$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3505df96-b443-43ec-8e8c-f0de340b6cc2.roa File: 3505df96-b443-43ec-8e8c-f0de340b6cc2.roa (raw, json) Hash identifier: C8Cx6hF1jvYqjITvnnKpNmobTIfXPfsZZiq84ULdoGc= Subject key identifier: 85:37:28:6F:A4:44:B1:74:25:72:08:91:DA:4D:22:B2:C5:A4:C2:EA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 50086468AF3F27012EEC5F13314588813342C519 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3505df96-b443-43ec-8e8c-f0de340b6cc2.roa Signing time: Fri 01 Nov 2024 00:00:00 +0000 ROA not before: Fri 01 Nov 2024 00:00:00 +0000 ROA not after: Fri 06 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 134.38.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:08:64:68:af:3f:27:01:2e:ec:5f:13:31:45:88:81:33:42:c5:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 1 00:00:00 2024 GMT Not After : Dec 6 23:59:59 2024 GMT Subject: serialNumber=754d4cce365b67b01027cfd2c075b768a21cfa0c147283a6709beb18d8104953, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c6:51:79:b6:1b:ea:18:bd:f7:13:81:2e:48: 7a:6c:c6:ad:a0:a4:80:85:58:8a:ca:f2:33:d8:df: 9a:c0:f1:4d:7d:ad:e2:37:7b:dd:d5:0c:ca:99:18: d0:c8:0c:fc:7c:3d:21:0e:84:fe:66:c7:02:87:62: 1e:8d:6d:9b:c8:67:3a:7e:b6:8b:69:8a:8f:63:b7: 89:63:41:9f:b1:1f:f6:de:5e:d1:76:7e:35:07:2c: f2:b7:71:a2:38:e4:96:fc:d6:b5:75:2f:bd:5e:b8: b4:a0:3a:96:55:cd:1b:bd:c4:f5:fd:4a:df:d6:d5: 51:f9:e0:b7:72:59:2c:5b:9f:78:de:d2:95:17:21: 4f:55:57:06:ea:44:27:3e:c8:70:b9:55:9d:90:78: b3:33:43:76:67:db:d5:06:79:fd:8a:c8:d7:86:17: ca:14:1f:b1:bc:04:ad:09:5a:02:db:bf:36:02:63: cc:ec:62:0c:68:ae:7b:22:6f:3b:52:9b:6a:3c:8d: cf:e8:19:01:0c:84:e8:7d:0a:29:e9:f3:1e:83:53: 4b:1c:c5:92:87:35:83:73:da:0a:7c:1e:18:70:a9: ec:b2:e8:de:00:e8:6d:2d:6c:1e:4a:5c:72:60:b7: 0f:92:1d:ea:fc:7f:ff:4f:bd:0d:bf:60:8d:a6:ed: 46:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:37:28:6F:A4:44:B1:74:25:72:08:91:DA:4D:22:B2:C5:A4:C2:EA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3505df96-b443-43ec-8e8c-f0de340b6cc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.38.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9c:e0:13:64:7d:af:f2:f5:ed:7d:d4:ea:d9:f8:aa:04:0c:5d: 30:8f:a8:ed:62:99:9d:2f:9a:fa:c9:d8:2e:71:83:f0:82:1b: 5f:25:fe:51:f6:a7:59:fc:14:c4:35:90:30:fc:5f:a5:c5:3f: 33:d8:94:35:2e:a9:b4:9e:55:a5:12:98:bc:63:87:14:ce:49: 28:5f:6b:b2:1f:b7:d6:de:f0:be:a3:a4:d2:3f:db:4e:77:71: b4:48:87:41:fb:22:31:42:31:9c:6d:27:32:97:1a:64:7d:4d: d8:96:d7:77:ad:6b:32:9c:6b:9d:c7:6e:01:47:92:1f:0e:b6: 74:b8:e6:7f:fa:bb:70:41:ca:16:76:71:68:57:5f:42:b4:9f: 6e:6c:8f:a0:49:fd:4d:49:c3:5e:4d:6b:89:3a:54:d1:6a:cd: ce:18:42:a6:ae:be:fa:e6:fc:c9:6b:e9:7d:b5:89:dd:7a:0a: ca:2b:dc:ee:df:9f:f2:0a:65:b4:8c:56:13:3b:74:fe:3e:17: 21:d5:db:ef:0e:d7:0e:1c:ac:40:2b:e5:aa:5c:23:64:74:88: 4e:5f:e3:e6:69:f4:e2:43:36:2b:8c:85:28:b4:03:c6:0a:9e: 94:cd:0b:8c:ad:8a:e1:cc:72:67:b7:51:f8:3c:dd:f9:12:33: e0:b4:d7:7a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUAhkaK8/JwEu7F8TMUWIgTNCxRkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTAxMDAwMDAwWhcNMjQxMjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTRkNGNjZTM2NWI2N2IwMTAyN2NmZDJjMDc1Yjc2OGEy MWNmYTBjMTQ3MjgzYTY3MDliZWIxOGQ4MTA0OTUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcxlF5thvqGL33E4EuSHpsxq2gpICFWIrK8jPY35rA8U19 reI3e93VDMqZGNDIDPx8PSEOhP5mxwKHYh6NbZvIZzp+totpio9jt4ljQZ+xH/be XtF2fjUHLPK3caI45Jb81rV1L71euLSgOpZVzRu9xPX9St/W1VH54LdyWSxbn3je 0pUXIU9VVwbqRCc+yHC5VZ2QeLMzQ3Zn29UGef2KyNeGF8oUH7G8BK0JWgLbvzYC Y8zsYgxornsibztSm2o8jc/oGQEMhOh9Cinp8x6DU0scxZKHNYNz2gp8Hhhwqeyy 6N4A6G0tbB5KXHJgtw+SHer8f/9PvQ2/YI2m7UY5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUhTcob6REsXQlcgiR2k0issWkwuowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM1MDVkZjk2LWI0NDMtNDNlYy04ZThjLWYwZGUzNDBiNmNjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCGJjANBgkqhkiG9w0BAQsFAAOCAQEAnOATZH2v8vXtfdTq2fiqBAxdMI+o 7WKZnS+a+snYLnGD8IIbXyX+UfanWfwUxDWQMPxfpcU/M9iUNS6ptJ5VpRKYvGOH FM5JKF9rsh+31t7wvqOk0j/bTndxtEiHQfsiMUIxnG0nMpcaZH1N2JbXd61rMpxr ncduAUeSHw62dLjmf/q7cEHKFnZxaFdfQrSfbmyPoEn9TUnDXk1riTpU0WrNzhhC pq6++ub8yWvpfbWJ3XoKyivc7t+f8gpltIxWEzt0/j4XIdXb7w7XDhysQCvlqlwj ZHSITl/j5mn04kM2K4yFKLQDxgqelM0LjK2K4cxyZ7dR+Dzd+RIz4LTXeg== -----END CERTIFICATE-----Generated at Fri Nov 22 01:33:54 2024 by rpki-client on console-ams.rpki-client.org