$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfdb8340-8105-4c9e-8fe1-0843503cee82.roa File: cfdb8340-8105-4c9e-8fe1-0843503cee82.roa (raw, json) Hash identifier: klF5LcfdY/rP/ZicdYxSUsJW3UCr29yx+lE6NP5do/E= Subject key identifier: CB:00:87:36:7C:F9:0D:58:2F:41:F1:13:38:A1:C6:DF:73:12:79:DC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E1A2824090071F294005847A4D7A7774526D580 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfdb8340-8105-4c9e-8fe1-0843503cee82.roa Signing time: Tue 07 May 2024 00:00:00 +0000 ROA not before: Tue 07 May 2024 00:00:00 +0000 ROA not after: Tue 11 Jun 2024 23:59:59 +0000 asID: 8987 IP address blocks: 5.174.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:1a:28:24:09:00:71:f2:94:00:58:47:a4:d7:a7:77:45:26:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:00:00 2024 GMT Not After : Jun 11 23:59:59 2024 GMT Subject: serialNumber=e2b9f114800efa3a473eab527a4c6db892c8bd4fc51f0b164fef3b95e849adc6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d0:97:25:c6:d3:c1:e5:e6:50:01:b4:cf:e4: 37:0b:98:c5:74:4e:36:b2:b3:be:37:b3:ec:ba:ee: b5:77:27:70:e6:32:d0:1b:f4:08:58:67:34:b6:00: b7:db:06:b0:d5:32:2e:82:e4:a4:3e:30:64:14:43: 9a:7d:2c:d0:e6:65:73:c3:86:39:35:04:6e:64:44: 84:5e:db:7b:a7:82:fa:29:73:b9:1d:25:71:15:c2: 92:a6:87:c1:44:54:46:e4:ca:93:8f:77:4c:37:be: 47:49:ab:0d:a1:8e:4d:36:02:0c:08:6a:9f:e0:0d: 4a:e8:47:71:59:1c:58:b1:ab:bf:10:ce:3e:cf:b9: 5d:d4:b1:d3:fb:db:84:19:60:39:87:d2:cd:a0:3e: b1:27:eb:81:f3:18:7d:b7:ec:a3:85:61:f6:67:06: 21:86:e8:c0:11:fc:c6:4f:13:9f:04:db:4b:1f:0d: 64:78:5d:7b:5a:82:c2:0d:e9:4a:ed:c1:f7:33:5e: 48:a1:03:fc:a8:0c:7a:1f:05:29:ae:d9:2f:7b:7c: 43:4f:17:ed:64:c4:1d:75:9d:dc:8a:78:08:4b:28: 7e:7e:9e:1c:08:72:09:34:28:8b:17:90:66:33:14: 93:7c:54:8d:f6:d5:04:f5:b6:27:c0:9a:db:af:26: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:00:87:36:7C:F9:0D:58:2F:41:F1:13:38:A1:C6:DF:73:12:79:DC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfdb8340-8105-4c9e-8fe1-0843503cee82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.174.0.0/16 Signature Algorithm: sha256WithRSAEncryption 77:f6:83:e0:e9:4c:c4:71:38:6b:5b:f5:03:89:15:98:1b:39: 91:1a:b8:72:68:2e:77:c7:a3:3e:37:0e:0c:2e:8d:ff:77:1e: 2d:6c:7b:ff:29:5e:1d:1b:7b:99:87:83:15:06:9c:60:eb:a1: 45:d4:7c:38:10:4c:66:4e:f6:7c:3c:ce:12:2a:dd:fa:25:73: f0:56:a7:57:22:26:c9:43:f6:ed:69:24:6d:87:f3:85:ed:66: 5f:14:84:76:cf:5a:20:7c:0a:d5:f4:6d:05:0c:84:59:03:ab: c9:46:4c:fe:7c:b6:ea:ca:88:8f:38:1b:a1:eb:fa:25:e8:a1: 47:50:11:32:c3:e4:6c:0e:01:6f:71:83:33:59:85:12:58:bb: 73:8c:e6:32:e0:ff:01:bf:b6:51:43:7b:8d:5c:54:8f:55:de: 69:e9:0d:99:0a:4b:37:b7:be:8b:f9:c1:15:54:ed:f5:e0:a0: 98:ff:28:86:35:ba:90:66:2c:6e:9b:38:51:a8:31:9a:ca:b4: 3a:e1:34:22:83:f7:83:50:1e:4d:0c:19:6f:2a:53:9f:bc:a3: 47:76:cb:cd:de:aa:57:ea:54:b9:d0:6f:88:58:35:a1:93:4a: 41:a0:a0:05:4d:fc:f4:57:c6:4d:e1:dd:a0:65:fa:d0:57:ca: 20:4b:dc:7c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfhooJAkAcfKUAFhHpNend0Um1YAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNTA3MDAwMDAwWhcNMjQwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMmI5ZjExNDgwMGVmYTNhNDczZWFiNTI3YTRjNmRiODky YzhiZDRmYzUxZjBiMTY0ZmVmM2I5NWU4NDlhZGM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF0JclxtPB5eZQAbTP5DcLmMV0Tjays743s+y67rV3J3Dm MtAb9AhYZzS2ALfbBrDVMi6C5KQ+MGQUQ5p9LNDmZXPDhjk1BG5kRIRe23ungvop c7kdJXEVwpKmh8FEVEbkypOPd0w3vkdJqw2hjk02AgwIap/gDUroR3FZHFixq78Q zj7PuV3UsdP724QZYDmH0s2gPrEn64HzGH237KOFYfZnBiGG6MAR/MZPE58E20sf DWR4XXtagsIN6UrtwfczXkihA/yoDHofBSmu2S97fENPF+1kxB11ndyKeAhLKH5+ nhwIcgk0KIsXkGYzFJN8VI321QT1tifAmtuvJtndAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUywCHNnz5DVgvQfETOKHG33MSedwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmZGI4MzQwLTgxMDUtNGM5ZS04ZmUxLTA4NDM1MDNjZWU4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAFrjANBgkqhkiG9w0BAQsFAAOCAQEAd/aD4OlMxHE4a1v1A4kVmBs5kRq4 cmgud8ejPjcODC6N/3ceLWx7/yleHRt7mYeDFQacYOuhRdR8OBBMZk72fDzOEird +iVz8FanVyImyUP27WkkbYfzhe1mXxSEds9aIHwK1fRtBQyEWQOryUZM/ny26sqI jzgboev6JeihR1ARMsPkbA4Bb3GDM1mFEli7c4zmMuD/Ab+2UUN7jVxUj1XeaekN mQpLN7e+i/nBFVTt9eCgmP8ohjW6kGYsbps4Uagxmsq0OuE0IoP3g1AeTQwZbypT n7yjR3bLzd6qV+pUudBviFg1oZNKQaCgBU389FfGTeHdoGX60FfKIEvcfA== -----END CERTIFICATE-----Generated at Thu May 9 01:25:48 2024 by rpki-client on console-fra.rpki-client.org