$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4985f4f-ca77-4bd0-a954-3cf4e0e876ef.roa File: b4985f4f-ca77-4bd0-a954-3cf4e0e876ef.roa (raw, json) Hash identifier: y+/zZRYawhcQt02Y6sJ8NJGs0SD8XLbVxY8vygzDCbU= Subject key identifier: C7:22:8F:2C:63:B9:53:7D:C4:E6:7D:C6:10:EF:D3:77:43:9A:32:ED Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 089E757609CC0CBED4B69BB91E305E91FF518F3F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4985f4f-ca77-4bd0-a954-3cf4e0e876ef.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 70.251.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:9e:75:76:09:cc:0c:be:d4:b6:9b:b9:1e:30:5e:91:ff:51:8f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=8bb3c9af684f23efdb9ece7984faf6f4bb254a6579ef926df4f35063cb57f5d2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:2d:b9:90:a9:57:34:db:d7:32:7e:b3:35: fd:39:f1:f8:a6:ea:41:92:78:d7:e8:d6:85:11:1b: 28:3c:0e:c6:d7:86:e3:07:f4:9b:3a:e9:88:3f:ea: ba:b1:09:f3:ac:b6:53:32:84:fd:41:27:ae:a4:89: c7:3b:42:78:e1:2f:85:9b:dd:c4:c9:d8:9c:41:b3: f7:ae:43:b2:ff:7b:68:6e:80:f7:4e:8e:40:94:b9: 1f:c8:a7:a7:c1:58:54:2b:f7:a2:27:77:72:1d:7b: 36:b9:38:24:e1:45:e6:00:03:7c:08:d5:c7:76:e6: 5c:54:96:35:59:3b:46:fa:c4:99:28:78:a2:d1:ea: f5:13:a8:9a:93:4c:10:5b:aa:98:c4:00:96:df:0a: ff:71:ad:ba:8c:11:8a:0c:ec:9d:5c:b5:ff:77:81: 78:da:20:7c:57:81:9c:94:f1:ec:5f:36:91:88:a3: c7:07:01:b1:fc:a2:12:d9:38:03:bf:42:de:2e:89: 8c:b1:95:86:e7:c7:0a:cb:c3:97:a3:7f:93:a8:6a: 34:fa:fa:b9:97:3b:5e:66:19:b9:21:8d:7a:66:6b: f5:bd:93:84:4c:a5:e7:f8:9c:85:41:6d:8c:91:71: 2a:c1:69:7f:2f:be:2d:56:31:00:8a:4f:f6:3e:8e: 57:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:22:8F:2C:63:B9:53:7D:C4:E6:7D:C6:10:EF:D3:77:43:9A:32:ED X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4985f4f-ca77-4bd0-a954-3cf4e0e876ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.251.64.0/18 Signature Algorithm: sha256WithRSAEncryption 24:27:72:83:72:5e:21:c3:72:6f:8f:e0:ce:2f:20:63:70:df: bb:ba:91:3d:a4:01:0e:a2:19:5e:1d:db:db:4d:dc:2c:1c:c0: c6:77:49:14:5b:c5:cd:e6:d0:b0:59:49:a5:0b:e8:db:8b:98: 58:75:fe:f4:a4:9e:45:d7:fc:db:56:d3:c2:a5:b8:0f:00:fb: cb:e6:73:fe:bb:8b:d7:e1:dc:01:4c:01:08:82:f7:8d:34:b7: f8:94:bb:cc:dc:6d:f7:1c:c6:a4:47:62:ce:ef:8f:9f:f1:be: 59:72:05:35:bf:92:33:55:ec:60:34:53:e6:01:8d:df:6c:29: 48:c2:b0:1e:8d:62:f8:fe:a5:5c:9e:97:5b:c0:54:99:be:5e: 8b:a8:bf:6e:7c:23:f2:f8:3b:19:03:7f:ad:7b:5d:f0:f5:7e: 9d:21:88:3f:27:03:bb:f3:af:99:f1:7d:54:1b:7b:3a:e6:a1: 4a:b8:5f:c2:3f:74:5b:3f:92:5a:97:f9:8e:01:78:8b:d2:09: c7:6a:b7:5c:fe:0d:64:d3:d3:f2:6c:73:a8:2e:2a:10:4d:e4: ce:79:16:5f:f3:0a:ff:6a:28:cb:92:e1:ad:ae:3d:3d:06:7d: 96:3e:ab:f1:31:5b:01:11:17:55:7b:ea:ea:7c:8f:bf:9b:d9: 81:50:dd:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCJ51dgnMDL7Utpu5HjBekf9Rjz8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YmIzYzlhZjY4NGYyM2VmZGI5ZWNlNzk4NGZhZjZmNGJi MjU0YTY1NzllZjkyNmRmNGYzNTA2M2NiNTdmNWQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC83i25kKlXNNvXMn6zNf058fim6kGSeNfo1oURGyg8DsbX huMH9Js66Yg/6rqxCfOstlMyhP1BJ66kicc7QnjhL4Wb3cTJ2JxBs/euQ7L/e2hu gPdOjkCUuR/Ip6fBWFQr96Ind3Ideza5OCThReYAA3wI1cd25lxUljVZO0b6xJko eKLR6vUTqJqTTBBbqpjEAJbfCv9xrbqMEYoM7J1ctf93gXjaIHxXgZyU8exfNpGI o8cHAbH8ohLZOAO/Qt4uiYyxlYbnxwrLw5ejf5OoajT6+rmXO15mGbkhjXpma/W9 k4RMpef4nIVBbYyRcSrBaX8vvi1WMQCKT/Y+jlc3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxyKPLGO5U33E5n3GEO/Td0OaMu0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I0OTg1ZjRmLWNhNzctNGJkMC1hOTU0LTNjZjRlMGU4NzZlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZG+0AwDQYJKoZIhvcNAQELBQADggEBACQncoNyXiHDcm+P4M4vIGNw37u6 kT2kAQ6iGV4d29tN3CwcwMZ3SRRbxc3m0LBZSaUL6NuLmFh1/vSknkXX/NtW08Kl uA8A+8vmc/67i9fh3AFMAQiC9400t/iUu8zcbfccxqRHYs7vj5/xvllyBTW/kjNV 7GA0U+YBjd9sKUjCsB6NYvj+pVyel1vAVJm+Xouov258I/L4OxkDf617XfD1fp0h iD8nA7vzr5nxfVQbezrmoUq4X8I/dFs/klqX+Y4BeIvSCcdqt1z+DWTT0/Jsc6gu KhBN5M55Fl/zCv9qKMuS4a2uPT0GfZY+q/ExWwERF1V76up8j7+b2YFQ3XM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:03:06 2024 by rpki-client on console-ams.rpki-client.org