$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9dab76e-d86c-4323-8196-7cdaa44e312d.roa File: d9dab76e-d86c-4323-8196-7cdaa44e312d.roa (raw, json) Hash identifier: USBa99D8J1OJRWgJSmcEk8w2DT7s6ZuOfFnAk5SvtKs= Subject key identifier: F9:0B:A8:80:0E:D0:40:30:E3:04:92:21:03:72:21:61:78:60:FD:FC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 35CC174409CF67B154FB59EA90C72C44E20018FB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9dab76e-d86c-4323-8196-7cdaa44e312d.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 16.86.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:cc:17:44:09:cf:67:b1:54:fb:59:ea:90:c7:2c:44:e2:00:18:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=7278104a0b51db8a4d6ef557c2dc775ed691c2a36b2cd543fe01be21d5ef50bc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6c:08:20:ee:a4:16:ca:fd:5c:7f:d3:64:3c: 47:49:4d:1b:76:2f:a1:65:60:18:22:5a:cc:9f:10: 10:53:f2:9f:2b:7a:bc:f6:fd:dd:ad:8d:97:4c:1b: a8:aa:20:55:86:9f:d4:87:46:3d:41:2f:79:6e:46: d2:a4:25:78:d1:e2:be:6b:cb:db:c5:44:9b:05:96: a9:6c:61:ba:db:df:90:b7:4c:b3:06:f6:70:2a:e2: d6:7a:d5:93:60:05:ff:68:2a:61:7d:dd:9a:b9:35: 69:a7:82:29:e3:68:94:05:89:91:df:3c:f6:cc:cb: 62:b5:50:2e:82:e2:89:f4:53:06:92:2f:8c:33:01: 4a:cb:17:a9:a3:fe:ec:2d:f8:0c:44:2f:b7:bd:e9: c7:a7:2e:5e:9f:42:1d:a4:d5:2b:bc:cb:4f:ce:1f: 65:db:15:c1:29:f9:50:57:be:0b:b4:04:64:b1:13: 84:07:c2:9c:cd:78:94:9f:dc:c3:5e:e5:76:57:8d: de:8f:ad:14:99:fd:7b:0c:c2:50:8a:0e:9b:4e:41: a3:3a:ad:20:fd:5a:04:52:bb:5d:3f:5b:5b:4a:30: 19:12:53:4c:59:5b:65:20:33:76:fa:e5:54:b3:6c: 94:b7:5c:d8:84:52:7d:88:80:5a:9c:11:e9:7a:b6: 0f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0B:A8:80:0E:D0:40:30:E3:04:92:21:03:72:21:61:78:60:FD:FC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9dab76e-d86c-4323-8196-7cdaa44e312d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.86.0.0/16 Signature Algorithm: sha256WithRSAEncryption d8:43:02:44:94:f1:1a:4d:76:8a:61:ca:a8:26:da:fd:dc:c2: 87:07:2c:9b:63:e6:c0:00:eb:94:9a:17:e2:5a:b2:9d:ef:cc: 26:00:45:09:a3:87:3c:42:aa:19:a4:3a:c9:8a:67:a8:d6:78: 86:ef:9d:0b:f4:22:11:7f:b1:e1:b4:68:23:21:0d:ab:bd:4a: f6:d6:da:b0:cb:fa:27:91:d4:aa:af:b7:04:7a:05:8b:4e:d3: a2:a7:f5:61:1a:f7:99:65:50:dd:ca:02:c7:de:b5:f1:1a:9f: b6:44:78:eb:47:cd:fa:bb:96:e0:37:09:70:13:a2:d1:a6:89: 02:92:b2:86:23:ae:ac:f3:59:50:02:d8:70:fd:b4:78:7a:b4: 6c:6c:29:8b:20:7a:71:d8:90:88:a0:9d:13:d9:67:3c:a6:6c: 54:15:88:5b:fe:c9:0c:29:3e:7d:7b:7d:04:99:36:29:d5:e4: 8a:d4:b9:ff:85:44:c6:eb:fd:93:a9:3c:af:84:57:a4:77:d3: 95:a7:d7:18:d7:5e:46:09:62:75:b6:99:e8:86:ca:da:98:d0: ac:a7:b6:d6:9d:56:d6:9d:7e:d7:80:6f:dd:dc:4b:ae:8e:6a: 48:d6:f4:d3:98:b6:6c:6b:df:ca:35:66:1a:6f:d0:e4:5c:fb: 3d:81:34:91 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNcwXRAnPZ7FU+1nqkMcsROIAGPswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3Mjc4MTA0YTBiNTFkYjhhNGQ2ZWY1NTdjMmRjNzc1ZWQ2 OTFjMmEzNmIyY2Q1NDNmZTAxYmUyMWQ1ZWY1MGJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAbAgg7qQWyv1cf9NkPEdJTRt2L6FlYBgiWsyfEBBT8p8r erz2/d2tjZdMG6iqIFWGn9SHRj1BL3luRtKkJXjR4r5ry9vFRJsFlqlsYbrb35C3 TLMG9nAq4tZ61ZNgBf9oKmF93Zq5NWmnginjaJQFiZHfPPbMy2K1UC6C4on0UwaS L4wzAUrLF6mj/uwt+AxEL7e96cenLl6fQh2k1Su8y0/OH2XbFcEp+VBXvgu0BGSx E4QHwpzNeJSf3MNe5XZXjd6PrRSZ/XsMwlCKDptOQaM6rSD9WgRSu10/W1tKMBkS U0xZW2UgM3b65VSzbJS3XNiEUn2IgFqcEel6tg8nAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU+QuogA7QQDDjBJIhA3IhYXhg/fwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q5ZGFiNzZlLWQ4NmMtNDMyMy04MTk2LTdjZGFhNDRlMzEyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQVjANBgkqhkiG9w0BAQsFAAOCAQEA2EMCRJTxGk12imHKqCba/dzChwcs m2PmwADrlJoX4lqyne/MJgBFCaOHPEKqGaQ6yYpnqNZ4hu+dC/QiEX+x4bRoIyEN q71K9tbasMv6J5HUqq+3BHoFi07Toqf1YRr3mWVQ3coCx9618RqftkR460fN+ruW 4DcJcBOi0aaJApKyhiOurPNZUALYcP20eHq0bGwpiyB6cdiQiKCdE9lnPKZsVBWI W/7JDCk+fXt9BJk2KdXkitS5/4VExuv9k6k8r4RXpHfTlafXGNdeRglidbaZ6IbK 2pjQrKe21p1W1p1+14Bv3dxLro5qSNb005i2bGvfyjVmGm/Q5Fz7PYE0kQ== -----END CERTIFICATE-----Generated at Thu May 9 01:26:26 2024 by rpki-client on console-ams.rpki-client.org