$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0238a88e-3548-4848-b4df-f60ec7c873a9.roa File: 0238a88e-3548-4848-b4df-f60ec7c873a9.roa (raw, json) Hash identifier: dsez9n6u7Cqk1G1b82uqkqeIN49/3ZoJmroHZXiMROQ= Subject key identifier: 0D:18:28:9E:23:FA:E5:DE:9D:9F:66:50:24:CC:CD:F3:93:F0:8D:E0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C45A0DBABD623ABAE4A3A44DC0ADA7F1ECD5AE3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0238a88e-3548-4848-b4df-f60ec7c873a9.roa Signing time: Fri 22 Nov 2024 00:00:00 +0000 ROA not before: Fri 22 Nov 2024 00:00:00 +0000 ROA not after: Fri 27 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 16.64.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:45:a0:db:ab:d6:23:ab:ae:4a:3a:44:dc:0a:da:7f:1e:cd:5a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 22 00:00:00 2024 GMT Not After : Dec 27 23:59:59 2024 GMT Subject: serialNumber=5e0f87de7c8a18d4056b2617db3e157e745afe4d1fbb8395aa79f65c28a61b04, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:6d:f6:9d:71:1b:3c:e0:83:33:72:11:b3: f0:55:c5:6a:07:99:60:74:07:12:bb:da:b8:bb:5e: 16:df:bd:94:aa:74:f9:a1:ae:6e:67:ca:bb:76:50: a4:c4:ee:11:cc:3c:e9:48:55:28:c4:39:55:35:b7: 1a:9b:b8:0c:a2:7f:1d:1d:2a:0c:89:00:81:0e:f1: 2b:9f:08:2e:2e:53:e1:96:5b:19:4f:6e:44:2d:8d: 70:7b:f7:b2:4b:c0:1d:bb:95:10:67:e1:1a:2b:9b: 1e:a8:ff:05:81:37:e2:46:c0:67:5f:5c:69:ab:73: 00:19:00:6e:2f:0f:06:d7:3c:4d:71:70:21:c7:b2: 48:d2:01:f9:3c:f0:77:25:24:4e:f2:01:99:d6:33: 58:54:05:7a:c2:8b:36:f6:25:ed:96:91:04:49:cf: f8:34:6c:12:f2:36:e7:7d:59:15:7b:42:aa:f1:1f: 1c:e3:2f:a5:1f:6b:0b:f4:5a:e1:8f:08:42:51:42: 69:a5:3d:9e:c8:72:b4:ab:8f:53:09:2f:25:2b:11: 44:c9:fd:e7:44:df:f1:34:84:8f:ab:4b:9c:4f:c4: 70:f9:c8:38:d3:d9:40:ae:01:82:ac:7e:20:26:50: ca:06:d8:bd:16:bc:db:87:7f:4d:2b:74:0f:8f:3a: 03:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:18:28:9E:23:FA:E5:DE:9D:9F:66:50:24:CC:CD:F3:93:F0:8D:E0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0238a88e-3548-4848-b4df-f60ec7c873a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.64.0.0/16 Signature Algorithm: sha256WithRSAEncryption d6:68:a6:73:f7:5f:3c:1b:70:a1:f3:ef:5a:5e:7c:5b:1c:2e: 7d:95:7d:be:d2:36:bf:89:c8:31:3a:17:69:d6:6e:ec:23:c9: a8:4d:34:3c:e9:c0:12:f2:f9:a4:5b:f1:ce:67:7b:fc:a9:42: f8:5d:a7:a7:38:24:c7:c9:be:78:3b:18:d0:a5:51:47:fc:23: d5:53:4c:ae:c9:2a:ef:74:12:7b:08:ed:43:c6:e0:cc:d9:b2: 47:b2:98:8a:c7:92:13:e9:32:d3:72:06:a2:54:18:12:97:d5: cf:22:a2:42:4a:52:83:8d:fe:c0:a6:ba:ce:ce:8b:03:ed:3a: 76:d6:6c:e4:3d:a4:92:49:68:60:b2:19:4a:a1:71:79:aa:c3: 99:e6:c9:5f:ec:cc:30:84:aa:2d:f1:55:13:36:41:dc:27:88: 3f:2d:44:f6:60:c4:92:78:2e:89:24:05:00:0d:bb:1b:65:78: d5:0c:a9:90:99:4f:ad:62:96:00:16:0f:c1:a8:90:56:89:29: f1:a7:36:cb:72:ba:2a:9a:2e:99:17:e4:2f:07:21:5a:bf:29: 23:32:27:50:74:84:03:5a:18:6b:91:ea:90:10:e9:79:1f:89: 9b:af:f2:0a:de:27:3a:5b:be:ff:da:24:8f:76:fc:a4:13:14: 30:65:84:2c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPEWg26vWI6uuSjpE3Arafx7NWuMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTIyMDAwMDAwWhcNMjQxMjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZTBmODdkZTdjOGExOGQ0MDU2YjI2MTdkYjNlMTU3ZTc0 NWFmZTRkMWZiYjgzOTVhYTc5ZjY1YzI4YTYxYjA0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0/232nXEbPOCDM3IRs/BVxWoHmWB0BxK72ri7XhbfvZSq dPmhrm5nyrt2UKTE7hHMPOlIVSjEOVU1txqbuAyifx0dKgyJAIEO8SufCC4uU+GW WxlPbkQtjXB797JLwB27lRBn4Rormx6o/wWBN+JGwGdfXGmrcwAZAG4vDwbXPE1x cCHHskjSAfk88HclJE7yAZnWM1hUBXrCizb2Je2WkQRJz/g0bBLyNud9WRV7Qqrx HxzjL6Ufawv0WuGPCEJRQmmlPZ7IcrSrj1MJLyUrEUTJ/edE3/E0hI+rS5xPxHD5 yDjT2UCuAYKsfiAmUMoG2L0WvNuHf00rdA+POgPNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUDRgoniP65d6dn2ZQJMzN85PwjeAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyMzhhODhlLTM1NDgtNDg0OC1iNGRmLWY2MGVjN2M4NzNhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQQDANBgkqhkiG9w0BAQsFAAOCAQEA1mimc/dfPBtwofPvWl58WxwufZV9 vtI2v4nIMToXadZu7CPJqE00POnAEvL5pFvxzmd7/KlC+F2npzgkx8m+eDsY0KVR R/wj1VNMrskq73QSewjtQ8bgzNmyR7KYiseSE+ky03IGolQYEpfVzyKiQkpSg43+ wKa6zs6LA+06dtZs5D2kkkloYLIZSqFxearDmebJX+zMMISqLfFVEzZB3CeIPy1E 9mDEknguiSQFAA27G2V41QypkJlPrWKWABYPwaiQVokp8ac2y3K6KpoumRfkLwch Wr8pIzInUHSEA1oYa5HqkBDpeR+Jm6/yCt4nOlu+/9okj3b8pBMUMGWELA== -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:38 2024 by rpki-client on console-fra.rpki-client.org