== -----END CERTIFICATE-----Generated at Thu May 2 08:51:11 2024 by rpki-client on console-fra.rpki-client.org