$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2df3f2da-86da-449f-b1e2-009514bc056f.roa File: 2df3f2da-86da-449f-b1e2-009514bc056f.roa (raw, json) Hash identifier: +hukayWGnxOocDIlut/GbmFJwkcv1yl8trgwXBJ7nE8= Subject key identifier: 07:1C:F9:60:17:1C:90:65:28:3B:79:DE:BF:49:00:4D:8D:F4:95:BA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7999FE5F1576CB070E90E89D6DD51CED40246EEA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2df3f2da-86da-449f-b1e2-009514bc056f.roa Signing time: Sat 23 Nov 2024 00:00:00 +0000 ROA not before: Sat 23 Nov 2024 00:00:00 +0000 ROA not after: Sat 28 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 140.200.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:99:fe:5f:15:76:cb:07:0e:90:e8:9d:6d:d5:1c:ed:40:24:6e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 23 00:00:00 2024 GMT Not After : Dec 28 23:59:59 2024 GMT Subject: serialNumber=42fe3207728a4b88bd3e24a944986f233af1d92b3b8acf57a533eddeadbffbe5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c5:7f:f7:97:28:ab:62:6c:b3:11:4c:0e:45: 9a:bc:7a:9d:7a:76:93:50:62:21:36:58:09:1f:c6: 7a:8d:e2:d0:e4:0d:e9:a7:9f:3a:6b:71:34:e1:2f: 67:7a:ac:3c:f0:e4:7b:98:b7:81:37:7b:59:74:5d: d7:ec:44:55:0e:2b:91:06:fc:57:88:68:48:4d:23: 71:45:2a:99:45:b5:94:81:18:74:d0:fa:f6:32:0f: ec:ec:d8:87:d2:05:fd:46:bc:17:15:d6:46:fe:99: a2:38:1b:b4:b4:35:b0:c1:e3:d8:2c:ba:7b:1f:7a: 6d:11:77:d2:e3:05:c1:2c:dd:4f:78:17:ab:7a:d1: bb:e3:25:c5:a2:dd:fd:b7:ea:8c:72:c7:b2:b1:e0: e8:4b:10:0c:80:0a:78:80:9c:27:80:5a:cf:47:9b: 92:bc:3c:a8:14:1c:4f:41:8d:74:fe:96:1e:77:1f: 64:e9:87:cf:b5:56:83:15:ad:48:9c:bc:69:86:e9: 1c:15:a4:49:1e:5a:38:cd:18:9e:ee:a0:b2:be:28: b9:03:f2:14:da:6b:6a:cd:92:6f:be:18:d3:70:8a: b3:62:64:96:aa:14:e6:6e:29:ae:ba:47:35:a1:d1: f7:b7:72:52:cd:76:22:10:19:80:07:6e:87:48:a5: 6e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1C:F9:60:17:1C:90:65:28:3B:79:DE:BF:49:00:4D:8D:F4:95:BA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2df3f2da-86da-449f-b1e2-009514bc056f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.200.0.0/16 Signature Algorithm: sha256WithRSAEncryption 14:ef:39:fe:3f:7b:2a:4b:3e:d8:8f:15:68:d9:9c:e7:f3:3a: dc:f8:fc:97:23:82:4f:a0:c0:d9:9c:27:2a:9f:03:f4:2d:28: 96:ef:b3:70:f6:0b:e9:89:20:66:90:f7:df:a2:c5:c1:28:44: e7:1c:e5:02:c4:7a:70:70:e3:28:50:a6:5f:2c:3c:70:dd:b2: e0:e6:4a:70:02:5e:d6:9a:a9:25:aa:62:be:4a:02:09:0f:6a: a5:5b:32:ef:47:02:71:97:4f:c1:a6:10:a0:be:f5:3a:61:6c: 19:04:f3:20:48:83:28:77:f8:9b:d3:94:25:5f:ae:95:dd:c2: 0b:2a:ca:1b:77:27:81:ee:01:62:96:da:43:dd:cf:7d:40:1a: 6f:2e:53:17:04:06:e6:45:bb:4e:0b:e9:14:14:75:53:af:ad: 99:76:a6:47:04:0c:06:76:74:b5:1d:bb:b6:a5:92:99:82:08: 3e:1c:3b:8a:fb:50:1d:2d:29:56:dd:ab:f6:86:bb:f5:58:68: e7:5e:da:bd:6b:b8:1a:05:2c:2e:1e:ff:54:8e:be:0a:d7:52: bb:dc:84:64:c7:72:1f:67:6a:db:57:5a:5e:c2:2a:e9:4b:b9: 88:40:c2:73:9b:5a:08:e4:a4:d1:42:64:38:1a:a3:b5:2d:f7: 52:0f:88:e0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUeZn+XxV2ywcOkOidbdUc7UAkbuowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTIzMDAwMDAwWhcNMjQxMjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MmZlMzIwNzcyOGE0Yjg4YmQzZTI0YTk0NDk4NmYyMzNh ZjFkOTJiM2I4YWNmNTdhNTMzZWRkZWFkYmZmYmU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD2xX/3lyirYmyzEUwORZq8ep16dpNQYiE2WAkfxnqN4tDk DemnnzprcTThL2d6rDzw5HuYt4E3e1l0XdfsRFUOK5EG/FeIaEhNI3FFKplFtZSB GHTQ+vYyD+zs2IfSBf1GvBcV1kb+maI4G7S0NbDB49gsunsfem0Rd9LjBcEs3U94 F6t60bvjJcWi3f236oxyx7Kx4OhLEAyACniAnCeAWs9Hm5K8PKgUHE9BjXT+lh53 H2Tph8+1VoMVrUicvGmG6RwVpEkeWjjNGJ7uoLK+KLkD8hTaa2rNkm++GNNwirNi ZJaqFOZuKa66RzWh0fe3clLNdiIQGYAHbodIpW5TAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUBxz5YBcckGUoO3nev0kATY30lbowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJkZjNmMmRhLTg2ZGEtNDQ5Zi1iMWUyLTAwOTUxNGJjMDU2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCMyDANBgkqhkiG9w0BAQsFAAOCAQEAFO85/j97Kks+2I8VaNmc5/M63Pj8 lyOCT6DA2ZwnKp8D9C0olu+zcPYL6YkgZpD336LFwShE5xzlAsR6cHDjKFCmXyw8 cN2y4OZKcAJe1pqpJapivkoCCQ9qpVsy70cCcZdPwaYQoL71OmFsGQTzIEiDKHf4 m9OUJV+uld3CCyrKG3cnge4BYpbaQ93PfUAaby5TFwQG5kW7TgvpFBR1U6+tmXam RwQMBnZ0tR27tqWSmYIIPhw7ivtQHS0pVt2r9oa79Vho517avWu4GgUsLh7/VI6+ CtdSu9yEZMdyH2dq21daXsIq6Uu5iEDCc5taCOSk0UJkOBqjtS33Ug+I4A== -----END CERTIFICATE-----Generated at Sun Nov 24 03:16:54 2024 by rpki-client on console-ams.rpki-client.org