$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d7d4955-d384-4e09-ae81-392be2aa065c.roa File: 0d7d4955-d384-4e09-ae81-392be2aa065c.roa (raw, json) Hash identifier: Kuwd7QMa2leVPkFxAGltuajeKhmaqn2g2LfulyE6Muc= Subject key identifier: 27:4E:A1:A3:60:D6:82:4A:06:F1:8F:61:20:3E:E6:B5:EF:5F:00:0D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6B91C5B9E06E79494E0D27B26F351957527875E5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d7d4955-d384-4e09-ae81-392be2aa065c.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 192.26.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:91:c5:b9:e0:6e:79:49:4e:0d:27:b2:6f:35:19:57:52:78:75:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=a34bc726788ac0bef9ff3b7077ed2e57370fc33e84284b9b42ee2c01a98047c1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:3a:6a:9c:34:7a:20:d1:98:df:4d:5d:08: 44:22:90:39:e5:b5:e6:1e:2d:21:da:85:d9:bd:ec: 83:7d:86:b5:91:90:9b:dd:ee:91:ac:2e:76:a2:85: c9:d2:ca:a0:86:50:a6:17:50:21:b8:98:ba:03:98: 98:1b:b6:0d:39:26:d1:cf:60:5c:9a:42:c1:d6:13: 83:ea:65:1c:71:cc:ce:20:82:25:fb:9d:93:56:90: a2:6f:cb:f9:32:b3:73:bb:b4:50:fa:88:7b:1a:31: 79:87:5a:03:f4:c7:ed:9d:6f:18:76:49:a1:2d:9c: ff:0f:68:42:c4:3f:a2:38:3e:b0:e3:39:90:80:d6: a9:ea:5f:22:a7:b9:69:94:a7:c9:ef:8f:08:b8:01: 52:71:7d:72:40:6b:93:70:83:88:38:86:3e:c3:8e: f8:ae:81:66:ed:df:a2:b3:9f:8f:d0:6b:c5:f1:8e: 1b:8f:ce:f0:63:b3:da:c7:f5:9b:18:f4:fb:45:d8: ea:cd:bf:f0:e4:79:f3:39:f1:e0:55:8f:86:d5:5c: f2:a4:dc:84:82:3f:07:34:c2:b4:66:98:5e:5a:82: 40:97:64:fd:ae:b4:1d:35:57:5b:4d:ce:55:a5:48: 43:02:df:83:08:13:bd:f1:6f:aa:5d:d3:f6:ba:f9: 19:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4E:A1:A3:60:D6:82:4A:06:F1:8F:61:20:3E:E6:B5:EF:5F:00:0D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d7d4955-d384-4e09-ae81-392be2aa065c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.26.25.0/24 Signature Algorithm: sha256WithRSAEncryption d8:29:51:13:32:dd:6c:92:b0:bf:78:2b:d7:b5:a2:fb:30:99: c9:6d:dd:88:06:17:bc:b3:64:96:78:ad:88:2e:59:c3:92:c1: 20:82:d8:8f:3d:a2:ab:5c:4d:ae:94:37:22:0e:17:72:e9:64: 27:3c:0c:b7:8f:d7:6b:7c:ac:d4:7b:94:f6:b8:64:31:3f:1c: db:fd:3a:7b:86:1d:e7:ae:c7:a7:50:b1:a0:dc:a7:6d:61:db: cc:9a:85:72:0b:03:19:96:7e:51:28:5c:24:a1:67:88:30:e7: 38:bc:dd:40:9e:0c:e4:31:15:75:03:95:9e:19:be:7d:16:cc: 18:64:ed:35:00:f1:93:4b:53:e8:a8:4f:40:3e:9c:92:7b:e9: 7b:f4:b0:93:f9:09:02:a2:5f:80:5a:b8:5f:17:23:6e:07:cb: fb:4d:cb:5d:8e:1c:15:5c:66:6c:2f:fd:d8:d6:8a:96:1c:39: 61:24:f2:d4:e1:d6:3c:40:3c:ef:05:33:26:24:b8:cc:72:3c: fa:2d:16:9c:37:9a:2c:7a:97:d0:d6:ad:27:ac:fc:ca:20:08: 31:93:d8:f6:da:b0:9f:b8:36:96:f8:98:f0:c3:f7:27:32:89: f3:4f:05:64:b6:e3:3f:d8:c6:08:f1:b1:f5:25:cc:13:7d:f2: 21:78:50:fc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa5HFueBueUlODSeybzUZV1J4deUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzRiYzcyNjc4OGFjMGJlZjlmZjNiNzA3N2VkMmU1NzM3 MGZjMzNlODQyODRiOWI0MmVlMmMwMWE5ODA0N2MxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7FDpqnDR6INGY301dCEQikDnlteYeLSHahdm97IN9hrWR kJvd7pGsLnaihcnSyqCGUKYXUCG4mLoDmJgbtg05JtHPYFyaQsHWE4PqZRxxzM4g giX7nZNWkKJvy/kys3O7tFD6iHsaMXmHWgP0x+2dbxh2SaEtnP8PaELEP6I4PrDj OZCA1qnqXyKnuWmUp8nvjwi4AVJxfXJAa5Nwg4g4hj7DjviugWbt36Kzn4/Qa8Xx jhuPzvBjs9rH9ZsY9PtF2OrNv/DkefM58eBVj4bVXPKk3ISCPwc0wrRmmF5agkCX ZP2utB01V1tNzlWlSEMC34MIE73xb6pd0/a6+RkvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJ06ho2DWgkoG8Y9hID7mte9fAA0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBkN2Q0OTU1LWQzODQtNGUwOS1hZTgxLTM5MmJlMmFhMDY1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADAGhkwDQYJKoZIhvcNAQELBQADggEBANgpURMy3WySsL94K9e1ovswmclt 3YgGF7yzZJZ4rYguWcOSwSCC2I89oqtcTa6UNyIOF3LpZCc8DLeP12t8rNR7lPa4 ZDE/HNv9OnuGHeeux6dQsaDcp21h28yahXILAxmWflEoXCShZ4gw5zi83UCeDOQx FXUDlZ4Zvn0WzBhk7TUA8ZNLU+ioT0A+nJJ76Xv0sJP5CQKiX4BauF8XI24Hy/tN y12OHBVcZmwv/djWipYcOWEk8tTh1jxAPO8FMyYkuMxyPPotFpw3mix6l9DWrSes /MogCDGT2PbasJ+4Npb4mPDD9ycyifNPBWS24z/YxgjxsfUlzBN98iF4UPw= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:41 2024 by rpki-client on console-fra.rpki-client.org