$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2391b7b2-3f85-4ce6-94de-c612920ae697.roa File: 2391b7b2-3f85-4ce6-94de-c612920ae697.roa (raw, json) Hash identifier: jyAqNIH0hXPG4bxroKyPq9Sx+PG4FzUGOCOvXTgjKuU= Subject key identifier: 84:A6:A1:C9:54:B9:8A:B4:86:83:D4:D8:3E:8D:3C:FC:96:12:67:BA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54FF460E178CD409AA0F9CCA582BD3A71CEBA404 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2391b7b2-3f85-4ce6-94de-c612920ae697.roa Signing time: Fri 15 Nov 2024 00:00:00 +0000 ROA not before: Fri 15 Nov 2024 00:00:00 +0000 ROA not after: Fri 20 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 94.36.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ff:46:0e:17:8c:d4:09:aa:0f:9c:ca:58:2b:d3:a7:1c:eb:a4:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 15 00:00:00 2024 GMT Not After : Dec 20 23:59:59 2024 GMT Subject: serialNumber=d1540c674992c4b47b0da16ea67a8e4b7aa3bc8769df6f388b6597372d139ac7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:87:e4:95:92:bb:85:b0:96:5f:9f:36:bb:a7: 82:40:ba:9d:64:fc:d9:89:aa:6f:62:c1:51:d4:25: 27:f1:8a:1b:bf:40:4f:f8:05:15:9b:82:c5:b5:0e: f1:b1:81:48:0b:fd:68:fe:69:9c:55:80:26:a4:a6: f3:f5:b9:6e:46:4f:43:75:63:73:98:fd:e3:c1:a2: 76:4a:10:23:d8:28:22:5f:88:cd:b8:bb:58:ee:71: 19:17:fb:e0:35:a6:2f:8a:f3:a3:8a:2c:90:82:45: 3e:a3:dc:58:ba:3c:28:59:19:f5:3a:44:5c:24:76: b4:b0:7b:b5:1d:96:27:fb:99:5f:47:27:cc:18:92: de:38:a4:fe:18:89:d2:29:ba:6f:96:c9:13:b2:b4: da:5c:4d:a6:9a:b3:50:89:d4:fd:6d:d7:56:29:f7: 9d:81:a8:4f:00:ba:c8:17:08:21:6f:48:45:6e:3c: 8f:32:c8:90:af:9c:58:01:7b:c9:f6:79:42:3e:96: fc:82:48:bf:59:3c:23:53:4e:e5:a3:f3:00:cc:e1: 67:0c:f4:5c:41:5b:ab:ac:22:27:1b:fd:7a:c3:fe: 1a:b3:9f:5a:86:29:f1:43:de:7a:71:db:a0:2b:1d: 46:3e:29:2e:7f:5c:5f:10:9b:36:0d:10:6c:23:8b: c5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A6:A1:C9:54:B9:8A:B4:86:83:D4:D8:3E:8D:3C:FC:96:12:67:BA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2391b7b2-3f85-4ce6-94de-c612920ae697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.36.0.0/15 Signature Algorithm: sha256WithRSAEncryption d8:15:71:43:4f:32:3e:77:5e:09:f9:ac:a3:66:c7:72:1e:98: 74:ac:35:e0:89:76:38:a4:23:b8:84:0b:ec:4e:74:6f:dd:f2: 63:49:5a:9f:9c:b1:bb:98:98:a9:4e:6a:2e:e0:2b:ea:57:93: 52:25:4b:c2:3f:1a:05:19:00:9f:a9:0d:d1:04:d5:5e:5a:dd: b0:95:37:ad:c3:7c:4c:96:f3:a5:e9:59:43:e2:8b:38:38:7d: 19:03:6d:c9:ad:96:1c:c8:d7:7e:35:0e:e1:df:f0:e5:22:2d: 1a:02:e9:e2:47:ec:61:73:0e:57:45:4e:6c:c1:49:ed:b9:07: cc:11:1c:b1:1c:cf:e0:8e:7c:32:b7:81:80:1d:dc:87:66:26: 81:18:57:f3:ef:00:e4:70:67:f6:24:42:bd:08:de:56:23:7e: fe:34:18:d5:76:a5:ea:8d:21:ec:9e:83:dc:a5:a9:c7:d8:80: ba:f3:a1:db:59:c2:c3:2f:38:5e:e2:1b:49:1d:93:c1:e2:8a: a9:93:cf:8e:16:aa:e8:da:c0:98:6b:ad:78:62:c3:f5:7e:eb: 0a:c6:f5:7e:58:a5:57:46:ea:49:88:bd:c7:c3:23:16:81:b6: f1:0e:72:89:1b:79:e2:34:35:3e:8d:bd:79:5e:bf:fb:d8:ff: ab:94:3c:7c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVP9GDheM1AmqD5zKWCvTpxzrpAQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTE1MDAwMDAwWhcNMjQxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTU0MGM2NzQ5OTJjNGI0N2IwZGExNmVhNjdhOGU0Yjdh YTNiYzg3NjlkZjZmMzg4YjY1OTczNzJkMTM5YWM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzh+SVkruFsJZfnza7p4JAup1k/NmJqm9iwVHUJSfxihu/ QE/4BRWbgsW1DvGxgUgL/Wj+aZxVgCakpvP1uW5GT0N1Y3OY/ePBonZKECPYKCJf iM24u1jucRkX++A1pi+K86OKLJCCRT6j3Fi6PChZGfU6RFwkdrSwe7Udlif7mV9H J8wYkt44pP4YidIpum+WyROytNpcTaaas1CJ1P1t11Yp952BqE8AusgXCCFvSEVu PI8yyJCvnFgBe8n2eUI+lvyCSL9ZPCNTTuWj8wDM4WcM9FxBW6usIicb/XrD/hqz n1qGKfFD3npx26ArHUY+KS5/XF8QmzYNEGwji8UFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUhKahyVS5irSGg9TYPo08/JYSZ7owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzOTFiN2IyLTNmODUtNGNlNi05NGRlLWM2MTI5MjBhZTY5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFeJDANBgkqhkiG9w0BAQsFAAOCAQEA2BVxQ08yPndeCfmso2bHch6YdKw1 4Il2OKQjuIQL7E50b93yY0lan5yxu5iYqU5qLuAr6leTUiVLwj8aBRkAn6kN0QTV XlrdsJU3rcN8TJbzpelZQ+KLODh9GQNtya2WHMjXfjUO4d/w5SItGgLp4kfsYXMO V0VObMFJ7bkHzBEcsRzP4I58MreBgB3ch2YmgRhX8+8A5HBn9iRCvQjeViN+/jQY 1Xal6o0h7J6D3KWpx9iAuvOh21nCwy84XuIbSR2TweKKqZPPjhaq6NrAmGuteGLD 9X7rCsb1flilV0bqSYi9x8MjFoG28Q5yiRt54jQ1Po29eV6/+9j/q5Q8fA== -----END CERTIFICATE-----Generated at Fri Nov 22 04:02:24 2024 by rpki-client on console-ams.rpki-client.org