$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6faea040-33a3-4f29-a8da-c7c7fba2abe9.roa File: 6faea040-33a3-4f29-a8da-c7c7fba2abe9.roa (raw, json) Hash identifier: CNs57UV2y+JMSKXKnydxZOuDqK5G3TJKb5YW2BLPcvQ= Subject key identifier: 96:55:30:12:B7:34:46:C5:41:8B:1A:C5:A4:5E:2A:CF:08:E9:84:D7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6DCD47202E6F7AA8E72F7107BA5973AAEC4D3D97 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6faea040-33a3-4f29-a8da-c7c7fba2abe9.roa Signing time: Mon 11 Nov 2024 00:00:00 +0000 ROA not before: Mon 11 Nov 2024 00:00:00 +0000 ROA not after: Mon 16 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 16.184.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:cd:47:20:2e:6f:7a:a8:e7:2f:71:07:ba:59:73:aa:ec:4d:3d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 11 00:00:00 2024 GMT Not After : Dec 16 23:59:59 2024 GMT Subject: serialNumber=4daf692f1c2506428f4ddcdaf988231f09c3728a3056e9105b086017d4fa1425, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:14:cc:ae:05:6d:5c:0c:6a:df:32:a5:10:84: 61:7a:b8:40:3a:c3:2b:ff:4f:a8:8d:e3:e9:da:b8: 1f:fa:c2:7b:11:03:8a:16:ac:88:d1:ee:82:15:45: 05:bc:63:97:f4:89:33:a0:00:47:00:09:48:1d:0a: 31:a9:3d:10:28:72:84:ad:ae:ab:24:66:f5:95:f6: 78:8e:af:f9:7b:49:a3:14:e8:30:70:97:8e:65:d7: 9a:cf:d4:6b:ff:4a:ab:47:02:00:f0:68:9c:a7:d9: 1d:8c:09:50:4f:6a:e9:9d:dd:e1:28:f7:15:73:a0: f5:24:67:24:2f:51:ed:42:3d:9c:82:79:1f:a4:ad: 81:68:99:37:bb:a6:e9:e3:02:84:81:aa:d4:bb:21: e5:d6:46:4c:00:53:3c:e2:d1:a9:91:0d:53:22:a6: 54:34:8f:97:3e:e9:b1:2b:34:13:33:91:3b:dc:9c: fd:93:9a:59:b7:69:ab:f6:ca:ac:7e:e9:49:db:ae: b1:b6:a1:7b:2a:7a:c0:02:33:f8:1d:3e:6d:3e:72: 84:9c:43:54:15:37:e5:de:28:5a:56:e4:0d:73:cb: d0:5d:29:ca:d1:99:3b:ea:69:99:68:9b:08:7d:c2: a3:32:76:c6:ec:19:74:d8:6f:40:74:98:29:b1:46: 20:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:55:30:12:B7:34:46:C5:41:8B:1A:C5:A4:5E:2A:CF:08:E9:84:D7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6faea040-33a3-4f29-a8da-c7c7fba2abe9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.184.0.0/16 Signature Algorithm: sha256WithRSAEncryption 75:30:64:75:0e:b6:98:05:62:49:5d:ea:62:b7:be:76:09:2d: 0d:62:4c:1f:f7:47:74:03:13:2b:db:75:32:9e:13:dd:50:59: ee:63:16:6a:d5:c6:b8:aa:11:c2:a9:a3:d4:3a:17:4f:94:10: 68:61:cd:13:4b:a6:dc:fd:23:d0:e9:95:9d:37:ea:4d:e9:6f: e9:81:74:0d:a4:f7:03:33:d3:f1:4a:c0:6c:ee:ff:ca:15:0b: 5c:c5:66:c2:e8:cf:00:1d:57:3a:9c:d7:8e:38:84:36:7f:51: 98:b5:9e:6f:1f:44:a8:03:37:6c:0e:f2:c9:42:b3:cc:24:87: 90:0f:03:a1:ad:83:38:96:50:9d:55:f1:c1:48:25:b5:36:c8: d8:43:89:8d:1e:84:10:9f:65:76:b2:f5:27:12:9b:fc:87:97: 2b:b7:8b:6f:51:b6:d2:0f:1f:d4:74:6e:cc:53:11:33:f1:a2: 1e:f9:71:21:f9:0f:c7:9d:8a:b7:71:b9:0b:da:ba:a0:f1:fa: a7:74:b4:4a:e0:62:32:b8:fd:87:71:0f:ec:f2:66:b8:58:76: 83:8e:4e:1b:b6:32:2e:11:26:b0:68:81:9e:46:e8:09:db:26: 7c:01:0c:32:4b:d4:b3:c5:8e:1c:cf:c0:61:ee:4b:54:3e:5d: e2:52:71:44 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbc1HIC5veqjnL3EHullzquxNPZcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTExMDAwMDAwWhcNMjQxMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZGFmNjkyZjFjMjUwNjQyOGY0ZGRjZGFmOTg4MjMxZjA5 YzM3MjhhMzA1NmU5MTA1YjA4NjAxN2Q0ZmExNDI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYFMyuBW1cDGrfMqUQhGF6uEA6wyv/T6iN4+nauB/6wnsR A4oWrIjR7oIVRQW8Y5f0iTOgAEcACUgdCjGpPRAocoStrqskZvWV9niOr/l7SaMU 6DBwl45l15rP1Gv/SqtHAgDwaJyn2R2MCVBPaumd3eEo9xVzoPUkZyQvUe1CPZyC eR+krYFomTe7punjAoSBqtS7IeXWRkwAUzzi0amRDVMiplQ0j5c+6bErNBMzkTvc nP2Tmlm3aav2yqx+6UnbrrG2oXsqesACM/gdPm0+coScQ1QVN+XeKFpW5A1zy9Bd KcrRmTvqaZlomwh9wqMydsbsGXTYb0B0mCmxRiDtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUllUwErc0RsVBixrFpF4qzwjphNcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZmYWVhMDQwLTMzYTMtNGYyOS1hOGRhLWM3YzdmYmEyYWJlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQuDANBgkqhkiG9w0BAQsFAAOCAQEAdTBkdQ62mAViSV3qYre+dgktDWJM H/dHdAMTK9t1Mp4T3VBZ7mMWatXGuKoRwqmj1DoXT5QQaGHNE0um3P0j0OmVnTfq Telv6YF0DaT3AzPT8UrAbO7/yhULXMVmwujPAB1XOpzXjjiENn9RmLWebx9EqAM3 bA7yyUKzzCSHkA8Doa2DOJZQnVXxwUgltTbI2EOJjR6EEJ9ldrL1JxKb/IeXK7eL b1G20g8f1HRuzFMRM/GiHvlxIfkPx52Kt3G5C9q6oPH6p3S0SuBiMrj9h3EP7PJm uFh2g45OG7YyLhEmsGiBnkboCdsmfAEMMkvUs8WOHM/AYe5LVD5d4lJxRA== -----END CERTIFICATE-----Generated at Fri Nov 22 04:02:43 2024 by rpki-client on console-ams.rpki-client.org