$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47701c8b-e269-4cbd-a00d-601cd67f4694.roa File: 47701c8b-e269-4cbd-a00d-601cd67f4694.roa (raw, json) Hash identifier: /ePKLVrt8FmszzxwBdRNnQRl/YipyiNRuQ/+frIYrx0= Subject key identifier: 7D:0F:30:5B:2A:2A:1F:3E:28:25:91:D2:1D:67:3D:BF:48:45:9D:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3AF2570F7C0EE4474062950A5ECF3DA0B4922A88 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47701c8b-e269-4cbd-a00d-601cd67f4694.roa Signing time: Sat 02 Nov 2024 00:00:00 +0000 ROA not before: Sat 02 Nov 2024 00:00:00 +0000 ROA not after: Sat 07 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f2:57:0f:7c:0e:e4:47:40:62:95:0a:5e:cf:3d:a0:b4:92:2a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 2 00:00:00 2024 GMT Not After : Dec 7 23:59:59 2024 GMT Subject: serialNumber=e89ec7db74f5b17eeb474b67f9fc4eb294c6bbe04057bd22aa7b150f511215a0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:76:ae:44:6a:75:4b:a7:45:7e:37:d6:c9:a2: b5:96:3c:a6:51:7d:eb:f6:f3:fe:5d:d9:99:42:9c: 26:b9:d8:c1:08:65:17:29:a5:1a:ce:34:54:93:b6: 86:20:77:16:09:97:a8:34:f4:8c:93:bb:6c:27:d6: af:65:be:93:04:d8:52:7d:f8:01:06:40:38:8a:9e: b1:84:26:0b:88:63:de:c6:cd:c4:bb:b8:2c:20:d9: 96:f0:9f:a3:63:af:21:cd:28:8e:09:2c:5a:44:c8: 01:d7:19:55:49:e2:86:f2:88:f2:b2:4a:cb:25:3b: e4:17:4f:54:8c:fc:c2:13:b0:da:60:1a:ef:34:40: 9b:16:6e:34:2d:a5:d3:f8:11:2a:f6:c2:6e:9c:4b: 1e:db:28:d5:23:79:13:23:ae:0c:47:ea:01:e9:86: 91:d9:3e:df:28:73:f4:6e:68:35:79:71:e4:69:d7: 34:87:e8:82:4a:60:49:72:e2:e2:ad:0e:a8:ce:2d: dd:7c:19:b7:b9:16:d5:f3:66:d7:87:44:85:fa:62: 4d:cf:bd:c8:1b:d1:26:57:61:63:f0:66:4c:10:7d: a9:4b:79:12:c5:ef:27:cd:06:ea:44:a5:4a:9a:bc: 96:d0:2a:30:d0:e4:b7:3e:09:d3:f1:07:86:10:6b: e5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0F:30:5B:2A:2A:1F:3E:28:25:91:D2:1D:67:3D:BF:48:45:9D:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47701c8b-e269-4cbd-a00d-601cd67f4694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.96.0/19 Signature Algorithm: sha256WithRSAEncryption 76:c7:00:a9:8d:94:ed:21:65:b8:06:7d:a3:0b:de:ed:4c:84: 48:d2:f0:b3:79:0b:49:b2:18:58:15:1c:c3:d3:05:d1:25:3b: 73:4e:10:97:f7:f5:e5:11:d3:85:fb:0f:81:ec:56:51:70:3a: 93:9b:2a:af:05:84:f6:10:7b:98:3c:0a:8d:cd:a1:9d:a5:29: 7b:d4:7e:fc:39:e0:21:3c:04:ce:cc:a7:6f:d4:16:17:64:78: af:b8:c7:3b:c9:8e:5f:80:3c:94:9f:c7:12:16:71:bf:86:4b: a1:90:dc:ff:83:62:9f:e8:2f:12:c3:37:df:6c:11:11:6e:e9: fd:c1:4b:b4:bb:5d:ff:bc:09:3a:13:ad:3f:6e:75:23:2b:42: 3a:87:4d:ab:36:9f:55:0a:c7:56:fd:26:da:da:1e:80:3c:24: ca:08:cf:8a:26:ee:3a:b7:ab:cc:29:7c:9a:33:35:be:2d:47: e3:ad:ac:7a:95:58:74:aa:7f:b4:66:af:ed:d0:54:4c:6d:2f: 9e:4e:40:80:12:d1:62:06:c2:dd:6a:a1:19:09:80:3a:62:c9: 8d:00:77:d4:3d:53:45:07:31:8c:1e:28:b1:ff:a9:e2:08:a4: 1f:30:7a:3c:3f:49:fd:39:3e:62:ae:d0:fe:ea:47:5a:c3:81: b1:ca:66:d1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOvJXD3wO5EdAYpUKXs89oLSSKogwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTAyMDAwMDAwWhcNMjQxMjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlODllYzdkYjc0ZjViMTdlZWI0NzRiNjdmOWZjNGViMjk0 YzZiYmUwNDA1N2JkMjJhYTdiMTUwZjUxMTIxNWEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0dq5EanVLp0V+N9bJorWWPKZRfev28/5d2ZlCnCa52MEI ZRcppRrONFSTtoYgdxYJl6g09IyTu2wn1q9lvpME2FJ9+AEGQDiKnrGEJguIY97G zcS7uCwg2Zbwn6NjryHNKI4JLFpEyAHXGVVJ4obyiPKySsslO+QXT1SM/MITsNpg Gu80QJsWbjQtpdP4ESr2wm6cSx7bKNUjeRMjrgxH6gHphpHZPt8oc/RuaDV5ceRp 1zSH6IJKYEly4uKtDqjOLd18Gbe5FtXzZteHRIX6Yk3Pvcgb0SZXYWPwZkwQfalL eRLF7yfNBupEpUqavJbQKjDQ5Lc+CdPxB4YQa+VNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfQ8wWyoqHz4oJZHSHWc9v0hFnXAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ3NzAxYzhiLWUyNjktNGNiZC1hMDBkLTYwMWNkNjdmNDY5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXGKWAwDQYJKoZIhvcNAQELBQADggEBAHbHAKmNlO0hZbgGfaML3u1MhEjS 8LN5C0myGFgVHMPTBdElO3NOEJf39eUR04X7D4HsVlFwOpObKq8FhPYQe5g8Co3N oZ2lKXvUfvw54CE8BM7Mp2/UFhdkeK+4xzvJjl+APJSfxxIWcb+GS6GQ3P+DYp/o LxLDN99sERFu6f3BS7S7Xf+8CToTrT9udSMrQjqHTas2n1UKx1b9JtraHoA8JMoI z4om7jq3q8wpfJozNb4tR+OtrHqVWHSqf7Rmr+3QVExtL55OQIAS0WIGwt1qoRkJ gDpiyY0Ad9Q9U0UHMYweKLH/qeIIpB8wejw/Sf05PmKu0P7qR1rDgbHKZtE= -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:57 2024 by rpki-client on console-fra.rpki-client.org