$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e3353ca-3bbd-4871-a189-424740c895d5.roa File: 4e3353ca-3bbd-4871-a189-424740c895d5.roa (raw, json) Hash identifier: qWjgSkpBPo5YBea3ZlU0b37OIgHQM48iBXbqJf/gUVg= Subject key identifier: 2C:70:0B:C9:1D:05:D1:60:11:05:7C:CF:F3:00:59:33:8B:F1:A9:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4BEF338FA77AB39BFE4CEE83B66DD32E4BEA0672 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e3353ca-3bbd-4871-a189-424740c895d5.roa Signing time: Mon 04 Nov 2024 00:00:00 +0000 ROA not before: Mon 04 Nov 2024 00:00:00 +0000 ROA not after: Mon 09 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 204.168.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ef:33:8f:a7:7a:b3:9b:fe:4c:ee:83:b6:6d:d3:2e:4b:ea:06:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 4 00:00:00 2024 GMT Not After : Dec 9 23:59:59 2024 GMT Subject: serialNumber=38b1f8b472f75b147ce363eaf7d4bf4c35f8150efa96168ac9e71376c08f0929, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b6:b9:77:13:3e:73:64:8e:7d:69:aa:1e:ea: 76:24:67:c7:0d:1a:ce:2f:51:52:91:e1:fa:0a:e0: 84:71:30:61:10:ee:98:0b:af:fb:22:54:41:2c:4d: 00:a4:2c:09:92:1f:53:b8:c3:8e:db:7a:3d:af:93: 38:55:20:c3:06:4a:a8:1c:a5:ac:88:7d:a7:5b:a0: 4a:1e:2e:4b:3a:e6:ed:bf:5b:15:8d:1e:b8:8e:11: 02:b4:50:8c:65:19:a2:0f:b1:5d:71:95:98:96:0e: ed:df:9b:cc:3e:dc:a0:84:3e:96:08:eb:18:38:b8: 74:8e:ff:34:ab:a0:3b:05:69:99:eb:3c:06:ad:95: b0:08:2c:0a:a2:0e:24:80:57:59:d2:09:85:74:71: dd:af:2f:94:ee:94:d4:e2:ef:b8:1b:89:d8:6a:99: 39:34:00:5d:8b:84:ac:f5:f5:9b:30:b2:30:83:c3: ca:9f:81:7e:c0:40:31:62:bc:e3:6f:69:89:e0:46: 73:e8:64:96:f0:5f:7b:96:f2:ca:7f:f2:a7:88:78: bf:39:24:8e:9b:56:37:3b:4f:b5:24:0c:c7:47:ac: 22:69:48:5b:87:34:79:70:63:b7:30:6c:aa:33:5c: 90:5f:8d:a8:c1:b0:9d:5a:d8:3f:fc:b2:67:ba:eb: c3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:70:0B:C9:1D:05:D1:60:11:05:7C:CF:F3:00:59:33:8B:F1:A9:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e3353ca-3bbd-4871-a189-424740c895d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.168.0.0/17 Signature Algorithm: sha256WithRSAEncryption 16:de:e4:97:05:f6:ff:0a:fe:9b:08:1b:a8:b2:0b:f9:de:03: 4b:13:29:17:44:63:58:0a:c2:aa:ae:e4:c3:0f:29:6c:c3:6e: 63:5e:85:34:71:a3:f4:c8:65:da:d6:10:c5:a4:5b:d1:63:16: 78:66:de:ed:33:aa:b0:40:85:6a:bf:17:51:31:f2:18:60:34: 41:96:0c:88:3c:e6:3b:ae:0b:80:9f:12:85:1d:0e:46:2b:a7: b6:1f:7d:c6:86:c4:90:b7:ee:b0:4a:10:b6:41:49:a4:96:db: 68:3a:d9:9a:5a:bb:3a:0f:65:90:14:e5:1f:7c:61:fd:9e:3a: e9:c8:46:e9:cf:5e:5b:22:2d:bd:2c:51:36:a0:2e:22:4f:19: 61:db:4a:dd:45:d8:81:0d:f9:72:6f:cc:4e:85:44:8b:4e:7f: 14:72:da:2c:c9:d9:7b:8f:7e:6f:3e:d1:4a:f0:98:06:dc:56: 8e:3a:62:5d:25:e6:9f:2b:51:08:31:8b:09:02:49:3b:4a:b7: e1:b4:a7:8f:5c:47:cc:85:2d:0e:ae:5a:68:6a:5b:41:b0:21: a0:06:34:eb:f8:77:3a:77:df:3c:d7:74:8b:ca:d2:91:9f:da: db:55:cc:0f:01:55:1c:01:ed:eb:10:35:74:a6:eb:2e:f7:ad: e2:2c:8f:67 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS+8zj6d6s5v+TO6Dtm3TLkvqBnIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA0MDAwMDAwWhcNMjQxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOGIxZjhiNDcyZjc1YjE0N2NlMzYzZWFmN2Q0YmY0YzM1 ZjgxNTBlZmE5NjE2OGFjOWU3MTM3NmMwOGYwOTI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCCtrl3Ez5zZI59aaoe6nYkZ8cNGs4vUVKR4foK4IRxMGEQ 7pgLr/siVEEsTQCkLAmSH1O4w47bej2vkzhVIMMGSqgcpayIfadboEoeLks65u2/ WxWNHriOEQK0UIxlGaIPsV1xlZiWDu3fm8w+3KCEPpYI6xg4uHSO/zSroDsFaZnr PAatlbAILAqiDiSAV1nSCYV0cd2vL5TulNTi77gbidhqmTk0AF2LhKz19ZswsjCD w8qfgX7AQDFivONvaYngRnPoZJbwX3uW8sp/8qeIeL85JI6bVjc7T7UkDMdHrCJp SFuHNHlwY7cwbKozXJBfjajBsJ1a2D/8sme668MzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULHALyR0F0WARBXzP8wBZM4vxqXowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRlMzM1M2NhLTNiYmQtNDg3MS1hMTg5LTQyNDc0MGM4OTVkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfMqAAwDQYJKoZIhvcNAQELBQADggEBABbe5JcF9v8K/psIG6iyC/neA0sT KRdEY1gKwqqu5MMPKWzDbmNehTRxo/TIZdrWEMWkW9FjFnhm3u0zqrBAhWq/F1Ex 8hhgNEGWDIg85juuC4CfEoUdDkYrp7YffcaGxJC37rBKELZBSaSW22g62ZpauzoP ZZAU5R98Yf2eOunIRunPXlsiLb0sUTagLiJPGWHbSt1F2IEN+XJvzE6FRItOfxRy 2izJ2XuPfm8+0UrwmAbcVo46Yl0l5p8rUQgxiwkCSTtKt+G0p49cR8yFLQ6uWmhq W0GwIaAGNOv4dzp33zzXdIvK0pGf2ttVzA8BVRwB7esQNXSm6y73reIsj2c= -----END CERTIFICATE-----Generated at Fri Nov 22 04:02:33 2024 by rpki-client on console-ams.rpki-client.org