$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c687bbef-341d-4d2e-9c87-6cfee3335536.roa File: c687bbef-341d-4d2e-9c87-6cfee3335536.roa (raw, json) Hash identifier: 94pnpBE39ttqTTBFGeRp/XlPBy1DGxs6RlT589oogZc= Subject key identifier: 1B:2F:C0:DC:EF:1A:BB:22:B5:C0:6E:28:99:04:CB:1F:0A:92:80:F0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E18E5E07D5233F3AF68CE7C6DB8EE53AE34F980 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c687bbef-341d-4d2e-9c87-6cfee3335536.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 99.76.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:18:e5:e0:7d:52:33:f3:af:68:ce:7c:6d:b8:ee:53:ae:34:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=9f5e623521bbc805fdfa8879e9ef18ce5ca5e349a97a1edc2a43c37b24adaf9c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:f0:3f:70:eb:75:10:8e:49:f4:76:2b:0c: be:41:53:cb:63:d1:df:90:a4:66:08:3d:5d:ad:9c: da:48:a8:84:32:24:28:26:d3:06:02:09:25:45:57: 65:2f:04:f5:31:77:ce:2f:36:5f:5a:a1:5b:cf:8c: 54:57:9e:70:68:6e:43:58:81:ac:bd:66:8e:7c:a7: e9:6b:7f:92:89:b9:66:40:e8:17:2e:55:e5:c4:9d: cd:3c:64:9d:60:a7:52:cd:a4:f4:5a:75:f6:ce:f7: 0c:ef:59:fe:9e:15:ee:99:0b:1f:df:d2:ed:8e:a5: 32:02:e7:09:34:9e:d6:9c:b6:c4:b5:24:a2:93:90: 5c:b8:67:6e:1d:0f:6c:2f:93:2d:45:7e:78:5c:fb: 26:7d:6c:07:6c:08:17:0a:d7:68:cf:3d:00:13:09: 95:ab:d5:1e:5e:2a:0e:0d:b4:da:23:d4:29:c8:09: 55:98:9c:6a:7c:92:fb:77:bc:73:32:09:f0:fc:62: 70:69:30:4c:39:32:21:51:57:d2:54:b7:ff:23:82: 8e:3a:64:83:44:7e:a0:cf:72:a1:a3:1e:e9:17:d7: 82:94:15:6b:ef:e2:bd:33:0d:f5:ad:93:19:85:5f: da:06:43:b1:37:f9:91:08:24:a7:62:d0:28:bd:fe: 7f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2F:C0:DC:EF:1A:BB:22:B5:C0:6E:28:99:04:CB:1F:0A:92:80:F0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c687bbef-341d-4d2e-9c87-6cfee3335536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.76.64.0/18 Signature Algorithm: sha256WithRSAEncryption d0:fb:d4:97:07:df:d0:91:20:9d:1f:8d:dd:cf:39:84:f6:ee: 84:27:ad:ac:bc:b3:d0:da:bf:1c:5e:ef:7a:5b:c5:16:4d:5a: 9a:67:99:71:f5:8b:ef:f2:71:cf:72:1b:96:83:60:f9:8d:f0: 03:8b:81:c4:70:02:ec:d7:21:fa:e1:87:9e:e8:7c:8e:65:c7: ba:be:37:62:23:34:7e:9f:3e:13:22:7a:ec:a2:c8:a5:58:8f: f9:4d:25:74:a2:a2:a8:f9:08:51:97:c9:be:ee:18:12:be:e4: 3f:43:d7:6a:e6:5c:8a:f0:f0:e6:0a:35:f4:e2:47:93:d4:75: 7e:b8:d4:44:26:56:6e:fb:44:c2:91:c0:55:99:bd:af:91:e7: f7:1f:81:23:6c:28:d9:8b:72:96:fe:96:a0:fb:47:47:9c:b2: ac:dd:01:a8:2a:74:90:47:8a:30:5d:a9:f8:1b:98:b9:cd:98: 3e:d2:5a:47:11:fa:25:21:1d:e7:71:30:e2:46:ac:14:92:12: 04:61:92:37:98:e0:0d:0f:9e:f6:ba:c4:ee:06:bf:e8:ac:dd: 85:4a:06:93:37:51:b6:1b:b4:4a:99:51:4c:58:50:c3:b0:9e: ed:37:da:2e:59:ae:0a:08:40:a8:8c:9b:ea:73:fe:f5:ff:39: a6:aa:9a:65 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDhjl4H1SM/OvaM58bbjuU640+YAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjVlNjIzNTIxYmJjODA1ZmRmYTg4NzllOWVmMThjZTVj YTVlMzQ5YTk3YTFlZGMyYTQzYzM3YjI0YWRhZjljMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuOPA/cOt1EI5J9HYrDL5BU8tj0d+QpGYIPV2tnNpIqIQy JCgm0wYCCSVFV2UvBPUxd84vNl9aoVvPjFRXnnBobkNYgay9Zo58p+lrf5KJuWZA 6BcuVeXEnc08ZJ1gp1LNpPRadfbO9wzvWf6eFe6ZCx/f0u2OpTIC5wk0ntactsS1 JKKTkFy4Z24dD2wvky1Ffnhc+yZ9bAdsCBcK12jPPQATCZWr1R5eKg4NtNoj1CnI CVWYnGp8kvt3vHMyCfD8YnBpMEw5MiFRV9JUt/8jgo46ZINEfqDPcqGjHukX14KU FWvv4r0zDfWtkxmFX9oGQ7E3+ZEIJKdi0Ci9/n9NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGy/A3O8auyK1wG4omQTLHwqSgPAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M2ODdiYmVmLTM0MWQtNGQyZS05Yzg3LTZjZmVlMzMzNTUzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZjTEAwDQYJKoZIhvcNAQELBQADggEBAND71JcH39CRIJ0fjd3POYT27oQn ray8s9Davxxe73pbxRZNWppnmXH1i+/ycc9yG5aDYPmN8AOLgcRwAuzXIfrhh57o fI5lx7q+N2IjNH6fPhMieuyiyKVYj/lNJXSioqj5CFGXyb7uGBK+5D9D12rmXIrw 8OYKNfTiR5PUdX641EQmVm77RMKRwFWZva+R5/cfgSNsKNmLcpb+lqD7R0ecsqzd AagqdJBHijBdqfgbmLnNmD7SWkcR+iUhHedxMOJGrBSSEgRhkjeY4A0Pnva6xO4G v+is3YVKBpM3UbYbtEqZUUxYUMOwnu032i5ZrgoIQKiMm+pz/vX/OaaqmmU= -----END CERTIFICATE-----Generated at Thu May 2 12:23:12 2024 by rpki-client on console-ams.rpki-client.org