$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31947fe5-7d16-401b-b300-5965ac84a944.roa File: 31947fe5-7d16-401b-b300-5965ac84a944.roa (raw, json) Hash identifier: cQpEwsnyNHpQ7Y3emILsU0HvRflQ7kR0HBs4B8bjklI= Subject key identifier: 92:54:93:43:6F:20:71:19:E9:00:36:B1:45:7F:8A:FE:E4:9D:2A:A8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 510B953663895E2621C81D0C43D7D1282A6A00A9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31947fe5-7d16-401b-b300-5965ac84a944.roa Signing time: Wed 30 Oct 2024 00:00:00 +0000 ROA not before: Wed 30 Oct 2024 00:00:00 +0000 ROA not after: Wed 04 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 140.244.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:0b:95:36:63:89:5e:26:21:c8:1d:0c:43:d7:d1:28:2a:6a:00:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 30 00:00:00 2024 GMT Not After : Dec 4 23:59:59 2024 GMT Subject: serialNumber=8d5c1cd854ea2b3fd40e1d9f73a90958a1fe0b27db0b6e364a3e1a1a6d2381ec, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:0e:de:b8:f3:e3:eb:90:c9:64:d2:c0:60: 53:bf:fd:69:28:6c:c1:38:f0:95:a8:78:89:26:d4: 9b:ce:0b:de:d7:43:ee:26:70:87:93:5a:66:49:f5: 51:f5:ef:1d:59:2f:84:f7:60:c7:54:c8:07:d3:5b: a1:7c:10:a4:6d:37:f8:41:d2:b4:30:f9:a1:1b:fa: 2e:28:1e:38:b4:11:0b:f3:9d:26:a1:9f:2b:4c:19: a3:84:68:31:d3:1e:9d:cd:a7:5f:3f:f1:44:2b:26: bb:ca:fa:c5:88:b3:43:7d:7f:83:79:09:18:ff:81: 3e:05:60:07:89:7b:7e:ee:61:fd:dc:d6:df:cf:63: 51:9d:52:6a:91:37:b8:e5:37:59:8e:82:3f:3d:6b: a0:45:9f:3b:eb:43:39:27:f2:47:69:d9:90:6d:6f: f1:4f:d2:2c:f4:10:00:95:eb:8e:1d:1a:ac:99:37: b9:95:ae:70:b3:65:5f:e2:0c:e5:3f:80:6c:51:6b: df:5a:7e:d7:a6:a4:15:2a:5e:1c:c7:91:67:ca:f7: 45:bc:ae:c7:d0:ca:16:6d:4c:07:97:9b:a2:b8:37: db:ec:9f:b8:0f:51:54:ef:f0:06:f2:5d:a1:29:ce: 30:f7:de:ad:ff:bd:b2:db:89:be:e7:d1:18:21:a4: dd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:54:93:43:6F:20:71:19:E9:00:36:B1:45:7F:8A:FE:E4:9D:2A:A8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31947fe5-7d16-401b-b300-5965ac84a944.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.244.0.0/16 Signature Algorithm: sha256WithRSAEncryption b9:05:f8:77:ec:67:ad:30:0e:c6:5a:93:0d:5c:93:57:51:37: b6:0f:e8:42:46:bc:09:38:2a:e2:17:b3:e4:44:5e:21:c6:4d: 18:e9:73:72:93:5a:25:0a:bc:16:43:9e:93:c2:b9:fe:8f:e2: a4:e8:2a:ed:6a:66:c7:45:51:18:af:84:17:d0:20:18:5f:48: 94:13:59:19:13:c3:d5:d9:94:e0:2a:de:a8:87:0a:7a:4a:6a: 06:9b:78:5f:7e:e0:fe:dc:6e:e1:c7:af:52:3e:d6:f0:41:0e: 8e:74:97:b8:1a:ad:19:9c:2e:3a:91:a3:5e:76:38:65:9b:2d: b8:ef:64:fd:78:e0:15:f7:1e:df:50:6b:df:5f:fd:94:51:a8: 08:3d:0d:0c:7f:a1:be:8f:86:a1:67:7f:2d:c9:88:26:f0:ec: c7:50:ec:9f:e1:96:73:cf:85:11:5e:d6:41:95:f7:55:f4:9e: 8e:b2:77:c1:66:b5:9b:8b:32:84:c9:36:56:c3:e1:bd:1c:be: f5:a2:b0:90:78:3c:88:5d:53:2d:88:4d:dd:9d:06:d6:bc:5e: 28:04:88:ca:b4:70:3f:05:b3:36:e6:b7:24:f4:b1:86:1a:17: 52:ae:d7:25:38:19:f8:49:55:01:d9:69:64:aa:2c:f8:89:64: 5b:0d:3d:ff -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUQuVNmOJXiYhyB0MQ9fRKCpqAKkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMDMwMDAwMDAwWhcNMjQxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDVjMWNkODU0ZWEyYjNmZDQwZTFkOWY3M2E5MDk1OGEx ZmUwYjI3ZGIwYjZlMzY0YTNlMWExYTZkMjM4MWVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx9Q7euPPj65DJZNLAYFO//WkobME48JWoeIkm1JvOC97X Q+4mcIeTWmZJ9VH17x1ZL4T3YMdUyAfTW6F8EKRtN/hB0rQw+aEb+i4oHji0EQvz nSahnytMGaOEaDHTHp3Np18/8UQrJrvK+sWIs0N9f4N5CRj/gT4FYAeJe37uYf3c 1t/PY1GdUmqRN7jlN1mOgj89a6BFnzvrQzkn8kdp2ZBtb/FP0iz0EACV644dGqyZ N7mVrnCzZV/iDOU/gGxRa99aftempBUqXhzHkWfK90W8rsfQyhZtTAeXm6K4N9vs n7gPUVTv8AbyXaEpzjD33q3/vbLbib7n0RghpN1LAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUklSTQ28gcRnpADaxRX+K/uSdKqgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMxOTQ3ZmU1LTdkMTYtNDAxYi1iMzAwLTU5NjVhYzg0YTk0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCM9DANBgkqhkiG9w0BAQsFAAOCAQEAuQX4d+xnrTAOxlqTDVyTV1E3tg/o Qka8CTgq4hez5EReIcZNGOlzcpNaJQq8FkOek8K5/o/ipOgq7Wpmx0VRGK+EF9Ag GF9IlBNZGRPD1dmU4CreqIcKekpqBpt4X37g/txu4cevUj7W8EEOjnSXuBqtGZwu OpGjXnY4ZZstuO9k/XjgFfce31Br31/9lFGoCD0NDH+hvo+GoWd/LcmIJvDsx1Ds n+GWc8+FEV7WQZX3VfSejrJ3wWa1m4syhMk2VsPhvRy+9aKwkHg8iF1TLYhN3Z0G 1rxeKASIyrRwPwWzNua3JPSxhhoXUq7XJTgZ+ElVAdlpZKos+IlkWw09/w== -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:51 2024 by rpki-client on console-fra.rpki-client.org