$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21a7a822-e384-4ba1-bced-eaf6f07384df.roa File: 21a7a822-e384-4ba1-bced-eaf6f07384df.roa (raw, json) Hash identifier: yRQYjiL2Bvftag/39b4WBfGim1UpnayFw0qv8xq91to= Subject key identifier: 28:34:CE:2B:0B:14:D8:D4:E6:0E:ED:DA:BE:0C:9A:C3:B5:AC:01:23 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2FD1018B47951B03225AEB9F76D8375636A727D3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21a7a822-e384-4ba1-bced-eaf6f07384df.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 169.155.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:d1:01:8b:47:95:1b:03:22:5a:eb:9f:76:d8:37:56:36:a7:27:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=c8f4946d6d6784aa7d5965de4516b99d4b0534ad1ebc079ac0e9a99bf1cc359a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:16:d5:84:2b:ee:6d:fd:a5:07:75:7e:e4: a4:48:f2:f3:91:28:39:c7:55:fe:42:b8:8e:e9:ea: 0b:b5:f7:81:38:d4:d2:8a:23:f7:59:6a:24:eb:59: 37:23:8f:12:58:e9:1c:73:36:4c:7b:72:c5:13:88: d6:56:46:e2:33:44:1b:56:fc:3c:83:d2:96:57:24: 28:78:1e:fc:29:c1:ee:14:b4:53:4b:f6:d8:70:c9: 58:dc:7e:2b:6a:7f:fd:3c:18:52:de:7f:6f:1d:87: ec:3d:97:27:c7:bd:b5:ce:cd:64:33:19:e2:9c:b7: ca:b7:52:7d:b0:18:90:bd:26:7b:db:38:fa:85:65: 94:db:de:bf:67:96:c1:d9:0a:6f:8b:f4:66:a8:56: 39:dc:28:fd:e3:8c:fd:38:26:86:68:c2:3b:35:db: 6f:8e:56:d2:08:ff:74:aa:33:2f:48:99:58:de:28: 00:c8:26:eb:68:63:8c:db:4e:bb:e7:45:77:11:10: 0c:a5:5c:f0:49:2e:1d:85:33:70:09:05:c7:fb:d6: 06:9c:d9:9c:7d:da:c2:ae:fb:8d:fb:dc:30:e8:33: b3:80:5d:a4:59:0a:36:a2:44:ae:54:af:f3:2b:2f: 3e:f6:9b:f2:9e:47:87:56:fd:1e:c7:4d:40:63:82: 79:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:34:CE:2B:0B:14:D8:D4:E6:0E:ED:DA:BE:0C:9A:C3:B5:AC:01:23 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21a7a822-e384-4ba1-bced-eaf6f07384df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.155.88.0/21 Signature Algorithm: sha256WithRSAEncryption 46:2c:8c:14:92:3c:92:7b:88:a7:0c:1e:39:e4:8b:49:54:0f: 54:15:bb:8b:6f:9a:e1:e0:9a:dd:59:35:26:5f:cc:cd:a2:02: 34:b5:1e:1e:74:e6:45:bf:1b:14:c6:0f:bc:b0:95:e9:c8:2a: 6a:ed:b0:87:15:ef:14:c7:56:a8:d2:76:18:b8:ed:b7:23:20: aa:20:ce:7d:9f:a9:80:d7:bb:d5:7a:ef:42:fc:68:7d:69:4e: 7b:b5:e3:f4:aa:4b:67:2a:0c:bf:51:8d:77:8d:be:80:06:9c: a4:00:c0:82:a1:77:84:d0:15:01:89:83:45:04:82:71:03:c7: 46:68:a0:07:f7:a4:34:87:8a:45:26:0f:7c:2d:76:98:93:61: 5d:4d:2b:e9:b6:75:6d:2f:02:1c:db:31:d6:48:a1:60:f2:ea: b5:69:d4:d0:ec:b8:8d:3e:cb:59:e6:d9:df:f6:5e:aa:4f:95: 4d:0b:5e:18:0e:34:30:92:ab:fa:5b:92:5b:e2:8d:7e:c5:c5: 8c:57:f8:d7:b0:a3:83:24:47:96:19:60:6d:0e:d6:b8:f2:63: fc:f5:94:17:87:c6:7b:47:d3:4d:a9:18:4c:06:ce:ca:27:fa: ba:f9:5f:60:0b:d4:57:4d:73:f5:04:2a:df:ee:6f:91:82:ae: ec:36:3e:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL9EBi0eVGwMiWuufdtg3VjanJ9MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTE5MDAwMDAwWhcNMjQxMjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjOGY0OTQ2ZDZkNjc4NGFhN2Q1OTY1ZGU0NTE2Yjk5ZDRi MDUzNGFkMWViYzA3OWFjMGU5YTk5YmYxY2MzNTlhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBVRbVhCvubf2lB3V+5KRI8vORKDnHVf5CuI7p6gu194E4 1NKKI/dZaiTrWTcjjxJY6RxzNkx7csUTiNZWRuIzRBtW/DyD0pZXJCh4Hvwpwe4U tFNL9thwyVjcfitqf/08GFLef28dh+w9lyfHvbXOzWQzGeKct8q3Un2wGJC9Jnvb OPqFZZTb3r9nlsHZCm+L9GaoVjncKP3jjP04JoZowjs122+OVtII/3SqMy9ImVje KADIJutoY4zbTrvnRXcREAylXPBJLh2FM3AJBcf71gac2Zx92sKu+4373DDoM7OA XaRZCjaiRK5Ur/MrLz72m/KeR4dW/R7HTUBjgnn1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKDTOKwsU2NTmDu3avgyaw7WsASMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIxYTdhODIyLWUzODQtNGJhMS1iY2VkLWVhZjZmMDczODRkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOpm1gwDQYJKoZIhvcNAQELBQADggEBAEYsjBSSPJJ7iKcMHjnki0lUD1QV u4tvmuHgmt1ZNSZfzM2iAjS1Hh505kW/GxTGD7ywlenIKmrtsIcV7xTHVqjSdhi4 7bcjIKogzn2fqYDXu9V670L8aH1pTnu14/SqS2cqDL9RjXeNvoAGnKQAwIKhd4TQ FQGJg0UEgnEDx0ZooAf3pDSHikUmD3wtdpiTYV1NK+m2dW0vAhzbMdZIoWDy6rVp 1NDsuI0+y1nm2d/2XqpPlU0LXhgONDCSq/pbklvijX7FxYxX+Newo4MkR5YZYG0O 1rjyY/z1lBeHxntH002pGEwGzson+rr5X2AL1FdNc/UEKt/ub5GCruw2PjU= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:47 2024 by rpki-client on console-fra.rpki-client.org