$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/634e4c18-756f-434d-b58c-0c6f036067f6.roa File: 634e4c18-756f-434d-b58c-0c6f036067f6.roa (raw, json) Hash identifier: 8IVOeRN6c+dmGu3DLkB5tHjXvwx8Dhs90tONIxISoGw= Subject key identifier: A4:10:70:77:37:73:94:39:76:F9:D5:35:5C:21:DA:86:EE:F1:29:35 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3E56597AD1CD0927F547B00DA3F2E0D2D7D540A1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/634e4c18-756f-434d-b58c-0c6f036067f6.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 162.250.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:56:59:7a:d1:cd:09:27:f5:47:b0:0d:a3:f2:e0:d2:d7:d5:40:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=1c06aca61469eae09cef68c6317e4c92451441f92c9a59a0580ec436134298f3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:74:f6:11:ac:79:1b:a9:8a:77:15:56:1b:85: 2d:8a:df:d0:90:db:2d:68:ef:4c:ec:8d:90:18:6e: 7d:ed:9b:7e:1b:96:98:c0:1e:73:6d:a9:e2:6e:3e: 17:95:77:7e:f6:b4:0d:36:37:4d:77:6a:cc:2f:b8: 8b:91:9d:06:93:fb:dc:57:9c:e8:1b:b5:14:62:86: 6e:0d:04:b9:13:21:85:d8:de:d9:aa:f4:00:a0:a0: 46:7d:c0:fa:2d:c1:30:55:bd:32:49:22:bd:c0:d1: 02:cc:1e:1d:7e:0a:36:11:83:16:06:da:a5:87:89: 19:29:73:74:dd:d5:e7:be:e0:cd:ca:d9:1c:06:71: eb:8d:b3:83:c8:cc:ab:25:d6:93:35:02:5b:77:ef: b8:ff:f5:09:75:b1:9c:32:63:d0:e7:1a:af:5f:da: 9e:a7:2f:a7:f8:3c:a1:37:ca:1c:18:aa:14:ce:2f: 41:73:20:cf:d8:31:db:83:c3:3a:11:2c:21:06:f4: 97:84:b7:97:80:88:59:4c:1e:21:40:37:76:ea:20: 38:01:de:3b:c7:b0:1b:0b:cb:e9:bd:7c:40:e8:d6: a2:86:e7:63:49:74:a0:fd:57:e6:23:34:61:d7:fe: d8:54:5c:bf:6c:8b:ea:68:b8:74:c7:63:b9:c9:42: f6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:10:70:77:37:73:94:39:76:F9:D5:35:5C:21:DA:86:EE:F1:29:35 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/634e4c18-756f-434d-b58c-0c6f036067f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.250.236.0/24 Signature Algorithm: sha256WithRSAEncryption bb:e7:93:21:ca:70:5a:2b:5b:3f:91:66:20:e8:26:af:db:a5: c9:bf:9b:e1:af:2a:8e:5e:d3:27:a5:9e:7e:5d:19:74:15:e5: b5:55:1f:81:d4:48:96:94:2b:8c:91:c3:35:aa:f2:d3:ec:a3: 24:8d:a5:bc:45:40:fe:3c:a2:29:04:09:af:4f:96:b9:5b:58: 7d:e3:ec:76:88:de:27:5d:ea:f8:40:d2:a4:bf:6e:de:10:77: fc:23:6b:e5:3f:b8:d9:b7:24:08:af:dc:d7:6c:67:1c:16:a1: f1:9c:d6:00:f9:20:af:52:0f:58:52:d9:8b:86:7e:d7:05:2f: 3e:de:c6:ba:b8:80:07:bb:84:56:8a:e9:ea:c1:38:0d:11:d6: 23:ba:ff:4e:21:c1:09:d1:a4:54:ee:eb:cf:13:f2:ec:50:34: e7:6d:1c:a4:41:ad:22:92:f6:fd:7e:c1:8f:95:6f:f3:74:0b: 1a:b2:00:1e:62:05:c7:81:30:b5:5e:f2:c8:c6:07:8a:34:30: c5:b4:fd:e6:ac:8c:9e:b2:bc:82:8c:28:6c:76:bb:de:96:28: 1c:49:94:33:71:ce:d2:a6:37:e1:d4:b7:23:b9:dc:8c:76:ba: c7:b0:c6:a6:f5:cc:05:84:0f:24:f4:81:3c:6f:0f:46:18:32: 5a:6a:cb:ea -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPlZZetHNCSf1R7ANo/Lg0tfVQKEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYzA2YWNhNjE0NjllYWUwOWNlZjY4YzYzMTdlNGM5MjQ1 MTQ0MWY5MmM5YTU5YTA1ODBlYzQzNjEzNDI5OGYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDidPYRrHkbqYp3FVYbhS2K39CQ2y1o70zsjZAYbn3tm34b lpjAHnNtqeJuPheVd372tA02N013aswvuIuRnQaT+9xXnOgbtRRihm4NBLkTIYXY 3tmq9ACgoEZ9wPotwTBVvTJJIr3A0QLMHh1+CjYRgxYG2qWHiRkpc3Td1ee+4M3K 2RwGceuNs4PIzKsl1pM1Alt377j/9Ql1sZwyY9DnGq9f2p6nL6f4PKE3yhwYqhTO L0FzIM/YMduDwzoRLCEG9JeEt5eAiFlMHiFAN3bqIDgB3jvHsBsLy+m9fEDo1qKG 52NJdKD9V+YjNGHX/thUXL9si+pouHTHY7nJQva/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpBBwdzdzlDl2+dU1XCHahu7xKTUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYzNGU0YzE4LTc1NmYtNDM0ZC1iNThjLTBjNmYwMzYwNjdmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACi+uwwDQYJKoZIhvcNAQELBQADggEBALvnkyHKcForWz+RZiDoJq/bpcm/ m+GvKo5e0yelnn5dGXQV5bVVH4HUSJaUK4yRwzWq8tPsoySNpbxFQP48oikECa9P lrlbWH3j7HaI3idd6vhA0qS/bt4Qd/wja+U/uNm3JAiv3NdsZxwWofGc1gD5IK9S D1hS2YuGftcFLz7exrq4gAe7hFaK6erBOA0R1iO6/04hwQnRpFTu688T8uxQNOdt HKRBrSKS9v1+wY+Vb/N0CxqyAB5iBceBMLVe8sjGB4o0MMW0/easjJ6yvIKMKGx2 u96WKBxJlDNxztKmN+HUtyO53Ix2usewxqb1zAWEDyT0gTxvD0YYMlpqy+o= -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:05 2024 by rpki-client on console-fra.rpki-client.org