$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1663974-a760-449b-a885-a7390410fbee.roa File: e1663974-a760-449b-a885-a7390410fbee.roa (raw, json) Hash identifier: I3EmLDkrlVUYCbk9sUxyMSi+MwXe6meCQFEmMRfZxKA= Subject key identifier: 99:C2:0C:26:67:3C:D3:86:D3:53:35:FC:07:1C:CD:01:DF:5F:85:90 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4B6D6ABD0863118D496C5A8EBD66BCD19BCFB4B6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1663974-a760-449b-a885-a7390410fbee.roa Signing time: Mon 15 Apr 2024 00:00:00 +0000 ROA not before: Mon 15 Apr 2024 00:00:00 +0000 ROA not after: Mon 20 May 2024 23:59:59 +0000 asID: 8987 IP address blocks: 194.148.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:6d:6a:bd:08:63:11:8d:49:6c:5a:8e:bd:66:bc:d1:9b:cf:b4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:00 2024 GMT Not After : May 20 23:59:59 2024 GMT Subject: serialNumber=082f90e55fea9793ca194c70305b250a2633d37c32a8414e55454c37f1ac674d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:62:bf:88:cd:07:9f:2b:db:99:a1:34:25:61: 59:66:e3:06:2c:48:68:91:f4:c3:7f:32:be:29:ec: 38:09:07:a5:63:bc:2f:f7:60:5f:fd:41:dd:01:92: 30:02:ad:e3:d7:23:a8:1a:9a:8e:88:5b:f5:1b:06: 95:7d:a3:7b:ac:2a:d5:f4:40:bd:7b:87:42:84:17: 0d:d0:a1:63:8f:7b:a3:06:0e:26:15:e8:ad:0c:c9: 42:8d:9c:17:9f:d8:2e:a2:d1:7a:83:d5:b9:25:37: b2:ad:8a:78:2d:3b:08:35:3c:b0:da:bb:06:f1:f6: 3f:7e:84:76:ea:65:f7:02:20:8c:01:02:1a:b6:2f: b3:3d:09:15:99:f1:fa:87:bb:29:35:7e:24:7b:05: 29:7a:90:57:e5:91:83:be:63:98:ad:74:81:10:c9: 43:b4:cc:4f:7e:43:5c:c7:b9:af:7c:c2:ee:b8:f4: ae:e1:d3:01:68:88:c6:00:af:42:d0:d2:7c:c4:45: 22:d5:72:0b:fa:33:bc:40:4a:dc:71:bc:12:36:b2: e4:f4:2e:f0:c7:9e:ff:dc:2d:16:e0:94:cb:ab:70: 68:e2:13:04:b3:00:32:2c:77:28:63:71:1e:80:ec: 72:5e:cf:29:c8:c2:ab:0b:d6:ee:af:55:76:81:5d: 6b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C2:0C:26:67:3C:D3:86:D3:53:35:FC:07:1C:CD:01:DF:5F:85:90 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1663974-a760-449b-a885-a7390410fbee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.148.128.0/17 Signature Algorithm: sha256WithRSAEncryption 08:d0:6f:22:fe:ff:54:e8:28:a4:a9:c3:aa:b6:96:ec:fd:2a: de:64:ca:85:1c:3a:c0:04:84:44:27:e6:40:16:8a:9c:67:14: 5c:fd:e1:de:3d:18:9a:18:4a:a9:27:49:7b:25:c1:0a:e4:3d: b7:4c:44:bf:4f:f2:88:e6:08:dd:a2:90:17:91:c1:ec:fc:33: f9:e8:80:71:a2:f4:b9:68:2c:36:99:1a:41:44:83:63:7b:6f: 10:7c:af:ef:20:44:6f:ac:d7:6c:77:c5:ea:ca:51:ea:72:7b: 29:c5:10:74:ae:9f:9d:50:5c:9d:16:e9:76:18:e9:61:0b:7b: 37:54:8d:85:a0:a3:a0:b2:09:30:74:fe:3a:bd:2f:03:b3:1a: 35:d4:28:c4:c7:08:3e:3f:38:d3:dd:5b:ac:ec:53:ac:58:4a: d2:9d:fc:bf:a0:e9:25:6d:c5:1c:c7:5c:92:b7:3c:db:59:86: 7f:59:a0:de:02:6f:11:d0:1c:62:95:90:c5:4c:e9:5b:d7:23: d8:46:fd:56:d1:d2:eb:45:c8:c8:43:0b:0d:df:37:02:b7:6b: a7:21:74:0b:06:91:b9:52:e8:e1:30:6e:02:86:79:5a:48:34: eb:85:1b:cc:4b:b5:28:14:3d:51:86:2a:46:51:75:c1:82:55: bd:a7:e6:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS21qvQhjEY1JbFqOvWa80ZvPtLYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE1MDAwMDAwWhcNMjQwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwODJmOTBlNTVmZWE5NzkzY2ExOTRjNzAzMDViMjUwYTI2 MzNkMzdjMzJhODQxNGU1NTQ1NGMzN2YxYWM2NzRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVYr+IzQefK9uZoTQlYVlm4wYsSGiR9MN/Mr4p7DgJB6Vj vC/3YF/9Qd0BkjACrePXI6gamo6IW/UbBpV9o3usKtX0QL17h0KEFw3QoWOPe6MG DiYV6K0MyUKNnBef2C6i0XqD1bklN7KtingtOwg1PLDauwbx9j9+hHbqZfcCIIwB Ahq2L7M9CRWZ8fqHuyk1fiR7BSl6kFflkYO+Y5itdIEQyUO0zE9+Q1zHua98wu64 9K7h0wFoiMYAr0LQ0nzERSLVcgv6M7xAStxxvBI2suT0LvDHnv/cLRbglMurcGji EwSzADIsdyhjcR6A7HJezynIwqsL1u6vVXaBXWsdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmcIMJmc804bTUzX8BxzNAd9fhZAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UxNjYzOTc0LWE3NjAtNDQ5Yi1hODg1LWE3MzkwNDEwZmJlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfClIAwDQYJKoZIhvcNAQELBQADggEBAAjQbyL+/1ToKKSpw6q2luz9Kt5k yoUcOsAEhEQn5kAWipxnFFz94d49GJoYSqknSXslwQrkPbdMRL9P8ojmCN2ikBeR wez8M/nogHGi9LloLDaZGkFEg2N7bxB8r+8gRG+s12x3xerKUepyeynFEHSun51Q XJ0W6XYY6WELezdUjYWgo6CyCTB0/jq9LwOzGjXUKMTHCD4/ONPdW6zsU6xYStKd /L+g6SVtxRzHXJK3PNtZhn9ZoN4CbxHQHGKVkMVM6VvXI9hG/VbR0utFyMhDCw3f NwK3a6chdAsGkblS6OEwbgKGeVpINOuFG8xLtSgUPVGGKkZRdcGCVb2n5lg= -----END CERTIFICATE-----Generated at Thu May 9 15:19:58 2024 by rpki-client on console-fra.rpki-client.org