$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c08d6dce-3e2a-4d24-a991-d2eb5638198a.roa File: c08d6dce-3e2a-4d24-a991-d2eb5638198a.roa (raw, json) Hash identifier: EkwlueLfnr/zrbop+jGrsbWukjr6IHyPMpSG/RuP1SI= Subject key identifier: E3:BE:59:81:69:DC:08:51:7A:97:71:EF:AC:AF:66:B3:92:21:7F:65 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2DBFCEA6E373BEA815D82D26E02BE27365832A77 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c08d6dce-3e2a-4d24-a991-d2eb5638198a.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 19047 IP address blocks: 70.130.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:bf:ce:a6:e3:73:be:a8:15:d8:2d:26:e0:2b:e2:73:65:83:2a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=90e5a91eafeaec3927f77dce2e945830a55c531dbab485c6b7e23959f1cbbfda, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ec:cb:c4:cf:e4:68:65:69:e3:5e:1d:39:44: bd:0b:9e:67:98:fb:83:b9:03:9d:e8:9b:1d:85:b8: 64:40:bd:f5:d0:20:29:dc:2d:84:b9:06:1a:41:a0: 43:f9:ba:3e:26:ea:3c:7d:bc:68:be:8a:e8:39:22: 92:07:23:af:95:99:04:13:c6:b9:d2:3c:36:30:11: fa:ff:5b:2f:79:cf:d7:75:03:3f:5e:db:d0:4e:e5: 57:7b:28:04:75:de:c2:29:3b:a4:92:3f:1b:87:da: 6d:ef:9f:9a:28:b4:e9:3e:e7:1d:09:5f:34:10:57: 81:46:75:01:33:cf:5a:9d:1d:6d:41:38:6e:50:87: a1:5c:61:f8:dd:15:bb:37:a7:69:69:88:29:59:5a: a5:b2:db:98:32:05:d3:6f:c4:67:68:40:fd:5f:e7: c3:46:2a:a3:a5:35:25:14:99:3f:4a:51:41:4e:57: 1a:61:f7:8d:d2:37:5a:ce:93:52:7f:8e:d0:df:d4: f0:b0:64:4b:eb:4e:b8:73:a4:fb:bd:02:b3:20:4f: 3c:f8:20:5c:0a:a6:c5:d0:22:cc:66:1f:06:08:58: c8:4a:3f:a2:9d:74:22:0a:ea:c3:57:3e:b2:c7:cd: 97:83:ad:74:ba:66:a3:aa:62:07:85:d4:8d:94:f2: e5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BE:59:81:69:DC:08:51:7A:97:71:EF:AC:AF:66:B3:92:21:7F:65 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c08d6dce-3e2a-4d24-a991-d2eb5638198a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.130.224.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:b7:24:71:b8:b7:e7:b0:b7:3d:19:0f:b7:f8:ca:ba:f1:e0: 8c:b7:0e:90:db:bf:aa:28:4a:bc:ad:4f:c1:55:ff:b7:da:e9: 1c:0a:90:80:c1:b0:bf:fb:0f:93:69:3c:86:1d:5b:be:f1:59: 2c:62:52:fc:98:8a:5f:71:3f:fc:1e:03:49:d7:3d:a4:b5:a9: 57:a0:16:42:b6:0e:e6:9f:39:07:e1:74:73:7a:c9:76:d6:a7: 76:61:1d:e3:86:35:5b:a9:a9:50:37:c8:9c:66:b9:f4:7e:0d: fa:64:54:2e:f2:b6:03:6f:19:7a:0c:75:8f:97:77:8f:7c:b9: 96:10:f8:32:5c:09:51:ef:10:ae:59:2c:5c:43:51:1a:c9:7f: e9:6c:51:d9:7b:97:36:bb:93:82:5b:73:b2:3e:db:1f:75:63: f7:0e:cb:0b:53:28:f4:6a:29:b0:7b:84:b7:b8:32:8c:e7:30: f8:ea:ac:b2:fd:01:36:e0:77:97:20:77:97:d3:82:18:aa:cb: dc:91:b6:6d:47:6d:6c:9e:45:da:bc:84:ab:34:f9:e9:62:46: ff:56:7d:3c:29:40:78:25:55:aa:f9:95:9e:34:5c:30:52:45: b6:c3:78:a0:8c:fc:3d:60:11:6f:24:ed:01:4f:34:dc:a8:0f: 7c:79:42:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULb/OpuNzvqgV2C0m4Cvic2WDKncwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MGU1YTkxZWFmZWFlYzM5MjdmNzdkY2UyZTk0NTgzMGE1 NWM1MzFkYmFiNDg1YzZiN2UyMzk1OWYxY2JiZmRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC37MvEz+RoZWnjXh05RL0LnmeY+4O5A53omx2FuGRAvfXQ ICncLYS5BhpBoEP5uj4m6jx9vGi+iug5IpIHI6+VmQQTxrnSPDYwEfr/Wy95z9d1 Az9e29BO5Vd7KAR13sIpO6SSPxuH2m3vn5ootOk+5x0JXzQQV4FGdQEzz1qdHW1B OG5Qh6FcYfjdFbs3p2lpiClZWqWy25gyBdNvxGdoQP1f58NGKqOlNSUUmT9KUUFO Vxph943SN1rOk1J/jtDf1PCwZEvrTrhzpPu9ArMgTzz4IFwKpsXQIsxmHwYIWMhK P6KddCIK6sNXPrLHzZeDrXS6ZqOqYgeF1I2U8uXfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU475ZgWncCFF6l3HvrK9ms5Ihf2UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MwOGQ2ZGNlLTNlMmEtNGQyNC1hOTkxLWQyZWI1NjM4MTk4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABGguAwDQYJKoZIhvcNAQELBQADggEBAA23JHG4t+ewtz0ZD7f4yrrx4Iy3 DpDbv6ooSrytT8FV/7fa6RwKkIDBsL/7D5NpPIYdW77xWSxiUvyYil9xP/weA0nX PaS1qVegFkK2DuafOQfhdHN6yXbWp3ZhHeOGNVupqVA3yJxmufR+DfpkVC7ytgNv GXoMdY+Xd498uZYQ+DJcCVHvEK5ZLFxDURrJf+lsUdl7lza7k4Jbc7I+2x91Y/cO ywtTKPRqKbB7hLe4MoznMPjqrLL9ATbgd5cgd5fTghiqy9yRtm1HbWyeRdq8hKs0 +eliRv9WfTwpQHglVar5lZ40XDBSRbbDeKCM/D1gEW8k7QFPNNyoD3x5Qks= -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:27 2024 by rpki-client on console-fra.rpki-client.org