$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8122f43-64da-4086-b942-f00dc52fa585.roa File: c8122f43-64da-4086-b942-f00dc52fa585.roa (raw, json) Hash identifier: Z/CVSCupvn/SPtxMB40UCr/z8qJN8uP+UJLT1uhemqk= Subject key identifier: 06:4B:B6:2B:6B:FC:90:63:51:0C:A6:C3:94:56:87:D9:0A:C8:02:41 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 237CD3B62086AF925032FC8E11E400740D072B63 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8122f43-64da-4086-b942-f00dc52fa585.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 16.113.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:7c:d3:b6:20:86:af:92:50:32:fc:8e:11:e4:00:74:0d:07:2b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=b3656d36eb0ec3814dcdb353a4b9bf30b9acf89df5ff8afe733e094890fa5223, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:86:65:b9:69:36:5f:7b:ee:ef:d3:5b:bb: 08:17:21:67:9f:2a:c4:30:10:1a:e5:1b:bb:66:b8: 93:2d:04:7b:bb:9c:fb:79:62:c2:f3:cf:4c:bd:ad: 52:9d:c2:39:a0:57:dc:6e:8d:7b:de:59:3b:e1:53: a4:61:b6:89:d3:ce:dc:34:aa:5c:40:1a:a9:b9:7a: 48:f5:b3:5b:50:41:f4:7e:46:22:49:b3:f2:c3:18: 9f:c0:56:43:1e:f2:fb:1b:eb:f7:10:bf:70:ba:56: 13:5a:54:1b:60:44:8d:5e:db:07:dc:81:3d:8a:a8: f7:12:64:10:57:91:49:2a:c5:27:eb:85:a7:5c:c3: e6:14:3e:c4:21:1d:6e:ce:1b:f7:ba:58:1b:d3:a8: e3:b2:a2:87:8c:10:83:0e:16:39:7a:47:63:da:a5: 43:5f:66:10:11:4a:5b:d8:39:9d:81:af:2d:e2:79: a1:b2:bc:b6:26:52:07:11:2f:27:b2:30:d7:46:33: 60:f8:2a:f4:22:74:49:64:2b:0c:e3:8e:19:e6:2c: 56:68:e8:f5:8a:a0:12:f1:29:68:48:9b:05:58:40: 51:d6:a0:b2:1e:f2:14:d5:25:58:0b:f7:76:4e:e5: 32:15:32:63:53:64:b9:72:44:33:4c:41:16:63:63: a3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4B:B6:2B:6B:FC:90:63:51:0C:A6:C3:94:56:87:D9:0A:C8:02:41 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8122f43-64da-4086-b942-f00dc52fa585.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.113.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8b:6b:5d:34:d4:78:1e:c5:4d:fa:e8:1f:97:74:ac:7b:e1:48: 5d:b7:ef:dd:8a:b3:3f:df:16:9f:0c:bd:10:45:89:bb:ed:bf: eb:8d:09:4f:a1:b4:c3:0a:1d:98:98:9c:df:3d:58:af:f3:af: eb:c3:54:6e:28:4a:62:de:6b:c2:1a:01:d4:59:28:c4:89:fd: d0:c0:59:e3:8d:63:a8:81:1d:a8:0f:2c:d8:7c:33:4b:23:99: 74:95:8c:68:28:ff:50:1c:95:fe:8b:80:d2:64:ff:5e:9e:e5: a2:d2:b2:9c:d6:03:22:a5:31:d8:9a:a2:be:65:a0:11:c7:8e: c3:df:2c:0a:da:d9:24:b7:3e:31:e1:e1:d4:c7:62:30:36:ec: e4:e7:cf:c5:e8:c1:81:57:ef:8e:76:e7:bb:a2:4e:c6:84:d2: 3c:ff:99:9e:73:3f:1f:a5:0d:01:7e:e9:90:7f:a9:f1:b0:ec: fc:2a:17:d0:79:80:8e:52:68:57:aa:8e:12:83:66:4a:f8:b1: 53:66:63:fe:25:52:36:d1:ba:79:59:ba:53:93:82:fd:59:9a: 99:34:86:c9:d6:26:92:2a:e5:10:7c:7c:94:0a:0e:9a:79:9f: 62:61:1a:93:76:39:fd:b8:97:3b:06:40:bc:fd:fb:d8:32:cf: d3:77:be:19 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUI3zTtiCGr5JQMvyOEeQAdA0HK2MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzY1NmQzNmViMGVjMzgxNGRjZGIzNTNhNGI5YmYzMGI5 YWNmODlkZjVmZjhhZmU3MzNlMDk0ODkwZmE1MjIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHjIZluWk2X3vu79NbuwgXIWefKsQwEBrlG7tmuJMtBHu7 nPt5YsLzz0y9rVKdwjmgV9xujXveWTvhU6RhtonTztw0qlxAGqm5ekj1s1tQQfR+ RiJJs/LDGJ/AVkMe8vsb6/cQv3C6VhNaVBtgRI1e2wfcgT2KqPcSZBBXkUkqxSfr hadcw+YUPsQhHW7OG/e6WBvTqOOyooeMEIMOFjl6R2PapUNfZhARSlvYOZ2Bry3i eaGyvLYmUgcRLyeyMNdGM2D4KvQidElkKwzjjhnmLFZo6PWKoBLxKWhImwVYQFHW oLIe8hTVJVgL93ZO5TIVMmNTZLlyRDNMQRZjY6M5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUBku2K2v8kGNRDKbDlFaH2QrIAkEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4MTIyZjQzLTY0ZGEtNDA4Ni1iOTQyLWYwMGRjNTJmYTU4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQcTANBgkqhkiG9w0BAQsFAAOCAQEAi2tdNNR4HsVN+ugfl3Sse+FIXbfv 3YqzP98Wnwy9EEWJu+2/640JT6G0wwodmJic3z1Yr/Ov68NUbihKYt5rwhoB1Fko xIn90MBZ441jqIEdqA8s2HwzSyOZdJWMaCj/UByV/ouA0mT/Xp7lotKynNYDIqUx 2JqivmWgEceOw98sCtrZJLc+MeHh1MdiMDbs5OfPxejBgVfvjnbnu6JOxoTSPP+Z nnM/H6UNAX7pkH+p8bDs/CoX0HmAjlJoV6qOEoNmSvixU2Zj/iVSNtG6eVm6U5OC /VmamTSGydYmkirlEHx8lAoOmnmfYmEak3Y5/biXOwZAvP372DLP03e+GQ== -----END CERTIFICATE-----Generated at Sun Nov 24 02:35:51 2024 by rpki-client on console-fra.rpki-client.org