$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1b44df0-3fbd-4055-ab4e-062acf28c8b2.roa File: f1b44df0-3fbd-4055-ab4e-062acf28c8b2.roa (raw, json) Hash identifier: kEwKcFUbbN4Vkzji88Nad/aky91r+l041GhQt2l5Ung= Subject key identifier: 85:B6:5D:49:73:01:E5:90:62:C1:EA:51:51:0F:6E:D5:C0:46:D8:E5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1AECA8C1E303FBECD4BABEF9C48252A097B89648 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1b44df0-3fbd-4055-ab4e-062acf28c8b2.roa Signing time: Sat 20 Apr 2024 00:00:00 +0000 ROA not before: Sat 20 Apr 2024 00:00:00 +0000 ROA not after: Sat 25 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 158.80.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ec:a8:c1:e3:03:fb:ec:d4:ba:be:f9:c4:82:52:a0:97:b8:96:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 20 00:00:00 2024 GMT Not After : May 25 23:59:59 2024 GMT Subject: serialNumber=5dbc4670ecd03da4cd704ea6bd74b0aad032e4ebcf09482c0dd47e2aebd8eb0e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e4:16:a0:2e:9a:1b:e4:ce:cf:f3:6b:ae:4b: e4:bf:42:97:08:01:fa:da:30:02:8c:7b:39:ce:d3: 18:d9:39:03:5a:6e:59:79:72:5e:db:33:23:cd:42: 8a:02:f1:26:34:6f:03:d6:81:c7:03:6e:f1:1e:31: 25:ba:13:9e:87:53:0d:d3:8e:4a:a6:fb:cc:e2:94: 1c:b4:95:68:e3:09:b9:6a:36:20:74:8b:22:58:50: f4:41:bc:ab:01:cb:fa:a6:65:b1:7c:d5:11:5c:79: 1b:3f:dd:d2:67:c7:7c:f3:37:9f:fe:fb:16:12:dd: b0:93:65:f8:83:b2:97:23:c4:27:23:2c:0f:39:0d: fa:24:47:98:aa:e0:87:72:4e:ba:c5:3b:09:88:6d: 1a:8f:b0:93:f1:a4:89:a9:57:ad:5a:41:49:c4:8b: 0c:e9:44:54:0f:78:90:fd:49:44:a8:0c:75:7c:4c: 3c:fb:99:09:6c:21:a7:a8:80:fd:17:2a:b3:1b:8a: 5b:75:77:63:db:d4:08:bf:1e:18:00:c4:29:b1:cb: 58:a1:3d:9b:cf:e3:d8:46:8e:73:b3:3e:48:d8:17: 18:50:61:6b:34:c9:5b:1c:1f:fd:c8:ea:89:9c:8b: 58:f8:bf:a7:8e:b9:1f:2d:7a:bf:c5:41:d9:97:b8: f1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B6:5D:49:73:01:E5:90:62:C1:EA:51:51:0F:6E:D5:C0:46:D8:E5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1b44df0-3fbd-4055-ab4e-062acf28c8b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.80.0.0/17 Signature Algorithm: sha256WithRSAEncryption 17:50:2d:89:b0:9a:9c:ff:f6:3f:0a:00:5c:c3:55:a1:4e:4b: a7:51:f1:22:ca:de:28:a9:f2:ae:78:e9:8c:0a:d3:37:a8:6d: aa:e5:d1:04:65:0a:7d:17:9d:2e:46:05:6d:be:7e:78:4e:e9: 28:2e:35:4b:d5:65:f0:c8:72:6f:1e:60:98:0f:7d:07:12:7e: 4d:4f:ef:43:b6:02:c0:e2:84:f6:09:76:53:86:ab:02:42:f6: d5:95:3f:68:ed:d4:3f:0c:a3:bf:c9:38:7c:09:40:09:f9:3f: 19:f6:23:3f:7c:c7:fb:57:de:55:55:aa:c2:45:69:72:44:f2: d9:9a:d5:13:f2:24:dc:e6:d6:3e:e7:a2:3a:7a:1a:a0:9d:89: cf:6c:be:0c:b9:e8:ed:c7:39:36:1b:5c:3e:a1:bb:e0:8a:b0: 83:eb:4b:64:b8:5d:cd:81:9a:5a:20:60:d8:67:61:dc:12:26: bd:b0:15:82:f4:e4:34:0f:b4:99:eb:c8:4b:7a:73:de:99:df: 28:bf:da:c1:4b:e2:bf:54:2c:ac:09:32:27:6b:dd:14:12:22: 62:3a:d1:e3:6a:82:19:bc:92:ce:99:a7:16:bf:ac:22:66:f7: a8:64:83:f6:24:57:8b:f7:a2:8d:ab:bf:25:4e:3c:0c:42:40: ed:51:da:6f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGuyoweMD++zUur75xIJSoJe4lkgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDIwMDAwMDAwWhcNMjQwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZGJjNDY3MGVjZDAzZGE0Y2Q3MDRlYTZiZDc0YjBhYWQw MzJlNGViY2YwOTQ4MmMwZGQ0N2UyYWViZDhlYjBlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs5BagLpob5M7P82uuS+S/QpcIAfraMAKMeznO0xjZOQNa bll5cl7bMyPNQooC8SY0bwPWgccDbvEeMSW6E56HUw3Tjkqm+8zilBy0lWjjCblq NiB0iyJYUPRBvKsBy/qmZbF81RFceRs/3dJnx3zzN5/++xYS3bCTZfiDspcjxCcj LA85DfokR5iq4IdyTrrFOwmIbRqPsJPxpImpV61aQUnEiwzpRFQPeJD9SUSoDHV8 TDz7mQlsIaeogP0XKrMbilt1d2Pb1Ai/HhgAxCmxy1ihPZvP49hGjnOzPkjYFxhQ YWs0yVscH/3I6omci1j4v6eOuR8ter/FQdmXuPGtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhbZdSXMB5ZBiwepRUQ9u1cBG2OUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YxYjQ0ZGYwLTNmYmQtNDA1NS1hYjRlLTA2MmFjZjI4YzhiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeeUAAwDQYJKoZIhvcNAQELBQADggEBABdQLYmwmpz/9j8KAFzDVaFOS6dR 8SLK3iip8q546YwK0zeobarl0QRlCn0XnS5GBW2+fnhO6SguNUvVZfDIcm8eYJgP fQcSfk1P70O2AsDihPYJdlOGqwJC9tWVP2jt1D8Mo7/JOHwJQAn5Pxn2Iz98x/tX 3lVVqsJFaXJE8tma1RPyJNzm1j7nojp6GqCdic9svgy56O3HOTYbXD6hu+CKsIPr S2S4Xc2BmlogYNhnYdwSJr2wFYL05DQPtJnryEt6c96Z3yi/2sFL4r9ULKwJMidr 3RQSImI60eNqghm8ks6Zpxa/rCJm96hkg/YkV4v3oo2rvyVOPAxCQO1R2m8= -----END CERTIFICATE-----Generated at Thu May 2 04:02:45 2024 by rpki-client on console-fra.rpki-client.org