$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00211621-9194-4a1b-878f-94a4789b1d03.roa File: 00211621-9194-4a1b-878f-94a4789b1d03.roa (raw, json) Hash identifier: +dI2ZNL0jEobeuV3hH7On9Mjk0K/POnPkO8xbdAuwuM= Subject key identifier: C0:38:F7:CD:4F:05:A0:1B:C5:AC:27:77:60:B9:28:15:1E:A4:CA:76 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 57EED707185C9BEF74DBA56BFCA99C5D85E91FCA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00211621-9194-4a1b-878f-94a4789b1d03.roa Signing time: Mon 18 Nov 2024 00:00:00 +0000 ROA not before: Mon 18 Nov 2024 00:00:00 +0000 ROA not after: Mon 23 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 108.166.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ee:d7:07:18:5c:9b:ef:74:db:a5:6b:fc:a9:9c:5d:85:e9:1f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 18 00:00:00 2024 GMT Not After : Dec 23 23:59:59 2024 GMT Subject: serialNumber=69db9b952cc1ef089d1890d723e4f2cdbccbe6d8938b818527301f4f4ecd0767, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5a:6c:91:e8:29:e7:22:86:d2:a1:5d:d4:f5: 8c:cb:39:68:08:be:25:04:87:2a:98:56:45:6d:15: 9c:fe:6d:f7:5c:43:0d:67:4d:81:35:33:4b:3f:af: a2:71:3d:18:aa:aa:da:0d:3f:37:da:0d:13:e4:c4: 77:50:e0:c6:39:c0:c1:77:dc:12:1b:63:01:29:5e: ec:0a:a0:af:43:04:87:3e:31:0d:d7:1f:9b:6b:98: 96:ab:ac:e9:5e:90:a8:d6:52:87:1b:90:de:6b:db: a1:a9:be:5d:d9:cb:1e:25:65:ea:13:6e:e5:af:3b: 34:c6:20:72:45:86:48:a1:73:ff:7e:d3:07:9c:82: 54:8e:d1:a4:6b:c4:73:69:d8:f7:5b:66:0e:6e:a0: fe:0a:46:c3:db:5e:a3:b9:0f:29:41:5d:3a:1b:05: 35:29:67:4b:01:ed:02:1f:3b:66:3a:15:14:c0:ae: 38:b5:94:b0:56:4f:8f:04:a3:59:d5:e8:d1:13:e8: bc:e5:d7:2f:a6:96:35:29:04:18:be:31:cb:06:e4: b0:ff:15:3c:5d:57:5c:50:27:2f:9b:9e:6e:78:3e: ea:2e:98:ab:ad:eb:41:18:1b:6f:3d:33:15:8f:cd: dc:78:b2:de:94:97:6e:13:86:d1:64:83:c5:d5:21: c6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:38:F7:CD:4F:05:A0:1B:C5:AC:27:77:60:B9:28:15:1E:A4:CA:76 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00211621-9194-4a1b-878f-94a4789b1d03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.166.224.0/19 Signature Algorithm: sha256WithRSAEncryption 48:ce:ff:44:b6:59:7c:bd:33:df:52:67:c3:5f:29:0f:d8:24: 1f:96:d2:41:c3:1f:36:db:95:b5:c5:a3:b6:f7:b8:09:cf:34: b8:ce:bf:57:63:e5:c9:c0:ea:34:62:9f:4d:5d:30:9e:4f:3b: ed:72:23:2e:35:bd:c2:7c:ae:5e:44:a4:53:60:15:7a:0d:be: 5b:35:e9:7d:af:5b:76:eb:97:fe:13:a1:e6:4a:e3:1e:8b:92: 05:11:83:35:e4:4e:cc:90:40:36:9a:62:b7:34:d6:17:0b:6a: bf:55:50:1e:c9:30:89:bd:6c:0a:71:4e:e2:17:89:84:30:d8: c5:a5:b9:6f:f0:1b:af:a5:39:8a:92:27:ef:11:ce:87:a3:e1: 4e:75:6d:c2:45:c4:bf:67:f5:42:9d:35:e1:22:13:89:25:d7: 1d:1e:a2:36:80:8b:f2:15:20:4e:59:61:64:e6:b5:06:60:52: 04:4e:ba:1c:0c:cd:b0:e9:29:ec:93:e0:6b:3f:f4:c0:50:30: 70:54:f6:b0:83:16:ce:36:04:f2:fb:58:80:c3:36:e7:93:65: 7a:e7:fd:7d:8d:1c:42:17:76:41:b5:c9:33:40:b5:bd:92:f7: 2b:5e:39:b4:58:02:a8:22:06:5a:d1:13:05:a5:a7:be:82:ac: ef:f6:5f:aa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV+7XBxhcm+9026Vr/KmcXYXpH8owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTE4MDAwMDAwWhcNMjQxMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OWRiOWI5NTJjYzFlZjA4OWQxODkwZDcyM2U0ZjJjZGJj Y2JlNmQ4OTM4YjgxODUyNzMwMWY0ZjRlY2QwNzY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1WmyR6CnnIobSoV3U9YzLOWgIviUEhyqYVkVtFZz+bfdc Qw1nTYE1M0s/r6JxPRiqqtoNPzfaDRPkxHdQ4MY5wMF33BIbYwEpXuwKoK9DBIc+ MQ3XH5trmJarrOlekKjWUocbkN5r26Gpvl3Zyx4lZeoTbuWvOzTGIHJFhkihc/9+ 0wecglSO0aRrxHNp2PdbZg5uoP4KRsPbXqO5DylBXTobBTUpZ0sB7QIfO2Y6FRTA rji1lLBWT48Eo1nV6NET6Lzl1y+mljUpBBi+McsG5LD/FTxdV1xQJy+bnm54Puou mKut60EYG289MxWPzdx4st6Ul24ThtFkg8XVIcbbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwDj3zU8FoBvFrCd3YLkoFR6kynYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAwMjExNjIxLTkxOTQtNGExYi04NzhmLTk0YTQ3ODliMWQwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVspuAwDQYJKoZIhvcNAQELBQADggEBAEjO/0S2WXy9M99SZ8NfKQ/YJB+W 0kHDHzbblbXFo7b3uAnPNLjOv1dj5cnA6jRin01dMJ5PO+1yIy41vcJ8rl5EpFNg FXoNvls16X2vW3brl/4ToeZK4x6LkgURgzXkTsyQQDaaYrc01hcLar9VUB7JMIm9 bApxTuIXiYQw2MWluW/wG6+lOYqSJ+8Rzoej4U51bcJFxL9n9UKdNeEiE4kl1x0e ojaAi/IVIE5ZYWTmtQZgUgROuhwMzbDpKeyT4Gs/9MBQMHBU9rCDFs42BPL7WIDD NueTZXrn/X2NHEIXdkG1yTNAtb2S9yteObRYAqgiBlrREwWlp76CrO/2X6o= -----END CERTIFICATE-----Generated at Fri Nov 22 04:02:14 2024 by rpki-client on console-ams.rpki-client.org