$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2da7745f-f4cc-4333-9bc7-a1feb2843351.roa File: 2da7745f-f4cc-4333-9bc7-a1feb2843351.roa (raw, json) Hash identifier: HGvHdykd8wrytDsUdEyfYtetsQrsvb2TtNE1lAtUNh8= Subject key identifier: FE:5F:35:ED:E3:5B:90:34:1B:48:24:9F:14:0E:6E:3C:90:19:D2:5E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E79D0A0AEB48D25F3FEA6638266389CF473CA7F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2da7745f-f4cc-4333-9bc7-a1feb2843351.roa Signing time: Tue 12 Nov 2024 00:00:00 +0000 ROA not before: Tue 12 Nov 2024 00:00:00 +0000 ROA not after: Tue 17 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 56.101.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:79:d0:a0:ae:b4:8d:25:f3:fe:a6:63:82:66:38:9c:f4:73:ca:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 12 00:00:00 2024 GMT Not After : Dec 17 23:59:59 2024 GMT Subject: serialNumber=c475c8ccb9f298f3c81e0c67826f713b174dcbc697fc90a48e99aa9d661cfde8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:f2:99:67:da:90:3a:c6:eb:ee:41:61:15: fa:54:49:40:fc:e8:a1:f1:dd:0b:2a:06:bf:a4:67: f9:19:df:3e:37:dd:e6:13:8c:29:66:dd:0a:95:e4: 40:d2:30:16:69:2a:d2:72:c4:35:6c:75:a2:da:c5: 5d:8b:df:27:9e:59:34:a8:9f:6b:f3:ca:73:07:28: 57:5b:eb:07:43:f8:04:62:a0:75:ad:21:c0:c9:be: e9:11:14:b7:cf:28:e7:41:a4:a3:f7:c1:2b:79:8f: c5:a6:af:8b:a8:23:ad:b9:d4:b4:55:e5:1f:cb:30: 3a:75:bf:5b:96:8d:94:a1:a6:0e:5c:df:49:c9:7f: 90:b2:61:4b:d9:34:e0:8d:0d:3e:8f:28:01:9c:0b: f2:07:99:1f:62:53:98:4f:68:90:96:f0:62:04:ba: 1f:f0:f4:59:c9:25:35:07:78:2c:5f:10:0b:1f:92: 00:73:f1:62:ff:3c:85:85:ea:4e:4b:58:dc:37:3d: 29:75:5f:32:b5:5d:ba:1a:ae:7a:ed:25:cf:ba:55: 27:b9:53:4d:37:a2:9b:75:40:85:66:b2:24:44:67: 3a:a2:b3:e0:69:72:81:80:4d:5d:67:45:77:0c:8e: 3d:31:61:6e:a7:df:c1:85:a2:11:0b:f6:67:7b:8b: 85:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5F:35:ED:E3:5B:90:34:1B:48:24:9F:14:0E:6E:3C:90:19:D2:5E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2da7745f-f4cc-4333-9bc7-a1feb2843351.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.101.0.0/16 Signature Algorithm: sha256WithRSAEncryption bf:4d:4a:66:a7:41:72:e9:f8:14:fc:7a:59:e8:c9:bb:3d:b8: 25:69:7e:54:c6:90:04:85:cb:f4:2a:4c:2e:cf:c8:be:87:d2: 36:c3:4f:eb:28:a6:19:99:f8:c2:7f:23:ae:d3:f0:22:6d:17: ac:02:c7:8a:dd:19:26:ab:6c:0d:88:4c:7f:e8:f0:b4:f6:c6: a6:28:b2:10:77:11:9f:91:ef:7d:0c:88:10:35:15:00:3e:87: dd:7e:62:8d:a5:5a:b5:56:cc:09:c0:25:c0:34:46:91:20:16: 2f:c9:5d:a1:e0:d8:76:d3:f4:77:bb:0a:ed:2c:63:3c:1b:f0: 79:41:4b:14:54:6e:9e:8b:ba:8d:20:0a:c6:91:9f:4b:0f:44: 79:85:67:cb:b0:f2:c2:8d:e6:a2:c5:c5:34:01:3d:15:c1:7a: 12:f5:1b:b7:32:c7:83:83:e4:1a:36:37:b3:de:e6:56:63:b7: bc:da:48:6d:b5:9e:fa:ca:06:21:af:99:de:07:5c:ec:76:dd: d9:8d:ea:83:9a:ee:62:57:09:86:ab:b3:fb:93:4e:16:ce:95: d5:87:17:08:37:df:7e:eb:49:36:2f:69:ab:42:a7:74:f6:11: 5a:86:eb:fb:85:0a:ed:8e:f2:f9:c9:b2:1e:df:14:bd:15:a9: 84:66:12:60 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHnnQoK60jSXz/qZjgmY4nPRzyn8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTEyMDAwMDAwWhcNMjQxMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDc1YzhjY2I5ZjI5OGYzYzgxZTBjNjc4MjZmNzEzYjE3 NGRjYmM2OTdmYzkwYTQ4ZTk5YWE5ZDY2MWNmZGU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFTfKZZ9qQOsbr7kFhFfpUSUD86KHx3QsqBr+kZ/kZ3z43 3eYTjClm3QqV5EDSMBZpKtJyxDVsdaLaxV2L3yeeWTSon2vzynMHKFdb6wdD+ARi oHWtIcDJvukRFLfPKOdBpKP3wSt5j8Wmr4uoI6251LRV5R/LMDp1v1uWjZShpg5c 30nJf5CyYUvZNOCNDT6PKAGcC/IHmR9iU5hPaJCW8GIEuh/w9FnJJTUHeCxfEAsf kgBz8WL/PIWF6k5LWNw3PSl1XzK1XboarnrtJc+6VSe5U003opt1QIVmsiREZzqi s+BpcoGATV1nRXcMjj0xYW6n38GFohEL9md7i4UDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU/l817eNbkDQbSCSfFA5uPJAZ0l4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJkYTc3NDVmLWY0Y2MtNDMzMy05YmM3LWExZmViMjg0MzM1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4ZTANBgkqhkiG9w0BAQsFAAOCAQEAv01KZqdBcun4FPx6WejJuz24JWl+ VMaQBIXL9CpMLs/IvofSNsNP6yimGZn4wn8jrtPwIm0XrALHit0ZJqtsDYhMf+jw tPbGpiiyEHcRn5HvfQyIEDUVAD6H3X5ijaVatVbMCcAlwDRGkSAWL8ldoeDYdtP0 d7sK7SxjPBvweUFLFFRunou6jSAKxpGfSw9EeYVny7Dywo3mosXFNAE9FcF6EvUb tzLHg4PkGjY3s97mVmO3vNpIbbWe+soGIa+Z3gdc7Hbd2Y3qg5ruYlcJhquz+5NO Fs6V1YcXCDfffutJNi9pq0KndPYRWobr+4UK7Y7y+cmyHt8UvRWphGYSYA== -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:50 2024 by rpki-client on console-fra.rpki-client.org