$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c743dda0-a20b-4b9b-b483-894350d70630.roa File: c743dda0-a20b-4b9b-b483-894350d70630.roa (raw, json) Hash identifier: tu/VKX44hgUpmrWIElNgghVYS7tuwWMld83XhA/PyUA= Subject key identifier: 92:F5:DB:AD:A9:F0:45:32:62:F6:B5:85:28:D7:44:10:7B:C8:0B:82 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E9F05E5ABB87F929E139A5033A3FD00D427335F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c743dda0-a20b-4b9b-b483-894350d70630.roa Signing time: Tue 07 May 2024 00:00:00 +0000 ROA not before: Tue 07 May 2024 00:00:00 +0000 ROA not after: Tue 11 Jun 2024 23:59:59 +0000 asID: 8987 IP address blocks: 35.17.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:9f:05:e5:ab:b8:7f:92:9e:13:9a:50:33:a3:fd:00:d4:27:33:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:00:00 2024 GMT Not After : Jun 11 23:59:59 2024 GMT Subject: serialNumber=b4e3349f99de50873eb34d58cf6d7c381fe05c55af6cadff2ae74c83f0c391c3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:78:a9:7f:3d:14:08:ad:08:d3:8f:ad:9e:de: 90:bd:d0:50:93:21:04:d5:5a:5b:c1:eb:5f:ca:a5: 2a:ad:ce:e4:f2:67:a1:90:ab:86:70:56:4a:e9:21: 00:f7:67:03:39:6c:99:41:7f:a2:d2:72:74:6c:ce: 32:51:68:8b:25:6c:bd:00:59:63:83:cb:99:9a:27: 68:47:7d:f1:06:a6:c7:07:60:d7:04:3c:d0:e5:59: 4c:7c:f1:c4:ae:32:1d:39:8d:82:2b:a8:d8:3f:21: 83:fb:04:a6:b1:ac:1a:df:e4:15:7e:6f:da:07:71: 01:e8:ec:14:79:64:e3:45:bb:d7:39:7b:de:06:92: 57:dd:a4:23:66:45:65:c5:1f:16:ec:e6:c5:7a:0e: ac:39:69:2d:d4:28:52:0a:a1:b1:a2:60:0d:ed:74: fc:5f:3e:88:2d:9d:d5:b0:bc:13:31:20:20:dd:ca: b7:3d:33:f4:b4:16:a5:16:85:82:de:b9:32:1c:3b: 45:14:ac:98:aa:26:c1:f1:c2:df:c0:6f:b9:dd:76: f1:75:18:f4:51:f9:24:d7:1d:62:47:ba:80:57:0d: b2:f8:af:4b:ab:3b:ac:d2:22:6f:dc:e5:c0:66:ca: 39:9a:89:7d:4c:f7:8e:58:00:ce:85:cb:ff:3b:c6: ea:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F5:DB:AD:A9:F0:45:32:62:F6:B5:85:28:D7:44:10:7B:C8:0B:82 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c743dda0-a20b-4b9b-b483-894350d70630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.17.0.0/16 Signature Algorithm: sha256WithRSAEncryption 94:01:c9:3b:36:6a:ce:22:a0:95:9f:9a:1f:72:8a:46:d7:12: a4:f7:47:c7:6b:0a:ae:2e:40:74:0a:ee:ef:50:89:76:92:4d: a8:8b:d7:88:a0:8a:4a:df:70:20:fb:f5:6e:bc:9a:2f:03:29: 64:35:ee:c4:9e:87:94:dd:ba:71:63:fe:87:82:26:e6:58:b4: db:45:cf:b7:2c:18:a3:93:fd:c7:a8:04:08:8c:be:50:80:57: f1:11:14:83:0c:2c:0f:3e:a8:31:77:78:84:33:da:81:ee:2d: 48:ec:4b:f7:17:14:af:4f:6e:77:27:23:6b:92:ab:d6:2f:f0: 52:67:7d:64:90:71:73:1b:e4:c8:da:72:0c:2c:e9:a9:bc:2a: 6f:ad:97:87:ed:4a:65:d8:26:5f:50:ef:b5:cf:ff:4a:df:01: 4d:84:c5:53:90:15:6e:28:dc:31:02:ab:d7:36:22:18:d6:46: c6:38:30:ec:98:f0:d3:5a:c0:cc:51:50:ca:5f:26:ab:34:53: b7:75:c4:b2:b4:80:e2:30:a1:41:81:24:b2:fb:4d:f9:61:3a: 4f:1a:b7:d4:33:45:6a:84:16:99:23:c2:80:f0:af:60:27:b3: 93:e8:2a:51:fe:73:5d:91:7f:95:e0:b1:4b:5f:74:38:3b:dd: 9d:ca:54:b8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDp8F5au4f5KeE5pQM6P9ANQnM18wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTA3MDAwMDAwWhcNMjQwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNGUzMzQ5Zjk5ZGU1MDg3M2ViMzRkNThjZjZkN2MzODFm ZTA1YzU1YWY2Y2FkZmYyYWU3NGM4M2YwYzM5MWMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEeKl/PRQIrQjTj62e3pC90FCTIQTVWlvB61/KpSqtzuTy Z6GQq4ZwVkrpIQD3ZwM5bJlBf6LScnRszjJRaIslbL0AWWODy5maJ2hHffEGpscH YNcEPNDlWUx88cSuMh05jYIrqNg/IYP7BKaxrBrf5BV+b9oHcQHo7BR5ZONFu9c5 e94GklfdpCNmRWXFHxbs5sV6Dqw5aS3UKFIKobGiYA3tdPxfPogtndWwvBMxICDd yrc9M/S0FqUWhYLeuTIcO0UUrJiqJsHxwt/Ab7nddvF1GPRR+STXHWJHuoBXDbL4 r0urO6zSIm/c5cBmyjmaiX1M945YAM6Fy/87xuobAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUkvXbranwRTJi9rWFKNdEEHvIC4IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M3NDNkZGEwLWEyMGItNGI5Yi1iNDgzLTg5NDM1MGQ3MDYzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjETANBgkqhkiG9w0BAQsFAAOCAQEAlAHJOzZqziKglZ+aH3KKRtcSpPdH x2sKri5AdAru71CJdpJNqIvXiKCKSt9wIPv1bryaLwMpZDXuxJ6HlN26cWP+h4Im 5li020XPtywYo5P9x6gECIy+UIBX8REUgwwsDz6oMXd4hDPage4tSOxL9xcUr09u dycja5Kr1i/wUmd9ZJBxcxvkyNpyDCzpqbwqb62Xh+1KZdgmX1Dvtc//St8BTYTF U5AVbijcMQKr1zYiGNZGxjgw7Jjw01rAzFFQyl8mqzRTt3XEsrSA4jChQYEksvtN +WE6Txq31DNFaoQWmSPCgPCvYCezk+gqUf5zXZF/leCxS190ODvdncpUuA== -----END CERTIFICATE-----Generated at Thu May 9 01:26:25 2024 by rpki-client on console-ams.rpki-client.org