$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca57515a-3058-4353-ab16-a7d94657f8f8.roa File: ca57515a-3058-4353-ab16-a7d94657f8f8.roa (raw, json) Hash identifier: NTTbduecCeyEAkP5wP0mAkUQjkHxIupVaxcRsOd7Wto= Subject key identifier: 1B:2A:B6:63:FF:36:EF:A2:E0:49:7A:01:E0:F5:BE:D0:39:FC:29:8C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7AD31BCDECE9973E005F1B29338B69DCA1A65E98 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca57515a-3058-4353-ab16-a7d94657f8f8.roa Signing time: Mon 08 Apr 2024 00:00:00 +0000 ROA not before: Mon 08 Apr 2024 00:00:00 +0000 ROA not after: Mon 13 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 40.252.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d3:1b:cd:ec:e9:97:3e:00:5f:1b:29:33:8b:69:dc:a1:a6:5e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:00:00 2024 GMT Not After : May 13 23:59:59 2024 GMT Subject: serialNumber=7c9342b3da8236d4eaea8287c22f41c2c20df7a7f54c7cd5df4244cfeeabe09e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8c:e6:ef:5c:f0:02:f2:dd:47:84:7d:f5:82: 37:87:74:76:c8:26:e0:33:c6:31:19:d3:d7:78:c5: 58:35:0a:7d:e8:5c:cf:05:f9:53:4d:ae:92:c2:52: 6d:1d:f9:59:86:80:31:c3:5b:af:e0:13:d0:b2:3a: 9e:62:80:2f:34:38:31:56:b4:72:bf:b9:9c:7f:99: 73:ae:95:97:37:24:cf:11:62:aa:d7:aa:e4:52:5b: 61:01:7f:12:07:3c:e5:ad:13:49:9f:6c:5c:16:91: d3:76:50:8d:f7:92:ca:95:62:f7:62:62:48:fa:9f: e2:73:77:05:47:eb:61:17:df:69:61:d2:7f:8c:fb: 22:52:c7:0d:a5:13:fb:03:46:87:c9:94:38:28:75: 87:ea:02:6a:ea:6f:a1:32:c2:f3:61:10:9f:3d:23: bc:a3:19:b9:b4:37:ec:71:f8:03:90:08:c0:8a:b1: 48:62:11:fd:5b:67:29:b1:16:3a:ce:ee:c9:42:9f: c0:38:a0:05:64:15:d2:13:39:e2:4e:01:8f:b9:4f: 74:29:f4:f7:5e:00:a4:7f:07:15:00:ca:ba:6d:ea: d4:d6:47:c1:57:3b:ba:fb:5a:9e:12:94:c4:62:d5: f0:69:da:74:f6:d3:b5:1b:2c:58:67:db:32:be:b5: 47:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2A:B6:63:FF:36:EF:A2:E0:49:7A:01:E0:F5:BE:D0:39:FC:29:8C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca57515a-3058-4353-ab16-a7d94657f8f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.252.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9a:c5:0b:cf:44:60:00:d6:6d:a8:a6:a7:9f:f9:db:b4:80:a1: 32:22:4a:d6:06:89:a9:ec:f0:3e:b2:a9:d6:93:e9:72:d6:db: a8:b0:a4:ee:b9:16:ce:35:3a:6e:73:ae:12:0a:0c:6d:9f:1b: 43:9c:e9:ec:ea:9c:0e:c6:41:04:84:6a:e7:30:d0:1e:78:db: cf:b4:f6:c3:b5:30:73:1e:e9:c5:28:4e:3b:5c:c1:ef:87:35: 81:2b:43:f0:38:74:72:59:06:b0:2f:30:1e:8c:03:41:4c:e9: c9:52:ff:4a:c1:37:78:14:ac:7f:06:e2:dc:8b:1e:e0:e7:9b: 6d:b1:36:ee:17:11:c9:fa:12:d6:79:39:bf:4b:5b:ed:72:64: 4c:d8:96:f9:af:ec:ac:11:38:ff:f7:b4:35:72:e6:68:52:35: 43:7c:9e:1e:0d:5e:41:b3:0e:26:0d:91:d2:b2:4b:c6:07:d9: 32:9a:f5:cd:c6:ca:2e:61:93:fd:99:33:ef:7f:37:ca:3d:39: d6:9f:7c:15:05:fc:a2:f9:d9:86:b8:2f:ed:25:90:1e:6e:7a: 82:ef:f2:d5:17:39:43:2e:30:a4:3a:32:c5:16:8b:e5:fd:fa: 32:aa:bc:57:59:ef:74:d0:b2:41:03:73:09:b4:d7:cf:65:07: d6:d3:36:4e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUetMbzezplz4AXxspM4tp3KGmXpgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDA4MDAwMDAwWhcNMjQwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzkzNDJiM2RhODIzNmQ0ZWFlYTgyODdjMjJmNDFjMmMy MGRmN2E3ZjU0YzdjZDVkZjQyNDRjZmVlYWJlMDllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmjObvXPAC8t1HhH31gjeHdHbIJuAzxjEZ09d4xVg1Cn3o XM8F+VNNrpLCUm0d+VmGgDHDW6/gE9CyOp5igC80ODFWtHK/uZx/mXOulZc3JM8R YqrXquRSW2EBfxIHPOWtE0mfbFwWkdN2UI33ksqVYvdiYkj6n+JzdwVH62EX32lh 0n+M+yJSxw2lE/sDRofJlDgodYfqAmrqb6EywvNhEJ89I7yjGbm0N+xx+AOQCMCK sUhiEf1bZymxFjrO7slCn8A4oAVkFdITOeJOAY+5T3Qp9PdeAKR/BxUAyrpt6tTW R8FXO7r7Wp4SlMRi1fBp2nT207UbLFhn2zK+tUfHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUGyq2Y/8276LgSXoB4PW+0Dn8KYwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NhNTc1MTVhLTMwNTgtNDM1My1hYjE2LWE3ZDk0NjU3ZjhmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAo/DANBgkqhkiG9w0BAQsFAAOCAQEAmsULz0RgANZtqKann/nbtIChMiJK 1gaJqezwPrKp1pPpctbbqLCk7rkWzjU6bnOuEgoMbZ8bQ5zp7OqcDsZBBIRq5zDQ Hnjbz7T2w7Uwcx7pxShOO1zB74c1gStD8Dh0clkGsC8wHowDQUzpyVL/SsE3eBSs fwbi3Ise4OebbbE27hcRyfoS1nk5v0tb7XJkTNiW+a/srBE4//e0NXLmaFI1Q3ye Hg1eQbMOJg2R0rJLxgfZMpr1zcbKLmGT/Zkz7383yj051p98FQX8ovnZhrgv7SWQ Hm56gu/y1Rc5Qy4wpDoyxRaL5f36Mqq8V1nvdNCyQQNzCbTXz2UH1tM2Tg== -----END CERTIFICATE-----Generated at Fri May 3 00:27:47 2024 by rpki-client on console-fra.rpki-client.org