$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2be1a978-631d-434d-992c-f54d5fb0adf9.roa File: 2be1a978-631d-434d-992c-f54d5fb0adf9.roa (raw, json) Hash identifier: ThZF/nXyDrXQohnqM2WiA4vFbnJlyYQDkqvdZOeEg6s= Subject key identifier: E8:8C:ED:97:CF:EE:80:F3:B0:84:04:26:F4:27:D6:B2:BC:6D:42:D0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03FAF72C5B23D7C1CF9E6A6B1B4D53CFCFA1AF42 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2be1a978-631d-434d-992c-f54d5fb0adf9.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 209.54.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:fa:f7:2c:5b:23:d7:c1:cf:9e:6a:6b:1b:4d:53:cf:cf:a1:af:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=26a051c585fa27abec166b2d2d318427d8b5a20e6fe8eebfc718fe3e20d05eb3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:69:f7:7b:fc:76:b2:18:43:c8:89:f0:cd:9f: a9:9c:1a:eb:3f:9f:52:90:0d:bd:4f:13:82:57:8e: f0:8c:86:6b:69:0d:d5:38:3e:1c:42:38:eb:76:75: ff:94:43:5c:1b:30:20:ca:6a:82:d1:4b:e5:c2:ba: 51:86:cc:32:5a:87:82:3a:70:7d:45:93:cc:03:46: 8a:1a:8d:50:d0:ae:35:b1:f9:e9:6b:d5:29:97:2c: 8a:d3:c3:1a:d9:b5:1b:55:07:59:09:65:d2:d8:08: c1:88:ad:40:5b:73:ed:03:5c:5e:08:a4:e1:b0:e2: 76:c5:26:b2:72:9f:d0:d6:ee:30:2a:07:b4:10:7b: 54:cb:68:95:e1:e1:66:b1:99:5e:33:a3:7b:d1:c3: f7:71:24:10:9c:05:f5:f5:73:98:5c:87:91:38:7a: da:9c:99:b7:01:f7:06:bc:0a:91:16:4b:db:fc:80: 67:01:e1:d7:42:46:47:6f:b7:9f:06:4e:4f:d6:d6: da:76:b1:7f:b1:db:27:28:c9:a6:66:cb:02:57:1a: 9e:bb:52:13:8f:16:23:e2:b4:c1:57:fc:73:87:fd: 22:78:bd:0f:7d:d5:13:6e:86:85:f7:03:be:25:c3: 0f:97:b8:fd:22:e2:aa:b9:23:f8:93:ea:e8:3a:d0: 18:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8C:ED:97:CF:EE:80:F3:B0:84:04:26:F4:27:D6:B2:BC:6D:42:D0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2be1a978-631d-434d-992c-f54d5fb0adf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.54.160.0/19 Signature Algorithm: sha256WithRSAEncryption cf:c0:cd:24:59:d3:d8:e8:42:3c:7d:b3:93:51:14:a9:15:62: 9c:cd:f1:5f:18:39:21:5d:cd:6e:98:3c:2b:52:ae:69:62:d2: 50:c8:4d:66:76:be:5b:13:39:25:34:7d:9d:5c:39:22:e6:4a: 44:30:bc:d7:f0:31:0d:6c:7a:d5:d3:fb:62:2c:1b:b1:ae:43: 54:5c:83:5f:6c:11:3a:99:50:d0:3e:da:25:33:17:dc:04:bc: 26:6b:b7:07:0a:3a:24:ca:c5:f9:dc:88:2c:e9:8c:dc:59:d1: 18:f6:32:0f:13:0b:ab:aa:cd:d6:f9:a5:c9:f0:80:05:ac:db: e8:0f:50:3d:43:30:23:81:23:b3:0e:76:4c:4d:22:45:aa:87: 86:3b:21:18:7b:60:bf:30:3b:e3:9b:db:62:18:78:4f:c9:ae: c7:31:f7:96:25:fe:0f:3b:db:8c:7d:c8:a6:ea:9a:f2:fe:0d: b0:78:98:d4:d1:ee:ea:b7:00:eb:16:8e:60:d1:52:ca:7d:9f: cb:27:24:09:22:7c:fd:0f:37:aa:ac:01:35:b1:55:e5:bc:76: 74:0b:fc:25:ee:6a:41:9e:39:61:93:01:2a:c1:51:01:af:e5: 62:41:00:37:fd:2c:a3:0b:b0:73:f7:1a:59:09:26:0c:f1:ed: b9:1c:01:e5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA/r3LFsj18HPnmprG01Tz8+hr0IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNmEwNTFjNTg1ZmEyN2FiZWMxNjZiMmQyZDMxODQyN2Q4 YjVhMjBlNmZlOGVlYmZjNzE4ZmUzZTIwZDA1ZWIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4afd7/HayGEPIifDNn6mcGus/n1KQDb1PE4JXjvCMhmtp DdU4PhxCOOt2df+UQ1wbMCDKaoLRS+XCulGGzDJah4I6cH1Fk8wDRooajVDQrjWx +elr1SmXLIrTwxrZtRtVB1kJZdLYCMGIrUBbc+0DXF4IpOGw4nbFJrJyn9DW7jAq B7QQe1TLaJXh4WaxmV4zo3vRw/dxJBCcBfX1c5hch5E4etqcmbcB9wa8CpEWS9v8 gGcB4ddCRkdvt58GTk/W1tp2sX+x2ycoyaZmywJXGp67UhOPFiPitMFX/HOH/SJ4 vQ991RNuhoX3A74lww+XuP0i4qq5I/iT6ug60BgLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6Iztl8/ugPOwhAQm9CfWsrxtQtAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiZTFhOTc4LTYzMWQtNDM0ZC05OTJjLWY1NGQ1ZmIwYWRmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXRNqAwDQYJKoZIhvcNAQELBQADggEBAM/AzSRZ09joQjx9s5NRFKkVYpzN 8V8YOSFdzW6YPCtSrmli0lDITWZ2vlsTOSU0fZ1cOSLmSkQwvNfwMQ1setXT+2Is G7GuQ1Rcg19sETqZUNA+2iUzF9wEvCZrtwcKOiTKxfnciCzpjNxZ0Rj2Mg8TC6uq zdb5pcnwgAWs2+gPUD1DMCOBI7MOdkxNIkWqh4Y7IRh7YL8wO+Ob22IYeE/Jrscx 95Yl/g8724x9yKbqmvL+DbB4mNTR7uq3AOsWjmDRUsp9n8snJAkifP0PN6qsATWx VeW8dnQL/CXuakGeOWGTASrBUQGv5WJBADf9LKMLsHP3GlkJJgzx7bkcAeU= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:50 2024 by rpki-client on console-fra.rpki-client.org