$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89e4ba23-91ab-40dd-ba19-bcc55063a417.roa File: 89e4ba23-91ab-40dd-ba19-bcc55063a417.roa (raw, json) Hash identifier: 1ljIUlgJHG20O8F3SrX6LxtgGc2dA4Sd7ALMd5dQpAw= Subject key identifier: BB:DF:3C:F0:FA:DF:CC:32:D0:F9:A3:82:A2:F3:1F:0A:49:A2:C7:74 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3808FAB895195949CEC84EA2A623F5EFCF846D8D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89e4ba23-91ab-40dd-ba19-bcc55063a417.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 99.83.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:08:fa:b8:95:19:59:49:ce:c8:4e:a2:a6:23:f5:ef:cf:84:6d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=9649abc874a9cca998d3bdd44a4d9b5c2f7d1a24b397a8f7d7ddd84d14870e4c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:49:52:9b:47:82:9c:4f:a6:33:1b:f1:89:b1: f2:8a:3b:4a:df:74:d0:c4:f1:72:0c:66:50:c0:f4: 22:44:cf:36:c2:e2:8c:8f:d6:73:d9:1f:57:37:e9: 08:86:b5:3c:f8:d1:a2:e1:b9:24:5c:33:ee:f0:84: 27:94:f1:12:d3:32:53:b8:24:87:4d:88:a3:05:ba: 4d:d8:00:f7:72:ae:95:5b:42:5d:10:7e:45:66:74: c5:8d:75:cd:54:d3:b1:33:1b:d3:e1:87:7f:ff:ff: 5f:f5:5c:6f:cf:89:71:02:cd:7c:e2:11:3b:d2:09: 7a:3d:b3:b7:bd:a8:a1:b0:60:cc:8b:f4:f0:3f:0a: 2e:7c:35:7b:16:b9:f0:af:1c:64:f0:ad:45:22:49: 04:74:7b:95:5e:b0:9c:58:db:44:1c:94:1a:46:62: 01:87:b7:9b:d8:09:b4:82:95:6b:5f:4d:4d:38:90: 14:a1:17:09:a8:10:93:d5:53:cd:75:0e:48:e5:d1: 13:2e:7c:5c:25:d7:b8:fe:49:b7:f7:47:12:a4:6c: dd:4d:a2:27:ec:3a:56:d7:ba:90:1d:de:a3:10:4b: e1:d5:e6:c1:29:7f:2d:b3:41:30:ae:43:0d:2b:d1: e4:b8:84:0c:bf:98:2a:41:7c:ff:f9:6a:45:c6:06: 23:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DF:3C:F0:FA:DF:CC:32:D0:F9:A3:82:A2:F3:1F:0A:49:A2:C7:74 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89e4ba23-91ab-40dd-ba19-bcc55063a417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.83.76.0/22 Signature Algorithm: sha256WithRSAEncryption b8:27:a9:67:dc:13:c0:1c:a8:80:35:13:53:2d:28:06:54:56: c2:98:a2:c1:47:c7:e9:da:7d:40:b3:8a:5b:f9:e4:30:83:08: dc:2d:32:b2:20:3d:17:98:59:66:15:14:3c:d2:d1:77:45:20: dc:af:f4:0b:90:6b:61:3e:a0:cf:e6:35:ab:c6:b2:db:ff:4f: 1a:ae:02:e0:ad:93:b4:c6:d4:35:60:e8:c1:62:09:02:61:e8: a1:d9:e6:c4:9d:d6:77:c0:90:46:cb:18:9f:0d:c9:5f:30:19: e6:70:cc:99:b5:22:cd:bd:f9:7c:84:00:da:e7:15:8a:8e:bf: f3:87:6a:67:89:6a:9b:b4:bc:d7:1b:92:8f:c6:f8:a2:34:1c: 34:c7:37:24:51:4e:1a:1a:91:52:3a:d0:8f:5d:91:58:e3:d2: 0c:38:e7:66:79:81:58:6f:c5:66:5f:e1:cb:dd:fa:1b:15:f6: ee:91:ea:a0:4a:df:bc:90:91:2d:22:a4:f0:c8:70:46:8d:34: 0a:80:51:44:1e:74:c0:4f:98:9a:15:a5:3f:bc:a5:3e:08:4c: ee:90:cc:da:c4:c5:3e:16:8f:5b:95:ec:df:c5:51:b0:4e:40: 1f:bc:b8:c5:42:cc:0a:0c:9d:fc:46:f1:4a:9e:84:62:eb:5e: 7d:87:1d:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOAj6uJUZWUnOyE6ipiP178+EbY0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjQ5YWJjODc0YTljY2E5OThkM2JkZDQ0YTRkOWI1YzJm N2QxYTI0YjM5N2E4ZjdkN2RkZDg0ZDE0ODcwZTRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0SVKbR4KcT6YzG/GJsfKKO0rfdNDE8XIMZlDA9CJEzzbC 4oyP1nPZH1c36QiGtTz40aLhuSRcM+7whCeU8RLTMlO4JIdNiKMFuk3YAPdyrpVb Ql0QfkVmdMWNdc1U07EzG9Phh3///1/1XG/PiXECzXziETvSCXo9s7e9qKGwYMyL 9PA/Ci58NXsWufCvHGTwrUUiSQR0e5VesJxY20QclBpGYgGHt5vYCbSClWtfTU04 kBShFwmoEJPVU811Dkjl0RMufFwl17j+Sbf3RxKkbN1NoifsOlbXupAd3qMQS+HV 5sEpfy2zQTCuQw0r0eS4hAy/mCpBfP/5akXGBiNZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu9888PrfzDLQ+aOCovMfCkmix3QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5ZTRiYTIzLTkxYWItNDBkZC1iYTE5LWJjYzU1MDYzYTQxNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJjU0wwDQYJKoZIhvcNAQELBQADggEBALgnqWfcE8AcqIA1E1MtKAZUVsKY osFHx+nafUCzilv55DCDCNwtMrIgPReYWWYVFDzS0XdFINyv9AuQa2E+oM/mNavG stv/TxquAuCtk7TG1DVg6MFiCQJh6KHZ5sSd1nfAkEbLGJ8NyV8wGeZwzJm1Is29 +XyEANrnFYqOv/OHameJapu0vNcbko/G+KI0HDTHNyRRThoakVI60I9dkVjj0gw4 52Z5gVhvxWZf4cvd+hsV9u6R6qBK37yQkS0ipPDIcEaNNAqAUUQedMBPmJoVpT+8 pT4ITO6QzNrExT4Wj1uV7N/FUbBOQB+8uMVCzAoMnfxG8UqehGLrXn2HHaM= -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:14 2024 by rpki-client on console-fra.rpki-client.org