$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2aef8ac-4838-4d14-b193-6512977f0074.roa File: f2aef8ac-4838-4d14-b193-6512977f0074.roa (raw, json) Hash identifier: 8/kQ3vyPjiPOHU082KRuZFhVqHANWunrQ4/8MFrkesw= Subject key identifier: 50:34:2C:27:5E:0C:6F:66:53:FA:4E:9D:62:3F:96:2D:89:0D:74:CD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0AA5EC3885C99EC6A5F3366D73C0AEAB472215FB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2aef8ac-4838-4d14-b193-6512977f0074.roa Signing time: Tue 16 Apr 2024 00:00:00 +0000 ROA not before: Tue 16 Apr 2024 00:00:00 +0000 ROA not after: Tue 21 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 192.189.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a5:ec:38:85:c9:9e:c6:a5:f3:36:6d:73:c0:ae:ab:47:22:15:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:00 2024 GMT Not After : May 21 23:59:59 2024 GMT Subject: serialNumber=b6c6dba588d96c2a4ad42d19807ab059f9b04723560c4eb841eba1decc6f9add, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:c2:52:5b:67:be:fb:1d:b8:09:e3:cf:fb: 87:24:4f:c4:61:71:9f:6f:c7:6b:d9:ac:ff:02:a9: cf:82:d4:1d:d9:e9:ab:b7:40:4d:1f:ca:2e:69:9c: 45:35:a6:f2:df:6e:e9:04:9a:fa:e2:61:71:2e:c0: dd:9d:c6:3b:c8:7b:a8:6a:3b:44:8b:86:37:18:5f: ba:88:18:f7:ac:84:f0:99:30:92:5a:3f:a6:a5:92: df:24:c3:66:89:01:d7:3e:e9:84:45:b9:4a:9a:7e: fb:12:24:0c:4b:c5:65:d3:4f:44:d2:7c:a0:1a:e6: e9:27:da:e9:15:ce:57:0d:3e:82:84:b9:35:92:73: ae:ba:51:9b:b1:9e:da:8a:23:fc:6f:d3:71:43:9e: 61:55:72:16:85:a2:c9:17:8a:b6:e8:a6:0f:c2:7b: 9a:ff:6a:42:c0:5d:dc:f4:26:ca:f5:1d:c7:49:ed: af:8c:d1:1b:a7:ae:f1:74:b1:b0:3d:30:57:7d:66: 0d:c5:58:98:fb:9e:5c:8f:16:fb:be:74:9e:f1:7b: cf:33:96:58:a2:cd:b6:b2:8a:e1:28:22:9b:14:38: 34:1b:e9:2c:67:ea:19:b7:51:28:d3:c4:fa:c1:0e: ec:9c:0d:e2:68:87:67:b3:dc:94:eb:ca:71:d2:79: 07:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:34:2C:27:5E:0C:6F:66:53:FA:4E:9D:62:3F:96:2D:89:0D:74:CD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2aef8ac-4838-4d14-b193-6512977f0074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.189.196.0/24 Signature Algorithm: sha256WithRSAEncryption 04:2a:6e:ba:7d:b9:e9:9e:7f:5e:09:84:7a:cc:65:bc:b4:cc: 43:b1:60:10:01:f0:80:fb:0e:21:3a:dc:35:8f:1a:1e:be:28: 14:c1:45:47:22:96:5d:e0:86:86:5c:46:8a:d4:cd:15:4c:2d: 0b:4c:0d:a4:45:00:0e:cf:3d:49:95:06:dd:58:69:26:39:3d: 12:50:d2:5a:1e:8a:51:7a:15:9c:b5:37:45:7a:d2:89:b5:8e: b6:53:c0:81:9f:08:12:b4:d2:45:ca:f2:a4:f3:fb:a4:da:a1: 5a:19:c7:be:db:2e:ac:2e:95:da:07:89:d2:0b:10:7a:52:ba: 96:52:9d:2e:94:2e:10:b7:b2:a6:bf:c4:2d:16:79:5b:3a:8b: 18:a6:56:fc:bb:54:b5:37:30:6f:7d:18:83:f9:a1:a6:48:6d: 95:b8:93:6d:e4:4d:a3:ed:72:3d:b2:74:a4:85:b0:22:61:d9: 2a:3b:82:b1:23:7c:f9:5d:e7:14:75:30:dd:16:87:4a:7b:c5: 29:db:c3:ea:1e:38:6d:48:3c:19:b1:36:ad:e2:b0:2d:7d:18: 68:d0:b8:9d:ce:bf:95:ef:0c:c6:20:62:02:98:62:51:7a:0a: 31:4e:f3:24:1a:c6:d7:77:49:66:df:f7:ae:4b:de:bf:39:49: f8:c2:96:be -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCqXsOIXJnsal8zZtc8Cuq0ciFfswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDE2MDAwMDAwWhcNMjQwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNmM2ZGJhNTg4ZDk2YzJhNGFkNDJkMTk4MDdhYjA1OWY5 YjA0NzIzNTYwYzRlYjg0MWViYTFkZWNjNmY5YWRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7M8JSW2e++x24CePP+4ckT8RhcZ9vx2vZrP8Cqc+C1B3Z 6au3QE0fyi5pnEU1pvLfbukEmvriYXEuwN2dxjvIe6hqO0SLhjcYX7qIGPeshPCZ MJJaP6alkt8kw2aJAdc+6YRFuUqafvsSJAxLxWXTT0TSfKAa5ukn2ukVzlcNPoKE uTWSc666UZuxntqKI/xv03FDnmFVchaFoskXirbopg/Ce5r/akLAXdz0Jsr1HcdJ 7a+M0RunrvF0sbA9MFd9Zg3FWJj7nlyPFvu+dJ7xe88zlliizbayiuEoIpsUODQb 6Sxn6hm3USjTxPrBDuycDeJoh2ez3JTrynHSeQehAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUDQsJ14Mb2ZT+k6dYj+WLYkNdM0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyYWVmOGFjLTQ4MzgtNGQxNC1iMTkzLTY1MTI5NzdmMDA3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADAvcQwDQYJKoZIhvcNAQELBQADggEBAAQqbrp9uemef14JhHrMZby0zEOx YBAB8ID7DiE63DWPGh6+KBTBRUcill3ghoZcRorUzRVMLQtMDaRFAA7PPUmVBt1Y aSY5PRJQ0loeilF6FZy1N0V60om1jrZTwIGfCBK00kXK8qTz+6TaoVoZx77bLqwu ldoHidILEHpSupZSnS6ULhC3sqa/xC0WeVs6iximVvy7VLU3MG99GIP5oaZIbZW4 k23kTaPtcj2ydKSFsCJh2So7grEjfPld5xR1MN0Wh0p7xSnbw+oeOG1IPBmxNq3i sC19GGjQuJ3Ov5XvDMYgYgKYYlF6CjFO8yQaxtd3SWbf965L3r85SfjClr4= -----END CERTIFICATE-----Generated at Thu May 2 11:33:27 2024 by rpki-client on console-fra.rpki-client.org