$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22b25ccf-2082-4e9a-a5f1-b24b4b94a75a.roa File: 22b25ccf-2082-4e9a-a5f1-b24b4b94a75a.roa (raw, json) Hash identifier: ZEI6+bHG5+CE/Z3yEj/ZKhf7XNwLfD7LFwtwRZEHO/o= Subject key identifier: F0:C1:74:76:77:E0:05:44:5A:59:73:F0:EB:6C:2B:B2:4A:68:C2:C3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D49091C8233BE6E8D0FA694349B6D7D756F304D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22b25ccf-2082-4e9a-a5f1-b24b4b94a75a.roa Signing time: Mon 28 Oct 2024 00:00:00 +0000 ROA not before: Mon 28 Oct 2024 00:00:00 +0000 ROA not after: Mon 02 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 56.240.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:49:09:1c:82:33:be:6e:8d:0f:a6:94:34:9b:6d:7d:75:6f:30:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 28 00:00:00 2024 GMT Not After : Dec 2 23:59:59 2024 GMT Subject: serialNumber=13cd336df79e6f4a5d866ab1c81bcb3ad4c1a2fb6432ec23b359fdf1952c93d2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ba:96:4c:10:da:7b:18:87:b7:cf:0a:36:14: 88:b5:0d:19:b4:f7:91:b7:04:cd:1b:eb:b7:63:e3: ed:24:23:8b:12:64:c6:c9:a2:e2:9e:66:98:c9:c5: f5:ed:12:40:03:20:49:0d:fe:e3:cb:ae:ff:6d:bf: 16:9b:62:38:6e:eb:6e:85:e8:51:ac:06:38:aa:c6: a5:de:47:8d:f6:b8:f4:0c:d5:ab:59:ff:ab:f8:f6: b1:15:94:4b:1d:fd:de:36:21:f2:b5:e5:a1:38:1b: c4:3b:ff:5f:e0:ac:14:ef:f3:4d:2d:96:39:8d:84: 06:d0:52:73:dc:e2:4e:70:18:d5:25:3b:21:b6:16: 68:75:17:e5:a2:e9:59:bf:1f:23:2e:26:20:88:15: ba:04:dc:d2:3a:a3:4d:e7:d2:37:28:d3:67:e1:de: 86:05:d5:42:26:44:73:a6:d1:0d:e4:6f:7e:d1:f8: bc:89:b7:f3:d7:59:a3:18:c2:b3:6b:20:79:32:c2: 62:a8:c4:45:2a:0d:9f:d2:a9:e0:fd:55:14:e5:86: 7f:d6:52:36:dd:c5:2a:01:08:9d:99:a3:83:cd:fa: cb:09:38:33:14:d8:c1:93:a1:ea:e2:02:97:0d:d2: 44:d8:b3:a0:2e:07:67:ee:2a:35:e9:fa:8a:6c:86: 5e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C1:74:76:77:E0:05:44:5A:59:73:F0:EB:6C:2B:B2:4A:68:C2:C3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22b25ccf-2082-4e9a-a5f1-b24b4b94a75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.240.0.0/16 Signature Algorithm: sha256WithRSAEncryption 68:da:a4:e1:44:1f:e3:db:73:aa:ec:a6:54:2c:28:8c:94:31: 1b:75:fd:f0:f5:f5:4d:6b:ff:dc:bb:30:ad:f8:3a:63:ca:d0: ab:64:c7:b3:14:b7:81:7d:16:9a:84:11:19:87:b5:00:2c:79: d1:99:0c:a8:43:b5:ed:d7:e3:10:16:38:08:3d:b2:02:9e:e2: 21:fc:01:ac:98:02:32:ac:22:0a:bf:f5:93:54:e4:b2:85:40: 08:65:85:b3:be:2b:22:7c:fb:20:6a:77:a1:eb:79:41:1b:57: 9b:1c:13:b9:32:48:80:e1:d9:ee:38:d3:92:e6:b1:e9:4b:39: e0:52:e6:09:79:bb:ad:fd:27:72:c6:47:eb:70:e9:c5:bc:cc: 7f:47:6a:e5:c7:d9:15:c6:b3:8a:94:06:77:43:4b:7b:aa:02: e8:4c:c5:45:32:d2:b4:6b:1b:4b:22:60:7c:4e:66:5d:d2:0e: 67:c4:4b:dd:00:7e:b5:b4:1b:37:ec:8f:f8:00:c9:0e:0c:d3: 15:0d:8e:06:ab:9d:4b:d9:b5:e9:8e:a6:f5:9d:04:24:3e:5f: 16:14:bb:88:6d:24:5d:05:29:57:e4:3c:b4:fd:7c:8d:4b:ed: f6:65:32:b2:91:da:40:e7:d7:3b:27:fc:84:cd:8a:de:ac:04: b1:0f:61:ce -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbUkJHIIzvm6ND6aUNJttfXVvME0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMDI4MDAwMDAwWhcNMjQxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxM2NkMzM2ZGY3OWU2ZjRhNWQ4NjZhYjFjODFiY2IzYWQ0 YzFhMmZiNjQzMmVjMjNiMzU5ZmRmMTk1MmM5M2QyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMupZMENp7GIe3zwo2FIi1DRm095G3BM0b67dj4+0kI4sS ZMbJouKeZpjJxfXtEkADIEkN/uPLrv9tvxabYjhu626F6FGsBjiqxqXeR432uPQM 1atZ/6v49rEVlEsd/d42IfK15aE4G8Q7/1/grBTv800tljmNhAbQUnPc4k5wGNUl OyG2Fmh1F+Wi6Vm/HyMuJiCIFboE3NI6o03n0jco02fh3oYF1UImRHOm0Q3kb37R +LyJt/PXWaMYwrNrIHkywmKoxEUqDZ/SqeD9VRTlhn/WUjbdxSoBCJ2Zo4PN+ssJ ODMU2MGToeriApcN0kTYs6AuB2fuKjXp+opshl5BAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU8MF0dnfgBURaWXPw62wrskpowsMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyYjI1Y2NmLTIwODItNGU5YS1hNWYxLWIyNGI0Yjk0YTc1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA48DANBgkqhkiG9w0BAQsFAAOCAQEAaNqk4UQf49tzquymVCwojJQxG3X9 8PX1TWv/3Lswrfg6Y8rQq2THsxS3gX0WmoQRGYe1ACx50ZkMqEO17dfjEBY4CD2y Ap7iIfwBrJgCMqwiCr/1k1TksoVACGWFs74rInz7IGp3oet5QRtXmxwTuTJIgOHZ 7jjTkuax6Us54FLmCXm7rf0ncsZH63DpxbzMf0dq5cfZFcazipQGd0NLe6oC6EzF RTLStGsbSyJgfE5mXdIOZ8RL3QB+tbQbN+yP+ADJDgzTFQ2OBqudS9m16Y6m9Z0E JD5fFhS7iG0kXQUpV+Q8tP18jUvt9mUyspHaQOfXOyf8hM2K3qwEsQ9hzg== -----END CERTIFICATE-----Generated at Fri Nov 22 04:02:24 2024 by rpki-client on console-ams.rpki-client.org