$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/489cd053-7758-46e7-8b64-3fb90765e375.roa File: 489cd053-7758-46e7-8b64-3fb90765e375.roa (raw, json) Hash identifier: G2rMfd8slYX6oZJ2yInfjFQ/MzDy7JcAuV+Wo2Wcfc8= Subject key identifier: D1:05:F2:07:CC:BC:44:EB:AB:1F:BA:7C:39:98:74:1D:81:ED:3E:1C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5BB9196055339F48A0BD27A76B97BC928B66A7B7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/489cd053-7758-46e7-8b64-3fb90765e375.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 139.56.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b9:19:60:55:33:9f:48:a0:bd:27:a7:6b:97:bc:92:8b:66:a7:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=f9a76236980fb607d02a08b3b185864f03e0cdb69b59b625012f799eaf731408, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:86:65:5f:e9:8a:45:c5:88:65:48:6d:07:3c: 6a:90:f1:8b:a2:38:b4:8c:56:31:88:ef:79:11:40: 78:06:3b:92:5b:00:fb:0a:bf:bb:62:d3:e7:03:d6: 3c:fb:e4:74:f8:ca:82:13:d2:70:6a:07:e5:82:f6: 5e:96:e0:c5:8a:b1:b2:64:06:19:48:e5:ec:5a:29: ff:90:94:2d:e3:09:ca:d8:0b:b6:72:5f:ab:45:b4: 24:11:ea:e5:b9:f9:b3:86:8f:7a:a7:bb:9b:73:74: b1:47:6b:9d:6f:df:1a:c4:24:3f:2f:1a:a4:bb:de: 30:a9:b3:98:a1:e6:01:47:5f:6b:d9:e1:0b:ee:e3: 5f:c8:39:de:b6:d5:75:8e:b0:fb:89:de:8b:da:99: a7:bb:45:a8:9b:1b:86:cb:4f:38:dd:a8:c0:bf:25: ac:97:32:f5:37:f2:b8:03:3b:63:dd:28:24:e2:48: 8c:18:23:e6:99:94:ce:8b:56:e1:58:60:2a:40:90: dd:27:7a:ec:b5:b0:be:51:e8:fa:24:31:ad:6a:20: 92:4a:19:1e:d9:0f:61:86:e4:6d:e3:d0:ab:28:7b: a1:cd:36:e0:0f:29:60:62:60:00:4b:4d:7c:2e:a9: 0a:67:12:f7:94:e9:de:04:31:be:45:19:db:94:60: 3e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:05:F2:07:CC:BC:44:EB:AB:1F:BA:7C:39:98:74:1D:81:ED:3E:1C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/489cd053-7758-46e7-8b64-3fb90765e375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.56.0.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:2c:83:dc:0f:a1:63:22:81:aa:00:88:3d:4b:52:58:38:05: a2:df:28:c0:a4:bc:90:1b:cf:3e:8f:40:93:63:64:d9:96:c5: 8b:2c:b4:6e:68:67:88:3e:21:7b:63:3a:9a:01:10:da:69:2d: 12:9a:f3:e1:f0:2a:fa:b9:af:2a:70:83:10:89:a0:17:5a:da: 9b:d5:8c:9b:5b:80:e6:d7:09:47:7b:44:5b:2a:9d:55:5b:12: 39:2f:9c:47:2d:b1:12:20:de:41:4f:1a:0f:f6:45:31:66:39: 7b:f4:e0:e2:d6:8f:5c:1e:dd:d7:11:ce:c3:d7:29:9e:00:42: 30:a6:59:0c:bc:bb:84:0b:e7:a2:1f:1e:df:51:b8:fb:af:01: cf:5d:87:8e:c0:a4:c7:2f:46:34:8d:80:e7:ab:15:2c:ef:8e: d8:76:fc:a4:bf:ac:18:7e:37:e4:43:dc:27:88:4b:fd:c6:52: 98:e1:26:84:48:ca:23:f4:06:4b:8b:5d:fb:b8:24:82:96:4b: 0d:f5:97:35:eb:6b:eb:b0:d4:a3:b0:29:f6:a6:f5:09:d3:7f: 5b:0c:5c:ea:6b:8f:1f:e5:28:c8:68:2a:fb:13:16:f2:f8:dc: 86:f8:62:89:76:c7:61:c7:7e:b5:37:f0:5d:b2:4f:e4:d5:73: e4:c4:3f:48 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW7kZYFUzn0igvSena5e8kotmp7cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmOWE3NjIzNjk4MGZiNjA3ZDAyYTA4YjNiMTg1ODY0ZjAz ZTBjZGI2OWI1OWI2MjUwMTJmNzk5ZWFmNzMxNDA4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvhmVf6YpFxYhlSG0HPGqQ8YuiOLSMVjGI73kRQHgGO5Jb APsKv7ti0+cD1jz75HT4yoIT0nBqB+WC9l6W4MWKsbJkBhlI5exaKf+QlC3jCcrY C7ZyX6tFtCQR6uW5+bOGj3qnu5tzdLFHa51v3xrEJD8vGqS73jCps5ih5gFHX2vZ 4Qvu41/IOd621XWOsPuJ3ovamae7RaibG4bLTzjdqMC/JayXMvU38rgDO2PdKCTi SIwYI+aZlM6LVuFYYCpAkN0neuy1sL5R6PokMa1qIJJKGR7ZD2GG5G3j0Ksoe6HN NuAPKWBiYABLTXwuqQpnEveU6d4EMb5FGduUYD7dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0QXyB8y8ROurH7p8OZh0HYHtPhwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ4OWNkMDUzLTc3NTgtNDZlNy04YjY0LTNmYjkwNzY1ZTM3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACLOAAwDQYJKoZIhvcNAQELBQADggEBAH4sg9wPoWMigaoAiD1LUlg4BaLf KMCkvJAbzz6PQJNjZNmWxYsstG5oZ4g+IXtjOpoBENppLRKa8+HwKvq5rypwgxCJ oBda2pvVjJtbgObXCUd7RFsqnVVbEjkvnEctsRIg3kFPGg/2RTFmOXv04OLWj1we 3dcRzsPXKZ4AQjCmWQy8u4QL56IfHt9RuPuvAc9dh47ApMcvRjSNgOerFSzvjth2 /KS/rBh+N+RD3CeIS/3GUpjhJoRIyiP0BkuLXfu4JIKWSw31lzXra+uw1KOwKfam 9QnTf1sMXOprjx/lKMhoKvsTFvL43Ib4Yol2x2HHfrU38F2yT+TVc+TEP0g= -----END CERTIFICATE-----Generated at Sun Nov 24 02:35:18 2024 by rpki-client on console-fra.rpki-client.org