$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c911aa68-f4a1-40a1-9aa5-18442e7ec537.roa File: c911aa68-f4a1-40a1-9aa5-18442e7ec537.roa (raw, json) Hash identifier: bdALwqAYGcctmZoc/1kloqWr5Rg4aL2Ug95BZwCpEUQ= Subject key identifier: B6:96:AB:B5:4D:00:2E:02:58:7F:49:F2:DC:83:EC:41:9A:06:F1:5A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4115965F194DB813889B936A7CF05A63D67B71CB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c911aa68-f4a1-40a1-9aa5-18442e7ec537.roa Signing time: Mon 28 Oct 2024 00:00:00 +0000 ROA not before: Mon 28 Oct 2024 00:00:00 +0000 ROA not after: Mon 02 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 32.236.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:15:96:5f:19:4d:b8:13:88:9b:93:6a:7c:f0:5a:63:d6:7b:71:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 28 00:00:00 2024 GMT Not After : Dec 2 23:59:59 2024 GMT Subject: serialNumber=a0ffbecf8bcadf0d68b67c2a06ab9a058846f316e3c41b0fc4bf50147ee67b1e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8e:30:51:32:bd:63:21:39:d1:88:2b:01:57: 8e:60:a7:dc:e6:49:a5:87:f3:28:89:36:bc:d5:40: a2:45:a2:80:b8:ac:db:cb:40:4a:6c:6d:b9:ef:ef: 62:f9:08:8d:51:61:40:dc:89:fb:dd:bf:6a:cf:02: 73:22:c1:5e:d2:4d:42:81:b9:7d:1c:56:a9:14:76: 3f:3c:0f:1f:56:df:73:4f:96:1b:a0:85:02:7b:d2: 90:6a:9f:56:9b:df:8d:ec:f5:a0:57:46:99:0d:e1: b9:0d:76:3e:44:87:d3:1b:c0:b6:6d:b1:d8:af:f8: 91:89:0c:a5:ae:bc:17:ba:f1:37:18:01:76:85:01: 91:b1:c8:7d:b8:cb:4a:21:04:08:da:28:74:66:de: b5:2e:78:f0:4f:21:b1:d9:9b:c6:a5:3e:78:fa:a1: 71:66:98:6c:c4:48:75:63:b4:79:67:d5:c3:34:cb: 38:e6:05:5b:e9:1b:b3:c0:5e:d4:5a:05:9a:dd:2f: 82:44:3a:d0:ca:52:c7:44:8d:1b:82:b9:c4:07:df: 8c:05:bb:22:3c:d1:48:74:55:a6:bf:07:44:ca:71: 3a:65:96:61:68:69:c8:16:9b:7f:98:55:99:62:f3: 5d:54:4a:b3:ff:f9:ae:72:a9:3d:4e:fe:cb:25:73: 04:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:96:AB:B5:4D:00:2E:02:58:7F:49:F2:DC:83:EC:41:9A:06:F1:5A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c911aa68-f4a1-40a1-9aa5-18442e7ec537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 32.236.0.0/15 Signature Algorithm: sha256WithRSAEncryption a8:93:42:a3:ec:b7:2c:21:44:e5:29:78:b7:40:61:a1:11:f8: 5c:16:c7:cf:9b:a7:e0:c8:48:ee:32:42:b9:3e:75:91:44:8f: ea:65:60:e2:d1:a0:40:c7:1c:73:d2:54:2c:dd:d7:4a:28:88: 49:90:c5:b9:a2:07:22:6f:c4:20:80:47:59:c7:00:13:77:a6: ad:db:a7:7e:31:91:7c:44:00:d1:56:cb:d6:ec:9f:3b:35:d4: e6:b3:c3:38:55:81:f4:62:32:04:de:d1:d6:d6:c2:38:12:67: 6a:2d:fc:e8:a6:60:35:bf:0a:26:cb:ef:63:b3:d2:fe:34:63: e9:cb:62:d5:e7:99:92:03:1c:9b:a8:21:f0:8d:94:96:93:54: 53:a1:fb:e7:54:37:44:16:d7:6b:9d:69:9d:04:2f:a6:25:6d: 61:33:1a:20:1b:77:75:e7:83:c5:ef:d9:ae:ee:5a:81:ae:1f: b0:24:7e:30:60:e8:84:f5:c0:65:89:be:6a:ab:e3:2c:ff:05: 7e:d5:f6:db:37:78:ac:dd:2c:e5:47:6f:29:95:99:5a:76:a4: b3:d1:c9:21:60:42:f1:61:9d:cc:c0:57:23:66:14:c3:59:63: 82:79:18:26:b8:ec:e9:25:bf:fb:0e:e2:25:fb:7e:10:b6:a2: 19:c6:a8:57 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQRWWXxlNuBOIm5NqfPBaY9Z7ccswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMDI4MDAwMDAwWhcNMjQxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMGZmYmVjZjhiY2FkZjBkNjhiNjdjMmEwNmFiOWEwNTg4 NDZmMzE2ZTNjNDFiMGZjNGJmNTAxNDdlZTY3YjFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCijjBRMr1jITnRiCsBV45gp9zmSaWH8yiJNrzVQKJFooC4 rNvLQEpsbbnv72L5CI1RYUDcifvdv2rPAnMiwV7STUKBuX0cVqkUdj88Dx9W33NP lhughQJ70pBqn1ab343s9aBXRpkN4bkNdj5Eh9MbwLZtsdiv+JGJDKWuvBe68TcY AXaFAZGxyH24y0ohBAjaKHRm3rUuePBPIbHZm8alPnj6oXFmmGzESHVjtHln1cM0 yzjmBVvpG7PAXtRaBZrdL4JEOtDKUsdEjRuCucQH34wFuyI80Uh0Vaa/B0TKcTpl lmFoacgWm3+YVZli811USrP/+a5yqT1O/sslcwT1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUtpartU0ALgJYf0ny3IPsQZoG8VowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M5MTFhYTY4LWY0YTEtNDBhMS05YWE1LTE4NDQyZTdlYzUzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEg7DANBgkqhkiG9w0BAQsFAAOCAQEAqJNCo+y3LCFE5Sl4t0BhoRH4XBbH z5un4MhI7jJCuT51kUSP6mVg4tGgQMccc9JULN3XSiiISZDFuaIHIm/EIIBHWccA E3emrdunfjGRfEQA0VbL1uyfOzXU5rPDOFWB9GIyBN7R1tbCOBJnai386KZgNb8K JsvvY7PS/jRj6cti1eeZkgMcm6gh8I2UlpNUU6H751Q3RBbXa51pnQQvpiVtYTMa IBt3deeDxe/Zru5aga4fsCR+MGDohPXAZYm+aqvjLP8FftX22zd4rN0s5UdvKZWZ Wnaks9HJIWBC8WGdzMBXI2YUw1ljgnkYJrjs6SW/+w7iJft+ELaiGcaoVw== -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:29 2024 by rpki-client on console-fra.rpki-client.org