$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b126e493-ff51-4b10-ac7c-e8620b00e32f.roa File: b126e493-ff51-4b10-ac7c-e8620b00e32f.roa (raw, json) Hash identifier: sj4zOafVzRS5z5OQ+CSGRRKwE8RqOpYuO+cH7Bh6b1o= Subject key identifier: ED:E6:E2:40:66:89:75:20:AE:C0:56:04:57:BE:F5:11:39:38:D8:A2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3687B5229E174B831D38DD7DB212EB8F9A3E23DA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b126e493-ff51-4b10-ac7c-e8620b00e32f.roa Signing time: Mon 04 Nov 2024 00:00:00 +0000 ROA not before: Mon 04 Nov 2024 00:00:00 +0000 ROA not after: Mon 09 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 70.224.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:87:b5:22:9e:17:4b:83:1d:38:dd:7d:b2:12:eb:8f:9a:3e:23:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 4 00:00:00 2024 GMT Not After : Dec 9 23:59:59 2024 GMT Subject: serialNumber=f0a1e918cef025b4b14727ada0aec3a30acebef42b974edce6596fbc4717f900, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:22:e0:3d:e5:66:0f:67:c3:09:ef:95:71: c0:43:be:8c:4d:71:73:cb:2e:e0:45:db:09:07:99: a6:54:75:6f:e3:e1:c1:e4:68:15:5a:e8:a6:e3:ac: ae:59:cb:01:b4:b8:dc:54:7e:c9:67:25:d2:8d:7b: b2:82:1e:04:51:a9:79:be:a9:52:7f:f0:3a:86:6d: 6a:66:6f:62:b1:2a:50:23:40:ac:d9:51:52:ac:67: 89:b1:41:35:8f:d6:31:1c:a6:d3:85:6c:1b:45:60: 75:70:c2:a4:82:ad:c1:c1:e6:8b:a5:18:a2:ef:68: 8c:66:5f:ca:fd:5f:d3:5d:d5:0a:b8:0a:90:51:4f: 32:9e:28:bb:b0:79:dd:49:cf:f0:72:1c:dc:d2:ff: 05:1a:59:12:dd:ec:e5:a5:55:6d:ae:6d:a5:34:74: b0:fe:bc:7c:e3:da:13:4f:53:b4:cd:26:68:d1:91: 47:3a:1b:d9:5c:6d:dc:8a:65:fe:ec:34:69:63:3c: 4d:64:ad:45:58:8c:4c:43:fb:5e:66:f3:df:89:ba: 41:26:cb:2e:17:dc:e5:d1:99:7b:18:1b:0c:ba:71: fb:23:43:c9:cf:2f:45:3a:06:cf:b6:54:4b:e5:e7: a5:3f:3f:aa:6a:b8:15:7e:8f:27:0a:77:12:2f:2c: 3e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E6:E2:40:66:89:75:20:AE:C0:56:04:57:BE:F5:11:39:38:D8:A2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b126e493-ff51-4b10-ac7c-e8620b00e32f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.224.192.0/18 Signature Algorithm: sha256WithRSAEncryption 91:4f:54:b8:4a:cf:5b:85:86:2e:20:42:47:47:fc:56:de:89: 63:5a:ac:d3:0e:4c:53:61:fe:a4:8f:cf:df:96:97:66:f1:71: d3:11:b7:b1:0e:ae:d1:3a:82:d2:e4:fd:78:2c:34:fd:2d:af: 65:81:fe:19:c0:16:1a:39:a3:df:d6:f1:82:82:4a:cd:18:c7: 4a:c2:8b:ea:b4:43:23:6a:7f:e7:6f:da:60:c2:72:d2:1b:6a: 49:4a:d8:03:e4:a7:6e:7a:af:60:05:be:d6:3f:50:2e:7d:fc: 93:57:c8:fd:84:d1:ff:22:9f:b4:73:2f:d7:c7:ce:28:85:68: de:d4:62:5c:c8:0b:88:1f:69:79:13:23:84:67:17:e1:5f:41: 2c:8a:e2:76:88:fb:c3:ec:1d:f7:7d:0c:f7:04:1f:50:2c:a5: ce:e8:16:b2:27:a2:0d:4b:2c:a2:c1:c6:6f:85:0d:1b:74:ee: a4:c2:3c:89:e5:08:41:01:9a:14:e4:02:95:2e:2f:e1:c9:44: 1c:0f:5e:7f:a2:f3:78:a6:23:a4:3f:18:56:b7:9d:76:8e:8c: 08:bb:f4:c9:40:b8:57:1f:8f:a9:98:d5:48:48:29:5c:27:de: 87:aa:be:24:66:fe:07:eb:ea:03:2e:63:c6:99:99:dd:ef:fc: e4:b5:1a:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNoe1Ip4XS4MdON19shLrj5o+I9owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA0MDAwMDAwWhcNMjQxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMGExZTkxOGNlZjAyNWI0YjE0NzI3YWRhMGFlYzNhMzBh Y2ViZWY0MmI5NzRlZGNlNjU5NmZiYzQ3MTdmOTAwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5ECLgPeVmD2fDCe+VccBDvoxNcXPLLuBF2wkHmaZUdW/j 4cHkaBVa6KbjrK5ZywG0uNxUfslnJdKNe7KCHgRRqXm+qVJ/8DqGbWpmb2KxKlAj QKzZUVKsZ4mxQTWP1jEcptOFbBtFYHVwwqSCrcHB5oulGKLvaIxmX8r9X9Nd1Qq4 CpBRTzKeKLuwed1Jz/ByHNzS/wUaWRLd7OWlVW2ubaU0dLD+vHzj2hNPU7TNJmjR kUc6G9lcbdyKZf7sNGljPE1krUVYjExD+15m89+JukEmyy4X3OXRmXsYGwy6cfsj Q8nPL0U6Bs+2VEvl56U/P6pquBV+jycKdxIvLD6hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7ebiQGaJdSCuwFYEV771ETk42KIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IxMjZlNDkzLWZmNTEtNGIxMC1hYzdjLWU4NjIwYjAwZTMyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZG4MAwDQYJKoZIhvcNAQELBQADggEBAJFPVLhKz1uFhi4gQkdH/FbeiWNa rNMOTFNh/qSPz9+Wl2bxcdMRt7EOrtE6gtLk/XgsNP0tr2WB/hnAFho5o9/W8YKC Ss0Yx0rCi+q0QyNqf+dv2mDCctIbaklK2APkp256r2AFvtY/UC59/JNXyP2E0f8i n7RzL9fHziiFaN7UYlzIC4gfaXkTI4RnF+FfQSyK4naI+8PsHfd9DPcEH1Aspc7o FrInog1LLKLBxm+FDRt07qTCPInlCEEBmhTkApUuL+HJRBwPXn+i83imI6Q/GFa3 nXaOjAi79MlAuFcfj6mY1UhIKVwn3oeqviRm/gfr6gMuY8aZmd3v/OS1Gi4= -----END CERTIFICATE-----Generated at Fri Nov 22 04:03:05 2024 by rpki-client on console-ams.rpki-client.org