$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2d00f3b-4bf5-4a35-954d-25116a56f4ac.roa File: a2d00f3b-4bf5-4a35-954d-25116a56f4ac.roa (raw, json) Hash identifier: xS+6GIQ8MCc2g5fzfsmd1sKYKqd2jn0FGZa2BbqqnF8= Subject key identifier: 67:8E:4B:67:5F:59:E3:26:23:C3:4A:44:1C:E6:A8:17:DC:03:19:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 033AB3846C14F11B8D0F5BF293466ABE04DAD984 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2d00f3b-4bf5-4a35-954d-25116a56f4ac.roa Signing time: Sat 05 Oct 2024 00:00:00 +0000 ROA not before: Sat 05 Oct 2024 00:00:00 +0000 ROA not after: Sat 09 Nov 2024 23:59:59 +0000 asID: 14618 IP address blocks: 77.121.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:3a:b3:84:6c:14:f1:1b:8d:0f:5b:f2:93:46:6a:be:04:da:d9:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 5 00:00:00 2024 GMT Not After : Nov 9 23:59:59 2024 GMT Subject: serialNumber=9e7f6552b4b4f9744d158c44f133c94c07fa0d1935f8830ef2cd7f4a0cc82847, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:40:89:5e:6d:42:5b:49:af:28:dd:ae:19:91: 71:52:52:cf:47:33:e3:c6:fb:e1:9b:53:e8:d5:1e: ee:2f:89:ee:eb:c0:a0:c9:29:2e:0f:d5:f4:a7:88: 52:49:c3:47:59:14:5c:2d:9f:c3:77:fb:da:42:8f: 16:3e:8c:ef:80:87:77:e3:06:e8:33:e3:1e:11:ad: 8c:54:e0:0f:2b:b2:9a:bf:fe:ee:f4:8d:4f:e6:bf: c8:a1:d0:5d:bd:0c:5d:db:46:9a:ad:6e:cf:ac:fd: 59:ad:91:a1:8b:f5:0e:49:1d:bf:4a:96:4d:10:35: f4:2c:46:2e:4c:87:bd:b5:1b:ab:8f:92:18:02:1d: 34:93:62:53:f2:15:7e:a7:3b:56:02:84:3f:74:0f: a1:9d:9c:6c:aa:5d:73:2e:0a:62:82:18:07:76:10: a7:16:b1:57:52:19:05:a4:3c:55:b2:56:25:e9:77: 17:23:40:75:8a:2c:a1:4a:d4:54:19:d2:44:66:a9: 23:98:4f:ca:8a:eb:8f:16:2d:75:8c:56:33:63:27: 8c:fc:94:58:38:83:a6:37:70:e5:d0:d9:53:08:1f: 4b:8f:8a:21:ea:7d:77:1e:bc:9e:ff:98:8a:bc:99: 24:6f:65:fb:5d:11:5f:59:9a:e5:7b:f7:d9:bf:b2: db:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8E:4B:67:5F:59:E3:26:23:C3:4A:44:1C:E6:A8:17:DC:03:19:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2d00f3b-4bf5-4a35-954d-25116a56f4ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.121.128.0/17 Signature Algorithm: sha256WithRSAEncryption bb:dc:4d:e9:ee:c5:cb:9d:97:c6:a5:b4:ad:ca:be:4e:4e:53: dd:8f:d8:7d:6b:60:50:dc:a7:e7:be:55:13:57:33:ec:df:e4: 24:f4:2d:8d:bc:1a:a5:27:be:eb:47:49:eb:e9:3a:4c:28:0c: 53:bc:66:14:da:d2:dc:54:f7:a4:70:32:12:33:5f:81:2e:8f: 73:97:30:68:f5:e4:68:45:5a:36:b1:ba:ef:12:de:30:82:a0: a2:33:4e:01:7d:51:7f:32:53:b3:1e:c5:f1:f3:21:01:87:d1: 85:0a:1d:06:e4:38:c9:11:c2:c0:da:c3:81:8b:4b:b6:0e:7c: 31:ff:7f:b0:fa:ea:a2:97:0e:fa:1f:5a:af:83:59:df:ea:fe: cf:c5:dd:ea:9e:bb:57:ab:d5:db:5a:c8:2a:57:ff:56:65:8a: 1c:44:b0:17:ef:f0:cc:bf:59:e9:01:18:cd:0d:fa:1a:2e:7c: bc:9a:31:a9:9a:3f:c3:47:51:f4:e1:b5:c7:3c:c3:02:32:a8: 21:9c:a3:22:7a:13:33:09:0f:17:b9:6f:01:a3:ec:aa:92:18: e8:7b:66:77:06:67:ad:ce:34:ad:37:6e:d4:52:04:6d:7a:94: d3:15:e2:34:07:b2:81:80:b2:ff:b9:df:4f:4f:5e:f0:dd:18: 8a:2b:fb:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAzqzhGwU8RuND1vyk0ZqvgTa2YQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMDA1MDAwMDAwWhcNMjQxMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTdmNjU1MmI0YjRmOTc0NGQxNThjNDRmMTMzYzk0YzA3 ZmEwZDE5MzVmODgzMGVmMmNkN2Y0YTBjYzgyODQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8QIlebUJbSa8o3a4ZkXFSUs9HM+PG++GbU+jVHu4vie7r wKDJKS4P1fSniFJJw0dZFFwtn8N3+9pCjxY+jO+Ah3fjBugz4x4RrYxU4A8rspq/ /u70jU/mv8ih0F29DF3bRpqtbs+s/VmtkaGL9Q5JHb9Klk0QNfQsRi5Mh721G6uP khgCHTSTYlPyFX6nO1YChD90D6GdnGyqXXMuCmKCGAd2EKcWsVdSGQWkPFWyViXp dxcjQHWKLKFK1FQZ0kRmqSOYT8qK648WLXWMVjNjJ4z8lFg4g6Y3cOXQ2VMIH0uP iiHqfXcevJ7/mIq8mSRvZftdEV9ZmuV799m/sttbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZ45LZ19Z4yYjw0pEHOaoF9wDGXowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyZDAwZjNiLTRiZjUtNGEzNS05NTRkLTI1MTE2YTU2ZjRhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdNeYAwDQYJKoZIhvcNAQELBQADggEBALvcTenuxcudl8altK3Kvk5OU92P 2H1rYFDcp+e+VRNXM+zf5CT0LY28GqUnvutHSevpOkwoDFO8ZhTa0txU96RwMhIz X4Euj3OXMGj15GhFWjaxuu8S3jCCoKIzTgF9UX8yU7MexfHzIQGH0YUKHQbkOMkR wsDaw4GLS7YOfDH/f7D66qKXDvofWq+DWd/q/s/F3eqeu1er1dtayCpX/1ZlihxE sBfv8My/WekBGM0N+houfLyaMamaP8NHUfThtcc8wwIyqCGcoyJ6EzMJDxe5bwGj 7KqSGOh7ZncGZ63ONK03btRSBG16lNMV4jQHsoGAsv+5309PXvDdGIor+y4= -----END CERTIFICATE-----Generated at Tue Oct 22 00:47:00 2024 by rpki-client on console-fra.rpki-client.org