$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d37018f-b766-4576-9296-f8055fa87d2b.roa File: 2d37018f-b766-4576-9296-f8055fa87d2b.roa (raw, json) Hash identifier: EXhBJudLXxErwuw2fOtQzG1tSRhxbo2Om4oIPrr1O9Q= Subject key identifier: 4C:72:46:58:7E:85:B5:FA:E9:2C:18:0B:68:8D:4A:A2:62:C3:D0:86 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 72D76D6C5BACFFE9B874C936E7E8610890B74D14 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d37018f-b766-4576-9296-f8055fa87d2b.roa Signing time: Fri 15 Nov 2024 00:00:00 +0000 ROA not before: Fri 15 Nov 2024 00:00:00 +0000 ROA not after: Fri 20 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 163.3.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d7:6d:6c:5b:ac:ff:e9:b8:74:c9:36:e7:e8:61:08:90:b7:4d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 15 00:00:00 2024 GMT Not After : Dec 20 23:59:59 2024 GMT Subject: serialNumber=f97a48af0ce54984f0e85c77c210b9e1cbbc8c5ce26737d6a17f32dcacca547a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4d:0e:dd:48:f9:37:fd:3a:ac:8d:5c:ac:9b: 14:5d:7a:65:f4:47:06:85:17:d2:98:2b:d0:45:29: 6f:72:54:de:ac:d9:66:f3:da:19:29:7e:e6:9e:41: 05:bb:b9:57:68:35:fd:30:3f:9b:8d:66:22:c1:72: bf:22:80:6d:96:dd:02:a3:94:b7:0b:ec:4d:f3:58: 10:57:5a:3b:70:07:e8:62:54:f5:2d:98:a8:ff:1c: 92:3a:50:68:f9:63:9e:88:a8:67:41:bb:e2:b9:25: 2d:c8:a7:b8:b6:1b:a1:35:42:cc:b7:00:a8:c7:44: 53:29:74:1d:45:5a:45:33:0a:46:30:9e:c7:73:37: 09:ac:e2:5a:79:cd:ed:ca:f9:ef:b8:8a:af:d8:c5: 1f:bc:80:3c:a1:69:50:38:75:c6:13:fe:e1:05:7e: 81:2f:e2:88:66:8a:f9:38:89:58:77:0b:16:69:89: ab:59:18:0e:28:e0:3e:23:2b:7a:a8:40:6e:e0:6e: d6:61:26:58:fa:1c:9b:24:8b:ab:02:b5:9f:63:cc: 87:73:53:1f:0f:32:0e:89:89:31:38:c2:d8:d9:41: a6:03:3b:48:70:08:65:f2:d7:e2:6f:43:ea:e8:b6: 35:0b:ad:34:77:92:78:cf:3e:4f:62:10:ab:2a:e0: 12:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:72:46:58:7E:85:B5:FA:E9:2C:18:0B:68:8D:4A:A2:62:C3:D0:86 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d37018f-b766-4576-9296-f8055fa87d2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.3.0.0/16 Signature Algorithm: sha256WithRSAEncryption c1:cb:53:9d:23:82:77:ba:56:7c:2a:c0:4a:66:51:79:77:65: 9b:1e:b0:33:46:a9:ab:64:89:15:83:b0:36:3e:19:2b:3d:3c: ea:27:91:66:92:60:43:52:8e:c7:b2:93:dd:9e:d8:12:ce:44: c8:83:f1:4f:d8:84:f0:05:55:69:4d:44:7d:26:6c:a2:60:f7: 68:d3:7d:3a:ed:01:62:fe:e5:77:8d:e4:a4:10:dc:28:5d:c3: 80:5d:a8:3d:f9:7b:c1:b0:45:46:b1:8e:2e:b1:1f:bd:b5:06: 8b:af:11:90:10:e3:e9:b9:5f:a8:ea:60:24:0c:a1:80:5d:b0: 49:7a:5f:be:08:56:76:31:26:d1:6f:f5:23:73:30:3a:01:70: 14:2e:6d:3d:ae:ac:6b:5c:df:e2:12:05:6a:23:00:e3:c6:f2: 40:2e:e0:09:11:d9:2d:47:66:e1:d1:e1:c8:d7:a6:2a:1e:36: fb:49:72:d4:82:21:b4:7a:7c:b1:67:6b:fa:26:ab:79:36:e2: a4:95:b9:e5:64:2d:e4:ef:8c:8e:ec:0c:5a:2d:fa:64:65:9b: 94:ab:ab:93:44:22:b1:42:28:68:ef:85:d8:eb:f2:39:6c:7b: 89:07:d4:d4:40:fc:f7:9a:88:72:43:ae:4d:16:0e:0b:35:70: ed:19:2b:76 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUctdtbFus/+m4dMk25+hhCJC3TRQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTE1MDAwMDAwWhcNMjQxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTdhNDhhZjBjZTU0OTg0ZjBlODVjNzdjMjEwYjllMWNi YmM4YzVjZTI2NzM3ZDZhMTdmMzJkY2FjY2E1NDdhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRTQ7dSPk3/TqsjVysmxRdemX0RwaFF9KYK9BFKW9yVN6s 2Wbz2hkpfuaeQQW7uVdoNf0wP5uNZiLBcr8igG2W3QKjlLcL7E3zWBBXWjtwB+hi VPUtmKj/HJI6UGj5Y56IqGdBu+K5JS3Ip7i2G6E1Qsy3AKjHRFMpdB1FWkUzCkYw nsdzNwms4lp5ze3K+e+4iq/YxR+8gDyhaVA4dcYT/uEFfoEv4ohmivk4iVh3CxZp iatZGA4o4D4jK3qoQG7gbtZhJlj6HJski6sCtZ9jzIdzUx8PMg6JiTE4wtjZQaYD O0hwCGXy1+JvQ+rotjULrTR3knjPPk9iEKsq4BLNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUTHJGWH6FtfrpLBgLaI1KomLD0IYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJkMzcwMThmLWI3NjYtNDU3Ni05Mjk2LWY4MDU1ZmE4N2QyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCjAzANBgkqhkiG9w0BAQsFAAOCAQEAwctTnSOCd7pWfCrASmZReXdlmx6w M0apq2SJFYOwNj4ZKz086ieRZpJgQ1KOx7KT3Z7YEs5EyIPxT9iE8AVVaU1EfSZs omD3aNN9Ou0BYv7ld43kpBDcKF3DgF2oPfl7wbBFRrGOLrEfvbUGi68RkBDj6blf qOpgJAyhgF2wSXpfvghWdjEm0W/1I3MwOgFwFC5tPa6sa1zf4hIFaiMA48byQC7g CRHZLUdm4dHhyNemKh42+0ly1IIhtHp8sWdr+iareTbipJW55WQt5O+MjuwMWi36 ZGWblKurk0QisUIoaO+F2OvyOWx7iQfU1ED895qIckOuTRYOCzVw7Rkrdg== -----END CERTIFICATE-----Generated at Fri Nov 22 04:02:26 2024 by rpki-client on console-ams.rpki-client.org