$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6930df6d-7cc0-47c4-9839-06b0371410e1.roa File: 6930df6d-7cc0-47c4-9839-06b0371410e1.roa (raw, json) Hash identifier: HrT7Kf7vhKBy2jxxt6QWJXGO6ldJaTdKHFM4X9MVr0Y= Subject key identifier: FA:33:DC:D0:36:30:7B:45:15:61:03:8B:67:6B:12:8B:8A:2D:97:78 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 642548EAEBBB6678DAF93B1338F2EFC20F2A6984 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6930df6d-7cc0-47c4-9839-06b0371410e1.roa Signing time: Sat 24 Aug 2024 00:00:00 +0000 ROA not before: Sat 24 Aug 2024 00:00:00 +0000 ROA not after: Sat 28 Sep 2024 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Sep 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:25:48:ea:eb:bb:66:78:da:f9:3b:13:38:f2:ef:c2:0f:2a:69:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 24 00:00:00 2024 GMT Not After : Sep 28 23:59:59 2024 GMT Subject: serialNumber=687364a641514f0ee3e66ad5c84f7fae74a23b77bd96d56e8737fb8b386f2742, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:94:da:9e:b6:ca:0b:eb:57:a2:f7:8d:17:49: 94:5e:99:35:e9:1b:29:e8:60:e0:56:22:b8:de:80: 09:5b:ed:dd:64:6b:53:9c:13:c1:e3:30:70:9a:f3: a5:aa:15:b5:e9:af:11:90:8e:fa:5d:29:fc:ae:9e: a4:2a:49:b6:7f:7d:56:dc:8b:d7:49:37:8a:9e:cd: 91:81:13:5f:a5:c3:8e:67:56:ad:07:5a:f3:03:3a: d6:69:01:d7:eb:41:27:2b:ed:1c:ab:ad:75:24:9a: b7:ee:4c:e5:62:f8:aa:6f:97:31:c0:ec:85:76:c5: fc:a7:6f:c3:66:90:39:54:b7:97:52:fc:56:c6:f9: fa:65:42:12:a5:b4:8a:fb:a2:0a:3b:81:d3:ec:63: 00:92:d8:72:d4:cd:d8:7d:0d:de:cf:6b:2c:61:fd: e7:56:f3:94:bb:81:8a:cc:f0:49:12:f3:36:28:03: 3d:0c:84:56:93:4a:7a:6b:d7:1e:83:f6:1f:f3:b8: ee:4a:c3:47:11:57:86:99:c6:d6:27:3d:62:0a:e0: f0:e7:0c:4e:52:51:0c:36:d3:30:da:8e:b6:87:19: 98:8b:a4:98:b3:70:c9:fe:eb:90:a5:0e:55:a7:64: cb:3e:fa:18:f1:2e:69:a4:06:e1:aa:fa:da:4f:e2: a2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:33:DC:D0:36:30:7B:45:15:61:03:8B:67:6B:12:8B:8A:2D:97:78 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6930df6d-7cc0-47c4-9839-06b0371410e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.16.0/20 Signature Algorithm: sha256WithRSAEncryption 30:0f:23:0a:c2:9f:77:fb:33:d7:0e:2d:24:ec:e1:16:4d:e5: 0f:0c:84:14:6a:8a:dc:ec:98:27:40:aa:e0:db:7a:86:5d:db: 82:58:8b:4c:7b:9a:a6:57:c5:1e:5f:dc:be:86:41:55:07:e6: a2:18:75:8b:0e:a2:e5:89:0d:bf:e2:17:8d:79:08:7c:4b:5b: ff:1e:89:75:0d:51:07:8b:ad:e6:65:45:e9:08:2f:5f:77:81: d5:d5:7d:6d:79:6b:d1:33:e3:3e:04:46:a9:15:95:87:05:74: 90:b8:f4:66:56:66:19:6d:d0:ad:b1:d5:d5:ce:27:ab:2b:f2: d7:d2:96:f4:b3:f6:a1:df:e1:50:f3:f5:73:db:35:44:c3:26: 06:f2:e2:e6:85:d3:c7:46:41:2d:88:19:68:98:e5:0d:3d:5b: 79:30:f9:70:8e:10:57:03:6f:b2:2d:25:c1:8d:ec:63:64:41: b3:96:b2:ab:a3:b5:01:3d:0f:49:71:71:43:fc:72:4e:d4:c1: 00:03:44:ac:05:93:4e:f0:f3:57:fe:bb:b2:3a:85:a9:56:94: f4:e7:65:53:73:07:14:88:90:7a:de:4e:ae:c7:f3:fd:70:e8: 2f:0c:ce:1d:6a:32:19:50:c3:e5:16:0b:92:21:e6:1d:60:44: c1:e6:f0:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZCVI6uu7Znja+TsTOPLvwg8qaYQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjQwODI0MDAwMDAwWhcNMjQwOTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODczNjRhNjQxNTE0ZjBlZTNlNjZhZDVjODRmN2ZhZTc0 YTIzYjc3YmQ5NmQ1NmU4NzM3ZmI4YjM4NmYyNzQyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXlNqetsoL61ei940XSZRemTXpGynoYOBWIrjegAlb7d1k a1OcE8HjMHCa86WqFbXprxGQjvpdKfyunqQqSbZ/fVbci9dJN4qezZGBE1+lw45n Vq0HWvMDOtZpAdfrQScr7RyrrXUkmrfuTOVi+KpvlzHA7IV2xfynb8NmkDlUt5dS /FbG+fplQhKltIr7ogo7gdPsYwCS2HLUzdh9Dd7Payxh/edW85S7gYrM8EkS8zYo Az0MhFaTSnpr1x6D9h/zuO5Kw0cRV4aZxtYnPWIK4PDnDE5SUQw20zDajraHGZiL pJizcMn+65ClDlWnZMs++hjxLmmkBuGq+tpP4qJjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+jPc0DYwe0UVYQOLZ2sSi4otl3gwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzY5MzBkZjZkLTdjYzAtNDdjNC05ODM5LTA2YjAzNzE0MTBlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYBAwDQYJKoZIhvcNAQELBQADggEBADAPIwrCn3f7M9cOLSTs4RZN5Q8M hBRqitzsmCdAquDbeoZd24JYi0x7mqZXxR5f3L6GQVUH5qIYdYsOouWJDb/iF415 CHxLW/8eiXUNUQeLreZlRekIL193gdXVfW15a9Ez4z4ERqkVlYcFdJC49GZWZhlt 0K2x1dXOJ6sr8tfSlvSz9qHf4VDz9XPbNUTDJgby4uaF08dGQS2IGWiY5Q09W3kw +XCOEFcDb7ItJcGN7GNkQbOWsqujtQE9D0lxcUP8ck7UwQADRKwFk07w81f+u7I6 halWlPTnZVNzBxSIkHreTq7H8/1w6C8Mzh1qMhlQw+UWC5Ih5h1gRMHm8Fg= -----END CERTIFICATE-----Generated at Sat Sep 7 16:36:30 2024 by rpki-client on console-ams.rpki-client.org