$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3bcfc7c5-30f5-4636-8288-dbfd6d6b024c.roa File: 3bcfc7c5-30f5-4636-8288-dbfd6d6b024c.roa (raw, json) Hash identifier: wkNdruUjMXExNb5g6/0LKktk9/ZShlNXKAwMAIgoPIs= Subject key identifier: 13:40:97:F0:5F:BA:5F:6B:48:35:25:85:77:F3:C5:4C:DC:18:7B:63 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 23B8A56DB35B26BFDC6377CBA9DA8BD3648013A4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3bcfc7c5-30f5-4636-8288-dbfd6d6b024c.roa Signing time: Tue 26 Nov 2024 00:00:00 +0000 ROA not before: Tue 26 Nov 2024 00:00:00 +0000 ROA not after: Tue 31 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 216.39.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b8:a5:6d:b3:5b:26:bf:dc:63:77:cb:a9:da:8b:d3:64:80:13:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 26 00:00:00 2024 GMT Not After : Dec 31 23:59:59 2024 GMT Subject: serialNumber=c507e82ef6f23b40affe77aed6a49842833ee5fec1fe34ff78dc73734c502307, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:88:a9:bb:38:7a:82:8e:a6:69:2f:81:11:92: 82:73:47:2e:d5:06:d9:06:16:54:5b:c1:04:b8:55: 7e:35:89:a8:bb:92:19:a1:c7:2c:22:5f:42:89:45: a2:75:d7:9b:d1:44:f8:29:d1:32:77:8a:c9:3a:87: a0:ee:53:54:81:6e:90:89:3e:12:4b:48:37:a6:af: 94:10:e2:8e:ad:2c:24:5a:12:28:4d:f4:73:ab:5e: 4e:82:ad:fa:8e:13:16:8a:a8:2e:2c:7b:e2:ac:d9: f9:a2:86:82:ba:e1:ae:1a:0f:f6:20:c7:d3:7b:ea: 88:75:02:2a:71:41:cc:7e:6d:e8:79:92:b0:6e:37: 93:c6:c1:8d:54:c2:ab:df:6c:71:23:e5:21:1b:35: 00:e6:6a:ab:5a:02:22:c4:5f:bc:8c:43:67:63:81: 8a:93:f2:37:47:59:3d:dc:87:42:e5:9a:de:a6:a3: ec:bd:91:c3:cd:ae:10:29:9d:c8:d9:24:71:bc:92: 1a:a7:14:5e:0c:c2:0d:b9:ee:97:9f:7f:f7:e6:36: cb:70:5f:34:b7:c4:07:a8:e3:ca:30:37:55:b4:70: 34:bb:e4:4a:8d:72:4a:03:6b:24:f5:18:7f:36:8d: d2:34:43:5a:5c:0d:eb:fd:bd:e1:7c:35:2d:c0:08: 14:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:40:97:F0:5F:BA:5F:6B:48:35:25:85:77:F3:C5:4C:DC:18:7B:63 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3bcfc7c5-30f5-4636-8288-dbfd6d6b024c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.39.152.0/21 Signature Algorithm: sha256WithRSAEncryption 0b:34:5d:31:fe:bd:1b:41:c0:21:9b:1b:ac:47:84:a7:df:3a: 51:aa:d2:66:3c:c1:82:04:6d:9f:69:cc:f1:a8:a8:03:33:3b: 70:66:21:ba:5a:96:c2:ef:dc:04:9a:76:58:f0:e1:16:86:d9: cb:72:11:6f:5e:70:82:09:1b:68:fa:c5:be:a1:51:d5:01:a8: d2:08:1b:bd:13:e8:b4:ab:06:31:4e:fb:e0:5e:6b:3b:d3:8b: d4:e0:74:ae:5c:2b:d7:23:9a:12:23:6e:d2:3e:61:80:e6:31: d4:5e:33:69:12:99:f3:81:c9:c9:6b:14:2b:ab:2c:67:e1:2d: 44:6e:e7:24:85:9d:8f:99:d6:8f:1c:b5:1d:92:2a:e3:9e:46: 03:a6:1c:42:15:6d:ce:8b:3b:e6:8b:fa:38:b5:70:89:f9:ce: a7:8a:19:ba:63:6e:75:92:07:76:72:69:44:2b:67:d3:de:4a: 18:2b:92:2d:2f:58:55:60:d9:e9:6f:74:9e:b5:7b:15:09:8f: 47:c4:7e:1b:07:b1:fa:8a:59:e2:3b:ff:69:e9:29:f6:94:01: db:2e:b6:8a:0a:d5:eb:81:96:dc:2c:9f:79:f3:32:f3:b8:cd: 72:19:33:f8:9c:ec:93:fd:2f:4c:2d:16:7a:6d:02:23:e2:32: 7d:46:07:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI7ilbbNbJr/cY3fLqdqL02SAE6QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTI2MDAwMDAwWhcNMjQxMjMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNTA3ZTgyZWY2ZjIzYjQwYWZmZTc3YWVkNmE0OTg0Mjgz M2VlNWZlYzFmZTM0ZmY3OGRjNzM3MzRjNTAyMzA3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0iKm7OHqCjqZpL4ERkoJzRy7VBtkGFlRbwQS4VX41iai7 khmhxywiX0KJRaJ115vRRPgp0TJ3isk6h6DuU1SBbpCJPhJLSDemr5QQ4o6tLCRa EihN9HOrXk6CrfqOExaKqC4se+Ks2fmihoK64a4aD/Ygx9N76oh1AipxQcx+beh5 krBuN5PGwY1UwqvfbHEj5SEbNQDmaqtaAiLEX7yMQ2djgYqT8jdHWT3ch0Llmt6m o+y9kcPNrhApncjZJHG8khqnFF4Mwg257peff/fmNstwXzS3xAeo48owN1W0cDS7 5EqNckoDayT1GH82jdI0Q1pcDev9veF8NS3ACBRjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUE0CX8F+6X2tINSWFd/PFTNwYe2MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNiY2ZjN2M1LTMwZjUtNDYzNi04Mjg4LWRiZmQ2ZDZiMDI0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPYJ5gwDQYJKoZIhvcNAQELBQADggEBAAs0XTH+vRtBwCGbG6xHhKffOlGq 0mY8wYIEbZ9pzPGoqAMzO3BmIbpalsLv3ASadljw4RaG2ctyEW9ecIIJG2j6xb6h UdUBqNIIG70T6LSrBjFO++BeazvTi9TgdK5cK9cjmhIjbtI+YYDmMdReM2kSmfOB yclrFCurLGfhLURu5ySFnY+Z1o8ctR2SKuOeRgOmHEIVbc6LO+aL+ji1cIn5zqeK GbpjbnWSB3ZyaUQrZ9PeShgrki0vWFVg2elvdJ61exUJj0fEfhsHsfqKWeI7/2np KfaUAdsutooK1euBltwsn3nzMvO4zXIZM/ic7JP9L0wtFnptAiPiMn1GB+k= -----END CERTIFICATE-----Generated at Tue Dec 10 06:25:08 2024 by rpki-client on console-ams.rpki-client.org