$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235ba01b-bc16-4244-a93f-06a145b0732c.roa File: 235ba01b-bc16-4244-a93f-06a145b0732c.roa (raw, json) Hash identifier: J3xbKOlJZJpDvdd5Qd47vh8JoxmTm6YzzikxbOs37Qw= Subject key identifier: E8:A6:09:58:F3:D7:42:BC:A4:C6:EA:AB:5A:49:24:A5:18:E1:58:0B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5DA186FAB91A5711557DD011D13BF380D08136A3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235ba01b-bc16-4244-a93f-06a145b0732c.roa Signing time: Fri 22 Nov 2024 00:00:00 +0000 ROA not before: Fri 22 Nov 2024 00:00:00 +0000 ROA not after: Fri 27 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 147.106.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a1:86:fa:b9:1a:57:11:55:7d:d0:11:d1:3b:f3:80:d0:81:36:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 22 00:00:00 2024 GMT Not After : Dec 27 23:59:59 2024 GMT Subject: serialNumber=63693280f39c63c64ec2c69926ce4f9352c37321a7219d7811fe3e341c12454d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:25:0a:84:7b:41:50:b0:ad:41:08:a2:e6:4e: 6b:d4:95:1d:57:f7:57:f6:e2:8c:0e:5a:7a:00:7f: 63:01:78:b0:f2:da:5a:aa:4c:9f:5a:c5:5b:e9:86: 99:c3:e5:a8:56:4c:e1:dd:82:4c:8f:f6:4c:1d:7c: b7:99:fb:88:6d:5b:cf:19:15:74:72:ca:8a:79:76: 30:e4:18:0f:67:f2:1a:d8:83:e6:b8:0a:fb:a5:dc: f7:4e:d2:dd:66:50:d3:ae:cb:ac:8a:b6:c6:b2:f1: 4c:42:4d:1d:50:80:0f:47:9d:fd:78:ac:c4:2f:aa: 10:9f:e5:4e:c3:f0:e6:be:c5:fb:8c:b1:28:2c:c4: 32:84:9c:18:55:bc:be:b7:c6:43:71:01:80:40:e9: 73:fd:37:af:8e:f1:c4:ee:b6:3d:ca:81:4d:76:b0: 57:10:9d:b2:8e:4b:ef:66:9e:66:dc:b7:55:7f:6e: 11:3f:3b:f5:ea:7e:f2:35:11:a1:6f:04:94:36:00: a3:92:3c:32:06:4d:1a:df:ca:8e:c9:5c:20:ad:d8: 96:74:b9:4b:76:d4:32:68:c7:a5:46:f4:1b:23:8a: ac:d1:50:a0:55:28:a3:74:e1:89:9e:83:20:af:ad: 97:47:51:93:7f:37:70:5d:96:ed:73:2b:91:fc:b9: d5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A6:09:58:F3:D7:42:BC:A4:C6:EA:AB:5A:49:24:A5:18:E1:58:0B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235ba01b-bc16-4244-a93f-06a145b0732c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.106.128.0/18 Signature Algorithm: sha256WithRSAEncryption 78:85:07:ac:c6:61:44:fe:80:6b:20:7f:61:57:cd:b7:c8:67: 2e:92:24:8d:5d:67:40:1b:30:4a:2f:91:a0:35:e5:a4:80:19: 6a:7e:77:14:78:92:39:ed:84:6b:6d:3e:c1:cf:ff:10:3e:36: fd:c5:b0:cb:4f:8b:23:57:8d:d1:a2:bd:e1:20:15:8a:1d:47: 39:88:b6:9d:eb:e9:87:af:e5:6b:09:f5:98:e2:db:01:e6:32: 39:22:ac:ba:d2:b5:c1:da:d5:85:92:5d:4f:19:1c:a0:23:9b: 7e:07:db:e3:7c:6b:01:85:d9:f2:37:64:1a:bb:12:53:cc:6d: 89:b5:d2:4e:9e:39:6f:0a:98:55:cd:9e:9c:10:a3:25:c7:ea: 30:a5:55:cd:15:d8:e2:a7:38:7e:1b:6a:6a:ca:eb:95:f1:95: 1c:d3:b7:ce:7f:1f:bb:2d:a0:ed:db:a8:60:44:08:e5:0e:59: f6:36:aa:8f:4e:72:6a:0f:7d:53:13:91:86:e3:28:3f:93:76: 33:ec:d1:0f:ef:c6:fe:80:63:48:19:93:28:11:d7:98:c4:3a: a3:35:66:6c:43:0f:23:fe:40:45:24:79:fe:46:41:9e:3e:5e: cb:2b:49:16:47:26:9f:82:e0:66:d5:a8:6d:8b:76:f9:25:6b: d9:6d:93:07 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXaGG+rkaVxFVfdAR0TvzgNCBNqMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTIyMDAwMDAwWhcNMjQxMjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzY5MzI4MGYzOWM2M2M2NGVjMmM2OTkyNmNlNGY5MzUy YzM3MzIxYTcyMTlkNzgxMWZlM2UzNDFjMTI0NTRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFJQqEe0FQsK1BCKLmTmvUlR1X91f24owOWnoAf2MBeLDy 2lqqTJ9axVvphpnD5ahWTOHdgkyP9kwdfLeZ+4htW88ZFXRyyop5djDkGA9n8hrY g+a4Cvul3PdO0t1mUNOuy6yKtsay8UxCTR1QgA9Hnf14rMQvqhCf5U7D8Oa+xfuM sSgsxDKEnBhVvL63xkNxAYBA6XP9N6+O8cTutj3KgU12sFcQnbKOS+9mnmbct1V/ bhE/O/XqfvI1EaFvBJQ2AKOSPDIGTRrfyo7JXCCt2JZ0uUt21DJox6VG9BsjiqzR UKBVKKN04YmegyCvrZdHUZN/N3Bdlu1zK5H8udWDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6KYJWPPXQrykxuqrWkkkpRjhWAswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzNWJhMDFiLWJjMTYtNDI0NC1hOTNmLTA2YTE0NWIwNzMyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaTaoAwDQYJKoZIhvcNAQELBQADggEBAHiFB6zGYUT+gGsgf2FXzbfIZy6S JI1dZ0AbMEovkaA15aSAGWp+dxR4kjnthGttPsHP/xA+Nv3FsMtPiyNXjdGiveEg FYodRzmItp3r6Yev5WsJ9Zji2wHmMjkirLrStcHa1YWSXU8ZHKAjm34H2+N8awGF 2fI3ZBq7ElPMbYm10k6eOW8KmFXNnpwQoyXH6jClVc0V2OKnOH4bamrK65XxlRzT t85/H7stoO3bqGBECOUOWfY2qo9OcmoPfVMTkYbjKD+TdjPs0Q/vxv6AY0gZkygR 15jEOqM1ZmxDDyP+QEUkef5GQZ4+XssrSRZHJp+C4GbVqG2Ldvkla9ltkwc= -----END CERTIFICATE-----Generated at Fri Nov 22 01:33:51 2024 by rpki-client on console-ams.rpki-client.org