$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5899de73-499d-41a5-bd7b-37d8352b785c.roa File: 5899de73-499d-41a5-bd7b-37d8352b785c.roa (raw, json) Hash identifier: 8TgWUgrXubL8U++uqB6r6M2XZWY/4nVxv2xOllposh8= Subject key identifier: A1:06:76:A7:74:5A:99:2C:C5:76:0C:E8:EA:A5:67:C1:F6:F9:92:AA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7066AD5BBD8756464A6D294E5B96B1817A1D0F50 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5899de73-499d-41a5-bd7b-37d8352b785c.roa Signing time: Fri 01 Nov 2024 00:00:00 +0000 ROA not before: Fri 01 Nov 2024 00:00:00 +0000 ROA not after: Fri 06 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 170.221.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:66:ad:5b:bd:87:56:46:4a:6d:29:4e:5b:96:b1:81:7a:1d:0f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 1 00:00:00 2024 GMT Not After : Dec 6 23:59:59 2024 GMT Subject: serialNumber=3b140a3a7112ec8cfac4bf0743ceb82cd9f82cd259bb991e1ddbff1e18460e20, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c0:88:11:11:be:e0:3d:c1:b2:64:14:dd:be: 1f:90:8d:1a:91:88:0d:62:8b:53:9b:e4:b2:11:9a: 85:1d:3f:7e:02:b8:60:f9:b3:d2:42:ad:6b:f7:66: d8:26:40:87:e8:2f:2b:21:6b:8c:4e:aa:88:c5:c8: e5:f5:98:5a:b9:87:c2:c4:46:c9:a7:5f:22:32:8b: 1c:ae:ec:02:5f:60:69:62:a8:19:95:cc:9c:81:3d: 68:a5:ab:f0:fa:be:d1:97:36:3b:2a:d6:87:30:a4: a6:2f:a3:e3:93:42:45:47:65:17:68:a5:d8:d1:df: bc:36:be:58:4a:c6:f6:d3:19:f0:4a:ff:56:e7:41: d5:19:2f:08:23:34:c4:39:a5:8e:2e:df:96:da:da: ad:23:3c:75:3d:ab:cd:4d:dc:49:32:14:3a:9e:f5: 20:8e:d0:97:2b:89:c9:24:85:6b:83:14:38:f7:e2: ac:fb:81:f3:76:ca:c4:5d:0f:0d:3f:eb:a6:72:ec: ef:01:d2:6c:78:04:78:62:80:58:f5:46:6c:8e:8f: 2c:85:df:50:b4:eb:dc:8d:bf:52:b6:96:45:82:86: 9d:b5:a0:06:d2:4a:67:89:12:e4:c4:f8:70:00:27: a5:82:72:b5:1c:55:f9:e7:31:c9:e1:28:a5:da:0b: c9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:06:76:A7:74:5A:99:2C:C5:76:0C:E8:EA:A5:67:C1:F6:F9:92:AA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5899de73-499d-41a5-bd7b-37d8352b785c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.221.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8f:5d:19:56:63:c7:a4:62:3a:3c:47:c5:e6:89:5a:b7:9e:70: 75:f1:13:94:92:f9:d3:6d:76:b3:b0:c2:1a:b8:99:14:59:b3: 79:7b:f7:eb:b1:39:67:74:20:1f:96:7b:61:6e:ae:c1:fa:9f: b7:5f:0d:5a:48:6c:77:54:2e:77:3c:9d:15:40:e1:da:82:48: b6:ad:a5:3f:6b:0c:15:73:b1:44:5a:20:f6:a3:e1:5c:b7:14: 89:0d:64:2d:59:63:ca:c2:56:4d:87:57:98:5b:21:eb:81:42: e4:22:97:71:97:7b:e0:4c:5e:f6:da:70:db:d2:a0:a7:97:9a: 25:7a:f6:07:24:de:c3:a8:e4:91:f2:f8:46:d5:4f:35:8b:d9: e4:cc:1d:e8:21:60:14:01:b5:a2:10:d9:7a:a6:f2:83:ff:a8: 52:48:48:87:fb:12:9f:e4:51:8d:c5:db:c1:d3:1a:3c:14:86: 78:f4:c1:ba:31:2e:21:34:fe:d2:44:85:c2:af:74:71:17:c2: 20:c3:77:c9:5a:f0:f5:aa:81:e6:88:33:ec:06:61:d6:92:aa: 34:7f:cf:35:39:e2:a5:cd:36:df:79:d7:7e:e2:80:ef:ed:a4: 6e:d6:7b:75:fe:67:84:a4:3f:0d:24:59:df:a6:74:be:6a:6c: 61:04:78:e7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcGatW72HVkZKbSlOW5axgXodD1AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTAxMDAwMDAwWhcNMjQxMjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjE0MGEzYTcxMTJlYzhjZmFjNGJmMDc0M2NlYjgyY2Q5 ZjgyY2QyNTliYjk5MWUxZGRiZmYxZTE4NDYwZTIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUwIgREb7gPcGyZBTdvh+QjRqRiA1ii1Ob5LIRmoUdP34C uGD5s9JCrWv3ZtgmQIfoLysha4xOqojFyOX1mFq5h8LERsmnXyIyixyu7AJfYGli qBmVzJyBPWilq/D6vtGXNjsq1ocwpKYvo+OTQkVHZRdopdjR37w2vlhKxvbTGfBK /1bnQdUZLwgjNMQ5pY4u35ba2q0jPHU9q81N3EkyFDqe9SCO0JcrickkhWuDFDj3 4qz7gfN2ysRdDw0/66Zy7O8B0mx4BHhigFj1RmyOjyyF31C069yNv1K2lkWChp21 oAbSSmeJEuTE+HAAJ6WCcrUcVfnnMcnhKKXaC8mrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUoQZ2p3RamSzFdgzo6qVnwfb5kqowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU4OTlkZTczLTQ5OWQtNDFhNS1iZDdiLTM3ZDgzNTJiNzg1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCq3TANBgkqhkiG9w0BAQsFAAOCAQEAj10ZVmPHpGI6PEfF5olat55wdfET lJL50212s7DCGriZFFmzeXv367E5Z3QgH5Z7YW6uwfqft18NWkhsd1QudzydFUDh 2oJItq2lP2sMFXOxRFog9qPhXLcUiQ1kLVljysJWTYdXmFsh64FC5CKXcZd74Exe 9tpw29Kgp5eaJXr2ByTew6jkkfL4RtVPNYvZ5Mwd6CFgFAG1ohDZeqbyg/+oUkhI h/sSn+RRjcXbwdMaPBSGePTBujEuITT+0kSFwq90cRfCIMN3yVrw9aqB5ogz7AZh 1pKqNH/PNTnipc0233nXfuKA7+2kbtZ7df5nhKQ/DSRZ36Z0vmpsYQR45w== -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:02 2024 by rpki-client on console-fra.rpki-client.org