$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2afb5101-80e7-4816-9b50-893c9ad8a71f.roa File: 2afb5101-80e7-4816-9b50-893c9ad8a71f.roa (raw, json) Hash identifier: H6sTKcf2L+s9P+jPhaftKAFFP4evbDN3942/qXblt5k= Subject key identifier: 9D:6A:1C:94:C9:16:65:83:54:46:DE:AA:54:0D:4A:BF:E4:F2:FC:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03577E2CB1C780F8C7B1851916E832217181DDF7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2afb5101-80e7-4816-9b50-893c9ad8a71f.roa Signing time: Sat 02 Nov 2024 00:00:00 +0000 ROA not before: Sat 02 Nov 2024 00:00:00 +0000 ROA not after: Sat 07 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 100.42.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:57:7e:2c:b1:c7:80:f8:c7:b1:85:19:16:e8:32:21:71:81:dd:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 2 00:00:00 2024 GMT Not After : Dec 7 23:59:59 2024 GMT Subject: serialNumber=8d1ffe861104f7a191ffb2001c66e264a1cea1b36b5f7a60fe36a10cf19401ca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a4:67:a7:5a:5b:db:f7:59:b8:63:fd:1f:f6: 7f:ff:54:f3:a7:5f:2f:1a:69:e6:ab:1d:ac:c1:4d: e4:9f:d5:f4:29:79:8e:47:83:67:d6:e2:01:2d:8f: 87:46:61:8f:c2:9c:86:15:c3:be:70:da:a7:8d:b9: 55:ca:1c:d0:c8:15:72:52:ce:27:63:d4:88:05:53: 5e:71:b6:58:c8:93:52:a9:43:54:2b:42:3b:1a:c1: af:03:5a:05:32:87:8e:93:60:48:bd:41:d2:a8:37: e6:80:12:45:b4:5d:0d:7b:e1:21:8a:8a:b6:30:35: 54:2c:6e:1f:81:ca:28:00:e3:da:bc:14:17:53:87: 2f:f3:bd:88:c2:16:d0:fb:ed:92:b1:c6:db:01:00: 2e:be:e1:81:b8:39:05:5c:67:02:e4:a8:fb:23:39: 87:07:a9:5a:80:a7:93:8b:79:33:72:62:c7:c2:bf: 47:e9:ee:1e:9c:d9:28:c1:4f:41:a6:80:88:01:a3: 3f:d5:28:1c:8d:2b:4f:48:bd:2a:06:16:23:e3:cc: 8a:b9:b4:40:40:d2:5e:6f:a7:4e:e7:85:48:ec:c5: 29:4a:b4:a8:ea:de:b2:77:e6:9c:4b:c9:e9:de:1f: ab:d7:75:71:6d:4b:12:f8:0b:fa:1f:83:27:6d:28: 4e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6A:1C:94:C9:16:65:83:54:46:DE:AA:54:0D:4A:BF:E4:F2:FC:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2afb5101-80e7-4816-9b50-893c9ad8a71f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 100.42.64.0/20 Signature Algorithm: sha256WithRSAEncryption 3f:d8:c2:15:8e:bc:e4:be:ad:c7:7a:33:18:18:31:0e:e7:8c: 14:c6:89:8f:80:d9:0e:1a:92:a9:2b:ef:ca:13:95:1f:50:c9: 46:18:43:74:eb:b2:20:4f:3d:8b:52:44:6f:51:28:66:c7:2d: aa:cd:9e:bb:28:0c:b1:b0:db:5e:7c:c9:28:7d:eb:fa:54:c8: f9:32:dc:56:75:bd:4a:8f:9b:6a:fa:53:fa:62:af:a6:77:c1: 8a:cb:61:a8:04:6c:ca:7d:60:b8:a6:5f:8d:e9:2e:6f:06:93: 69:d2:79:aa:d5:b3:34:87:37:32:fe:0e:c9:eb:cf:f8:64:ed: d8:6a:3e:e2:66:23:8c:27:c0:b6:1e:cf:72:6a:34:47:8a:cb: 17:8a:d1:9b:23:fe:6d:8b:18:be:d1:eb:7a:11:d7:b5:3b:0b: c2:fb:17:03:bb:ab:d3:ff:1c:e8:4e:86:ae:8c:d4:f4:89:05: bc:b1:8f:ef:35:96:e2:83:c0:3a:5f:fa:2d:2a:6d:ea:8d:ff: 17:47:21:61:fc:40:0a:fc:bf:1b:94:4e:0a:c2:08:70:fc:2b: a8:35:02:37:7f:6a:b3:dd:6d:ad:1f:43:91:89:a2:c5:18:48: 52:c0:9b:b0:25:85:09:c3:52:cd:d0:a6:aa:51:7f:53:5e:62: cb:c6:ce:3c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA1d+LLHHgPjHsYUZFugyIXGB3fcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTAyMDAwMDAwWhcNMjQxMjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDFmZmU4NjExMDRmN2ExOTFmZmIyMDAxYzY2ZTI2NGEx Y2VhMWIzNmI1ZjdhNjBmZTM2YTEwY2YxOTQwMWNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCppGenWlvb91m4Y/0f9n//VPOnXy8aaearHazBTeSf1fQp eY5Hg2fW4gEtj4dGYY/CnIYVw75w2qeNuVXKHNDIFXJSzidj1IgFU15xtljIk1Kp Q1QrQjsawa8DWgUyh46TYEi9QdKoN+aAEkW0XQ174SGKirYwNVQsbh+ByigA49q8 FBdThy/zvYjCFtD77ZKxxtsBAC6+4YG4OQVcZwLkqPsjOYcHqVqAp5OLeTNyYsfC v0fp7h6c2SjBT0GmgIgBoz/VKByNK09IvSoGFiPjzIq5tEBA0l5vp07nhUjsxSlK tKjq3rJ35pxLyeneH6vXdXFtSxL4C/ofgydtKE5PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnWoclMkWZYNURt6qVA1Kv+Ty/IgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhZmI1MTAxLTgwZTctNDgxNi05YjUwLTg5M2M5YWQ4YTcxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARkKkAwDQYJKoZIhvcNAQELBQADggEBAD/YwhWOvOS+rcd6MxgYMQ7njBTG iY+A2Q4akqkr78oTlR9QyUYYQ3TrsiBPPYtSRG9RKGbHLarNnrsoDLGw2158ySh9 6/pUyPky3FZ1vUqPm2r6U/pir6Z3wYrLYagEbMp9YLimX43pLm8Gk2nSearVszSH NzL+Dsnrz/hk7dhqPuJmI4wnwLYez3JqNEeKyxeK0Zsj/m2LGL7R63oR17U7C8L7 FwO7q9P/HOhOhq6M1PSJBbyxj+81luKDwDpf+i0qbeqN/xdHIWH8QAr8vxuUTgrC CHD8K6g1Ajd/arPdba0fQ5GJosUYSFLAm7AlhQnDUs3QpqpRf1NeYsvGzjw= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:49 2024 by rpki-client on console-fra.rpki-client.org