$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/609fa24c-7d83-45d2-adba-cfff9dee3eb8.roa File: 609fa24c-7d83-45d2-adba-cfff9dee3eb8.roa (raw, json) Hash identifier: DwFktPSxWL9cajMSzx68fdI2ljysXuV5uZWvDNxCEgY= Subject key identifier: E2:A3:E4:ED:15:07:5D:87:21:04:55:C8:D2:24:8B:FC:70:8F:3A:22 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7AC5844F138501238088229BFD05118A8F61A426 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/609fa24c-7d83-45d2-adba-cfff9dee3eb8.roa Signing time: Tue 17 Sep 2024 00:00:00 +0000 ROA not before: Tue 17 Sep 2024 00:00:00 +0000 ROA not after: Tue 22 Oct 2024 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c5:84:4f:13:85:01:23:80:88:22:9b:fd:05:11:8a:8f:61:a4:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 17 00:00:00 2024 GMT Not After : Oct 22 23:59:59 2024 GMT Subject: serialNumber=3a70f236ece73d219e7443a2eab49508035ea4ce01dd71727d2eca5609a762ed, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:2f:ea:aa:ed:eb:fe:3d:95:05:d8:28:81:a7: ba:ad:c2:1f:6c:9d:94:cf:8e:88:0b:fc:9b:60:7d: 9a:83:1f:7d:88:5a:03:f9:dc:ac:bc:db:15:98:36: ea:6a:b0:53:37:d2:27:95:47:dc:08:ee:46:25:94: e0:0c:65:09:b4:84:83:0b:1a:75:69:6e:ae:56:ac: d7:8f:17:a4:56:a3:53:79:47:07:46:27:ae:43:e0: 58:1f:e9:43:a8:0f:4b:46:b7:4d:8b:58:fe:30:d3: 9e:17:ee:5f:2d:2c:7f:38:7a:c4:3e:18:ed:4f:a8: d9:ea:b2:7e:1d:61:7e:64:1c:8e:a0:09:57:95:63: f9:72:8f:71:d3:6a:39:e7:3b:e2:c7:f9:0b:b0:dc: 42:5a:38:0e:c9:7c:cf:36:5f:7b:0e:db:57:30:ae: 36:e0:85:41:58:ae:2e:99:35:fc:47:78:73:67:13: a8:a5:52:95:7d:8e:27:1c:fd:4a:9c:7a:15:a6:1c: f4:b7:95:76:d4:bc:4a:35:6e:fa:8c:5b:76:77:99: 4f:fe:fe:1d:b4:16:21:e7:45:f3:14:8f:ca:53:aa: 88:35:ab:59:bf:fe:32:f7:08:5f:08:95:e1:9e:6c: 31:b0:20:0e:00:6d:db:2f:c3:4c:08:84:42:87:51: 55:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A3:E4:ED:15:07:5D:87:21:04:55:C8:D2:24:8B:FC:70:8F:3A:22 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/609fa24c-7d83-45d2-adba-cfff9dee3eb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.152.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:08:2a:fe:d8:9e:9e:7a:0a:84:f7:f1:e8:26:21:2a:f2:9e: 28:9e:d8:b7:c4:0e:8f:4a:39:13:2e:8e:bf:b5:7d:bf:73:53: ce:c5:85:ff:6e:08:24:e1:36:0b:4e:67:a2:3b:53:a9:ed:11: dd:a5:3c:9b:22:9c:68:fd:0c:2d:36:7b:fe:a9:ee:92:c3:ca: 38:f2:b6:12:27:d1:69:9a:60:4d:57:43:c4:18:5a:a0:61:71: a7:a1:4d:b5:b7:0e:1b:1b:ef:09:e5:58:36:65:e7:58:02:2a: 14:cd:a3:2a:a8:d4:f4:b1:83:72:40:35:d4:a0:7c:52:d1:28: 88:a8:59:0d:b9:88:32:40:6e:66:8e:8e:c9:7c:bd:86:17:e3: 5a:29:fc:bd:ef:c8:3c:06:44:24:3f:d0:80:b7:ad:95:ba:a5: 50:d2:01:03:fe:9d:29:b3:19:9e:31:3d:90:80:87:e6:cf:d9: e9:b2:86:d3:85:58:53:67:39:57:c6:30:23:75:1a:90:d9:63: 87:f6:60:c4:12:34:a9:95:35:28:4f:ef:4a:48:48:2f:70:1a: 65:ef:74:13:73:21:cb:3d:82:be:05:fd:3e:27:25:c6:5b:1d: 26:f8:2e:57:5b:9c:96:b8:ab:43:32:7d:64:21:8c:52:7a:72: 51:4f:e5:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUesWETxOFASOAiCKb/QURio9hpCYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwOTE3MDAwMDAwWhcNMjQxMDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTcwZjIzNmVjZTczZDIxOWU3NDQzYTJlYWI0OTUwODAz NWVhNGNlMDFkZDcxNzI3ZDJlY2E1NjA5YTc2MmVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD2L+qq7ev+PZUF2CiBp7qtwh9snZTPjogL/JtgfZqDH32I WgP53Ky82xWYNupqsFM30ieVR9wI7kYllOAMZQm0hIMLGnVpbq5WrNePF6RWo1N5 RwdGJ65D4Fgf6UOoD0tGt02LWP4w054X7l8tLH84esQ+GO1PqNnqsn4dYX5kHI6g CVeVY/lyj3HTajnnO+LH+Quw3EJaOA7JfM82X3sO21cwrjbghUFYri6ZNfxHeHNn E6ilUpV9jicc/UqcehWmHPS3lXbUvEo1bvqMW3Z3mU/+/h20FiHnRfMUj8pTqog1 q1m//jL3CF8IleGebDGwIA4Abdsvw0wIhEKHUVV5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4qPk7RUHXYchBFXI0iSL/HCPOiIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYwOWZhMjRjLTdkODMtNDVkMi1hZGJhLWNmZmY5ZGVlM2ViOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFM35gwDQYJKoZIhvcNAQELBQADggEBAEoIKv7Ynp56CoT38egmISryniie 2LfEDo9KORMujr+1fb9zU87Fhf9uCCThNgtOZ6I7U6ntEd2lPJsinGj9DC02e/6p 7pLDyjjythIn0WmaYE1XQ8QYWqBhcaehTbW3Dhsb7wnlWDZl51gCKhTNoyqo1PSx g3JANdSgfFLRKIioWQ25iDJAbmaOjsl8vYYX41op/L3vyDwGRCQ/0IC3rZW6pVDS AQP+nSmzGZ4xPZCAh+bP2emyhtOFWFNnOVfGMCN1GpDZY4f2YMQSNKmVNShP70pI SC9wGmXvdBNzIcs9gr4F/T4nJcZbHSb4LldbnJa4q0MyfWQhjFJ6clFP5R4= -----END CERTIFICATE-----Generated at Fri Sep 20 01:21:30 2024 by rpki-client on console-ams.rpki-client.org