$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17d264a9-6eec-4bc3-acc6-d624122a02d7.roa File: 17d264a9-6eec-4bc3-acc6-d624122a02d7.roa (raw, json) Hash identifier: w/2swiaia7zl2StqScAMuy0k/UVB0tV7sdMbHsd4Nqk= Subject key identifier: 63:13:11:B3:84:96:35:97:F0:F4:CE:4C:40:60:64:22:9A:E7:15:D1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 41025A29DF9D80BE1F0EA8596550DBB816761E30 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17d264a9-6eec-4bc3-acc6-d624122a02d7.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 130.186.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:02:5a:29:df:9d:80:be:1f:0e:a8:59:65:50:db:b8:16:76:1e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=3d2664aec76371c705e5bed2dc10936be1eb688ab176e0ad951e1979a633bfda, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7c:2d:49:37:bb:2d:53:5f:f2:e6:9c:b7:dd: c3:5e:b7:91:c4:af:ed:f8:e7:73:32:73:d2:4a:59: c1:58:93:f0:6e:50:bf:99:1e:1b:af:4f:8a:27:d2: f2:6e:37:f9:3e:93:ec:c6:4b:09:b0:26:fc:a0:12: 7c:76:b1:8e:ba:04:01:48:05:12:d7:29:c4:05:e9: 36:7c:7b:9b:b9:83:0e:2b:f0:69:96:7d:53:bd:9c: 44:b9:c5:99:9c:2a:57:fe:11:31:02:f8:15:04:06: 3a:50:98:0d:2a:46:9b:7f:e4:66:b6:e5:fc:49:6e: 99:f2:67:d9:de:63:ce:64:08:44:b1:a5:36:67:65: 4f:20:f4:f2:ae:05:cf:44:11:9f:cc:82:be:18:17: 8b:f2:4f:3c:d0:c2:35:ee:00:46:1e:b2:bd:42:06: e5:49:f9:d4:af:de:7b:09:e9:c1:fd:98:c3:a7:fb: 2d:b5:85:19:9b:1d:f8:81:eb:c0:8f:2e:0c:39:bd: 3e:d2:53:b8:0b:5c:10:e7:a7:10:d6:73:0a:82:d2: f7:18:68:34:99:cc:21:38:52:6a:cc:ab:db:a0:ea: 43:93:28:46:53:17:b7:03:da:3f:0d:02:e2:64:e6: da:a7:c5:12:7e:14:26:ba:86:8c:d3:fb:b8:9e:fb: 8e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:13:11:B3:84:96:35:97:F0:F4:CE:4C:40:60:64:22:9A:E7:15:D1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17d264a9-6eec-4bc3-acc6-d624122a02d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.186.32.0/19 Signature Algorithm: sha256WithRSAEncryption 41:4f:ae:ba:79:17:10:ec:c3:39:77:60:83:bc:cc:98:ad:26: 84:4f:1e:2d:db:57:dd:d1:38:04:88:7d:a6:de:eb:a3:3b:9d: 8d:3b:5e:2d:13:79:51:79:3a:dc:5f:7d:e1:38:f5:7a:09:a4: fc:f2:15:ad:b7:68:ec:4d:b1:7f:7c:56:4f:fe:8e:0d:c9:aa: 32:1f:34:2b:df:cd:97:39:74:df:77:6b:d8:10:07:57:b1:19: 08:b1:ce:d4:48:ae:e2:a4:a1:ff:a7:4e:81:17:da:f2:c9:bf: 53:1d:ed:5f:7a:de:93:19:9e:68:20:60:5f:70:08:04:9f:07: 81:62:16:f6:82:57:d4:30:90:cd:18:6b:b9:a3:f7:07:d9:a6: 26:d7:8f:0c:f7:99:74:fc:5a:16:e0:b7:91:64:9e:37:b0:c4: d1:6e:40:09:b6:eb:c0:e9:6f:57:ed:98:92:95:ba:dc:68:6b: 09:06:5a:0d:40:3a:e2:ea:f0:77:e3:5f:f1:c8:cc:e5:e2:c7: dc:21:33:bf:79:27:d6:00:6f:63:6c:98:cd:05:a9:c7:a7:6e: 5e:58:3e:dc:f5:cd:ba:8c:e6:38:e5:ce:6a:e4:f1:7b:52:26: 2b:d8:32:56:dc:4b:d1:1e:a1:86:d6:34:76:5b:ed:9a:d7:e9: 71:85:bb:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQQJaKd+dgL4fDqhZZVDbuBZ2HjAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZDI2NjRhZWM3NjM3MWM3MDVlNWJlZDJkYzEwOTM2YmUx ZWI2ODhhYjE3NmUwYWQ5NTFlMTk3OWE2MzNiZmRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUfC1JN7stU1/y5py33cNet5HEr+3453Myc9JKWcFYk/Bu UL+ZHhuvT4on0vJuN/k+k+zGSwmwJvygEnx2sY66BAFIBRLXKcQF6TZ8e5u5gw4r 8GmWfVO9nES5xZmcKlf+ETEC+BUEBjpQmA0qRpt/5Ga25fxJbpnyZ9neY85kCESx pTZnZU8g9PKuBc9EEZ/Mgr4YF4vyTzzQwjXuAEYesr1CBuVJ+dSv3nsJ6cH9mMOn +y21hRmbHfiB68CPLgw5vT7SU7gLXBDnpxDWcwqC0vcYaDSZzCE4UmrMq9ug6kOT KEZTF7cD2j8NAuJk5tqnxRJ+FCa6hozT+7ie+44FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYxMRs4SWNZfw9M5MQGBkIprnFdEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE3ZDI2NGE5LTZlZWMtNGJjMy1hY2M2LWQ2MjQxMjJhMDJkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWCuiAwDQYJKoZIhvcNAQELBQADggEBAEFPrrp5FxDswzl3YIO8zJitJoRP Hi3bV93ROASIfabe66M7nY07Xi0TeVF5OtxffeE49XoJpPzyFa23aOxNsX98Vk/+ jg3JqjIfNCvfzZc5dN93a9gQB1exGQixztRIruKkof+nToEX2vLJv1Md7V963pMZ nmggYF9wCASfB4FiFvaCV9QwkM0Ya7mj9wfZpibXjwz3mXT8Whbgt5FknjewxNFu QAm268Dpb1ftmJKVutxoawkGWg1AOuLq8HfjX/HIzOXix9whM795J9YAb2NsmM0F qcenbl5YPtz1zbqM5jjlzmrk8XtSJivYMlbcS9EeoYbWNHZb7ZrX6XGFu6k= -----END CERTIFICATE-----Generated at Fri Nov 22 04:02:20 2024 by rpki-client on console-ams.rpki-client.org