$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca6bffe-b0c2-452a-ba04-285ef047a139.roa File: 5ca6bffe-b0c2-452a-ba04-285ef047a139.roa (raw, json) Hash identifier: 2xPasL0IEgAYzDYWjFLpCw+QsISjuO0ld0aRSualK8U= Subject key identifier: A1:2A:95:5C:13:67:F4:2D:0C:46:AC:4B:E0:8B:C9:B9:51:82:62:0C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54C6B333A6895DCF7E95EA6593CB95143A1E400B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca6bffe-b0c2-452a-ba04-285ef047a139.roa Signing time: Tue 03 Dec 2024 00:00:00 +0000 ROA not before: Tue 03 Dec 2024 00:00:00 +0000 ROA not after: Tue 07 Jan 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.49.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:c6:b3:33:a6:89:5d:cf:7e:95:ea:65:93:cb:95:14:3a:1e:40:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 3 00:00:00 2024 GMT Not After : Jan 7 23:59:59 2025 GMT Subject: serialNumber=76a204dcc7026fceb257670895f10121756db7e9985b27e8ab820781e5859f3a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f2:cc:f5:b1:68:c1:4a:16:3f:80:3c:35:05: 07:20:1f:6b:65:f1:0c:b0:ef:e4:de:5e:68:cb:48: 0b:08:38:98:10:63:44:ec:ec:ab:c0:5e:59:55:d3: d8:c7:8c:6e:9e:a1:f3:7c:8f:48:d3:7a:88:af:41: a0:de:a9:4c:f7:d3:7a:a6:cc:e4:c5:9e:26:a6:2e: 09:f9:d4:ae:e2:69:62:a3:cd:46:64:52:99:1c:0e: 28:3f:00:5f:7c:ba:94:f2:b1:e3:44:5d:63:e5:6c: 3d:a2:43:0f:4b:3b:71:2d:9d:88:c5:40:50:5b:00: 45:e0:f3:cc:b7:ea:a5:7e:4a:8e:27:98:f8:f3:7c: 77:96:69:5a:fd:11:3d:a1:53:d0:bb:8d:e6:d9:e3: 9d:5b:db:ed:eb:bb:21:d9:35:31:56:6f:7d:e6:f1: 27:60:c5:f3:39:e6:5a:76:c7:4e:e9:d4:9c:1c:6f: d1:87:fa:6b:80:24:cd:07:db:7d:1f:29:99:fe:03: c4:74:14:39:9b:2c:25:56:8a:e8:58:ab:f2:fb:20: 39:5e:2e:83:46:ac:a2:50:30:7e:ca:b9:ee:1e:e4: ff:06:17:84:af:83:ee:9c:1e:f1:dc:35:50:ac:e3: 89:77:ed:b7:11:12:2e:30:1a:45:75:34:a4:e5:7c: 17:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2A:95:5C:13:67:F4:2D:0C:46:AC:4B:E0:8B:C9:B9:51:82:62:0C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca6bffe-b0c2-452a-ba04-285ef047a139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.49.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8e:25:b3:fb:15:5b:6f:3f:97:e3:74:19:57:07:96:47:20:07: ad:ce:e0:0d:d2:d6:1e:4d:f5:7c:0e:1f:46:a1:71:73:0e:96: 8a:f8:02:a1:10:f0:9e:a4:78:c1:cd:15:72:92:f4:67:28:ff: c1:c7:84:8d:66:85:8f:c5:c2:74:a4:b5:47:5c:04:44:43:8f: 42:47:87:bd:53:6f:2e:95:53:31:70:3f:8b:f7:9e:49:ab:b2: f0:06:6a:69:a3:29:bb:76:53:ea:ab:59:58:25:51:e6:38:96: e1:38:bb:0c:b0:ab:08:03:e0:fe:90:69:6d:3d:d3:13:24:67: 12:95:93:f9:21:b9:48:20:34:99:37:99:89:57:73:eb:fd:f3: 29:f3:14:71:13:e4:3f:5e:6f:52:cc:25:84:57:c0:4f:93:87: 58:58:0f:19:32:75:d5:b3:a7:68:3b:64:3b:82:7c:fb:fd:8e: 08:24:fd:6a:9e:4e:84:29:54:c7:25:63:02:ed:68:90:e4:0f: 5d:dc:ad:a0:79:17:8d:d9:cb:a4:75:a6:98:de:39:9c:d3:ab: 32:e8:36:af:90:af:4c:d4:b1:88:a1:c0:d3:c5:a5:fe:41:55: 55:79:e7:53:ce:d9:1a:d0:05:a3:80:81:5a:79:c6:40:47:92: ea:91:ea:f1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVMazM6aJXc9+leplk8uVFDoeQAswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjAzMDAwMDAwWhcNMjUwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NmEyMDRkY2M3MDI2ZmNlYjI1NzY3MDg5NWYxMDEyMTc1 NmRiN2U5OTg1YjI3ZThhYjgyMDc4MWU1ODU5ZjNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCV8sz1sWjBShY/gDw1BQcgH2tl8Qyw7+TeXmjLSAsIOJgQ Y0Ts7KvAXllV09jHjG6eofN8j0jTeoivQaDeqUz303qmzOTFniamLgn51K7iaWKj zUZkUpkcDig/AF98upTyseNEXWPlbD2iQw9LO3EtnYjFQFBbAEXg88y36qV+So4n mPjzfHeWaVr9ET2hU9C7jebZ451b2+3ruyHZNTFWb33m8SdgxfM55lp2x07p1Jwc b9GH+muAJM0H230fKZn+A8R0FDmbLCVWiuhYq/L7IDleLoNGrKJQMH7Kue4e5P8G F4Svg+6cHvHcNVCs44l37bcREi4wGkV1NKTlfBfhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUoSqVXBNn9C0MRqxL4IvJuVGCYgwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVjYTZiZmZlLWIwYzItNDUyYS1iYTA0LTI4NWVmMDQ3YTEzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4MTANBgkqhkiG9w0BAQsFAAOCAQEAjiWz+xVbbz+X43QZVweWRyAHrc7g DdLWHk31fA4fRqFxcw6WivgCoRDwnqR4wc0VcpL0Zyj/wceEjWaFj8XCdKS1R1wE REOPQkeHvVNvLpVTMXA/i/eeSauy8AZqaaMpu3ZT6qtZWCVR5jiW4Ti7DLCrCAPg /pBpbT3TEyRnEpWT+SG5SCA0mTeZiVdz6/3zKfMUcRPkP15vUswlhFfAT5OHWFgP GTJ11bOnaDtkO4J8+/2OCCT9ap5OhClUxyVjAu1okOQPXdytoHkXjdnLpHWmmN45 nNOrMug2r5CvTNSxiKHA08Wl/kFVVXnnU87ZGtAFo4CBWnnGQEeS6pHq8Q== -----END CERTIFICATE-----Generated at Tue Dec 10 06:55:35 2024 by rpki-client on console-fra.rpki-client.org