$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76f7de8a-b4fa-4433-a358-37d13c6b3a4f.roa File: 76f7de8a-b4fa-4433-a358-37d13c6b3a4f.roa (raw, json) Hash identifier: 7KGak82ZM70OjiPHsrmeRmV91VK8eepfi5wByga130o= Subject key identifier: 99:3B:A8:20:41:AF:D5:D0:36:E9:7E:DC:98:A4:68:DA:9D:CC:A2:4F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39EBC2AA2E032A01817607A55F916CAF0752682F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76f7de8a-b4fa-4433-a358-37d13c6b3a4f.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 206.217.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:eb:c2:aa:2e:03:2a:01:81:76:07:a5:5f:91:6c:af:07:52:68:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=cb3cf3333c9ec2730cff2a04f7b6d13d6a283a0c7ccb56af607202aef4b4767c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:34:22:6b:75:16:79:e0:b9:e3:83:5a:0c:bf: a4:d2:d3:8f:3b:1a:65:28:4a:a0:5a:da:b1:c8:87: c8:94:80:0b:e2:58:be:a7:51:e4:57:0a:f4:8c:b4: 21:8f:6d:09:a0:36:32:20:6b:d2:47:ee:4f:5b:9e: 02:15:5e:95:d1:3f:53:d4:1f:cd:a0:13:05:4c:51: 72:12:d6:76:b6:9c:ab:aa:9f:33:ca:68:ec:31:2e: bb:d8:c5:52:9a:1d:40:15:eb:9e:9c:be:5c:08:c9: 3f:7f:26:42:52:6a:6d:8e:d8:75:0b:eb:bc:09:87: d4:04:fa:1c:c6:13:bd:3a:c1:b4:92:85:28:28:2f: fc:25:61:c3:d1:44:da:c2:4f:44:75:91:4e:2e:e6: e4:12:4e:4f:79:33:27:77:08:b0:f7:3f:09:2d:d5: 65:dd:a1:17:e1:f5:9b:3d:49:7a:13:2a:60:82:2c: ed:f0:2f:4f:0a:ff:49:06:09:1d:d5:f3:53:da:2a: 2b:54:c0:2b:1a:cf:10:d3:7f:02:18:2d:df:b9:b9: 0d:6d:7a:ee:93:36:1d:75:78:63:05:f2:ef:7b:19: 2b:9c:36:0b:78:eb:95:86:e8:44:a5:a6:52:a9:0e: bd:ba:60:7a:2a:9f:fe:0f:78:c8:ce:7f:3e:c3:ee: 97:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3B:A8:20:41:AF:D5:D0:36:E9:7E:DC:98:A4:68:DA:9D:CC:A2:4F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76f7de8a-b4fa-4433-a358-37d13c6b3a4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.217.32.0/19 Signature Algorithm: sha256WithRSAEncryption cb:b6:c8:f1:89:7b:50:ee:00:f7:f6:15:ef:b7:2b:65:d6:f8: 38:b1:6d:dc:9b:19:e2:4d:ac:11:13:89:2e:5d:ad:5f:0c:d9: be:20:01:4e:06:29:95:ae:b3:57:a6:47:cb:45:a6:61:a8:58: b1:b4:a5:8e:10:7b:4d:3b:10:64:f8:a9:e9:f0:46:72:ac:69: d6:2f:77:74:23:49:ed:e6:5f:64:a1:98:00:57:02:33:5f:40: 2a:0d:dc:10:a0:bc:39:8f:6a:83:e7:af:48:0b:84:34:b8:82: e7:db:9a:7b:21:64:59:f3:dd:28:69:0a:06:38:a8:e4:62:db: d0:38:64:84:48:03:d7:2a:fb:27:ef:d6:01:2d:f7:4e:e5:50: ca:c8:9b:e8:e0:3e:b3:ef:19:74:02:80:91:db:60:a5:f6:6a: 31:7d:eb:78:15:cd:ac:f9:44:33:c9:f1:96:43:c7:28:5c:0e: 7a:fd:1c:ac:85:a9:63:0e:1f:34:aa:af:ad:ab:e9:d7:56:14: 65:b3:58:a5:e2:09:c3:03:e7:8d:20:68:89:32:b0:ba:cd:5c: 69:57:ef:19:bd:13:c7:1c:1c:94:a2:bb:84:9f:b8:8a:ee:c2: 2a:b3:8c:10:a4:d9:a2:30:84:08:d5:7c:a4:59:4b:72:c4:7a: a7:03:78:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOevCqi4DKgGBdgelX5FsrwdSaC8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjNjZjMzMzNjOWVjMjczMGNmZjJhMDRmN2I2ZDEzZDZh MjgzYTBjN2NjYjU2YWY2MDcyMDJhZWY0YjQ3NjdjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSNCJrdRZ54Lnjg1oMv6TS0487GmUoSqBa2rHIh8iUgAvi WL6nUeRXCvSMtCGPbQmgNjIga9JH7k9bngIVXpXRP1PUH82gEwVMUXIS1na2nKuq nzPKaOwxLrvYxVKaHUAV656cvlwIyT9/JkJSam2O2HUL67wJh9QE+hzGE706wbSS hSgoL/wlYcPRRNrCT0R1kU4u5uQSTk95Myd3CLD3Pwkt1WXdoRfh9Zs9SXoTKmCC LO3wL08K/0kGCR3V81PaKitUwCsazxDTfwIYLd+5uQ1teu6TNh11eGMF8u97GSuc Ngt465WG6ESlplKpDr26YHoqn/4PeMjOfz7D7pefAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmTuoIEGv1dA26X7cmKRo2p3Mok8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc2ZjdkZThhLWI0ZmEtNDQzMy1hMzU4LTM3ZDEzYzZiM2E0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXO2SAwDQYJKoZIhvcNAQELBQADggEBAMu2yPGJe1DuAPf2Fe+3K2XW+Dix bdybGeJNrBETiS5drV8M2b4gAU4GKZWus1emR8tFpmGoWLG0pY4Qe007EGT4qenw RnKsadYvd3QjSe3mX2ShmABXAjNfQCoN3BCgvDmPaoPnr0gLhDS4gufbmnshZFnz 3ShpCgY4qORi29A4ZIRIA9cq+yfv1gEt907lUMrIm+jgPrPvGXQCgJHbYKX2ajF9 63gVzaz5RDPJ8ZZDxyhcDnr9HKyFqWMOHzSqr62r6ddWFGWzWKXiCcMD540gaIky sLrNXGlX7xm9E8ccHJSiu4SfuIruwiqzjBCk2aIwhAjVfKRZS3LEeqcDeHo= -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:10 2024 by rpki-client on console-fra.rpki-client.org