$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de9dd697-4cf9-4962-86aa-5815f3f52bca.roa File: de9dd697-4cf9-4962-86aa-5815f3f52bca.roa (raw, json) Hash identifier: /dPVtTak8Q8WQH4Z4enl9o7CsZ1tSdet5iOvTnclCH8= Subject key identifier: BC:8D:6A:9D:5F:23:72:51:43:0F:95:B0:95:B5:57:B6:82:62:E8:72 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2C93BEE5255931E81507F4D17306C33827C90D68 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de9dd697-4cf9-4962-86aa-5815f3f52bca.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 16.132.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:93:be:e5:25:59:31:e8:15:07:f4:d1:73:06:c3:38:27:c9:0d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=10d1bfed5830bdeed3d9b99d15f3b4e04a02ac20bead0c14b229ecc1bf12ee09, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9f:a3:6b:ee:9d:c2:b5:47:28:bc:ed:b6:83: 11:8f:ca:1d:90:d6:80:6f:a2:c8:bf:8d:07:12:74: 8e:05:02:95:ed:ce:8d:dd:a1:17:66:3e:01:5b:40: dd:41:19:6c:27:cd:c8:44:85:e7:5e:48:0f:2b:cc: 91:dd:7d:f8:71:32:c8:4d:31:5b:54:ab:43:f3:a2: 6d:b3:59:1d:f5:fb:75:ce:47:fd:78:82:b2:ca:4e: 53:b6:83:ec:32:e3:97:8b:c4:5a:f7:93:d8:9a:a8: 41:89:c1:ba:14:7b:62:b1:c3:49:7c:66:b6:0a:4a: d5:30:2c:87:65:79:00:4e:4c:34:ab:d6:14:b0:a8: 7d:b4:89:d7:04:a3:89:94:5d:6e:09:04:b6:62:0e: 0d:46:bd:02:79:88:56:f5:f3:7e:f4:fd:4b:9a:79: 51:ab:1f:10:e6:8a:7b:34:c4:32:38:0e:1c:92:c8: a8:c5:b7:1b:94:ad:46:ea:0b:c1:de:82:80:0c:ed: e7:60:97:47:c2:03:c3:23:c7:dd:0b:b4:af:8c:b3: cd:f0:1f:f2:15:22:3f:e8:d0:12:1a:66:19:42:53: de:31:9b:84:e0:cf:6c:f4:37:82:df:3e:21:78:46: a9:04:21:81:52:05:e0:d7:9f:c0:62:45:5c:e6:0b: fe:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8D:6A:9D:5F:23:72:51:43:0F:95:B0:95:B5:57:B6:82:62:E8:72 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de9dd697-4cf9-4962-86aa-5815f3f52bca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.132.0.0/16 Signature Algorithm: sha256WithRSAEncryption 70:11:ee:96:4a:52:3a:86:3d:7b:6a:2d:d9:f3:e3:ba:cc:27: 05:67:f2:3d:36:96:85:a2:d2:46:ef:21:6b:8d:5b:b4:2d:af: 2a:0c:fe:57:32:7b:08:05:85:be:dd:a3:f8:aa:fc:23:4a:a2: 18:0c:af:36:e9:c5:3b:41:45:d6:49:eb:85:0e:be:6b:4a:a4: 3a:3f:7e:22:97:61:51:4a:9e:e6:50:a9:07:d3:40:d5:b2:a9: 8f:7e:eb:d8:6c:20:1c:62:5c:b1:f5:ee:e4:44:fe:48:06:c1: 7f:b4:81:35:a3:57:b9:34:6d:ef:04:1f:83:8b:97:ed:53:6c: 85:81:aa:a4:b3:e6:c7:20:26:60:28:bf:e2:d9:42:05:85:f8: 63:86:29:f7:78:23:29:8b:1b:2a:18:1e:3e:be:9b:a8:15:de: a3:15:1f:f7:a9:ed:df:20:e8:97:56:b1:2b:6e:2a:ee:26:8c: 49:6f:48:65:ef:65:d6:33:56:02:2d:2c:3e:08:99:fe:84:d7: 80:e7:7d:ea:c6:62:59:47:fc:d5:3a:6b:31:ad:f8:b0:f0:ed: a1:34:95:f2:97:ba:00:8b:05:80:07:e9:56:a7:52:b6:8e:3e: de:6d:0e:13:64:34:8a:e9:ce:b3:a2:f9:cb:4d:eb:a0:a2:89: a1:3e:7a:e8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULJO+5SVZMegVB/TRcwbDOCfJDWgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMGQxYmZlZDU4MzBiZGVlZDNkOWI5OWQxNWYzYjRlMDRh MDJhYzIwYmVhZDBjMTRiMjI5ZWNjMWJmMTJlZTA5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0n6Nr7p3CtUcovO22gxGPyh2Q1oBvosi/jQcSdI4FApXt zo3doRdmPgFbQN1BGWwnzchEhedeSA8rzJHdffhxMshNMVtUq0Pzom2zWR31+3XO R/14grLKTlO2g+wy45eLxFr3k9iaqEGJwboUe2Kxw0l8ZrYKStUwLIdleQBOTDSr 1hSwqH20idcEo4mUXW4JBLZiDg1GvQJ5iFb18370/UuaeVGrHxDmins0xDI4DhyS yKjFtxuUrUbqC8HegoAM7edgl0fCA8Mjx90LtK+Ms83wH/IVIj/o0BIaZhlCU94x m4Tgz2z0N4LfPiF4RqkEIYFSBeDXn8BiRVzmC/7LAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUvI1qnV8jclFDD5WwlbVXtoJi6HIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RlOWRkNjk3LTRjZjktNDk2Mi04NmFhLTU4MTVmM2Y1MmJjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQhDANBgkqhkiG9w0BAQsFAAOCAQEAcBHulkpSOoY9e2ot2fPjuswnBWfy PTaWhaLSRu8ha41btC2vKgz+VzJ7CAWFvt2j+Kr8I0qiGAyvNunFO0FF1knrhQ6+ a0qkOj9+IpdhUUqe5lCpB9NA1bKpj37r2GwgHGJcsfXu5ET+SAbBf7SBNaNXuTRt 7wQfg4uX7VNshYGqpLPmxyAmYCi/4tlCBYX4Y4Yp93gjKYsbKhgePr6bqBXeoxUf 96nt3yDol1axK24q7iaMSW9IZe9l1jNWAi0sPgiZ/oTXgOd96sZiWUf81TprMa34 sPDtoTSV8pe6AIsFgAfpVqdSto4+3m0OE2Q0iunOs6L5y03roKKJoT566A== -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:35 2024 by rpki-client on console-fra.rpki-client.org