$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce9cbac2-4749-4385-b952-5b4d9b9484d0.roa File: ce9cbac2-4749-4385-b952-5b4d9b9484d0.roa (raw, json) Hash identifier: lHJp02dFW7eq3d9dEEq163NIOEWsrufYWn7IBhfCP3k= Subject key identifier: CA:E1:B1:BB:29:3A:EB:4E:57:AA:D3:FE:8C:52:D7:F8:E3:B0:CC:77 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 28D3FF7429C612360C5A9DFE5B957AC8A0A03FA9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce9cbac2-4749-4385-b952-5b4d9b9484d0.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffa:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d3:ff:74:29:c6:12:36:0c:5a:9d:fe:5b:95:7a:c8:a0:a0:3f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=b8bff6e3c7ba5476e91ca5cc3bbba193a66ebfd5738573a72e757ad3cc85754a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:23:1c:74:bf:6b:f8:87:a3:1f:29:31:2d:d0: e2:0a:cb:d2:32:46:9e:aa:3d:fe:04:71:4e:f3:cc: bf:7b:20:d6:97:3c:c6:b9:1b:9c:c3:fe:c0:df:a3: 5a:96:ab:9a:9c:e6:40:33:83:96:13:90:55:b4:09: 75:e5:b6:45:84:2b:5d:6c:88:a4:b5:25:03:d8:5b: 4e:14:63:b6:c6:22:b0:44:80:73:bd:f6:76:34:6d: f2:69:1e:3d:a1:93:01:c1:74:73:d4:e9:1d:5c:05: 46:8d:25:5e:2c:50:77:ad:4a:0f:49:05:9b:b8:20: 0a:08:fc:2e:01:fc:ab:9a:33:ec:9c:aa:26:66:d1: e5:7e:a7:b3:e3:20:5b:b6:60:58:e8:f8:ad:d7:c5: c6:9e:a8:2b:4e:4f:c2:09:19:ef:ed:e5:4f:3e:14: 8a:6d:7f:b4:3b:bc:f5:fd:69:d7:2d:fd:82:7c:b5: eb:44:9a:28:5b:59:3b:8b:df:77:8d:a0:99:80:14: 38:81:99:21:79:f7:46:bb:95:31:ea:2d:cd:6f:ff: 68:86:f2:de:dc:5f:8b:e6:77:3b:c3:56:43:dc:e6: 47:5a:c6:ac:13:91:78:60:c1:50:25:74:5e:84:0e: 9e:56:7e:cd:8c:13:45:4e:59:12:08:6d:47:07:97: 2c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E1:B1:BB:29:3A:EB:4E:57:AA:D3:FE:8C:52:D7:F8:E3:B0:CC:77 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce9cbac2-4749-4385-b952-5b4d9b9484d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffa:4000::/40 Signature Algorithm: sha256WithRSAEncryption a1:9d:2b:21:95:38:fa:85:8d:c4:d9:db:80:8e:af:ce:47:02: 7b:94:30:86:37:c6:1a:3e:e6:19:17:17:66:ae:11:d4:3d:30: a3:2c:49:a3:1e:ca:0b:a1:bd:0c:6a:25:69:92:58:62:4b:f5: cd:cf:85:54:e4:2d:a6:d5:ea:5b:32:e9:25:7d:16:36:2c:2b: 08:cf:40:ee:68:fd:5c:34:a3:62:67:ec:a5:dc:fc:9d:7f:aa: de:7b:f7:9f:08:e0:72:04:3c:ed:b9:e8:8c:f6:96:ec:03:4c: 4d:23:63:19:6d:cc:1d:4d:e9:0f:b2:7c:3a:5d:68:01:0f:52: 7c:c6:00:ca:ee:b4:a5:1f:24:eb:fc:e8:8c:7e:db:3e:58:f8: 09:70:57:38:2c:5f:66:01:77:21:3b:2f:21:76:b3:23:ec:0f: 60:9f:5c:c4:1b:15:50:a2:0a:2f:79:a6:be:f6:3b:49:f4:3a: 06:28:a0:c7:c4:87:63:40:4c:de:33:19:9c:76:9b:bc:53:26: 96:3e:56:27:da:e0:71:c2:49:11:55:a9:81:68:48:98:0a:75: bc:1e:3e:2f:29:8a:7a:5c:36:6e:9a:c5:9f:8d:41:8f:9a:78: 0f:a9:4f:78:b0:05:29:da:73:06:07:a4:41:53:c1:43:a7:cf: 4b:3d:d3:a5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUKNP/dCnGEjYMWp3+W5V6yKCgP6kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiOGJmZjZlM2M3YmE1NDc2ZTkxY2E1Y2MzYmJiYTE5M2E2 NmViZmQ1NzM4NTczYTcyZTc1N2FkM2NjODU3NTRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfIxx0v2v4h6MfKTEt0OIKy9IyRp6qPf4EcU7zzL97INaX PMa5G5zD/sDfo1qWq5qc5kAzg5YTkFW0CXXltkWEK11siKS1JQPYW04UY7bGIrBE gHO99nY0bfJpHj2hkwHBdHPU6R1cBUaNJV4sUHetSg9JBZu4IAoI/C4B/KuaM+yc qiZm0eV+p7PjIFu2YFjo+K3XxcaeqCtOT8IJGe/t5U8+FIptf7Q7vPX9adct/YJ8 tetEmihbWTuL33eNoJmAFDiBmSF590a7lTHqLc1v/2iG8t7cX4vmdzvDVkPc5kda xqwTkXhgwVAldF6EDp5Wfs2ME0VOWRIIbUcHlyx5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUyuGxuyk6605XqtP+jFLX+OOwzHcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlOWNiYWMyLTQ3NDktNDM4NS1iOTUyLTViNGQ5Yjk0ODRkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/6QDANBgkqhkiG9w0BAQsFAAOCAQEAoZ0rIZU4+oWNxNnbgI6vzkcC e5QwhjfGGj7mGRcXZq4R1D0woyxJox7KC6G9DGolaZJYYkv1zc+FVOQtptXqWzLp JX0WNiwrCM9A7mj9XDSjYmfspdz8nX+q3nv3nwjgcgQ87bnojPaW7ANMTSNjGW3M HU3pD7J8Ol1oAQ9SfMYAyu60pR8k6/zojH7bPlj4CXBXOCxfZgF3ITsvIXazI+wP YJ9cxBsVUKIKL3mmvvY7SfQ6Biigx8SHY0BM3jMZnHabvFMmlj5WJ9rgccJJEVWp gWhImAp1vB4+LymKelw2bprFn41Bj5p4D6lPeLAFKdpzBgekQVPBQ6fPSz3TpQ== -----END CERTIFICATE-----Generated at Sun Nov 24 02:35:53 2024 by rpki-client on console-fra.rpki-client.org