$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f76f080-25b2-42fd-9ae8-83975418a05e.roa File: 2f76f080-25b2-42fd-9ae8-83975418a05e.roa (raw, json) Hash identifier: uKCQq6TEzdmdojqPn9T6UFm2E6bXlwb6nr3XBItrEZ0= Subject key identifier: 23:BE:1D:D0:AE:CA:40:4C:DB:90:49:8A:B9:F4:2A:33:D8:C1:55:2E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 454B84CB57E6650852489431CC4DBEE4D04D861A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f76f080-25b2-42fd-9ae8-83975418a05e.roa Signing time: Mon 04 Nov 2024 00:00:00 +0000 ROA not before: Mon 04 Nov 2024 00:00:00 +0000 ROA not after: Mon 09 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 216.127.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:4b:84:cb:57:e6:65:08:52:48:94:31:cc:4d:be:e4:d0:4d:86:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 4 00:00:00 2024 GMT Not After : Dec 9 23:59:59 2024 GMT Subject: serialNumber=24ca678e574fbe007c0a0e5cb5dd0def04380d838407c2fcb29143c5ba41d88d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:03:ae:d6:da:6d:a5:58:60:c2:96:52:34:85: f9:2b:28:68:fb:3d:b8:78:4c:b8:89:23:a7:4d:1b: b5:e2:2f:57:3f:33:f8:fd:e7:35:04:c7:47:ff:3f: 40:f9:dc:3b:3d:a7:de:dd:dd:b9:50:23:c8:d4:73: 25:f2:8c:f5:b8:2c:f0:0b:77:ff:3e:88:d6:5b:97: ee:1e:86:7b:e8:93:5b:3b:6d:da:d8:fb:3f:a5:16: 5c:b0:38:33:d9:b6:47:5a:41:4b:07:be:9f:d4:b5: 62:a8:23:df:11:2f:01:b0:7a:cd:b1:8b:4f:6a:2e: 6e:23:eb:15:bb:22:c2:6b:e0:50:90:4e:24:85:27: a2:35:4a:14:de:99:9f:c4:3b:af:76:d0:62:1f:d7: 28:ee:fd:52:45:93:8a:4d:96:ec:bc:11:0d:c5:e5: bf:14:40:d2:26:04:04:d4:7e:c3:34:0d:e3:a3:79: 88:2b:ad:e9:e3:31:ce:be:60:a3:dc:a0:7e:84:35: ed:2b:02:a8:5e:77:44:72:fb:21:3e:ae:6c:68:66: bf:01:c5:1d:fe:aa:4d:fe:df:c0:f4:f7:3c:5c:61: 32:d1:e7:32:2a:72:5c:d3:eb:8d:ec:ee:29:d8:e9: d0:b6:41:f4:1e:dd:46:96:f4:5f:7d:1d:06:f2:aa: b8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BE:1D:D0:AE:CA:40:4C:DB:90:49:8A:B9:F4:2A:33:D8:C1:55:2E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f76f080-25b2-42fd-9ae8-83975418a05e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.127.160.0/19 Signature Algorithm: sha256WithRSAEncryption 6a:6b:d0:1c:7a:1f:a9:9c:ef:ae:fb:d3:c0:46:9b:31:80:24: 30:26:0d:73:ee:58:c6:c2:6f:94:5a:e6:87:ac:47:7b:fd:f1: 04:f7:4a:69:06:2d:60:ab:b2:2a:cd:60:72:65:7c:66:1f:35: c4:69:e9:af:3f:68:10:53:e6:a8:b7:88:e3:f2:3e:ed:2c:73: 3a:06:47:3a:5b:2d:6f:e9:6e:a2:6a:d6:cb:03:f9:46:b0:8a: 90:e8:e9:15:8d:57:b5:e7:d1:ae:88:d4:7a:d8:cb:da:f3:c5: 91:d9:d8:8d:d3:09:14:3b:ec:23:c8:0a:0f:44:46:39:5a:64: 47:46:08:ab:d5:27:e0:c8:57:5e:7a:97:38:19:0f:2f:8c:b0: 44:eb:ec:c6:c5:d0:c6:a1:77:72:6a:c5:09:c1:61:26:f4:b5: 69:0b:e2:77:6d:4f:a0:48:f6:5e:a1:8b:3d:a3:7d:0a:92:9d: d9:72:2a:88:53:8f:30:80:60:c0:d2:8c:6e:09:92:9a:cb:95: ef:23:37:76:97:0c:93:26:03:49:cb:f8:4b:f7:8b:a5:b4:a1: df:e0:86:a4:d9:c0:00:92:e5:08:57:ae:40:7b:c5:fe:f6:f5: 5d:07:2e:cb:f9:d1:10:53:7c:18:91:a6:ce:81:d8:f8:c3:5c: 55:c9:85:25 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURUuEy1fmZQhSSJQxzE2+5NBNhhowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA0MDAwMDAwWhcNMjQxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNGNhNjc4ZTU3NGZiZTAwN2MwYTBlNWNiNWRkMGRlZjA0 MzgwZDgzODQwN2MyZmNiMjkxNDNjNWJhNDFkODhkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPA67W2m2lWGDCllI0hfkrKGj7Pbh4TLiJI6dNG7XiL1c/ M/j95zUEx0f/P0D53Ds9p97d3blQI8jUcyXyjPW4LPALd/8+iNZbl+4ehnvok1s7 bdrY+z+lFlywODPZtkdaQUsHvp/UtWKoI98RLwGwes2xi09qLm4j6xW7IsJr4FCQ TiSFJ6I1ShTemZ/EO6920GIf1yju/VJFk4pNluy8EQ3F5b8UQNImBATUfsM0DeOj eYgrrenjMc6+YKPcoH6ENe0rAqhed0Ry+yE+rmxoZr8BxR3+qk3+38D09zxcYTLR 5zIqclzT643s7inY6dC2QfQe3UaW9F99HQbyqriRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUI74d0K7KQEzbkEmKufQqM9jBVS4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJmNzZmMDgwLTI1YjItNDJmZC05YWU4LTgzOTc1NDE4YTA1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXYf6AwDQYJKoZIhvcNAQELBQADggEBAGpr0Bx6H6mc767708BGmzGAJDAm DXPuWMbCb5Ra5oesR3v98QT3SmkGLWCrsirNYHJlfGYfNcRp6a8/aBBT5qi3iOPy Pu0sczoGRzpbLW/pbqJq1ssD+UawipDo6RWNV7Xn0a6I1HrYy9rzxZHZ2I3TCRQ7 7CPICg9ERjlaZEdGCKvVJ+DIV156lzgZDy+MsETr7MbF0Mahd3JqxQnBYSb0tWkL 4ndtT6BI9l6hiz2jfQqSndlyKohTjzCAYMDSjG4JkprLle8jN3aXDJMmA0nL+Ev3 i6W0od/ghqTZwACS5QhXrkB7xf729V0HLsv50RBTfBiRps6B2PjDXFXJhSU= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:51 2024 by rpki-client on console-fra.rpki-client.org