$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c53c401d-a0b9-4834-aed9-1b1d504baede.roa File: c53c401d-a0b9-4834-aed9-1b1d504baede.roa (raw, json) Hash identifier: 8l972HMR5vZYG04kI9OhgXClbRh8fWn3N2qH2DJW6kY= Subject key identifier: 50:C5:6C:0D:F1:22:19:76:54:A6:EA:F0:96:47:6E:C8:52:33:78:EB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2CBCF452C4CE4C3145BB4C4E6D3B9837FF58806B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c53c401d-a0b9-4834-aed9-1b1d504baede.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fff:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:bc:f4:52:c4:ce:4c:31:45:bb:4c:4e:6d:3b:98:37:ff:58:80:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=7433330e10afa9b4d3dffa73b425635f77c4d7e66d27a6e52d1edf6ab3372d33, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:60:6c:8f:32:63:f5:c3:f7:be:5c:b1:41:b3: 29:83:9a:e5:0d:a2:20:32:09:15:74:df:39:01:4c: c5:27:bb:04:23:9f:ed:a5:7c:5f:4e:56:03:d5:4c: d7:79:92:ad:77:bf:5d:d1:39:d1:c6:99:cf:e4:a3: dd:8d:55:1d:36:86:51:2b:de:b7:38:69:89:60:94: 58:77:e1:fc:7a:72:0d:de:c8:42:4a:45:35:08:f6: 97:c5:62:be:a7:d1:92:ef:bd:16:e6:9e:60:d6:11: 8f:0b:97:f6:95:e1:3e:40:b1:d4:f9:1c:2e:9c:53: ab:85:0d:10:36:69:5a:ae:71:2c:92:8a:97:ef:24: cc:f9:3a:6f:38:97:57:56:dd:c8:54:71:d3:af:6a: 85:0f:60:63:6e:c9:d1:38:36:4d:4d:b5:fe:18:d6: d7:a4:91:85:ad:c4:ee:ea:dc:02:93:c6:3e:6f:be: ce:ad:58:b1:8d:b5:21:0b:99:ae:18:d5:f7:18:ab: c2:3e:9a:d1:20:ba:37:78:03:77:8c:39:28:25:da: 85:00:81:42:35:9b:f6:a1:23:22:8c:b0:ef:8c:77: ba:2e:07:44:56:ee:19:67:55:c4:8f:35:55:25:25: fd:1d:a7:4d:2e:40:40:87:a1:0a:53:e2:f4:eb:3c: 0c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C5:6C:0D:F1:22:19:76:54:A6:EA:F0:96:47:6E:C8:52:33:78:EB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c53c401d-a0b9-4834-aed9-1b1d504baede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:5000::/40 Signature Algorithm: sha256WithRSAEncryption 5c:a0:8e:85:84:53:9d:1c:c5:fd:d1:b2:d6:8d:7f:6a:01:f0: 2f:05:d2:b8:cb:4b:b5:d4:a0:43:5a:fb:f4:8f:13:52:ee:de: 5d:fe:34:e7:f2:63:65:1b:54:43:0a:e1:fc:c5:f5:3d:f0:f4: 68:2e:f9:82:05:6d:d2:42:ff:d2:8a:5c:d8:df:10:e5:73:56: 15:ea:d0:d8:39:e8:0e:f6:3f:85:42:6b:48:ec:c8:3d:d2:29: 64:69:4c:fe:eb:5c:41:a5:6a:2a:55:3a:5e:8e:f7:47:af:f2: 90:3a:53:7a:65:37:d5:29:44:1a:f9:a8:88:64:14:dc:52:b8: da:7a:76:39:3d:e5:ac:d3:d8:5d:9a:12:af:1d:10:b5:f7:c5: 28:e1:dd:a9:aa:65:df:a6:fa:7e:7e:d4:7f:6c:b5:ec:5e:75: cd:ea:ea:46:48:4e:1f:09:53:02:e6:56:3c:72:db:97:cf:7a: f7:46:17:8c:2d:10:1d:46:66:2e:a6:87:af:ba:be:49:d3:66: 28:3d:16:d1:60:65:d8:86:1b:6c:5e:00:75:e6:c2:76:42:18: 26:58:01:aa:49:24:a6:38:1f:bd:c7:d5:5c:38:bc:37:cb:06: 5f:2c:4d:b9:cb:2b:e0:2b:ca:84:58:0e:e4:24:2c:84:59:e2: 19:c1:9d:d4 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULLz0UsTOTDFFu0xObTuYN/9YgGswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDMzMzMwZTEwYWZhOWI0ZDNkZmZhNzNiNDI1NjM1Zjc3 YzRkN2U2NmQyN2E2ZTUyZDFlZGY2YWIzMzcyZDMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWYGyPMmP1w/e+XLFBsymDmuUNoiAyCRV03zkBTMUnuwQj n+2lfF9OVgPVTNd5kq13v13ROdHGmc/ko92NVR02hlEr3rc4aYlglFh34fx6cg3e yEJKRTUI9pfFYr6n0ZLvvRbmnmDWEY8Ll/aV4T5AsdT5HC6cU6uFDRA2aVqucSyS ipfvJMz5Om84l1dW3chUcdOvaoUPYGNuydE4Nk1Ntf4Y1tekkYWtxO7q3AKTxj5v vs6tWLGNtSELma4Y1fcYq8I+mtEgujd4A3eMOSgl2oUAgUI1m/ahIyKMsO+Md7ou B0RW7hlnVcSPNVUlJf0dp00uQECHoQpT4vTrPAz/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUUMVsDfEiGXZUpurwlkduyFIzeOswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1M2M0MDFkLWEwYjktNDgzNC1hZWQ5LTFiMWQ1MDRiYWVkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB//UDANBgkqhkiG9w0BAQsFAAOCAQEAXKCOhYRTnRzF/dGy1o1/agHw LwXSuMtLtdSgQ1r79I8TUu7eXf405/JjZRtUQwrh/MX1PfD0aC75ggVt0kL/0opc 2N8Q5XNWFerQ2DnoDvY/hUJrSOzIPdIpZGlM/utcQaVqKlU6Xo73R6/ykDpTemU3 1SlEGvmoiGQU3FK42np2OT3lrNPYXZoSrx0QtffFKOHdqapl36b6fn7Uf2y17F51 zerqRkhOHwlTAuZWPHLbl89690YXjC0QHUZmLqaHr7q+SdNmKD0W0WBl2IYbbF4A debCdkIYJlgBqkkkpjgfvcfVXDi8N8sGXyxNucsr4CvKhFgO5CQshFniGcGd1A== -----END CERTIFICATE-----Generated at Thu May 9 01:25:46 2024 by rpki-client on console-fra.rpki-client.org