$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ba867cc-da52-41c7-af35-c6ddfe3f1f4d.roa File: 1ba867cc-da52-41c7-af35-c6ddfe3f1f4d.roa (raw, json) Hash identifier: a5aNPdKDnkxMd0/iSlVzk/weThAg4yXMYJGSKLfWcDI= Subject key identifier: B3:36:EB:E7:41:4D:9D:17:21:B8:3A:49:9A:6C:CF:47:26:7A:E9:03 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 476F9488C3D1ECE2CE7A3BF6939678AA2A1693AD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ba867cc-da52-41c7-af35-c6ddfe3f1f4d.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 207.127.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:6f:94:88:c3:d1:ec:e2:ce:7a:3b:f6:93:96:78:aa:2a:16:93:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=3ed14b65c1ed2efa4cc1f2919888e6abf39408c4e68ca5f4128b88cdd4586f06, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e3:02:33:da:b3:a7:e8:14:dc:bd:e8:76:f1: 5c:a0:f5:b1:5f:38:06:4c:01:c1:4e:7f:69:5d:2d: 12:9c:a1:e6:78:94:4e:cb:90:ad:ca:4b:e6:e9:82: ce:53:e6:2b:f3:f0:58:c9:15:2b:76:55:a6:ca:21: dc:78:83:81:65:86:d4:a5:bd:f4:9b:12:c5:92:a0: 18:60:9e:2b:f7:e2:22:11:d0:e6:61:e1:66:cd:85: ca:1c:21:ee:1b:9f:e8:29:18:5d:6b:ff:12:f8:18: cd:ee:97:c7:3f:59:5f:e7:5f:9d:4d:18:1d:72:32: da:67:4b:d4:85:f6:7d:98:9c:8b:ce:30:6d:94:c9: 2c:59:86:fd:00:fa:45:aa:aa:a2:fe:97:1a:09:28: 16:27:80:98:a0:a2:b6:68:da:4e:aa:8b:0b:8c:9c: 25:99:e3:d2:c9:c3:d1:ad:aa:e0:de:44:f3:2c:49: e6:b6:28:ea:1e:88:df:51:e8:1b:4b:82:5f:cc:84: 90:76:57:00:50:69:88:f5:30:96:30:68:c2:5f:73: 5b:b5:49:14:1f:9f:95:9b:b9:ea:7d:f4:e1:6f:dd: 56:35:3e:d9:de:44:6c:5d:9f:ca:95:93:39:4b:2e: 85:7b:6c:f5:52:cc:33:71:ff:35:fc:ba:3a:61:49: 7f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:36:EB:E7:41:4D:9D:17:21:B8:3A:49:9A:6C:CF:47:26:7A:E9:03 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ba867cc-da52-41c7-af35-c6ddfe3f1f4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.127.128.0/17 Signature Algorithm: sha256WithRSAEncryption 07:38:6c:7c:3e:49:b7:99:40:98:3b:91:5b:9c:ae:c9:c3:97: df:4b:b4:30:1e:7a:01:28:8f:30:a2:7d:7a:2c:e9:b5:2b:27: 60:c7:94:a5:2f:84:e6:b5:4e:bd:6b:89:84:c4:a4:ea:67:ba: ac:1b:05:12:1f:22:be:04:d7:7a:0c:e5:7b:18:3c:c5:ba:50: 50:ed:a4:11:4b:35:fc:5c:e6:70:f0:82:fe:a0:92:b7:7a:3d: 37:a3:09:c4:4d:42:db:26:00:d6:47:a9:15:a0:86:3c:d8:07: 97:18:9e:4f:9d:95:f9:af:98:9e:4c:fd:eb:41:92:88:02:83: 86:d6:8c:70:00:b6:37:1e:ec:ce:36:e1:5f:6f:e7:14:72:d1: 96:aa:0c:7c:ff:83:e7:45:6c:68:c9:f7:f7:c3:5c:e3:65:7e: 78:c3:8f:14:5d:e0:f6:98:91:2b:8c:4d:7f:a0:65:86:0b:54: 1d:6a:14:50:4a:f8:ff:9b:83:c7:04:43:1f:81:21:ba:81:d7: c2:4e:21:49:d5:e7:f1:3d:b5:91:24:ee:95:a0:b7:9d:a4:60: 95:94:74:34:58:82:45:1f:f8:5d:8e:6b:5f:f1:3b:56:a5:20: 61:4e:2f:af:15:5f:d9:d2:b8:4a:0f:3c:21:26:1b:c3:16:91: 50:cd:8c:d7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR2+UiMPR7OLOejv2k5Z4qioWk60wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZWQxNGI2NWMxZWQyZWZhNGNjMWYyOTE5ODg4ZTZhYmYz OTQwOGM0ZTY4Y2E1ZjQxMjhiODhjZGQ0NTg2ZjA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq4wIz2rOn6BTcveh28Vyg9bFfOAZMAcFOf2ldLRKcoeZ4 lE7LkK3KS+bpgs5T5ivz8FjJFSt2VabKIdx4g4FlhtSlvfSbEsWSoBhgniv34iIR 0OZh4WbNhcocIe4bn+gpGF1r/xL4GM3ul8c/WV/nX51NGB1yMtpnS9SF9n2YnIvO MG2UySxZhv0A+kWqqqL+lxoJKBYngJigorZo2k6qiwuMnCWZ49LJw9GtquDeRPMs Sea2KOoeiN9R6BtLgl/MhJB2VwBQaYj1MJYwaMJfc1u1SRQfn5Wbuep99OFv3VY1 PtneRGxdn8qVkzlLLoV7bPVSzDNx/zX8ujphSX9TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUszbr50FNnRchuDpJmmzPRyZ66QMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFiYTg2N2NjLWRhNTItNDFjNy1hZjM1LWM2ZGRmZTNmMWY0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfPf4AwDQYJKoZIhvcNAQELBQADggEBAAc4bHw+SbeZQJg7kVucrsnDl99L tDAeegEojzCifXos6bUrJ2DHlKUvhOa1Tr1riYTEpOpnuqwbBRIfIr4E13oM5XsY PMW6UFDtpBFLNfxc5nDwgv6gkrd6PTejCcRNQtsmANZHqRWghjzYB5cYnk+dlfmv mJ5M/etBkogCg4bWjHAAtjce7M424V9v5xRy0ZaqDHz/g+dFbGjJ9/fDXONlfnjD jxRd4PaYkSuMTX+gZYYLVB1qFFBK+P+bg8cEQx+BIbqB18JOIUnV5/E9tZEk7pWg t52kYJWUdDRYgkUf+F2Oa1/xO1alIGFOL68VX9nSuEoPPCEmG8MWkVDNjNc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:02:21 2024 by rpki-client on console-ams.rpki-client.org