$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e99b615-2590-4316-9466-aac8607c078d.roa File: 3e99b615-2590-4316-9466-aac8607c078d.roa (raw, json) Hash identifier: Be61h0v0SV/7Q2lDZTAohHnoQv3cmZqn0bQz04rMH9I= Subject key identifier: 61:2A:36:EB:2E:C6:5A:8B:49:7B:8C:26:88:92:A6:48:15:5E:CA:F6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 16F924418F9F6188EC5D87F3FC02E1966CAE4D89 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e99b615-2590-4316-9466-aac8607c078d.roa Signing time: Mon 18 Nov 2024 00:00:00 +0000 ROA not before: Mon 18 Nov 2024 00:00:00 +0000 ROA not after: Mon 23 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 209.88.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f9:24:41:8f:9f:61:88:ec:5d:87:f3:fc:02:e1:96:6c:ae:4d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 18 00:00:00 2024 GMT Not After : Dec 23 23:59:59 2024 GMT Subject: serialNumber=196169f5386b11f4ad9535af5f6111d0edb2ad0ec6b89d07312cf52d309ffa70, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c9:9b:de:94:de:f5:7f:04:de:18:a6:37:26: a1:82:d4:08:5c:7d:1a:5b:d0:5f:84:58:30:24:14: 66:61:6e:29:77:0b:74:be:dd:84:23:7e:1c:15:db: 62:e3:b5:70:dd:d8:38:df:6d:cc:b6:5b:9e:72:60: 01:2b:39:ae:9b:35:71:e4:17:43:0a:f9:41:83:9f: 30:2e:53:6f:fe:1b:a5:27:92:3d:04:31:c2:a7:aa: a6:a4:39:4f:96:05:90:7c:a3:b3:bf:1f:53:ba:0e: 09:83:b8:7c:37:de:5e:f4:90:98:70:71:bf:b2:73: 12:21:3e:4f:6c:a2:b6:3d:1f:55:b5:03:6a:44:36: b7:06:d7:14:fa:f0:0e:6a:0a:22:67:b4:28:d4:d4: 10:8b:ce:0d:b3:7f:a8:64:73:77:15:e3:4e:f6:08: 02:84:76:0a:02:a2:fb:1f:98:42:13:14:a0:08:7c: 38:4c:8d:91:27:8d:e4:1b:e2:1e:a9:76:94:06:1f: 88:f9:59:ac:af:2f:ef:18:2d:bc:70:31:6e:e0:21: 2f:0a:bf:1a:74:87:b4:84:0f:64:0e:49:07:f7:2d: c0:a5:99:96:41:99:9e:d4:ea:3d:29:b4:0c:9b:d6: ab:d1:a4:93:0a:61:36:97:eb:44:53:fd:39:db:0f: 61:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2A:36:EB:2E:C6:5A:8B:49:7B:8C:26:88:92:A6:48:15:5E:CA:F6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e99b615-2590-4316-9466-aac8607c078d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.88.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2e:ad:cd:a6:d6:e3:d8:fa:66:21:f4:2d:17:33:6c:9d:9b:41: 29:2e:dd:a5:e1:a9:ac:b7:c5:36:86:49:a8:ed:21:c4:53:01: 25:01:cd:eb:65:c9:b9:a6:af:3b:2d:e3:76:8f:35:f1:c0:3f: a3:2d:b3:fc:d4:e8:00:a6:87:3c:c9:31:9c:58:30:37:76:33: 7f:2b:ee:a5:8c:1d:fb:f5:6c:c1:da:d4:06:ea:41:28:6c:ac: c0:30:79:af:0d:d0:3c:05:e9:7b:f3:c8:02:4a:ea:95:ab:eb: 74:b4:a8:87:b8:47:5e:62:ff:01:9c:d1:83:93:2c:8b:53:11: 67:0c:64:41:0e:ea:c0:f8:45:1d:46:a8:7b:b6:4b:6c:e8:aa: 5a:d0:f4:2a:92:27:40:55:97:ce:c7:f6:03:49:36:5d:06:ea: c0:53:ef:5a:31:4b:a4:f0:ff:99:b8:ff:d8:be:1d:85:a5:81: 08:41:5b:71:6c:df:3d:10:9b:96:44:ab:3c:13:d1:bf:fe:c5: e8:57:52:e9:ff:80:02:76:fa:01:09:ef:33:38:d7:71:15:7f: f4:39:29:7b:9a:e5:e3:6c:42:d2:68:d8:9a:f7:be:ec:6a:d5: 66:ba:d9:1e:42:ed:51:59:8e:bd:69:9a:3a:85:b2:c1:ea:2f: d4:04:32:b8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFvkkQY+fYYjsXYfz/ALhlmyuTYkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTE4MDAwMDAwWhcNMjQxMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTYxNjlmNTM4NmIxMWY0YWQ5NTM1YWY1ZjYxMTFkMGVk YjJhZDBlYzZiODlkMDczMTJjZjUyZDMwOWZmYTcwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9yZvelN71fwTeGKY3JqGC1AhcfRpb0F+EWDAkFGZhbil3 C3S+3YQjfhwV22LjtXDd2Djfbcy2W55yYAErOa6bNXHkF0MK+UGDnzAuU2/+G6Un kj0EMcKnqqakOU+WBZB8o7O/H1O6DgmDuHw33l70kJhwcb+ycxIhPk9sorY9H1W1 A2pENrcG1xT68A5qCiJntCjU1BCLzg2zf6hkc3cV4072CAKEdgoCovsfmEITFKAI fDhMjZEnjeQb4h6pdpQGH4j5WayvL+8YLbxwMW7gIS8Kvxp0h7SED2QOSQf3LcCl mZZBmZ7U6j0ptAyb1qvRpJMKYTaX60RT/TnbD2HtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUYSo26y7GWotJe4wmiJKmSBVeyvYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNlOTliNjE1LTI1OTAtNDMxNi05NDY2LWFhYzg2MDdjMDc4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDRWDANBgkqhkiG9w0BAQsFAAOCAQEALq3Nptbj2PpmIfQtFzNsnZtBKS7d peGprLfFNoZJqO0hxFMBJQHN62XJuaavOy3jdo818cA/oy2z/NToAKaHPMkxnFgw N3YzfyvupYwd+/VswdrUBupBKGyswDB5rw3QPAXpe/PIAkrqlavrdLSoh7hHXmL/ AZzRg5Msi1MRZwxkQQ7qwPhFHUaoe7ZLbOiqWtD0KpInQFWXzsf2A0k2XQbqwFPv WjFLpPD/mbj/2L4dhaWBCEFbcWzfPRCblkSrPBPRv/7F6FdS6f+AAnb6AQnvMzjX cRV/9Dkpe5rl42xC0mjYmve+7GrVZrrZHkLtUVmOvWmaOoWyweov1AQyuA== -----END CERTIFICATE-----Generated at Fri Nov 22 04:02:30 2024 by rpki-client on console-ams.rpki-client.org