$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f144f55-3608-4ee2-a652-2bf7615743c5.roa File: 1f144f55-3608-4ee2-a652-2bf7615743c5.roa (raw, json) Hash identifier: XbZUYdbVHd8iSvVXCQhF+vZrNivhSZZAa3tScQGsAFU= Subject key identifier: E2:50:50:42:59:E2:C6:21:6D:30:11:C4:3A:59:71:DE:E8:EE:13:07 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 349C674418492E71393987723E9FDCFE18A7F9ED Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f144f55-3608-4ee2-a652-2bf7615743c5.roa Signing time: Sat 09 Nov 2024 00:00:00 +0000 ROA not before: Sat 09 Nov 2024 00:00:00 +0000 ROA not after: Sat 14 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 161.228.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:9c:67:44:18:49:2e:71:39:39:87:72:3e:9f:dc:fe:18:a7:f9:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 9 00:00:00 2024 GMT Not After : Dec 14 23:59:59 2024 GMT Subject: serialNumber=1a1081a59cf1edb8834c4056165bf8ccc894d416f6e9bca62e110022f38d437b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5e:2e:c9:86:06:17:4a:de:b2:26:ac:3f:26: 36:a7:38:1d:9d:5f:1d:f6:db:82:14:16:de:41:ea: a0:db:26:1a:08:b5:77:26:d1:78:89:97:eb:2a:2c: 53:ab:e4:22:78:e4:87:ba:0f:7f:69:45:11:d5:7d: 4a:55:b5:b9:0f:a2:44:b4:c7:ef:12:f2:3a:f6:09: f7:74:3d:18:7e:f5:00:a3:5b:ae:74:7c:63:a8:9b: ae:8b:04:c3:57:6a:27:56:82:c5:17:31:8a:5b:08: 27:74:d6:13:10:d2:e9:3d:cc:31:90:7e:f3:8c:f0: 20:78:b4:4f:f9:84:46:08:81:e1:8a:d7:f9:99:a1: 52:ec:03:ab:f3:65:9a:f9:73:ca:79:cb:99:48:80: 46:86:53:0a:9f:d0:f7:b4:ad:ca:ac:81:82:25:97: 9e:d3:86:fc:e2:34:c7:6f:79:17:ef:c9:ca:e5:d3: 4b:0d:f0:45:c1:55:48:ca:5a:5a:10:af:d8:ca:a2: 8d:f1:b4:32:60:64:78:7c:bd:5c:69:2c:cc:52:ad: c2:72:b6:3a:b8:f4:87:ac:2d:6d:26:dd:30:2a:99: 55:11:a8:b6:87:3d:24:a5:d9:e6:1d:cf:24:03:34: c0:8c:23:6d:b1:aa:93:7e:50:2a:d9:30:6e:5a:11: 9a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:50:50:42:59:E2:C6:21:6D:30:11:C4:3A:59:71:DE:E8:EE:13:07 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f144f55-3608-4ee2-a652-2bf7615743c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.228.0.0/18 Signature Algorithm: sha256WithRSAEncryption 31:dc:95:4c:60:15:65:79:15:07:e8:ef:6d:ab:83:33:ad:65: 02:ce:85:42:f3:bb:46:94:f4:9f:06:d7:c3:37:39:b6:1d:08: 4b:2b:b1:c6:63:39:3c:a0:36:39:d1:04:a9:85:84:90:ed:3c: 02:93:dc:2b:83:82:93:05:02:a2:ac:bc:88:54:0d:e3:39:a1: 20:0a:8f:ac:0d:75:bf:da:8a:80:1f:97:40:3f:7c:1e:2e:54: af:dd:1e:7d:5b:5e:0c:c3:0a:5d:c1:e8:9c:69:ee:73:9e:5a: 27:d9:c4:89:2c:cd:db:bb:a1:c8:6a:32:95:67:6e:ff:fc:71: c7:60:fa:7b:ee:77:72:dc:a7:f9:76:11:ec:c0:bc:51:18:23: b0:1f:8c:ae:35:87:27:2b:d4:9a:a7:0d:39:d1:84:5b:f5:59: 03:68:3b:4c:9a:fe:4b:95:1b:c5:89:dc:03:f4:7a:7b:71:ca: 2c:d5:10:56:fa:82:76:4d:f8:13:1a:04:5e:a3:0c:2b:77:8d: a9:ff:86:cb:d3:05:ff:1b:ce:2e:81:a2:4b:97:06:74:f7:7d: b7:0d:21:74:b3:4e:76:63:aa:fc:4e:bc:17:b8:03:fd:d0:89: 04:9f:51:cb:eb:52:be:f3:b4:6e:9c:45:21:bb:55:dc:2d:68: 32:ae:62:38 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNJxnRBhJLnE5OYdyPp/c/hin+e0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA5MDAwMDAwWhcNMjQxMjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTEwODFhNTljZjFlZGI4ODM0YzQwNTYxNjViZjhjY2M4 OTRkNDE2ZjZlOWJjYTYyZTExMDAyMmYzOGQ0MzdiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaXi7JhgYXSt6yJqw/JjanOB2dXx3224IUFt5B6qDbJhoI tXcm0XiJl+sqLFOr5CJ45Ie6D39pRRHVfUpVtbkPokS0x+8S8jr2Cfd0PRh+9QCj W650fGOom66LBMNXaidWgsUXMYpbCCd01hMQ0uk9zDGQfvOM8CB4tE/5hEYIgeGK 1/mZoVLsA6vzZZr5c8p5y5lIgEaGUwqf0Pe0rcqsgYIll57ThvziNMdveRfvycrl 00sN8EXBVUjKWloQr9jKoo3xtDJgZHh8vVxpLMxSrcJytjq49IesLW0m3TAqmVUR qLaHPSSl2eYdzyQDNMCMI22xqpN+UCrZMG5aEZrPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4lBQQlnixiFtMBHEOllx3ujuEwcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFmMTQ0ZjU1LTM2MDgtNGVlMi1hNjUyLTJiZjc2MTU3NDNjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAah5AAwDQYJKoZIhvcNAQELBQADggEBADHclUxgFWV5FQfo722rgzOtZQLO hULzu0aU9J8G18M3ObYdCEsrscZjOTygNjnRBKmFhJDtPAKT3CuDgpMFAqKsvIhU DeM5oSAKj6wNdb/aioAfl0A/fB4uVK/dHn1bXgzDCl3B6Jxp7nOeWifZxIkszdu7 ochqMpVnbv/8ccdg+nvud3Lcp/l2EezAvFEYI7AfjK41hycr1JqnDTnRhFv1WQNo O0ya/kuVG8WJ3AP0entxyizVEFb6gnZN+BMaBF6jDCt3jan/hsvTBf8bzi6BokuX BnT3fbcNIXSzTnZjqvxOvBe4A/3QiQSfUcvrUr7ztG6cRSG7VdwtaDKuYjg= -----END CERTIFICATE-----Generated at Fri Nov 22 04:02:23 2024 by rpki-client on console-ams.rpki-client.org