$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde53854-8680-43c2-8178-8283b5e040e2.roa File: bde53854-8680-43c2-8178-8283b5e040e2.roa (raw, json) Hash identifier: TsRizDI7GB0+9c+f0VZV/qmZiH0dGefjBQa5WWD0f+s= Subject key identifier: 53:69:49:02:EE:3C:95:65:19:84:29:B3:3C:AE:3C:DB:7F:C4:2C:0F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 28665E7586145940A18C011E55E8EE910FA1882E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde53854-8680-43c2-8178-8283b5e040e2.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 149.177.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:66:5e:75:86:14:59:40:a1:8c:01:1e:55:e8:ee:91:0f:a1:88:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=13abc51061b6a6b1d401ae202c16cc5818b49479842707f9b6f77d774e8e2adb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:5f:ef:80:79:b7:87:c9:5e:59:0c:3a:2f:50: 9b:40:6c:89:98:12:2a:07:cd:12:27:e1:95:d0:df: 4b:63:cd:35:a9:d8:03:6f:e6:be:ef:cb:d0:93:de: 15:1a:6a:6b:da:44:51:6b:71:c3:b5:91:01:f9:97: 06:15:c2:66:06:3a:69:27:45:da:f3:51:23:9a:b8: 7d:1d:4e:98:76:d0:32:0f:3d:1d:b1:00:12:d0:65: 60:fa:9b:08:a4:59:b7:a6:27:9e:9d:4a:3b:11:c4: 60:c9:41:50:2b:0f:c1:f2:4f:2a:98:67:c8:dd:ce: e9:cc:bd:8f:00:1d:1f:70:90:f1:0a:c0:1b:ad:a8: 6c:64:06:e7:f2:ac:e3:9b:48:0e:99:89:0b:93:43: db:69:7d:dc:27:d7:a6:7e:72:d4:26:00:56:43:8c: a9:6b:1c:20:46:04:f8:2a:f1:9c:22:b6:81:72:86: b8:c0:8e:3c:5c:fd:b2:c6:5e:0d:7d:0f:71:63:48: 21:91:8c:a8:a9:5e:6f:21:2e:55:36:d8:cc:81:a4: 7d:fa:f9:33:f4:2e:42:7b:94:04:97:1e:36:78:f4: e6:1c:af:33:03:8a:48:15:1f:59:85:fe:f6:68:51: 5b:e8:81:96:3f:75:79:10:f8:13:e2:d6:d6:99:6b: f5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:69:49:02:EE:3C:95:65:19:84:29:B3:3C:AE:3C:DB:7F:C4:2C:0F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde53854-8680-43c2-8178-8283b5e040e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.177.0.0/17 Signature Algorithm: sha256WithRSAEncryption 1b:df:a7:df:e7:b0:93:0d:63:19:fc:54:e9:00:e9:91:77:e8: 5b:5d:28:00:ea:64:e9:d2:3d:1f:95:65:1c:07:3c:cb:70:74: 43:07:0c:6d:b0:35:79:0c:dc:7d:28:7d:2d:56:05:fb:38:04: b0:96:ce:e8:48:05:2d:c3:ce:3f:eb:5f:71:9b:2d:ca:23:77: 28:10:34:2d:48:4c:79:7f:13:39:f0:9d:78:14:3b:d2:42:73: 9a:8a:23:32:a4:f2:89:03:74:af:32:cc:cc:42:73:a3:d2:f3: 16:ec:6b:f3:6f:c2:b5:ff:a1:a7:86:d2:91:e2:d2:f7:31:7f: 93:9d:a5:26:f1:42:de:46:a7:18:5c:e2:e0:03:07:c3:31:4f: b4:e5:45:36:10:07:0c:b9:06:ed:e3:9a:80:65:89:c8:da:62: 30:e2:73:15:70:d4:f8:08:0d:99:09:ec:82:35:af:60:64:b0: 1d:38:c6:9a:99:91:ad:00:18:1a:ba:02:ba:c1:65:c9:28:ac: 40:86:4f:53:3b:37:d5:68:e1:28:1f:65:c1:ce:f1:0e:a9:83: 49:01:00:00:cb:b8:5b:c1:f5:8e:dd:87:c5:26:7a:f5:40:28: 7f:f3:26:fe:7a:e4:f1:4f:e1:2e:6d:5e:44:17:25:ae:5a:8e: d0:8a:2b:c4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKGZedYYUWUChjAEeVejukQ+hiC4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxM2FiYzUxMDYxYjZhNmIxZDQwMWFlMjAyYzE2Y2M1ODE4 YjQ5NDc5ODQyNzA3ZjliNmY3N2Q3NzRlOGUyYWRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvX++AebeHyV5ZDDovUJtAbImYEioHzRIn4ZXQ30tjzTWp 2ANv5r7vy9CT3hUaamvaRFFrccO1kQH5lwYVwmYGOmknRdrzUSOauH0dTph20DIP PR2xABLQZWD6mwikWbemJ56dSjsRxGDJQVArD8HyTyqYZ8jdzunMvY8AHR9wkPEK wButqGxkBufyrOObSA6ZiQuTQ9tpfdwn16Z+ctQmAFZDjKlrHCBGBPgq8ZwitoFy hrjAjjxc/bLGXg19D3FjSCGRjKipXm8hLlU22MyBpH36+TP0LkJ7lASXHjZ49OYc rzMDikgVH1mF/vZoUVvogZY/dXkQ+BPi1taZa/UJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUU2lJAu48lWUZhCmzPK4823/ELA8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkZTUzODU0LTg2ODAtNDNjMi04MTc4LTgyODNiNWUwNDBlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeVsQAwDQYJKoZIhvcNAQELBQADggEBABvfp9/nsJMNYxn8VOkA6ZF36Ftd KADqZOnSPR+VZRwHPMtwdEMHDG2wNXkM3H0ofS1WBfs4BLCWzuhIBS3Dzj/rX3Gb LcojdygQNC1ITHl/EznwnXgUO9JCc5qKIzKk8okDdK8yzMxCc6PS8xbsa/NvwrX/ oaeG0pHi0vcxf5OdpSbxQt5Gpxhc4uADB8MxT7TlRTYQBwy5Bu3jmoBlicjaYjDi cxVw1PgIDZkJ7II1r2BksB04xpqZka0AGBq6ArrBZckorECGT1M7N9Vo4SgfZcHO 8Q6pg0kBAADLuFvB9Y7dh8UmevVAKH/zJv565PFP4S5tXkQXJa5ajtCKK8Q= -----END CERTIFICATE-----Generated at Thu May 9 01:26:23 2024 by rpki-client on console-ams.rpki-client.org