$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b00ce6-94f4-49aa-9139-7d3156871f35.roa File: b8b00ce6-94f4-49aa-9139-7d3156871f35.roa (raw, json) Hash identifier: WtjcgKQhFjBlysVG8aGsoFwgXROvkt9uYpbx7IfY+OU= Subject key identifier: 58:08:03:D0:1A:FC:80:42:37:C2:C5:7A:E7:6F:71:62:D8:DD:B6:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C56849E75762D71979F1C389773EB1DD7697A20 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b00ce6-94f4-49aa-9139-7d3156871f35.roa Signing time: Tue 09 Apr 2024 00:00:00 +0000 ROA not before: Tue 09 Apr 2024 00:00:00 +0000 ROA not after: Tue 14 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 54.25.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:56:84:9e:75:76:2d:71:97:9f:1c:38:97:73:eb:1d:d7:69:7a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:00:00 2024 GMT Not After : May 14 23:59:59 2024 GMT Subject: serialNumber=ac5b12681a918b61e4ede07e7da1bdce4300dd933e3bf1be39347cc51dbe3a9b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c0:89:c6:35:68:e4:4d:f8:9f:c1:47:9e:e2: 15:c8:09:ae:41:cb:9e:9b:8e:69:f9:7b:a6:62:ef: 5e:32:ee:e4:c4:31:0b:49:e1:0a:62:75:ce:3c:0b: 4c:02:c5:43:7f:59:00:1c:1c:ef:6a:a7:fb:86:b3: 2d:14:cc:da:84:16:b0:fc:bd:c0:2c:6b:07:51:7e: 9d:2b:8f:f0:08:8b:4f:b9:19:81:e9:9f:a2:d1:7a: 52:36:ef:6c:bf:18:45:bc:c2:99:db:9b:62:5e:25: f7:7d:16:10:3e:ad:b0:c5:53:02:40:25:3f:c4:c0: 4a:0c:b1:52:7d:a1:8e:5b:c3:4c:01:cc:b3:b3:97: d2:b6:58:35:14:02:32:b1:cb:0e:fb:b4:c5:58:8e: 38:68:b2:7c:eb:f7:4c:5f:66:c6:b3:0c:15:79:ab: 3a:e0:9f:88:5d:d4:d9:21:ea:93:02:58:70:e2:b6: 92:bb:79:be:35:58:10:ab:d9:4d:7b:2d:a0:5e:34: 09:0b:b9:ea:b3:79:b6:eb:d7:82:73:37:c0:9e:ad: 53:90:1d:15:48:4f:a6:ec:a2:15:5e:5c:49:d0:d9: 3e:e2:7a:33:f4:0c:73:29:81:8a:b3:09:71:89:da: cc:c3:0b:20:bf:03:dc:e4:c2:25:ed:95:2e:93:2b: c1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:08:03:D0:1A:FC:80:42:37:C2:C5:7A:E7:6F:71:62:D8:DD:B6:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b00ce6-94f4-49aa-9139-7d3156871f35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.25.15.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:ab:f4:7d:c1:b5:8f:6b:6a:14:4b:c6:a4:20:e4:8e:aa:eb: 82:02:a9:c4:59:63:9c:0d:4b:f9:ab:e9:13:73:9f:56:c7:0c: 96:b4:c4:d3:c3:ca:ee:3d:a0:bf:80:e8:f2:e0:c3:af:94:12: fc:e2:d4:11:00:29:f0:0b:b2:d7:d5:ee:d9:21:0e:30:4f:d3: 30:b9:f7:93:d5:06:e2:e1:b7:27:57:e0:2a:8b:a9:d9:f5:73: 41:8e:1b:4d:fd:d0:18:33:16:0e:f7:43:3d:f6:e0:3d:26:27: 0b:a6:10:71:d1:cf:50:30:19:d8:46:0e:6b:5a:aa:c5:b7:74: 0d:b6:4d:45:57:89:43:fd:f3:e7:23:5d:8b:2a:9f:28:4b:3f: 75:58:f0:cd:85:9b:96:44:53:7b:b4:ce:a4:83:b3:94:54:a5: 21:f8:8f:c0:1e:d1:a5:8e:b7:23:1b:0e:98:48:24:4f:82:ac: 88:cb:08:e5:84:2b:6b:29:1f:31:8f:c6:f5:d3:05:24:09:05: 96:51:58:1d:28:50:38:f6:a3:b9:fd:e3:d8:ba:15:3e:4e:f1: a1:8a:cd:15:1d:18:bc:d3:43:c5:ed:f5:da:d3:fe:96:9a:b4: 17:a1:e3:c9:e0:a8:2d:bf:19:5c:cf:4c:20:73:5a:be:f5:8b: 2b:2c:89:38 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPFaEnnV2LXGXnxw4l3PrHddpeiAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA5MDAwMDAwWhcNMjQwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYzViMTI2ODFhOTE4YjYxZTRlZGUwN2U3ZGExYmRjZTQz MDBkZDkzM2UzYmYxYmUzOTM0N2NjNTFkYmUzYTliMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChwInGNWjkTfifwUee4hXICa5By56bjmn5e6Zi714y7uTE MQtJ4Qpidc48C0wCxUN/WQAcHO9qp/uGsy0UzNqEFrD8vcAsawdRfp0rj/AIi0+5 GYHpn6LRelI272y/GEW8wpnbm2JeJfd9FhA+rbDFUwJAJT/EwEoMsVJ9oY5bw0wB zLOzl9K2WDUUAjKxyw77tMVYjjhosnzr90xfZsazDBV5qzrgn4hd1Nkh6pMCWHDi tpK7eb41WBCr2U17LaBeNAkLueqzebbr14JzN8CerVOQHRVIT6bsohVeXEnQ2T7i ejP0DHMpgYqzCXGJ2szDCyC/A9zkwiXtlS6TK8EFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWAgD0Br8gEI3wsV6529xYtjdtvUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4YjAwY2U2LTk0ZjQtNDlhYS05MTM5LTdkMzE1Njg3MWYzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2GQ8wDQYJKoZIhvcNAQELBQADggEBAC6r9H3BtY9rahRLxqQg5I6q64IC qcRZY5wNS/mr6RNzn1bHDJa0xNPDyu49oL+A6PLgw6+UEvzi1BEAKfALstfV7tkh DjBP0zC595PVBuLhtydX4CqLqdn1c0GOG0390BgzFg73Qz324D0mJwumEHHRz1Aw GdhGDmtaqsW3dA22TUVXiUP98+cjXYsqnyhLP3VY8M2Fm5ZEU3u0zqSDs5RUpSH4 j8Ae0aWOtyMbDphIJE+CrIjLCOWEK2spHzGPxvXTBSQJBZZRWB0oUDj2o7n949i6 FT5O8aGKzRUdGLzTQ8Xt9drT/paatBeh48ngqC2/GVzPTCBzWr71iyssiTg= -----END CERTIFICATE-----Generated at Thu May 2 12:23:11 2024 by rpki-client on console-ams.rpki-client.org