$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c10277a-43bb-4c80-9131-a3d039f12745.roa File: 3c10277a-43bb-4c80-9131-a3d039f12745.roa (raw, json) Hash identifier: UbqrLAtvqWwGNFl32BVmSpN2zZSukiyEM+NJFM9dlbs= Subject key identifier: 0B:03:3E:6E:45:12:4C:B3:2A:63:1A:E1:09:62:93:FF:52:7A:54:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 496AF7E04A3FD6FE77770E839BB5DC28B2E7DDE3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c10277a-43bb-4c80-9131-a3d039f12745.roa Signing time: Fri 01 Nov 2024 00:00:00 +0000 ROA not before: Fri 01 Nov 2024 00:00:00 +0000 ROA not after: Fri 06 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 23.254.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6a:f7:e0:4a:3f:d6:fe:77:77:0e:83:9b:b5:dc:28:b2:e7:dd:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 1 00:00:00 2024 GMT Not After : Dec 6 23:59:59 2024 GMT Subject: serialNumber=cabcf558c8d75a927cb7dbbe0281eadab3cf0573bbb880d82788968819ae445d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:40:3d:e2:32:7f:7f:49:72:18:7c:03:7c:c5: 82:e4:74:8f:e8:e3:49:05:47:d1:49:3d:50:22:6c: 7a:06:75:fc:fb:4b:23:63:36:3d:73:7c:76:a0:bd: e4:c6:7e:59:74:50:70:99:8d:70:f0:d6:46:32:50: 3b:bb:3d:aa:c9:97:da:9a:8e:a3:90:23:09:48:d8: fc:46:7b:8c:57:80:5f:bf:54:b6:48:e2:4a:65:1d: 28:29:1a:90:9b:e9:2e:37:23:8d:6b:6c:dc:ec:e4: 5a:47:bf:0d:e3:7a:01:56:7b:99:e7:5c:fd:8a:91: 7d:e3:58:5f:6c:8f:7e:56:a9:52:9b:db:fd:19:ac: dc:38:09:43:c3:15:f6:8b:38:78:93:f6:a6:a0:76: a6:9e:48:88:73:6c:14:c6:2a:ea:d5:fc:88:96:58: a9:59:08:ce:6d:43:a8:22:40:6a:45:5a:7c:c3:40: 1f:7e:94:ef:5c:f0:e3:2d:f9:dc:fe:43:70:68:1b: cc:04:40:da:44:45:77:59:3b:d0:35:d6:4a:9e:16: 63:6e:c0:59:2d:81:ee:0e:06:6c:2a:36:52:06:6d: af:0a:53:7f:8f:e8:5a:6c:e7:f4:c6:fb:7a:c0:44: 48:64:2b:d5:7c:e9:bd:6e:32:0b:17:cf:38:d4:08: f6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:03:3E:6E:45:12:4C:B3:2A:63:1A:E1:09:62:93:FF:52:7A:54:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c10277a-43bb-4c80-9131-a3d039f12745.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.254.8.0/22 Signature Algorithm: sha256WithRSAEncryption 56:17:e3:7e:43:b4:aa:d4:3f:41:6b:34:e7:ff:ee:e0:de:c8: df:b6:42:21:05:01:6f:a8:05:31:c1:c1:ea:6e:2f:c6:44:11: e1:34:59:45:6f:4f:3e:92:6d:1f:a4:99:25:22:16:b9:55:09: 93:4f:87:18:e2:03:fa:89:3c:aa:0d:4e:a8:40:81:2b:8d:de: 14:1b:51:36:8f:f1:4a:5d:3f:79:f2:e1:f9:5b:b2:2a:d6:66: 73:50:f8:a3:c3:71:18:36:85:e6:24:1b:0a:a1:a6:94:88:31: ba:6e:63:6f:af:2a:ff:16:f7:0a:e3:2e:19:ba:a0:ed:68:2b: 4c:bd:b7:aa:c6:09:48:a8:ef:4a:60:bc:ab:22:52:88:34:5c: 6e:87:eb:34:2f:46:58:61:af:bf:c3:ae:f7:9c:ce:12:d5:19: 25:c4:69:5a:b1:1a:8f:07:51:38:e1:48:d1:e9:ba:f6:d5:38: 52:9f:42:b3:42:54:7e:95:7a:d0:2e:f1:f8:73:22:62:55:1b: 02:42:3e:26:d3:47:30:eb:8b:ae:d6:f7:ba:f6:71:dd:e2:79: 7f:ad:37:6a:4d:a8:c1:d9:67:44:69:1a:50:51:94:98:e4:c7: 38:51:64:49:1e:84:86:f9:65:f2:f2:41:1a:ce:75:fb:3d:ce: 60:5d:ba:8b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSWr34Eo/1v53dw6Dm7XcKLLn3eMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTAxMDAwMDAwWhcNMjQxMjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYWJjZjU1OGM4ZDc1YTkyN2NiN2RiYmUwMjgxZWFkYWIz Y2YwNTczYmJiODgwZDgyNzg4OTY4ODE5YWU0NDVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmQD3iMn9/SXIYfAN8xYLkdI/o40kFR9FJPVAibHoGdfz7 SyNjNj1zfHagveTGfll0UHCZjXDw1kYyUDu7ParJl9qajqOQIwlI2PxGe4xXgF+/ VLZI4kplHSgpGpCb6S43I41rbNzs5FpHvw3jegFWe5nnXP2KkX3jWF9sj35WqVKb 2/0ZrNw4CUPDFfaLOHiT9qagdqaeSIhzbBTGKurV/IiWWKlZCM5tQ6giQGpFWnzD QB9+lO9c8OMt+dz+Q3BoG8wEQNpERXdZO9A11kqeFmNuwFktge4OBmwqNlIGba8K U3+P6Fps5/TG+3rAREhkK9V86b1uMgsXzzjUCPYrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCwM+bkUSTLMqYxrhCWKT/1J6VN0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNjMTAyNzdhLTQzYmItNGM4MC05MTMxLWEzZDAzOWYxMjc0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX/ggwDQYJKoZIhvcNAQELBQADggEBAFYX435DtKrUP0FrNOf/7uDeyN+2 QiEFAW+oBTHBwepuL8ZEEeE0WUVvTz6SbR+kmSUiFrlVCZNPhxjiA/qJPKoNTqhA gSuN3hQbUTaP8UpdP3ny4flbsirWZnNQ+KPDcRg2heYkGwqhppSIMbpuY2+vKv8W 9wrjLhm6oO1oK0y9t6rGCUio70pgvKsiUog0XG6H6zQvRlhhr7/DrveczhLVGSXE aVqxGo8HUTjhSNHpuvbVOFKfQrNCVH6VetAu8fhzImJVGwJCPibTRzDri67W97r2 cd3ieX+tN2pNqMHZZ0RpGlBRlJjkxzhRZEkehIb5ZfLyQRrOdfs9zmBduos= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:54 2024 by rpki-client on console-fra.rpki-client.org