$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f24667d-8c84-490f-aca2-bec82cfd230d.roa File: 3f24667d-8c84-490f-aca2-bec82cfd230d.roa (raw, json) Hash identifier: fR6ZGvVTwjcH2nesMQn8UjJgwEXvTz5zpjLyx1BHul8= Subject key identifier: 07:7D:A7:DC:CA:C2:F2:F5:0B:0A:C9:DB:F6:2D:95:0A:72:19:87:B0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1C08007B68A396C0B031E78E077FEE3867100CD0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f24667d-8c84-490f-aca2-bec82cfd230d.roa Signing time: Tue 12 Nov 2024 00:00:00 +0000 ROA not before: Tue 12 Nov 2024 00:00:00 +0000 ROA not after: Tue 17 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 56.89.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:08:00:7b:68:a3:96:c0:b0:31:e7:8e:07:7f:ee:38:67:10:0c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 12 00:00:00 2024 GMT Not After : Dec 17 23:59:59 2024 GMT Subject: serialNumber=b161f19dc32f7b56412c60d21223ab5d5ab0817b9a277b451d02b01f113459ec, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7f:d1:ff:8e:5d:48:8e:29:21:07:e7:01:82: 7b:85:dd:d6:a9:36:c6:2b:4f:75:ec:6a:e4:be:89: 91:39:f9:9a:38:cf:87:02:e6:42:91:36:8a:01:8b: d1:d4:ab:e6:5a:2d:ec:6c:27:fd:ca:36:13:8f:4a: fe:fa:f3:44:a7:1b:13:7b:25:fb:ff:22:2c:f5:00: bc:e2:42:c5:44:49:ac:fb:32:2b:59:82:40:77:50: 09:8c:65:77:29:70:ef:02:df:49:47:9b:05:3e:5a: 63:39:96:ad:eb:17:ba:6d:ae:82:2b:7c:56:ae:fb: a7:d7:51:14:6d:13:f8:98:c1:70:0f:7d:c0:15:2c: 4f:d6:64:3e:25:38:8c:bd:4a:bf:5d:cd:df:69:64: 0e:25:8a:ef:b7:79:12:cd:7d:60:e9:76:ff:84:9f: 9f:56:56:2c:6e:d4:77:a4:32:ba:ad:80:ff:dd:08: 82:b3:e3:44:a0:47:8e:89:a2:ea:b4:ff:bf:c7:34: 82:2f:e5:96:be:e9:2f:38:7e:1f:1d:07:ad:b2:18: 51:77:f2:61:fd:ec:75:bd:59:25:50:c3:38:f4:9c: 9d:76:54:f5:0f:e1:1b:59:d9:8c:a5:af:a6:86:71: ea:c4:9a:40:d0:e5:30:8c:1f:bf:a3:99:17:58:b1: 34:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7D:A7:DC:CA:C2:F2:F5:0B:0A:C9:DB:F6:2D:95:0A:72:19:87:B0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f24667d-8c84-490f-aca2-bec82cfd230d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.89.0.0/16 Signature Algorithm: sha256WithRSAEncryption b4:57:36:10:7a:55:9a:b6:3b:46:03:94:27:a6:3d:01:d0:26: 1e:73:61:32:aa:12:d9:ed:57:6c:5d:c5:53:ce:38:21:9f:b6: 8c:be:e4:52:a0:f4:aa:0f:e7:89:21:7f:42:9a:6a:52:f0:c1: 25:59:96:f7:5e:d0:41:e5:22:52:72:5d:86:37:60:1f:9c:7c: 28:1f:0b:3d:a8:72:d2:f5:64:43:11:ab:12:1e:55:0a:e5:80: 9c:99:72:3c:99:06:fe:ce:b3:61:30:cd:cf:76:13:7a:cf:ca: 6a:af:cd:8f:83:da:f3:84:0e:a0:c6:a9:2d:bd:d0:8f:c8:8b: 44:33:58:b4:d8:43:ea:15:90:e4:b9:1a:16:ea:57:d4:d0:f9: f0:6b:bd:62:bc:d4:35:21:6b:fa:fa:3d:71:fb:e9:37:7d:23: e6:47:ab:85:9c:64:72:7e:e0:e9:81:d1:e5:cb:13:a9:53:19: 84:0f:14:7e:10:40:64:34:cc:ea:45:13:29:a1:81:39:06:00: d8:40:ba:5e:bd:78:74:f7:1d:68:e0:d2:65:4e:42:38:b4:7d: 71:12:02:0f:34:54:14:8a:f4:eb:5b:00:f4:26:c7:e1:09:67: 86:68:d5:d1:c7:02:05:83:c2:2c:68:9b:ca:de:92:98:76:3c: e1:ab:6d:34 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHAgAe2ijlsCwMeeOB3/uOGcQDNAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTEyMDAwMDAwWhcNMjQxMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTYxZjE5ZGMzMmY3YjU2NDEyYzYwZDIxMjIzYWI1ZDVh YjA4MTdiOWEyNzdiNDUxZDAyYjAxZjExMzQ1OWVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKf9H/jl1IjikhB+cBgnuF3dapNsYrT3XsauS+iZE5+Zo4 z4cC5kKRNooBi9HUq+ZaLexsJ/3KNhOPSv7680SnGxN7Jfv/Iiz1ALziQsVESaz7 MitZgkB3UAmMZXcpcO8C30lHmwU+WmM5lq3rF7ptroIrfFau+6fXURRtE/iYwXAP fcAVLE/WZD4lOIy9Sr9dzd9pZA4liu+3eRLNfWDpdv+En59WVixu1HekMrqtgP/d CIKz40SgR46Jouq0/7/HNIIv5Za+6S84fh8dB62yGFF38mH97HW9WSVQwzj0nJ12 VPUP4RtZ2Yylr6aGcerEmkDQ5TCMH7+jmRdYsTSFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUB32n3MrC8vULCsnb9i2VCnIZh7AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNmMjQ2NjdkLThjODQtNDkwZi1hY2EyLWJlYzgyY2ZkMjMwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4WTANBgkqhkiG9w0BAQsFAAOCAQEAtFc2EHpVmrY7RgOUJ6Y9AdAmHnNh MqoS2e1XbF3FU844IZ+2jL7kUqD0qg/niSF/QppqUvDBJVmW917QQeUiUnJdhjdg H5x8KB8LPahy0vVkQxGrEh5VCuWAnJlyPJkG/s6zYTDNz3YTes/Kaq/Nj4Pa84QO oMapLb3Qj8iLRDNYtNhD6hWQ5LkaFupX1ND58Gu9YrzUNSFr+vo9cfvpN30j5ker hZxkcn7g6YHR5csTqVMZhA8UfhBAZDTM6kUTKaGBOQYA2EC6Xr14dPcdaODSZU5C OLR9cRICDzRUFIr061sA9CbH4QlnhmjV0ccCBYPCLGibyt6SmHY84attNA== -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:55 2024 by rpki-client on console-fra.rpki-client.org