$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/645b181c-01c6-4f09-949d-63486cd5bbf8.roa File: 645b181c-01c6-4f09-949d-63486cd5bbf8.roa (raw, json) Hash identifier: 1XltXIwxoaCwO95KLQBBTU/LLqU4Unw8+HDpMQIVZ84= Subject key identifier: A6:DD:C4:04:69:1B:59:3E:AF:FB:CE:04:5D:9C:9B:FB:83:F4:E3:4D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5AFAAA4F394562E95A221DFDBB26B2C5AA94D53F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/645b181c-01c6-4f09-949d-63486cd5bbf8.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:fa:aa:4f:39:45:62:e9:5a:22:1d:fd:bb:26:b2:c5:aa:94:d5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=21998aee9e3b1c73eac764e5a5588d4f5200ca41dd2e0c16dbd0b80623c2dba1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a6:35:87:49:6f:85:4f:c6:eb:1c:67:66:e3: 6d:d0:cd:bf:ac:f3:79:4d:56:3b:0b:be:ef:fd:35: b2:17:af:f6:cf:22:da:fc:fd:78:2a:98:c2:57:21: 02:8a:e1:b0:c7:4e:85:97:23:df:c2:30:ce:f1:9d: 76:e5:16:41:b5:d2:01:c2:9b:03:73:e1:f4:e6:53: f3:f2:72:5b:fd:4e:f0:23:69:6b:ee:cc:3d:e9:ac: 44:36:fb:2b:c5:b9:37:5c:6b:04:74:78:af:30:fe: c3:9e:11:65:88:6d:db:ae:b7:b2:4a:0e:40:07:f1: 57:74:68:d9:71:f9:26:87:62:13:80:51:aa:52:a2: a1:1b:11:9a:ec:a3:73:a1:bd:d3:9b:8a:48:00:61: 13:e9:03:9a:20:e0:bb:ef:6e:5a:9d:f5:36:01:8c: 73:75:85:5f:13:7f:c0:5d:25:9f:ca:23:05:7a:81: 56:47:58:e7:e2:b7:bc:2c:14:8d:bc:3d:55:87:97: 98:0b:af:86:45:a0:99:2e:86:81:af:57:c1:2e:0e: 65:19:d5:36:a7:a6:3c:a7:e1:a1:ec:30:8d:db:d1: 78:13:5c:87:37:8e:60:f6:5b:44:47:9a:5e:f4:61: e7:02:c8:8f:a1:2d:df:db:73:1c:b9:44:11:33:8c: cf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DD:C4:04:69:1B:59:3E:AF:FB:CE:04:5D:9C:9B:FB:83:F4:E3:4D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/645b181c-01c6-4f09-949d-63486cd5bbf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.186.0/23 Signature Algorithm: sha256WithRSAEncryption 82:5f:fc:47:78:d9:81:f7:32:df:4a:01:b9:23:88:0f:ec:e5: f2:ab:e0:b6:77:90:9e:b5:67:e0:75:89:da:cd:0c:73:cf:d9: 7b:39:5f:30:7d:00:5e:dc:54:a7:bc:07:65:89:63:ee:2f:44: 28:da:5e:99:72:3e:0b:9a:c7:32:33:77:cb:08:47:a2:d7:24: 71:d6:6b:b7:ad:96:20:55:b4:04:12:2f:b9:3e:6a:ae:cd:04: 47:57:35:45:bc:64:3a:76:6f:fd:1f:25:72:48:e7:94:3b:64: de:8c:64:52:e4:aa:ef:26:d8:e1:1b:21:53:f3:7e:40:90:16: ac:45:9d:25:2f:84:9d:91:ef:b0:31:05:fb:7f:96:87:5b:71: e9:7f:64:d1:4a:3b:a6:d8:ef:a4:fb:5b:be:c6:f5:25:64:67: 6f:3e:60:b1:70:1c:31:84:a3:0c:b9:db:06:c6:e3:db:fd:aa: 99:fc:a8:a0:e5:44:8e:c0:84:95:30:8c:0e:29:de:5f:6a:6d: c3:9a:73:0c:fb:b9:19:2c:15:25:f3:25:04:25:80:80:4b:62: 11:19:ff:5a:88:c5:a9:e2:bb:50:e6:30:90:df:30:75:76:cc: e3:d7:27:b9:7d:eb:2f:98:e3:34:13:2b:41:f2:5f:1b:aa:6b: 98:a3:d8:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWvqqTzlFYulaIh39uyayxaqU1T8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTk5OGFlZTllM2IxYzczZWFjNzY0ZTVhNTU4OGQ0ZjUy MDBjYTQxZGQyZTBjMTZkYmQwYjgwNjIzYzJkYmExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxpjWHSW+FT8brHGdm423Qzb+s83lNVjsLvu/9NbIXr/bP Itr8/XgqmMJXIQKK4bDHToWXI9/CMM7xnXblFkG10gHCmwNz4fTmU/Pyclv9TvAj aWvuzD3prEQ2+yvFuTdcawR0eK8w/sOeEWWIbduut7JKDkAH8Vd0aNlx+SaHYhOA UapSoqEbEZrso3OhvdObikgAYRPpA5og4Lvvblqd9TYBjHN1hV8Tf8BdJZ/KIwV6 gVZHWOfit7wsFI28PVWHl5gLr4ZFoJkuhoGvV8EuDmUZ1Tanpjyn4aHsMI3b0XgT XIc3jmD2W0RHml70YecCyI+hLd/bcxy5RBEzjM/rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpt3EBGkbWT6v+84EXZyb+4P0400wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY0NWIxODFjLTAxYzYtNGYwOS05NDlkLTYzNDg2Y2Q1YmJmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjl7owDQYJKoZIhvcNAQELBQADggEBAIJf/Ed42YH3Mt9KAbkjiA/s5fKr 4LZ3kJ61Z+B1idrNDHPP2Xs5XzB9AF7cVKe8B2WJY+4vRCjaXplyPguaxzIzd8sI R6LXJHHWa7etliBVtAQSL7k+aq7NBEdXNUW8ZDp2b/0fJXJI55Q7ZN6MZFLkqu8m 2OEbIVPzfkCQFqxFnSUvhJ2R77AxBft/lodbcel/ZNFKO6bY76T7W77G9SVkZ28+ YLFwHDGEowy52wbG49v9qpn8qKDlRI7AhJUwjA4p3l9qbcOacwz7uRksFSXzJQQl gIBLYhEZ/1qIxaniu1DmMJDfMHV2zOPXJ7l96y+Y4zQTK0HyXxuqa5ij2J8= -----END CERTIFICATE-----Generated at Fri Nov 22 01:34:06 2024 by rpki-client on console-ams.rpki-client.org