$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/068f87ed-2c30-422c-8608-b989cbeb914e.roa File: 068f87ed-2c30-422c-8608-b989cbeb914e.roa (raw, json) Hash identifier: dczgnnBLDk7oO19MK7SvdZ3rfIjdZ3ixnPiaSl8GXwI= Subject key identifier: 91:DE:A9:43:C2:7F:8C:8D:75:B5:FB:04:79:B0:C8:8E:DB:64:B2:24 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 593B7E5990DE813B4BAEEA7175C64AD9002558CF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/068f87ed-2c30-422c-8608-b989cbeb914e.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 56.186.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:3b:7e:59:90:de:81:3b:4b:ae:ea:71:75:c6:4a:d9:00:25:58:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=a0aa5728b23a0aa08253118444bd23ae5f94c3c2f458fba66e62bc269162c8d4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:46:51:38:67:2a:aa:56:58:89:6f:83:d1:e9: 0b:6d:00:3e:0a:94:2f:01:3d:d3:2a:11:29:e7:3f: ef:4d:a9:b1:5b:a5:fa:27:4c:1b:c5:3e:8d:91:92: 6a:df:39:01:34:b9:00:c9:d8:2e:56:17:a1:9a:6f: 95:0d:13:3f:df:30:a7:90:6c:ba:42:fc:9b:46:79: e9:33:81:b3:51:dd:bf:7f:2c:46:d7:a7:e7:43:bd: 99:32:41:be:91:b8:d8:45:24:37:90:e5:04:a5:09: ec:0d:04:d8:aa:88:d5:9a:dc:25:20:20:3f:06:ca: fe:c1:0f:05:88:d7:15:0e:a2:57:d4:00:87:09:6d: 67:3b:ff:37:ef:d2:22:b6:25:23:06:2d:0e:f2:d3: 7a:bc:49:ce:7b:f7:e1:21:d7:d2:db:f9:10:99:c7: 4c:cf:28:7d:97:45:24:6b:37:3b:2d:18:50:85:e9: 24:05:15:8f:82:20:f6:89:ab:4d:36:8e:8f:7b:23: 52:b7:b8:5d:89:75:2c:91:df:e4:0d:19:3f:05:13: 93:40:8c:16:ff:c9:19:f0:4b:d6:c7:52:6e:dd:04: d2:1b:86:c5:47:e5:7c:d0:13:b9:d1:e3:a3:42:d2: 7d:ea:fe:88:43:fc:6f:6f:61:39:82:0e:86:36:17: 21:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DE:A9:43:C2:7F:8C:8D:75:B5:FB:04:79:B0:C8:8E:DB:64:B2:24 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/068f87ed-2c30-422c-8608-b989cbeb914e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.186.0.0/16 Signature Algorithm: sha256WithRSAEncryption a8:6a:f5:1a:bb:70:9d:90:3a:21:0c:fa:75:5d:b6:6d:b6:8e: 2f:f6:1d:46:1d:5e:60:8a:83:5f:8e:e6:43:f2:cd:bc:b0:2d: 52:e0:bc:b1:2f:dc:b6:ca:c4:33:72:d3:d2:4e:e2:38:91:27: 5f:d1:03:91:96:c9:47:63:50:9a:5a:d7:64:fa:d4:db:0c:89: af:1b:46:50:fc:c7:72:95:ba:f4:34:97:1b:c0:3a:31:25:d4: 52:a8:71:dc:bd:72:11:75:e5:a9:67:3d:a3:3d:31:c7:ee:19: 91:c9:b8:06:bc:6e:de:ca:a8:cb:29:7b:77:cc:7c:19:ac:ba: 12:14:65:c2:3d:8e:03:dd:be:dd:7e:46:3b:be:14:1a:e8:2f: 2e:eb:cc:6a:19:87:dd:81:b2:19:1a:15:eb:9a:19:75:7e:de: 1d:59:78:03:7a:df:36:47:cd:e8:e4:79:18:33:5c:4b:d9:8e: 2f:eb:ee:56:8e:9a:9e:53:8d:29:aa:a0:12:b9:3b:02:c5:ea: 3f:e2:6f:9f:88:04:7f:d4:6f:74:8d:1a:a5:06:ee:18:7f:63: b0:34:40:dc:d3:4a:5b:42:69:55:93:ed:82:70:52:00:e8:ec: a4:3d:c3:7d:35:e6:48:77:0d:2d:53:05:a1:61:0d:7a:22:6f: 6b:94:26:3b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWTt+WZDegTtLrupxdcZK2QAlWM8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMGFhNTcyOGIyM2EwYWEwODI1MzExODQ0NGJkMjNhZTVm OTRjM2MyZjQ1OGZiYTY2ZTYyYmMyNjkxNjJjOGQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDORlE4ZyqqVliJb4PR6QttAD4KlC8BPdMqESnnP+9NqbFb pfonTBvFPo2RkmrfOQE0uQDJ2C5WF6Gab5UNEz/fMKeQbLpC/JtGeekzgbNR3b9/ LEbXp+dDvZkyQb6RuNhFJDeQ5QSlCewNBNiqiNWa3CUgID8Gyv7BDwWI1xUOolfU AIcJbWc7/zfv0iK2JSMGLQ7y03q8Sc579+Eh19Lb+RCZx0zPKH2XRSRrNzstGFCF 6SQFFY+CIPaJq002jo97I1K3uF2JdSyR3+QNGT8FE5NAjBb/yRnwS9bHUm7dBNIb hsVH5XzQE7nR46NC0n3q/ohD/G9vYTmCDoY2FyElAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUkd6pQ8J/jI11tfsEebDIjttksiQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA2OGY4N2VkLTJjMzAtNDIyYy04NjA4LWI5ODljYmViOTE0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4ujANBgkqhkiG9w0BAQsFAAOCAQEAqGr1GrtwnZA6IQz6dV22bbaOL/Yd Rh1eYIqDX47mQ/LNvLAtUuC8sS/ctsrEM3LT0k7iOJEnX9EDkZbJR2NQmlrXZPrU 2wyJrxtGUPzHcpW69DSXG8A6MSXUUqhx3L1yEXXlqWc9oz0xx+4Zkcm4Brxu3sqo yyl7d8x8Gay6EhRlwj2OA92+3X5GO74UGugvLuvMahmH3YGyGRoV65oZdX7eHVl4 A3rfNkfN6OR5GDNcS9mOL+vuVo6anlONKaqgErk7AsXqP+Jvn4gEf9RvdI0apQbu GH9jsDRA3NNKW0JpVZPtgnBSAOjspD3DfTXmSHcNLVMFoWENeiJva5QmOw== -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:39 2024 by rpki-client on console-fra.rpki-client.org