$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c440a9e2-edc6-4f08-9c01-9710a5189693.roa File: c440a9e2-edc6-4f08-9c01-9710a5189693.roa (raw, json) Hash identifier: RRmWNLEGlOEvKf5+yJ2qqUWnld3tklXUyqv7nNRHz08= Subject key identifier: BF:6D:82:A4:DF:D7:D0:4F:4C:BB:74:94:AF:1D:D2:D1:E8:4A:6C:04 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 259EBD8EC960C54CDDB1EA1BD559DF0B1B9BCF42 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c440a9e2-edc6-4f08-9c01-9710a5189693.roa Signing time: Tue 09 Apr 2024 00:00:00 +0000 ROA not before: Tue 09 Apr 2024 00:00:00 +0000 ROA not after: Tue 14 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 208.78.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9e:bd:8e:c9:60:c5:4c:dd:b1:ea:1b:d5:59:df:0b:1b:9b:cf:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:00:00 2024 GMT Not After : May 14 23:59:59 2024 GMT Subject: serialNumber=8afd5b0371d09f7cec62317833f4a0381926a12c5733a0b29eaee6858bd989bb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:94:f2:a9:aa:5c:13:2b:23:55:b9:2c:0a: 17:1a:14:83:ca:13:c6:5a:62:a2:0b:b0:9a:ab:a9: b8:74:7b:47:a8:0d:78:1e:df:ca:88:bb:2e:d7:f7: 98:db:16:ce:41:4a:de:9e:c9:97:e5:b6:ad:7f:61: fa:fe:f6:cd:72:66:18:42:23:08:01:59:3f:24:a7: a2:b5:5d:80:89:d7:9b:22:5a:e9:0d:83:81:7f:bf: 7c:7d:0e:83:cf:96:70:90:7d:71:7a:a0:f6:69:c8: 2b:e7:23:fb:8f:59:f3:d6:09:46:d2:62:99:00:f1: a7:da:f0:fd:16:43:1c:14:35:89:0c:f7:1f:2e:f7: 48:c4:a0:f4:d2:ea:95:96:6d:4a:21:ce:2f:c4:c6: 8c:be:10:88:a7:b9:30:d0:7a:51:67:9e:1d:c9:96: f2:34:c0:9c:5a:1a:b1:39:82:d0:5c:5a:20:3d:a5: 28:65:95:2f:07:98:f1:14:a4:1d:ee:6c:00:50:39: b8:4c:a5:6e:e1:ec:b4:72:ab:7a:70:0f:9e:91:46: fc:ee:0f:fc:e1:02:f3:08:64:5f:38:3f:91:06:c7: ff:df:54:52:70:60:97:37:10:56:2f:f6:18:43:8a: ff:a9:be:f2:3b:a6:26:0a:1c:08:21:43:8f:fa:34: ad:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6D:82:A4:DF:D7:D0:4F:4C:BB:74:94:AF:1D:D2:D1:E8:4A:6C:04 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c440a9e2-edc6-4f08-9c01-9710a5189693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.78.132.0/23 Signature Algorithm: sha256WithRSAEncryption 04:ee:15:13:21:84:7b:ab:df:56:b5:9a:8b:8e:6a:ec:56:92: dc:ea:e7:38:eb:e2:f8:cf:89:4d:c3:74:c5:c6:b8:7e:4e:46: 69:31:5b:67:c9:17:95:98:c4:99:6b:a5:ef:1b:c7:74:38:e7: fb:db:7a:2d:0f:93:5f:ed:bb:99:8a:25:11:25:27:e6:2c:c5: ae:87:05:d8:ff:2e:fb:76:ab:71:dd:18:79:f6:32:82:d5:11: 7e:77:2e:4b:c8:32:71:22:ae:f4:c1:de:07:c0:60:93:6d:0f: 5f:1e:28:03:12:e2:29:0e:56:29:d1:77:f0:55:a0:a0:fb:7d: f4:da:30:d9:d7:38:f4:b9:98:85:ae:ff:e1:65:db:ef:d1:81: 92:b9:04:9d:ed:2a:3d:cb:fb:68:eb:68:32:93:0c:7f:47:ad: 0b:ca:b3:9f:4c:ef:65:a9:4c:64:87:ae:e1:ec:ff:f7:26:45: d4:8d:bc:64:4d:12:65:8e:b8:4e:57:e9:dc:4a:18:b3:88:6d: c3:8c:30:f0:39:c5:0d:7a:01:2b:ba:27:bf:97:c0:d3:e0:ab: 22:b2:47:54:f4:e7:ca:18:01:39:6d:19:b8:cb:15:60:98:af: b1:e1:5a:ff:29:12:d2:b2:92:94:02:93:6d:4a:9e:14:aa:bc: 2d:d3:de:d5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJZ69jslgxUzdseob1VnfCxubz0IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA5MDAwMDAwWhcNMjQwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YWZkNWIwMzcxZDA5ZjdjZWM2MjMxNzgzM2Y0YTAzODE5 MjZhMTJjNTczM2EwYjI5ZWFlZTY4NThiZDk4OWJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtmZTyqapcEysjVbksChcaFIPKE8ZaYqILsJqrqbh0e0eo DXge38qIuy7X95jbFs5BSt6eyZfltq1/Yfr+9s1yZhhCIwgBWT8kp6K1XYCJ15si WukNg4F/v3x9DoPPlnCQfXF6oPZpyCvnI/uPWfPWCUbSYpkA8afa8P0WQxwUNYkM 9x8u90jEoPTS6pWWbUohzi/Exoy+EIinuTDQelFnnh3JlvI0wJxaGrE5gtBcWiA9 pShllS8HmPEUpB3ubABQObhMpW7h7LRyq3pwD56RRvzuD/zhAvMIZF84P5EGx//f VFJwYJc3EFYv9hhDiv+pvvI7piYKHAghQ4/6NK05AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUv22CpN/X0E9Mu3SUrx3S0ehKbAQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M0NDBhOWUyLWVkYzYtNGYwOC05YzAxLTk3MTBhNTE4OTY5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHQToQwDQYJKoZIhvcNAQELBQADggEBAATuFRMhhHur31a1mouOauxWktzq 5zjr4vjPiU3DdMXGuH5ORmkxW2fJF5WYxJlrpe8bx3Q45/vbei0Pk1/tu5mKJREl J+Ysxa6HBdj/Lvt2q3HdGHn2MoLVEX53LkvIMnEirvTB3gfAYJNtD18eKAMS4ikO VinRd/BVoKD7ffTaMNnXOPS5mIWu/+Fl2+/RgZK5BJ3tKj3L+2jraDKTDH9HrQvK s59M72WpTGSHruHs//cmRdSNvGRNEmWOuE5X6dxKGLOIbcOMMPA5xQ16ASu6J7+X wNPgqyKyR1T058oYATltGbjLFWCYr7HhWv8pEtKykpQCk21KnhSqvC3T3tU= -----END CERTIFICATE-----Generated at Thu May 2 17:17:17 2024 by rpki-client on console-ams.rpki-client.org