$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4607ef94-988a-4531-a4bf-cd0814e88655.roa File: 4607ef94-988a-4531-a4bf-cd0814e88655.roa (raw, json) Hash identifier: ONAwr7a57qPIavaeGgvhMt4ZhMUdzaug8Gh0LNHfqps= Subject key identifier: FB:78:53:72:64:44:EF:2E:70:43:23:51:62:63:05:35:3B:6D:36:E5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B95BA1C3182864DFA586B6CFD1C6FEA746C0D63 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4607ef94-988a-4531-a4bf-cd0814e88655.roa Signing time: Fri 01 Nov 2024 00:00:00 +0000 ROA not before: Fri 01 Nov 2024 00:00:00 +0000 ROA not after: Fri 06 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 35.43.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:95:ba:1c:31:82:86:4d:fa:58:6b:6c:fd:1c:6f:ea:74:6c:0d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 1 00:00:00 2024 GMT Not After : Dec 6 23:59:59 2024 GMT Subject: serialNumber=d4cad72fce9b45beec392be9df799e5823cf42aca17881c5ace61d1e7598a6b0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:79:55:14:9d:3b:66:4e:06:4c:ac:e7:8c:67: ec:7d:97:1b:b9:85:12:7a:00:92:db:96:02:ff:6e: 3d:14:f5:f6:e8:79:3e:a9:65:74:49:5c:5e:59:24: 81:d5:b5:67:a0:4e:ba:3f:7a:10:d0:72:13:cf:e6: 01:d2:0c:08:08:9e:92:41:63:dc:97:61:08:f5:71: 3f:58:15:0f:f1:97:c4:05:a1:e2:16:38:4b:3c:d1: a3:97:b3:51:0a:57:92:c6:7c:63:80:b3:70:8d:c3: ea:63:fa:64:37:ca:d9:b9:91:65:d8:54:43:08:2c: fe:59:8a:8c:d0:89:20:2f:57:da:f4:7a:80:57:1d: 31:c2:19:a2:db:e5:e5:d7:85:90:4c:7d:e6:50:28: 40:ec:41:ee:81:e2:0f:42:90:08:16:c6:4b:63:29: 11:e1:a0:65:bd:cf:ea:02:74:8f:35:56:2f:3f:a5: 15:51:09:4c:19:c5:6d:d4:ec:26:94:91:dc:a8:87: f5:9d:5a:5a:c5:82:46:08:52:c6:c1:a7:24:e0:d5: 83:01:f4:7c:6b:8d:79:55:ce:6f:e7:2a:ca:ca:e8: ca:ac:d9:11:95:7a:be:67:80:5f:67:21:ba:40:b0: de:f9:73:a5:ba:f9:e0:bf:2c:33:2a:f4:8a:2e:0d: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:78:53:72:64:44:EF:2E:70:43:23:51:62:63:05:35:3B:6D:36:E5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4607ef94-988a-4531-a4bf-cd0814e88655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.43.0.0/16 Signature Algorithm: sha256WithRSAEncryption 98:c7:3c:bb:30:d3:9b:c4:12:07:3f:8e:89:45:b2:8b:fc:72: 88:70:78:c9:3d:a6:58:e2:cc:59:78:97:36:f6:86:fb:06:08: 17:0f:24:cc:9e:d9:49:d6:38:1b:11:df:61:e7:47:fe:40:67: 6d:fd:32:87:b8:80:01:e7:ca:d4:d7:f3:5c:9b:17:dd:40:bd: c8:a5:a9:24:f2:61:8a:f3:14:0c:c5:d0:3a:a0:fc:17:f2:ba: 28:01:a5:d2:96:d8:5e:75:a9:42:36:44:b6:48:25:7a:48:41: 3a:ad:68:7c:d3:2c:70:c6:20:d1:dd:3c:d6:c8:53:c6:90:1f: 23:0c:49:bc:ad:97:22:18:12:df:16:70:f1:59:f7:f0:14:2e: 41:79:7b:89:a2:de:26:40:82:c4:c2:d5:c9:0d:7b:9e:3d:5d: 06:06:28:d1:74:c6:f0:a6:db:0d:0f:2b:f1:2d:70:cb:05:e5: 38:35:31:b5:73:d5:2d:ea:5b:fb:04:45:5f:0a:e6:ec:33:ea: 50:ba:2e:f6:0c:f8:1b:3c:8b:63:30:28:48:eb:96:a1:53:e0: f9:48:30:b3:94:ce:69:83:22:ce:03:45:11:0b:35:3c:c7:32: 8c:06:48:f2:c0:f0:63:76:b3:fd:48:ec:71:fe:b5:df:66:b0: 4f:61:b3:3c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUW5W6HDGChk36WGts/Rxv6nRsDWMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTAxMDAwMDAwWhcNMjQxMjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGNhZDcyZmNlOWI0NWJlZWMzOTJiZTlkZjc5OWU1ODIz Y2Y0MmFjYTE3ODgxYzVhY2U2MWQxZTc1OThhNmIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVeVUUnTtmTgZMrOeMZ+x9lxu5hRJ6AJLblgL/bj0U9fbo eT6pZXRJXF5ZJIHVtWegTro/ehDQchPP5gHSDAgInpJBY9yXYQj1cT9YFQ/xl8QF oeIWOEs80aOXs1EKV5LGfGOAs3CNw+pj+mQ3ytm5kWXYVEMILP5ZiozQiSAvV9r0 eoBXHTHCGaLb5eXXhZBMfeZQKEDsQe6B4g9CkAgWxktjKRHhoGW9z+oCdI81Vi8/ pRVRCUwZxW3U7CaUkdyoh/WdWlrFgkYIUsbBpyTg1YMB9HxrjXlVzm/nKsrK6Mqs 2RGVer5ngF9nIbpAsN75c6W6+eC/LDMq9IouDSdfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU+3hTcmRE7y5wQyNRYmMFNTttNuUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2MDdlZjk0LTk4OGEtNDUzMS1hNGJmLWNkMDgxNGU4ODY1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjKzANBgkqhkiG9w0BAQsFAAOCAQEAmMc8uzDTm8QSBz+OiUWyi/xyiHB4 yT2mWOLMWXiXNvaG+wYIFw8kzJ7ZSdY4GxHfYedH/kBnbf0yh7iAAefK1NfzXJsX 3UC9yKWpJPJhivMUDMXQOqD8F/K6KAGl0pbYXnWpQjZEtkglekhBOq1ofNMscMYg 0d081shTxpAfIwxJvK2XIhgS3xZw8Vn38BQuQXl7iaLeJkCCxMLVyQ17nj1dBgYo 0XTG8KbbDQ8r8S1wywXlODUxtXPVLepb+wRFXwrm7DPqULou9gz4GzyLYzAoSOuW oVPg+Ugws5TOaYMizgNFEQs1PMcyjAZI8sDwY3az/Ujscf6132awT2GzPA== -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:57 2024 by rpki-client on console-fra.rpki-client.org