$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86a3cde0-486d-4bb8-b857-892e5bed7694.roa File: 86a3cde0-486d-4bb8-b857-892e5bed7694.roa (raw, json) Hash identifier: Ql1m3YFjlrNN1qMfUMEv+X5w1R4DpD+1OAefVId4Fm0= Subject key identifier: 69:3E:D6:E4:4B:73:6C:42:60:E7:1B:48:12:86:CF:8C:D4:2E:2D:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 104D21590ECA78A9DFBFBE22D85982A83C7E4940 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86a3cde0-486d-4bb8-b857-892e5bed7694.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 54.20.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:4d:21:59:0e:ca:78:a9:df:bf:be:22:d8:59:82:a8:3c:7e:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=c7697082b04216e44ef7a323f53e224e2eeefd3c604597fb463a52dbb7009087, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:99:aa:7f:c5:28:a0:b5:eb:5e:5b:75:94:9e: 8a:ad:23:d0:1c:78:5e:dc:53:63:e0:61:1d:72:71: 71:5f:b6:df:e4:a5:5b:5d:3c:da:bc:d8:44:67:5a: a8:1b:26:5f:e5:56:5a:44:ee:e3:74:75:e1:59:bf: 1b:73:06:2d:84:b2:68:3a:6b:86:a5:5b:86:5f:46: 7d:2a:a8:07:c2:d2:37:cb:2f:15:28:e4:3b:9b:e3: 22:14:05:24:d2:7d:fc:77:28:32:2d:a1:57:90:9c: 92:8c:c4:cc:1d:be:4a:cb:c9:c9:11:d5:e9:cf:d1: 2f:04:0a:86:83:e2:0e:eb:e2:3a:88:f3:53:94:26: f5:2d:ed:ee:76:ef:00:1d:26:13:d3:e1:73:1e:72: 74:a0:b5:94:69:f3:7e:11:97:44:04:f8:63:06:55: 93:ff:6e:df:f5:05:63:5c:05:29:9d:e2:05:61:59: e1:68:28:7c:e4:09:b1:15:67:b2:c1:26:98:37:c0: 45:79:a1:d2:c1:76:8e:eb:c3:12:32:ad:6e:a3:a2: a2:51:5b:ce:6a:f2:4b:61:9c:f3:2c:93:84:0c:56: b7:60:2d:ef:c9:7e:d3:9d:67:c8:9b:43:f9:0d:e3: 7b:24:3d:d5:79:90:b5:2c:cd:c5:98:88:2b:9b:f0: e4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3E:D6:E4:4B:73:6C:42:60:E7:1B:48:12:86:CF:8C:D4:2E:2D:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86a3cde0-486d-4bb8-b857-892e5bed7694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.20.0.0/16 Signature Algorithm: sha256WithRSAEncryption 97:fc:b4:ee:aa:93:57:f1:a4:2d:1f:94:d2:65:0d:d2:1b:a1: f0:77:f6:e1:1d:10:89:4d:01:1f:ba:5e:ce:ab:0a:e6:8d:2d: d9:07:34:5e:5d:8c:e8:9b:a8:d5:52:1b:97:16:5f:36:ad:6f: 75:db:84:5b:e5:79:06:89:ef:15:dc:2b:01:95:84:8e:4c:6c: 7a:cc:42:47:41:ce:f8:62:af:93:80:c8:65:3a:b3:7e:62:84: ab:f4:d1:bb:b9:57:ca:92:df:81:9a:0b:19:50:86:b8:6f:a1: 52:4f:94:32:66:aa:23:38:de:c8:12:1d:61:bf:9b:8f:b2:15: 5b:7d:00:f4:eb:67:94:bd:0f:ea:a3:5d:3a:4f:ca:37:34:f5: 8e:f0:1e:6b:a4:8a:76:02:e6:2a:58:61:b4:59:33:a1:5e:1e: 92:3b:78:85:12:82:d3:a0:9f:db:ed:95:5f:5e:97:ac:a9:47: 62:6a:1f:bb:89:24:cc:d4:f2:b4:37:cf:94:8f:fa:37:b1:b2: d8:bc:28:91:65:36:d4:8c:79:7a:cc:a8:25:66:c0:94:5c:50: 8c:9f:1f:86:12:7b:ec:b5:8c:33:a9:b5:54:f3:1f:bb:e6:57: 48:b5:23:16:08:d0:ff:4b:ad:c0:c8:3d:d1:08:3d:58:e3:92: 04:ae:bc:aa -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUEE0hWQ7KeKnfv74i2FmCqDx+SUAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzY5NzA4MmIwNDIxNmU0NGVmN2EzMjNmNTNlMjI0ZTJl ZWVmZDNjNjA0NTk3ZmI0NjNhNTJkYmI3MDA5MDg3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYmap/xSigteteW3WUnoqtI9AceF7cU2PgYR1ycXFftt/k pVtdPNq82ERnWqgbJl/lVlpE7uN0deFZvxtzBi2Esmg6a4alW4ZfRn0qqAfC0jfL LxUo5Dub4yIUBSTSffx3KDItoVeQnJKMxMwdvkrLyckR1enP0S8ECoaD4g7r4jqI 81OUJvUt7e527wAdJhPT4XMecnSgtZRp834Rl0QE+GMGVZP/bt/1BWNcBSmd4gVh WeFoKHzkCbEVZ7LBJpg3wEV5odLBdo7rwxIyrW6joqJRW85q8kthnPMsk4QMVrdg Le/JftOdZ8ibQ/kN43skPdV5kLUszcWYiCub8OTLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUaT7W5EtzbEJg5xtIEobPjNQuLZ0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg2YTNjZGUwLTQ4NmQtNGJiOC1iODU3LTg5MmU1YmVkNzY5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2FDANBgkqhkiG9w0BAQsFAAOCAQEAl/y07qqTV/GkLR+U0mUN0huh8Hf2 4R0QiU0BH7pezqsK5o0t2Qc0Xl2M6Juo1VIblxZfNq1vdduEW+V5BonvFdwrAZWE jkxsesxCR0HO+GKvk4DIZTqzfmKEq/TRu7lXypLfgZoLGVCGuG+hUk+UMmaqIzje yBIdYb+bj7IVW30A9OtnlL0P6qNdOk/KNzT1jvAea6SKdgLmKlhhtFkzoV4ekjt4 hRKC06Cf2+2VX16XrKlHYmofu4kkzNTytDfPlI/6N7Gy2LwokWU21Ix5esyoJWbA lFxQjJ8fhhJ77LWMM6m1VPMfu+ZXSLUjFgjQ/0utwMg90Qg9WOOSBK68qg== -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:13 2024 by rpki-client on console-fra.rpki-client.org