$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09d6876d-2c7b-499c-a8c0-33e68653882a.roa File: 09d6876d-2c7b-499c-a8c0-33e68653882a.roa (raw, json) Hash identifier: P0C2+5VK9p5IedRz4jofJt1a1QqQv30Xx8KF1yOnWKQ= Subject key identifier: 80:F5:4B:FD:D7:4B:5A:47:4E:D3:8A:D1:93:1B:6F:82:B3:9D:B9:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 66EF3DC02562C33817A1DCC6CC431371E9E40F19 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09d6876d-2c7b-499c-a8c0-33e68653882a.roa Signing time: Fri 01 Nov 2024 00:00:00 +0000 ROA not before: Fri 01 Nov 2024 00:00:00 +0000 ROA not after: Fri 06 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 16.101.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ef:3d:c0:25:62:c3:38:17:a1:dc:c6:cc:43:13:71:e9:e4:0f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 1 00:00:00 2024 GMT Not After : Dec 6 23:59:59 2024 GMT Subject: serialNumber=f906786a8dbc354597e937cde7a946a2121320859966616469aff440f0b7ad91, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:60:a3:4c:fd:5f:ab:b0:be:9c:85:eb:90:f7: fe:e6:cb:27:ec:67:23:78:a2:36:2f:9c:2d:e5:43: 1c:da:3f:f0:cd:fa:4d:d1:42:a1:71:aa:a5:d4:29: 4a:e0:0b:c3:d5:38:15:e8:35:23:3b:d9:e8:22:c9: d2:6d:6b:ac:dd:74:c5:29:ea:7c:bf:e1:d1:08:79: a6:ba:4d:b4:29:04:5c:7d:0e:40:cf:8d:2a:bc:86: 77:4b:ea:42:9f:66:e1:53:ff:bd:d9:2a:63:88:d7: 5f:8a:9b:9c:a4:d0:6e:94:1c:54:ca:ee:1d:36:38: 27:3a:cf:da:04:e6:95:f7:d5:52:6c:ed:78:1e:16: 45:85:b3:60:f8:7c:28:f3:01:fd:f6:84:7b:b5:df: f1:52:38:22:60:59:fe:b5:50:6c:1d:25:68:b6:a4: 36:25:3c:df:b4:13:3c:84:b5:91:16:bd:94:52:52: ab:12:d9:e9:1e:43:98:1c:f9:ca:f4:3f:2d:4b:00: 50:2e:26:4a:2b:c0:e2:a7:84:8e:41:09:71:78:65: 5b:67:37:c7:c5:73:9b:48:32:93:38:fc:e6:4a:2d: 45:e8:2a:cf:e7:dd:9a:6f:96:a8:83:88:90:25:a0: cc:5a:83:c5:71:90:a1:7d:72:ee:46:da:4f:27:45: 80:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F5:4B:FD:D7:4B:5A:47:4E:D3:8A:D1:93:1B:6F:82:B3:9D:B9:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09d6876d-2c7b-499c-a8c0-33e68653882a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.101.0.0/16 Signature Algorithm: sha256WithRSAEncryption 84:01:a1:7c:b1:f8:b8:ae:87:5f:a9:50:17:16:f2:33:35:12: 6d:b9:2f:e1:08:00:3d:81:30:ed:6f:9b:19:97:4d:d7:d1:2f: 2d:77:48:b6:94:ed:91:68:ec:6b:bd:a0:65:cd:93:78:80:7f: 61:8f:b4:56:47:7c:b8:c9:7e:a8:7f:bb:a9:01:19:ab:a2:7b: ce:5b:81:a6:f5:0a:ec:72:81:88:53:fd:69:36:e6:13:dc:77: d3:56:f5:00:9c:67:e2:d1:8f:cf:4a:95:cf:a0:25:84:a1:a9: a3:9a:0d:f0:30:cf:a6:b8:fe:02:d6:cb:20:7d:61:4a:36:6b: 4f:98:e1:3b:23:fd:73:de:78:9c:66:52:9f:e7:73:15:e5:da: de:c5:22:f4:01:5f:f5:8b:33:8f:e0:89:a6:f6:d2:7b:33:45: cf:35:c1:9d:cd:12:ec:f0:a0:86:29:03:1d:4a:14:6e:4a:f7: 40:16:1e:f0:67:98:be:86:92:80:c8:93:07:bb:46:5c:86:dc: 19:c3:01:28:c6:07:1b:79:ff:a5:f4:1e:ef:18:b9:a7:a5:5b: 75:84:ff:37:a8:c3:c9:6b:07:09:ea:d5:5c:54:90:ff:31:b5: 9a:28:88:b4:26:f9:0f:80:31:18:33:bd:38:0e:15:64:51:f6: 32:96:3e:2f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZu89wCViwzgXodzGzEMTcenkDxkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTAxMDAwMDAwWhcNMjQxMjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTA2Nzg2YThkYmMzNTQ1OTdlOTM3Y2RlN2E5NDZhMjEy MTMyMDg1OTk2NjYxNjQ2OWFmZjQ0MGYwYjdhZDkxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeYKNM/V+rsL6cheuQ9/7myyfsZyN4ojYvnC3lQxzaP/DN +k3RQqFxqqXUKUrgC8PVOBXoNSM72egiydJta6zddMUp6ny/4dEIeaa6TbQpBFx9 DkDPjSq8hndL6kKfZuFT/73ZKmOI11+Km5yk0G6UHFTK7h02OCc6z9oE5pX31VJs 7XgeFkWFs2D4fCjzAf32hHu13/FSOCJgWf61UGwdJWi2pDYlPN+0EzyEtZEWvZRS UqsS2ekeQ5gc+cr0Py1LAFAuJkorwOKnhI5BCXF4ZVtnN8fFc5tIMpM4/OZKLUXo Ks/n3ZpvlqiDiJAloMxag8VxkKF9cu5G2k8nRYBHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUgPVL/ddLWkdO04rRkxtvgrOdubgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA5ZDY4NzZkLTJjN2ItNDk5Yy1hOGMwLTMzZTY4NjUzODgyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQZTANBgkqhkiG9w0BAQsFAAOCAQEAhAGhfLH4uK6HX6lQFxbyMzUSbbkv 4QgAPYEw7W+bGZdN19EvLXdItpTtkWjsa72gZc2TeIB/YY+0Vkd8uMl+qH+7qQEZ q6J7zluBpvUK7HKBiFP9aTbmE9x301b1AJxn4tGPz0qVz6AlhKGpo5oN8DDPprj+ AtbLIH1hSjZrT5jhOyP9c954nGZSn+dzFeXa3sUi9AFf9Yszj+CJpvbSezNFzzXB nc0S7PCghikDHUoUbkr3QBYe8GeYvoaSgMiTB7tGXIbcGcMBKMYHG3n/pfQe7xi5 p6VbdYT/N6jDyWsHCerVXFSQ/zG1miiItCb5D4AxGDO9OA4VZFH2MpY+Lw== -----END CERTIFICATE-----Generated at Fri Nov 22 04:02:16 2024 by rpki-client on console-ams.rpki-client.org