$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0301e067-da19-4fd1-bbbc-72ecabcde612.roa File: 0301e067-da19-4fd1-bbbc-72ecabcde612.roa (raw, json) Hash identifier: XBp2uRGaPkofrZf6p3KI+8PAa7rt0IEFEKsHjw8pS5Y= Subject key identifier: E8:F8:D5:3F:0D:9F:70:69:AE:AA:DA:11:5A:48:F3:76:37:4E:94:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5796ED81883CC841C46D0E22E3E00D50AB4EC7B0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0301e067-da19-4fd1-bbbc-72ecabcde612.roa Signing time: Fri 22 Nov 2024 00:00:00 +0000 ROA not before: Fri 22 Nov 2024 00:00:00 +0000 ROA not after: Fri 27 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 192.43.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:96:ed:81:88:3c:c8:41:c4:6d:0e:22:e3:e0:0d:50:ab:4e:c7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 22 00:00:00 2024 GMT Not After : Dec 27 23:59:59 2024 GMT Subject: serialNumber=ecc4d443f72078c4f79a167052bfa2c582978cab2740ea55c8e9259873d4668a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:97:1a:6d:69:f2:1f:ca:d2:23:e7:06:1b:06: 0b:a8:d7:c8:b9:fc:a9:a1:f9:ea:04:ce:6a:f1:b2: 05:e9:81:e3:a1:df:4f:55:2b:e9:99:b9:c0:63:ab: 90:d6:d4:79:73:ab:bd:16:b9:f7:68:3e:62:d2:bf: e6:31:51:61:d0:1d:16:41:71:d0:d4:3d:ec:ea:53: 1b:b6:d9:de:fa:f3:11:0d:be:c4:50:2b:6e:77:51: fb:ef:54:81:96:9e:95:8e:a5:a2:4c:8f:9e:50:c5: cd:ab:f9:92:78:a1:8a:e3:7f:e9:ea:e7:d1:76:c5: 7c:f5:29:f6:40:24:29:5d:1e:16:d5:61:39:3a:ae: db:82:8a:ec:b1:e2:a3:a0:f9:36:01:5c:ba:7d:9f: 21:dc:2c:2d:4f:d6:3d:74:e6:d7:66:5c:47:9d:50: 70:09:38:2b:38:2c:15:85:61:a8:78:d5:fb:30:f5: 5c:8b:ae:46:91:14:6b:29:ad:10:88:a1:9a:50:2a: 08:ac:ae:fc:8e:02:ae:fa:ab:b6:d8:e5:69:5e:88: 7c:89:9a:37:01:a2:5b:ba:f5:9e:10:a5:02:60:e6: 12:70:90:d4:39:7f:ee:e9:bb:8c:b4:86:ca:8f:5e: 39:77:d8:ad:96:f8:3f:94:aa:52:5f:c8:36:94:3b: b6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F8:D5:3F:0D:9F:70:69:AE:AA:DA:11:5A:48:F3:76:37:4E:94:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0301e067-da19-4fd1-bbbc-72ecabcde612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.43.184.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:74:96:6f:64:6b:54:25:90:02:be:93:dd:17:7c:c0:b7:6e: 21:a1:78:d7:c0:36:9e:4c:09:50:18:a6:6e:6a:24:1a:99:7c: bf:e3:f5:91:d4:78:a4:78:49:39:24:9f:ab:2c:eb:8c:75:b7: ae:fe:30:a5:f5:af:1a:a7:50:8c:9e:7a:39:86:37:5d:d1:3d: e2:09:15:35:f0:4f:6b:a0:45:fa:4c:3f:66:16:fe:63:44:ad: 2d:20:d3:47:01:0f:62:16:9a:a5:c4:4f:9f:82:71:c2:ef:79: 9d:e8:a7:d7:72:1d:fd:17:a2:0d:61:db:60:6b:a6:e0:e0:8f: f9:99:80:c6:f1:d8:be:55:70:6f:1d:58:3c:68:eb:16:14:31: df:7f:b5:9c:8d:bc:1d:2e:df:81:52:a6:9b:67:49:0d:a6:64: f7:12:f0:20:75:52:29:9e:92:44:8a:dc:68:bc:60:0c:c2:d6: 4a:50:72:97:75:e1:38:ad:5d:54:ab:0c:3c:56:16:07:be:e7: 14:7a:ba:6d:c5:89:6a:e4:9e:f1:42:08:51:a3:f3:02:b2:bc: 81:9d:5b:a8:7a:d8:8e:a8:a4:4f:4e:5d:69:ca:66:a2:bf:b3: 4c:33:61:01:be:96:b6:72:0d:00:4a:8e:fd:92:b5:f2:a4:bc: 6f:10:9f:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV5btgYg8yEHEbQ4i4+ANUKtOx7AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTIyMDAwMDAwWhcNMjQxMjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlY2M0ZDQ0M2Y3MjA3OGM0Zjc5YTE2NzA1MmJmYTJjNTgy OTc4Y2FiMjc0MGVhNTVjOGU5MjU5ODczZDQ2NjhhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFlxptafIfytIj5wYbBguo18i5/Kmh+eoEzmrxsgXpgeOh 309VK+mZucBjq5DW1Hlzq70WufdoPmLSv+YxUWHQHRZBcdDUPezqUxu22d768xEN vsRQK253UfvvVIGWnpWOpaJMj55Qxc2r+ZJ4oYrjf+nq59F2xXz1KfZAJCldHhbV YTk6rtuCiuyx4qOg+TYBXLp9nyHcLC1P1j105tdmXEedUHAJOCs4LBWFYah41fsw 9VyLrkaRFGsprRCIoZpQKgisrvyOAq76q7bY5WleiHyJmjcBolu69Z4QpQJg5hJw kNQ5f+7pu4y0hsqPXjl32K2W+D+UqlJfyDaUO7YzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6PjVPw2fcGmuqtoRWkjzdjdOlIgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzMDFlMDY3LWRhMTktNGZkMS1iYmJjLTcyZWNhYmNkZTYxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADAK7gwDQYJKoZIhvcNAQELBQADggEBADt0lm9ka1QlkAK+k90XfMC3biGh eNfANp5MCVAYpm5qJBqZfL/j9ZHUeKR4STkkn6ss64x1t67+MKX1rxqnUIyeejmG N13RPeIJFTXwT2ugRfpMP2YW/mNErS0g00cBD2IWmqXET5+CccLveZ3op9dyHf0X og1h22BrpuDgj/mZgMbx2L5VcG8dWDxo6xYUMd9/tZyNvB0u34FSpptnSQ2mZPcS 8CB1UimekkSK3Gi8YAzC1kpQcpd14TitXVSrDDxWFge+5xR6um3FiWrknvFCCFGj 8wKyvIGdW6h62I6opE9OXWnKZqK/s0wzYQG+lrZyDQBKjv2StfKkvG8Qn4o= -----END CERTIFICATE-----Generated at Sun Nov 24 02:34:59 2024 by rpki-client on console-fra.rpki-client.org