$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdc5692a-c5c6-4750-9dad-218be1c3fbaf.roa File: cdc5692a-c5c6-4750-9dad-218be1c3fbaf.roa (raw, json) Hash identifier: eSWv/06rfz4kvKokW1qm2SS+upIzrBRMTlLb0hnDAJI= Subject key identifier: B7:2E:85:59:E9:A9:34:07:A3:9C:29:36:A9:9C:3D:35:99:49:22:EC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45784CA312AE1BA8DC6D82045AA2D172CA9D0352 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdc5692a-c5c6-4750-9dad-218be1c3fbaf.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 19047 IP address blocks: 70.130.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:78:4c:a3:12:ae:1b:a8:dc:6d:82:04:5a:a2:d1:72:ca:9d:03:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=1274a9687d4a3047b940e84cb3fd4b2861088b2688f9de9e72a06e9d97d5d0d6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f1:c8:cc:73:d0:e2:53:e5:7c:bd:66:30:da: 06:70:1d:0e:87:69:05:cc:8c:d6:c0:6b:02:32:6a: 8a:d2:de:2d:f4:6f:65:a4:ab:37:8c:eb:df:e0:6a: 59:6e:15:20:36:aa:5e:55:57:c8:77:90:73:65:32: 54:07:25:16:eb:0c:eb:33:31:44:0e:05:a9:d9:b3: 7a:86:f7:a0:5e:a9:ce:d1:9c:fe:a8:00:c2:2c:67: 73:1e:a4:4e:75:80:b0:bb:bb:39:fe:c3:7d:8a:bd: 98:0b:c6:64:a4:08:86:ed:db:b1:c1:16:21:16:04: db:e9:1c:1f:07:ad:19:40:09:de:0a:2e:f2:d7:54: b0:2f:b6:a2:cb:da:34:40:7b:7d:7b:ab:d5:db:f7: 1e:d2:bf:93:54:1c:a5:e7:0a:6f:36:03:1e:fc:2d: 7a:1f:f5:ef:28:01:e8:85:2d:68:37:5a:8d:8c:f8: 42:a1:aa:6e:bc:5c:d1:95:31:82:ec:7f:f7:81:d1: e7:df:dd:e8:6b:ea:6e:e7:3c:f3:8f:33:59:15:94: 4a:e3:a2:16:33:5d:95:d4:fc:6a:9a:47:c5:5f:a1: a2:2e:e8:f7:2f:32:30:6c:0b:2d:9a:ab:a5:c3:4a: 15:c5:a6:00:1c:64:3c:de:7d:ca:38:b7:19:1b:07: 06:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2E:85:59:E9:A9:34:07:A3:9C:29:36:A9:9C:3D:35:99:49:22:EC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdc5692a-c5c6-4750-9dad-218be1c3fbaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.130.196.0/24 Signature Algorithm: sha256WithRSAEncryption 87:b1:24:80:bb:f8:d5:3d:9d:ab:fa:68:6e:98:1e:7b:b7:ec: ba:29:d9:72:32:6f:65:20:26:b0:d4:d3:44:47:90:6a:b3:f0: 1f:58:6f:b9:3b:6b:e3:e0:43:f1:fb:5e:19:64:67:20:b5:c3: 4d:e6:74:1d:c2:74:11:b3:97:dc:ad:e5:49:c1:a3:0c:ed:41: f9:c5:c4:a2:a1:c9:a4:e9:36:68:64:54:ac:aa:d4:50:50:65: e4:85:94:52:8d:fd:23:cc:a9:e0:32:29:60:18:37:b9:d8:7b: 33:88:d6:a2:89:1f:f5:b8:22:14:9d:93:a2:91:89:df:c5:20: 51:0f:f9:99:81:4b:5b:8f:45:64:3b:81:96:a7:28:8c:e9:d3: 23:55:a7:11:83:3f:1c:3c:14:bc:b2:3b:cb:84:0b:3f:fa:ee: 3d:de:b1:7c:05:48:69:60:f3:ac:4a:68:72:88:fa:ad:b4:60: e9:d0:3e:f6:da:91:5c:b6:b2:d0:82:9f:7c:81:54:f1:65:cd: 7f:02:ca:c6:fa:16:c9:0f:45:42:54:36:ca:28:79:4c:7c:85: 10:0c:63:17:e3:42:5a:3d:d9:0f:21:d1:97:3c:6c:3c:f0:2f: cb:0d:10:73:81:10:b5:2c:ca:1c:06:61:8e:1b:e1:56:99:bb: e6:85:46:ea -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURXhMoxKuG6jcbYIEWqLRcsqdA1IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjc0YTk2ODdkNGEzMDQ3Yjk0MGU4NGNiM2ZkNGIyODYx MDg4YjI2ODhmOWRlOWU3MmEwNmU5ZDk3ZDVkMGQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDc8cjMc9DiU+V8vWYw2gZwHQ6HaQXMjNbAawIyaorS3i30 b2WkqzeM69/galluFSA2ql5VV8h3kHNlMlQHJRbrDOszMUQOBanZs3qG96Beqc7R nP6oAMIsZ3MepE51gLC7uzn+w32KvZgLxmSkCIbt27HBFiEWBNvpHB8HrRlACd4K LvLXVLAvtqLL2jRAe317q9Xb9x7Sv5NUHKXnCm82Ax78LXof9e8oAeiFLWg3Wo2M +EKhqm68XNGVMYLsf/eB0eff3ehr6m7nPPOPM1kVlErjohYzXZXU/GqaR8VfoaIu 6PcvMjBsCy2aq6XDShXFpgAcZDzefco4txkbBwbHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUty6FWempNAejnCk2qZw9NZlJIuwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkYzU2OTJhLWM1YzYtNDc1MC05ZGFkLTIxOGJlMWMzZmJhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABGgsQwDQYJKoZIhvcNAQELBQADggEBAIexJIC7+NU9nav6aG6YHnu37Lop 2XIyb2UgJrDU00RHkGqz8B9Yb7k7a+PgQ/H7XhlkZyC1w03mdB3CdBGzl9yt5UnB owztQfnFxKKhyaTpNmhkVKyq1FBQZeSFlFKN/SPMqeAyKWAYN7nYezOI1qKJH/W4 IhSdk6KRid/FIFEP+ZmBS1uPRWQ7gZanKIzp0yNVpxGDPxw8FLyyO8uECz/67j3e sXwFSGlg86xKaHKI+q20YOnQPvbakVy2stCCn3yBVPFlzX8Cysb6FskPRUJUNsoo eUx8hRAMYxfjQlo92Q8h0Zc8bDzwL8sNEHOBELUsyhwGYY4b4VaZu+aFRuo= -----END CERTIFICATE-----Generated at Fri Nov 22 04:03:14 2024 by rpki-client on console-ams.rpki-client.org