$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1923a56c-3eda-41d9-895a-e345ae9611d0.roa File: 1923a56c-3eda-41d9-895a-e345ae9611d0.roa (raw, json) Hash identifier: BtO1l86qC8FCHkC8ICZuqzT5eiheuo08XAQZHlWOyLo= Subject key identifier: 66:9E:C7:3D:0F:31:3A:08:DE:1A:8A:49:49:96:8F:6B:B1:BB:2A:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 564137301CFE2D11FA9271ABDC32ED42459F1D0E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1923a56c-3eda-41d9-895a-e345ae9611d0.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 76.205.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:41:37:30:1c:fe:2d:11:fa:92:71:ab:dc:32:ed:42:45:9f:1d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=2aa6f7d23fb43bf34eb2e873deac560abf4746f819c08572efde5d80fbb638d6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:d3:2c:d0:69:b9:33:cf:1b:3c:39:ca:20: a8:3b:3c:4a:26:fb:26:e8:d6:d5:cd:13:a4:ab:02: 16:e8:68:da:ca:c5:ca:21:ff:bd:58:ba:ab:1a:23: b9:34:80:74:f2:f1:96:3e:bf:15:49:92:51:14:83: e2:ef:ab:c0:81:dd:50:fd:41:5c:2c:aa:9d:c1:97: 51:c7:97:bb:29:0c:40:7e:da:41:5c:22:58:ff:7d: 26:ec:16:55:d9:de:52:be:1c:e3:f0:0d:08:49:33: 0b:dd:d7:de:0c:5d:e8:5a:4f:80:79:38:81:72:1f: f5:f1:7b:eb:93:c5:1f:4f:4f:77:fe:d4:69:da:43: 44:78:a9:30:e3:8a:49:d2:76:c3:ac:ed:fb:98:d1: 69:72:55:73:8b:91:05:c8:ec:3f:46:6f:0a:22:b2: 54:aa:87:df:31:07:04:7f:47:58:16:83:42:d1:2a: 44:2d:3c:c1:be:a0:d6:7a:7f:50:e6:70:96:0b:00: 0e:9e:0a:09:64:e0:53:2f:d2:ca:e8:f8:d3:47:d7: 9d:8f:41:e5:d4:02:a7:97:58:48:a3:37:fe:2d:9b: c3:d6:45:8b:8f:69:30:c0:8b:78:8f:64:3d:55:7d: 7d:97:99:f6:7a:05:13:49:6d:c1:4a:f5:c5:b8:44: 46:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9E:C7:3D:0F:31:3A:08:DE:1A:8A:49:49:96:8F:6B:B1:BB:2A:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1923a56c-3eda-41d9-895a-e345ae9611d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.205.64.0/18 Signature Algorithm: sha256WithRSAEncryption 58:86:46:ee:23:12:22:bb:1d:fa:88:9a:fa:62:30:4f:c4:ba: 3c:45:c3:96:ac:77:30:b8:fc:76:fd:13:d4:a3:03:3a:47:68: 1c:9c:7a:a1:81:b4:98:ad:e4:ce:a0:c7:46:4f:06:c9:71:41: 03:7f:e3:0b:10:54:6a:71:50:32:8e:a2:6d:1a:4d:ba:c6:cd: cd:91:d4:42:0b:b6:9b:a0:96:c6:4f:97:81:f4:d5:35:cb:75: 9e:4c:25:82:c6:33:d6:00:fa:75:45:57:60:84:37:94:90:00: de:a8:19:6c:e8:94:c5:3f:7c:5a:45:ff:ce:56:de:3d:f1:84: f2:11:8a:21:7f:cb:81:9c:31:92:c7:eb:d8:dd:ed:31:d4:32: 43:bc:35:8d:58:6b:12:67:15:15:75:e5:41:f0:88:13:32:3b: 8b:70:f2:20:19:5a:fd:07:3d:75:c3:91:03:9a:6a:26:aa:a2: 2d:8c:35:2f:72:5a:85:9b:ea:64:cc:cf:03:21:e2:d0:31:a6: bd:ca:60:5e:54:37:c4:80:85:31:1c:12:e3:ff:bb:86:0b:d8: d6:ab:2c:74:6d:91:e0:92:a0:ac:ce:9e:a7:55:af:3c:46:e0: 2d:a7:38:8f:a0:10:4e:60:29:48:01:99:9c:ad:a0:22:b4:c4: ca:31:2b:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVkE3MBz+LRH6knGr3DLtQkWfHQ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYWE2ZjdkMjNmYjQzYmYzNGViMmU4NzNkZWFjNTYwYWJm NDc0NmY4MTljMDg1NzJlZmRlNWQ4MGZiYjYzOGQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx4dMs0Gm5M88bPDnKIKg7PEom+ybo1tXNE6SrAhboaNrK xcoh/71YuqsaI7k0gHTy8ZY+vxVJklEUg+Lvq8CB3VD9QVwsqp3Bl1HHl7spDEB+ 2kFcIlj/fSbsFlXZ3lK+HOPwDQhJMwvd194MXehaT4B5OIFyH/Xxe+uTxR9PT3f+ 1GnaQ0R4qTDjiknSdsOs7fuY0WlyVXOLkQXI7D9GbwoislSqh98xBwR/R1gWg0LR KkQtPMG+oNZ6f1DmcJYLAA6eCglk4FMv0sro+NNH152PQeXUAqeXWEijN/4tm8PW RYuPaTDAi3iPZD1VfX2XmfZ6BRNJbcFK9cW4REZbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZp7HPQ8xOgjeGopJSZaPa7G7KnowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE5MjNhNTZjLTNlZGEtNDFkOS04OTVhLWUzNDVhZTk2MTFkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZMzUAwDQYJKoZIhvcNAQELBQADggEBAFiGRu4jEiK7HfqImvpiME/EujxF w5asdzC4/Hb9E9SjAzpHaByceqGBtJit5M6gx0ZPBslxQQN/4wsQVGpxUDKOom0a TbrGzc2R1EILtpuglsZPl4H01TXLdZ5MJYLGM9YA+nVFV2CEN5SQAN6oGWzolMU/ fFpF/85W3j3xhPIRiiF/y4GcMZLH69jd7THUMkO8NY1YaxJnFRV15UHwiBMyO4tw 8iAZWv0HPXXDkQOaaiaqoi2MNS9yWoWb6mTMzwMh4tAxpr3KYF5UN8SAhTEcEuP/ u4YL2NarLHRtkeCSoKzOnqdVrzxG4C2nOI+gEE5gKUgBmZytoCK0xMoxKyI= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:45 2024 by rpki-client on console-fra.rpki-client.org