$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3586142-b8b3-4a70-8236-1a6d9876cf01.roa File: b3586142-b8b3-4a70-8236-1a6d9876cf01.roa (raw, json) Hash identifier: 9axrQ4zWNSzbqMq4hnLydnAINb10X33fBbZrtQHEZik= Subject key identifier: 75:36:60:CA:57:BB:B6:66:4C:B4:E8:2D:07:1E:D5:5E:56:5B:A0:82 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4C26D0CD71C5D33D82E49C7F382ACEAEF12ECF8F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3586142-b8b3-4a70-8236-1a6d9876cf01.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:838e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:26:d0:cd:71:c5:d3:3d:82:e4:9c:7f:38:2a:ce:ae:f1:2e:cf:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=ea8b070aa2a354283fad1915addf477e53efb3431a0ad7258acc5177a91d1957, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1b:a0:48:60:46:8a:4d:1d:1a:84:f3:9d:ba: 98:4b:aa:b7:fe:c1:40:52:57:cf:b9:ea:29:eb:20: 07:0d:7c:e9:70:c6:79:4f:c1:00:46:37:bb:0c:f5: d0:e7:7e:cd:ed:69:03:4c:f7:18:78:db:bb:ef:ff: d2:44:67:ed:f4:11:4e:24:4b:dd:fc:a6:e1:96:09: c9:04:4b:90:d2:f0:80:1f:fa:fd:34:09:e7:a0:a2: bc:de:f9:f8:91:dc:7b:62:42:1c:09:bb:bb:e4:17: fe:c6:5d:e0:c6:80:1a:3f:d8:32:ab:78:da:7a:06: 78:fc:0d:36:0e:97:31:60:a0:18:ae:48:0f:be:e6: 53:27:60:e1:5c:8f:79:04:93:f4:eb:6c:fc:f2:82: 7e:4f:2d:79:c4:5e:64:c4:06:85:c0:5c:b5:76:b3: 55:ae:1b:18:b6:ae:e6:ee:e0:c1:cc:c8:c9:83:99: 50:57:6a:dd:bf:a1:46:a1:cd:a6:42:bb:4b:fb:4a: fe:a6:fc:fa:72:77:5b:35:f4:f9:e7:2d:15:9c:79: 88:bb:d6:52:a4:1a:17:b7:8e:67:33:36:ff:ef:27: 51:16:63:f9:eb:1f:2c:bc:b7:ed:6b:2c:aa:f8:1c: 47:92:84:5c:d5:1b:28:0d:8c:00:92:8b:db:bd:27: 70:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:36:60:CA:57:BB:B6:66:4C:B4:E8:2D:07:1E:D5:5E:56:5B:A0:82 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3586142-b8b3-4a70-8236-1a6d9876cf01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:838e::/48 Signature Algorithm: sha256WithRSAEncryption bc:48:3e:10:ef:8f:74:b7:28:f2:47:ab:78:7c:08:cb:c9:a3: d6:81:3c:d0:a6:2a:9b:ab:fc:f5:5b:09:9a:5c:f2:5c:a8:46: 96:e7:d2:4f:17:0a:8c:3e:51:df:fe:ea:14:59:5d:35:9d:ab: 8e:51:19:35:7a:ec:2e:56:48:ec:fe:26:e7:aa:eb:6b:4f:e5: 66:94:a4:5a:f8:1f:cf:a0:ef:9c:9b:65:a8:9e:a4:1d:c5:69: 5c:78:37:94:57:c9:31:cd:0a:88:bc:cd:f7:25:eb:2f:2f:d8: fb:89:df:66:7c:5a:70:38:0a:7f:e9:65:2f:c3:31:f1:4d:e8: 93:54:5c:3d:17:ae:2f:47:b3:ed:65:9b:62:c4:98:91:70:49: 02:01:cf:3c:47:6a:4f:55:a8:b6:04:58:c5:49:92:3e:c6:d1: 9d:c5:4c:af:6d:c3:12:6b:08:90:32:1f:30:fb:b0:ec:c8:c2: da:45:70:43:d5:0b:c5:c8:42:dd:1b:90:ca:bb:b4:60:65:c9: bb:22:45:47:d4:2c:ee:34:c1:73:28:96:8c:64:88:9b:2f:64: d9:64:a2:58:b9:fe:9c:48:84:c3:27:d8:7d:a2:e7:cd:7d:39: 40:32:f6:a1:77:2a:59:ce:1a:16:03:f2:76:d7:bf:8c:11:ea: 81:65:e0:ec -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTCbQzXHF0z2C5Jx/OCrOrvEuz48wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYThiMDcwYWEyYTM1NDI4M2ZhZDE5MTVhZGRmNDc3ZTUz ZWZiMzQzMWEwYWQ3MjU4YWNjNTE3N2E5MWQxOTU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2G6BIYEaKTR0ahPOduphLqrf+wUBSV8+56inrIAcNfOlw xnlPwQBGN7sM9dDnfs3taQNM9xh427vv/9JEZ+30EU4kS938puGWCckES5DS8IAf +v00Ceegorze+fiR3HtiQhwJu7vkF/7GXeDGgBo/2DKreNp6Bnj8DTYOlzFgoBiu SA++5lMnYOFcj3kEk/TrbPzygn5PLXnEXmTEBoXAXLV2s1WuGxi2rubu4MHMyMmD mVBXat2/oUahzaZCu0v7Sv6m/Ppyd1s19PnnLRWceYi71lKkGhe3jmczNv/vJ1EW Y/nrHyy8t+1rLKr4HEeShFzVGygNjACSi9u9J3BdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdTZgyle7tmZMtOgtBx7VXlZboIIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzNTg2MTQyLWI4YjMtNGE3MC04MjM2LTFhNmQ5ODc2Y2YwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9g44wDQYJKoZIhvcNAQELBQADggEBALxIPhDvj3S3KPJHq3h8CMvJ o9aBPNCmKpur/PVbCZpc8lyoRpbn0k8XCow+Ud/+6hRZXTWdq45RGTV67C5WSOz+ Jueq62tP5WaUpFr4H8+g75ybZaiepB3FaVx4N5RXyTHNCoi8zfcl6y8v2PuJ32Z8 WnA4Cn/pZS/DMfFN6JNUXD0Xri9Hs+1lm2LEmJFwSQIBzzxHak9VqLYEWMVJkj7G 0Z3FTK9twxJrCJAyHzD7sOzIwtpFcEPVC8XIQt0bkMq7tGBlybsiRUfULO40wXMo loxkiJsvZNlkoli5/pxIhMMn2H2i5819OUAy9qF3KlnOGhYD8nbXv4wR6oFl4Ow= -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:24 2024 by rpki-client on console-fra.rpki-client.org