$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18d86679-2ef1-4da4-9745-72b349021f5b.roa File: 18d86679-2ef1-4da4-9745-72b349021f5b.roa (raw, json) Hash identifier: ZNyqSES2Ge9QZ/dZAZvSamHBFTDs3RKFLRqJxu2HZus= Subject key identifier: 02:4F:68:41:A1:DB:72:D8:A4:DF:57:77:BF:23:B9:1E:36:60:E5:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 561ED6DF5C4BD1AA3E6C34506B207C42F2CF5671 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18d86679-2ef1-4da4-9745-72b349021f5b.roa Signing time: Mon 28 Oct 2024 00:00:00 +0000 ROA not before: Mon 28 Oct 2024 00:00:00 +0000 ROA not after: Mon 02 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 40.193.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1e:d6:df:5c:4b:d1:aa:3e:6c:34:50:6b:20:7c:42:f2:cf:56:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 28 00:00:00 2024 GMT Not After : Dec 2 23:59:59 2024 GMT Subject: serialNumber=d5574f197c5f37290cb63831d3c46fa0cdfb8246c3ecd5c4cdd2bacc1542f0a8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:cd:8b:1c:7f:0a:dc:9a:cc:f8:d2:1f:06: 57:96:bc:fd:d7:21:da:b4:2d:44:0a:58:09:c0:ab: 40:cb:2f:e3:c8:7c:ef:fe:37:85:34:db:c7:38:8f: e2:42:33:f0:db:04:09:95:63:e0:13:68:56:28:eb: 23:8f:82:1e:7d:80:b8:26:e3:e7:c5:d3:c0:f1:5f: 34:03:40:4a:72:ee:b4:e6:c8:3b:1c:1f:be:1e:af: 1d:f6:14:99:a9:0a:98:66:0b:28:ad:f4:ae:2a:ac: 58:4c:39:a6:21:da:45:41:13:65:e9:f5:63:ed:9a: 06:11:38:8a:1a:c9:14:5d:e8:22:92:bc:e1:e3:b6: e9:18:14:6c:48:e7:15:5c:be:c2:14:9e:34:e1:79: 8a:a4:bd:72:7d:e3:f3:7d:2b:f3:ae:da:9b:0f:54: 12:4c:3f:82:98:3f:2f:ff:c4:47:65:4d:89:ce:27: 53:af:9b:77:37:67:5c:8b:96:e6:70:27:56:5d:7d: ff:a0:f8:07:37:6a:a1:56:aa:65:06:19:7a:7d:d2: 49:31:3d:b7:bd:4e:64:75:71:21:d8:be:09:98:a9: 5d:94:4b:22:13:05:8f:e0:3b:65:0f:46:9e:44:34: 98:42:e6:e3:71:40:26:6a:b1:a2:cc:20:13:db:1d: 78:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4F:68:41:A1:DB:72:D8:A4:DF:57:77:BF:23:B9:1E:36:60:E5:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18d86679-2ef1-4da4-9745-72b349021f5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.193.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3e:88:75:8d:3d:d7:e9:70:7d:be:af:6b:ad:a9:1a:45:14:b4: db:71:a9:9b:cb:ee:37:91:a3:d6:48:33:e7:6c:27:00:df:96: bf:8a:b2:6d:f0:a5:13:b9:a5:1f:bc:8d:02:c7:3f:f3:7a:e9: 51:ed:bd:df:4d:0f:63:de:53:cb:b1:ba:a9:50:52:6b:69:d4: 52:45:ee:bb:be:c1:00:92:6d:b2:20:57:20:48:78:a1:10:1b: 9e:09:b6:3a:43:b9:27:88:15:36:de:a3:81:97:af:17:2e:65: 13:d3:d6:ec:17:3e:92:79:a9:a8:fd:d7:b0:ac:1c:d6:54:2c: 1a:fa:38:f8:3a:af:ab:6f:0c:f5:eb:b5:0c:bf:11:eb:20:00: c4:76:6d:5f:10:28:16:e2:04:ea:29:29:dc:c8:34:1d:ea:b7: e7:27:b7:57:46:a6:4a:bf:be:9f:77:8d:7b:aa:b3:8e:fc:af: c6:cb:a5:e6:36:34:76:ef:94:a2:47:ed:68:42:1a:bd:f5:a8: c3:72:0b:cb:6a:52:b7:82:77:2f:fd:df:6c:e1:1d:2b:14:24: a2:b3:a8:5d:ab:5a:ad:62:07:cc:d5:bc:bf:80:01:3e:73:ce: ef:aa:9c:18:b0:cb:54:69:a5:26:83:0c:e6:5a:40:69:e8:22: da:b7:c5:34 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVh7W31xL0ao+bDRQayB8QvLPVnEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMDI4MDAwMDAwWhcNMjQxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTU3NGYxOTdjNWYzNzI5MGNiNjM4MzFkM2M0NmZhMGNk ZmI4MjQ2YzNlY2Q1YzRjZGQyYmFjYzE1NDJmMGE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC+M2LHH8K3JrM+NIfBleWvP3XIdq0LUQKWAnAq0DLL+PI fO/+N4U028c4j+JCM/DbBAmVY+ATaFYo6yOPgh59gLgm4+fF08DxXzQDQEpy7rTm yDscH74erx32FJmpCphmCyit9K4qrFhMOaYh2kVBE2Xp9WPtmgYROIoayRRd6CKS vOHjtukYFGxI5xVcvsIUnjTheYqkvXJ94/N9K/Ou2psPVBJMP4KYPy//xEdlTYnO J1Ovm3c3Z1yLluZwJ1Zdff+g+Ac3aqFWqmUGGXp90kkxPbe9TmR1cSHYvgmYqV2U SyITBY/gO2UPRp5ENJhC5uNxQCZqsaLMIBPbHXiJAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUAk9oQaHbctik31d3vyO5HjZg5VgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE4ZDg2Njc5LTJlZjEtNGRhNC05NzQ1LTcyYjM0OTAyMWY1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAowTANBgkqhkiG9w0BAQsFAAOCAQEAPoh1jT3X6XB9vq9rrakaRRS023Gp m8vuN5Gj1kgz52wnAN+Wv4qybfClE7mlH7yNAsc/83rpUe29300PY95Ty7G6qVBS a2nUUkXuu77BAJJtsiBXIEh4oRAbngm2OkO5J4gVNt6jgZevFy5lE9PW7Bc+knmp qP3XsKwc1lQsGvo4+Dqvq28M9eu1DL8R6yAAxHZtXxAoFuIE6ikp3Mg0Heq35ye3 V0amSr++n3eNe6qzjvyvxsul5jY0du+UokftaEIavfWow3ILy2pSt4J3L/3fbOEd KxQkorOoXatarWIHzNW8v4ABPnPO76qcGLDLVGmlJoMM5lpAaegi2rfFNA== -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:44 2024 by rpki-client on console-fra.rpki-client.org