$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/523aaac2-b562-4987-b16a-955a4fe07ea6.roa File: 523aaac2-b562-4987-b16a-955a4fe07ea6.roa (raw, json) Hash identifier: f265v7J3yzM43YmOzM71a/oGjCKUIN5Gz3+KupIkabM= Subject key identifier: C5:D8:7C:3E:CF:90:53:B7:EB:FC:CA:0E:E8:61:FA:5E:47:79:59:64 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E484FA743B820E4E093C25D9F19C638F29317B6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/523aaac2-b562-4987-b16a-955a4fe07ea6.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 207.240.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:48:4f:a7:43:b8:20:e4:e0:93:c2:5d:9f:19:c6:38:f2:93:17:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=0e2f1dd6d697bd1cc0a8e2ee728c8237e356b95a5f828ecb0d238cecf615bab2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f0:3c:8a:d2:d7:d0:9e:46:42:fd:86:80:e9: cf:d7:aa:dd:1c:a4:69:1d:a1:1a:35:4b:cf:4f:f2: 5f:97:57:f9:d5:fb:b4:77:e9:32:26:f5:de:e4:ad: 6e:14:12:45:09:bc:ab:66:77:8c:ba:c8:3e:a7:78: 10:c3:ca:28:9c:e5:4b:a5:81:11:11:6e:dc:50:5e: 7f:e7:1e:78:05:b2:f1:ac:de:48:ef:c4:37:66:b6: 40:01:43:38:d4:b4:ee:d3:04:82:f2:81:0e:5f:5b: 81:80:7f:e9:60:aa:fe:09:08:91:d7:58:55:0b:f4: c8:83:95:3a:28:42:49:e9:58:11:97:b9:68:a9:4d: 26:47:a5:9b:f7:bb:f0:8f:2c:7e:bc:11:10:1e:2e: 6b:f9:a2:16:b2:bc:4e:f2:86:27:8a:a2:09:88:88: 8c:09:fa:7f:af:7f:50:3a:85:b7:a6:be:57:2e:fc: b5:8d:25:24:ca:cf:a3:68:f1:92:64:af:fc:13:f1: 54:ab:54:80:d1:df:32:fb:65:69:03:51:1f:b2:d8: 20:c6:16:41:9a:59:76:a4:d9:51:7c:b3:64:12:a1: a0:95:bf:33:77:58:a9:dd:ed:78:e0:61:12:c7:b9: 94:3c:a1:57:99:40:db:2b:e8:1d:3f:31:ba:77:18: 39:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D8:7C:3E:CF:90:53:B7:EB:FC:CA:0E:E8:61:FA:5E:47:79:59:64 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/523aaac2-b562-4987-b16a-955a4fe07ea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.240.0.0/16 Signature Algorithm: sha256WithRSAEncryption 52:95:eb:68:7c:73:58:66:a8:a3:46:4a:ab:dc:2c:ba:ec:b9: c7:5c:37:23:7b:c4:bf:9a:6f:f7:7c:05:85:44:2e:5e:84:03: ea:3d:d9:56:16:3c:a1:a5:7d:a8:99:b1:f0:82:eb:82:11:0f: d9:89:27:69:c6:3c:40:a2:30:ae:b0:32:5f:af:c5:12:5b:28: 9d:ab:11:07:b4:72:1d:55:19:6f:2e:df:89:7e:25:06:69:2a: 93:69:c7:77:0a:00:ae:f1:f0:4b:27:03:6c:40:92:7c:78:04: 9d:eb:ed:5b:81:cd:ea:f6:5e:21:5f:01:ea:72:c5:fe:97:f3: 3e:df:b6:ee:0d:68:93:d5:79:34:ac:52:e1:64:84:6f:7c:00: a3:11:f1:32:02:4a:0a:60:35:84:45:fa:e7:4c:50:2d:ef:93: ec:11:25:7d:e8:9f:a7:4b:f9:6f:31:c9:62:e5:a7:d9:38:1a: 8f:82:cb:f2:7a:48:31:36:9d:2b:e1:40:b1:0c:f5:f4:05:ea: 21:ea:a6:79:07:6c:9c:a4:ef:ea:c9:3a:7e:2a:57:79:28:fc: 34:09:58:e3:55:64:d2:ba:7a:14:0c:63:dc:3c:b8:30:a7:1a: 62:f4:fb:3b:ff:91:cc:d2:1d:03:17:bd:da:da:de:8f:c6:f2: 99:11:94:d2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULkhPp0O4IOTgk8JdnxnGOPKTF7YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTJmMWRkNmQ2OTdiZDFjYzBhOGUyZWU3MjhjODIzN2Uz NTZiOTVhNWY4MjhlY2IwZDIzOGNlY2Y2MTViYWIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw8DyK0tfQnkZC/YaA6c/Xqt0cpGkdoRo1S89P8l+XV/nV +7R36TIm9d7krW4UEkUJvKtmd4y6yD6neBDDyiic5UulgRERbtxQXn/nHngFsvGs 3kjvxDdmtkABQzjUtO7TBILygQ5fW4GAf+lgqv4JCJHXWFUL9MiDlTooQknpWBGX uWipTSZHpZv3u/CPLH68ERAeLmv5ohayvE7yhieKogmIiIwJ+n+vf1A6hbemvlcu /LWNJSTKz6No8ZJkr/wT8VSrVIDR3zL7ZWkDUR+y2CDGFkGaWXak2VF8s2QSoaCV vzN3WKnd7XjgYRLHuZQ8oVeZQNsr6B0/Mbp3GDkDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUxdh8Ps+QU7fr/MoO6GH6Xkd5WWQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUyM2FhYWMyLWI1NjItNDk4Ny1iMTZhLTk1NWE0ZmUwN2VhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDP8DANBgkqhkiG9w0BAQsFAAOCAQEAUpXraHxzWGaoo0ZKq9wsuuy5x1w3 I3vEv5pv93wFhUQuXoQD6j3ZVhY8oaV9qJmx8ILrghEP2YknacY8QKIwrrAyX6/F ElsonasRB7RyHVUZby7fiX4lBmkqk2nHdwoArvHwSycDbECSfHgEnevtW4HN6vZe IV8B6nLF/pfzPt+27g1ok9V5NKxS4WSEb3wAoxHxMgJKCmA1hEX650xQLe+T7BEl feifp0v5bzHJYuWn2Tgaj4LL8npIMTadK+FAsQz19AXqIeqmeQdsnKTv6sk6fipX eSj8NAlY41Vk0rp6FAxj3Dy4MKcaYvT7O/+RzNIdAxe92trej8bymRGU0g== -----END CERTIFICATE-----Generated at Fri Nov 22 04:02:34 2024 by rpki-client on console-ams.rpki-client.org