$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d248939-476e-44d3-9a60-eacb49f61a51.roa File: 5d248939-476e-44d3-9a60-eacb49f61a51.roa (raw, json) Hash identifier: KlfhIgS1zuAlk/n2XbdfbFYke0JguVQekFDcKAN08hY= Subject key identifier: DA:FE:0F:31:67:75:C4:5F:30:26:18:33:8E:62:4E:16:70:F6:89:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2C13CFD558CC5B3762DFB60E08A8833175B652EE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d248939-476e-44d3-9a60-eacb49f61a51.roa Signing time: Tue 12 Nov 2024 00:00:00 +0000 ROA not before: Tue 12 Nov 2024 00:00:00 +0000 ROA not after: Tue 17 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 216.212.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:13:cf:d5:58:cc:5b:37:62:df:b6:0e:08:a8:83:31:75:b6:52:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 12 00:00:00 2024 GMT Not After : Dec 17 23:59:59 2024 GMT Subject: serialNumber=57592f93794a2ab93ddc90287bd49c773241dc80eecea7ce43b357af1ff09edb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fa:8b:79:3b:be:fd:fd:fa:53:df:f4:c5:e1: b7:e1:c0:b4:e7:5c:d9:a2:10:02:9d:47:8e:3c:c1: fa:82:4f:a6:ac:24:3d:1c:1e:fe:f2:fe:69:85:a2: 8d:f9:37:0a:b0:ff:11:af:d6:0f:1f:0c:8e:4c:24: a9:a8:b2:83:33:68:f0:fa:86:d2:2a:ce:d3:5e:a7: f6:f2:5a:81:6d:67:ea:90:3b:45:40:c5:21:ab:ba: 2c:d8:4f:75:44:e7:f9:19:c6:33:3b:04:16:79:c7: 0e:b2:00:ac:51:92:cf:46:b2:6e:ba:ec:3f:fd:10: cb:5f:d0:de:e1:43:24:d6:c9:71:4c:d8:5e:6c:6f: 5f:bf:37:37:d3:68:c7:7f:18:06:a5:af:65:f1:61: 10:5e:fb:f0:ba:76:d6:21:c5:8e:fa:62:b7:70:d2: 5a:52:a4:23:2d:df:ce:a2:6c:3b:9a:78:a7:4d:ea: ca:ef:a5:89:3f:be:f8:f1:2a:15:2e:db:72:10:79: 8d:18:e5:85:ab:91:3a:d9:09:7d:a2:14:4f:cd:3f: d1:3c:81:b0:a5:d0:aa:80:14:41:33:ff:da:fd:00: b2:4c:7c:66:6a:6d:15:cb:92:78:76:7a:2b:67:21: d7:4a:4f:ff:3b:f7:5f:e9:4a:e8:76:b8:01:1b:f8: d5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FE:0F:31:67:75:C4:5F:30:26:18:33:8E:62:4E:16:70:F6:89:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d248939-476e-44d3-9a60-eacb49f61a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.212.128.0/18 Signature Algorithm: sha256WithRSAEncryption 07:00:11:36:a6:21:89:49:c7:00:f0:d4:6d:cb:95:c9:56:09: 7b:57:08:c1:0f:1f:61:10:42:8d:f2:e5:b7:5e:df:53:88:ae: e1:c2:4f:85:6e:9a:fd:14:f1:ab:77:34:34:fd:6d:bb:89:29: 77:4e:5f:4b:0d:ea:eb:51:f6:c5:9f:b8:f9:47:16:1a:2b:44: 7a:da:6b:12:7e:dd:6e:3c:09:92:61:6c:6f:bd:c9:55:98:7c: ea:07:37:33:5a:d1:39:a7:29:0b:01:89:26:9d:ce:90:4d:e7: db:0b:ae:a5:73:4f:bf:5c:e1:81:d4:d9:f7:4f:0d:58:58:77: a9:12:d9:94:e3:c6:5a:fa:d2:fc:3a:13:75:21:14:a3:d1:de: 92:01:86:04:ad:94:dc:9d:12:4e:22:7e:fe:25:91:54:6c:7d: 6d:8d:f1:c8:70:e3:4a:dd:7d:c2:5a:53:94:88:49:ee:f7:7c: cc:f9:2c:51:e7:c5:e4:fc:c6:1d:1c:6c:27:22:a5:f2:42:5f: 71:08:9a:07:e9:61:63:48:e5:2b:93:75:06:c8:b1:fc:4e:2a: ef:5f:b2:99:38:51:68:02:f0:f5:0f:03:3b:67:4e:4c:fe:be: 59:9e:d6:c1:f9:67:43:18:bf:91:33:6f:f8:10:b9:e6:48:9c: ca:fd:5a:ed -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULBPP1VjMWzdi37YOCKiDMXW2Uu4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTEyMDAwMDAwWhcNMjQxMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NzU5MmY5Mzc5NGEyYWI5M2RkYzkwMjg3YmQ0OWM3NzMy NDFkYzgwZWVjZWE3Y2U0M2IzNTdhZjFmZjA5ZWRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCn+ot5O779/fpT3/TF4bfhwLTnXNmiEAKdR448wfqCT6as JD0cHv7y/mmFoo35Nwqw/xGv1g8fDI5MJKmosoMzaPD6htIqztNep/byWoFtZ+qQ O0VAxSGruizYT3VE5/kZxjM7BBZ5xw6yAKxRks9Gsm667D/9EMtf0N7hQyTWyXFM 2F5sb1+/NzfTaMd/GAalr2XxYRBe+/C6dtYhxY76Yrdw0lpSpCMt386ibDuaeKdN 6srvpYk/vvjxKhUu23IQeY0Y5YWrkTrZCX2iFE/NP9E8gbCl0KqAFEEz/9r9ALJM fGZqbRXLknh2eitnIddKT/8791/pSuh2uAEb+NWvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2v4PMWd1xF8wJhgzjmJOFnD2iX4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVkMjQ4OTM5LTQ3NmUtNDRkMy05YTYwLWVhY2I0OWY2MWE1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbY1IAwDQYJKoZIhvcNAQELBQADggEBAAcAETamIYlJxwDw1G3LlclWCXtX CMEPH2EQQo3y5bde31OIruHCT4Vumv0U8at3NDT9bbuJKXdOX0sN6utR9sWfuPlH FhorRHraaxJ+3W48CZJhbG+9yVWYfOoHNzNa0TmnKQsBiSadzpBN59sLrqVzT79c 4YHU2fdPDVhYd6kS2ZTjxlr60vw6E3UhFKPR3pIBhgStlNydEk4ifv4lkVRsfW2N 8chw40rdfcJaU5SISe73fMz5LFHnxeT8xh0cbCcipfJCX3EImgfpYWNI5SuTdQbI sfxOKu9fspk4UWgC8PUPAztnTkz+vlme1sH5Z0MYv5Ezb/gQueZInMr9Wu0= -----END CERTIFICATE-----Generated at Fri Nov 22 04:02:39 2024 by rpki-client on console-ams.rpki-client.org