$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65ea5659-de11-4298-b883-50f0cfe1b7e4.roa File: 65ea5659-de11-4298-b883-50f0cfe1b7e4.roa (raw, json) Hash identifier: H8REi/0PnhVCrWzamGSzAqWnIrYlwNZY7iqyTy33crY= Subject key identifier: 40:A3:6B:27:61:C9:B3:D8:B5:94:AE:F9:24:CA:B8:5E:0F:D9:48:8B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4DA5EEEE5016564D037538E116A061A4639A142E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65ea5659-de11-4298-b883-50f0cfe1b7e4.roa Signing time: Mon 02 Dec 2024 00:00:00 +0000 ROA not before: Mon 02 Dec 2024 00:00:00 +0000 ROA not after: Mon 06 Jan 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.179.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a5:ee:ee:50:16:56:4d:03:75:38:e1:16:a0:61:a4:63:9a:14:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 2 00:00:00 2024 GMT Not After : Jan 6 23:59:59 2025 GMT Subject: serialNumber=66b2fe7a73193008d807169db32d4304cae81996444a4f3936659462f1f5f66d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:74:7d:f5:4a:73:70:27:c6:3c:74:c3:88:ed: 73:77:7b:73:37:35:35:b5:e1:8f:a3:cc:54:96:56: 5e:37:bc:ad:62:80:d3:1b:a3:71:f6:62:42:9e:ea: cd:34:c8:d4:8e:3d:11:cb:ce:1e:ed:cb:2d:19:98: 33:59:9f:01:b7:9d:54:4c:f4:89:a2:84:32:a6:59: c5:2a:ca:ec:dc:80:70:30:9e:48:60:25:b7:d0:4a: 54:39:19:e5:55:f0:3c:60:65:d4:3f:e2:6b:8d:f4: 2f:1d:e3:6c:a7:38:28:10:04:09:dc:4e:f9:32:9c: 3a:c2:50:b4:a2:e5:8b:0c:ae:de:1b:ba:67:f1:4e: b2:a7:fd:f7:d7:04:0e:ec:26:7f:e8:21:7f:5f:10: ce:98:76:fb:db:9c:e9:5c:bb:8a:aa:c1:9c:2b:47: 0c:98:8c:2e:25:15:1e:be:35:d2:96:df:9c:91:b8: 02:e6:06:5a:fd:a2:58:51:6a:73:c0:f8:ff:1e:27: 9e:a6:b1:72:fe:75:f5:c5:9a:9a:05:f1:a3:4f:a1: 34:29:75:8a:bd:0e:83:22:55:f7:5d:bd:e1:5c:8d: 5b:ab:6b:e1:5d:34:89:bd:99:77:9e:cf:97:ce:83: 51:68:9c:12:ca:bf:80:7c:4d:ff:45:18:00:7b:d9: fa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A3:6B:27:61:C9:B3:D8:B5:94:AE:F9:24:CA:B8:5E:0F:D9:48:8B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65ea5659-de11-4298-b883-50f0cfe1b7e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.179.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4d:e6:fc:ce:76:df:23:ef:88:02:e3:28:09:60:2e:b4:bc:57: 89:c2:a1:38:67:0f:a7:cd:06:f2:0a:d5:d2:99:4c:7e:bd:58: 0a:e1:bd:3c:85:ca:15:41:8b:36:9a:67:4a:71:37:8f:d9:88: 99:2c:a2:63:41:bd:98:a2:28:53:79:37:a5:b5:cf:42:c0:bb: 4b:82:34:10:cc:d2:6f:5b:a8:4b:84:89:91:6e:ac:73:bb:01: 5e:ba:44:1a:7e:22:a3:21:a4:88:0b:47:a2:6e:6f:7e:ed:ee: 73:a7:1d:46:dd:37:18:0a:93:cd:ef:4b:3c:fe:b5:a1:c8:22: f2:ca:f5:bb:7b:58:82:b4:be:1f:cd:ac:dd:8d:6a:6d:97:08: a9:96:a3:50:59:eb:b1:41:e3:c9:9f:57:8e:fe:4f:c5:15:bb: dc:fd:61:8f:ac:cd:1e:70:a8:d9:57:99:94:4f:f1:e8:ea:3b: d8:65:ca:be:74:03:e3:8f:8c:2a:7c:9a:11:5c:d5:97:cc:d5: 81:cd:aa:18:85:37:0f:55:fd:d2:85:ee:67:0e:c0:08:79:e3: 60:c3:4f:4b:66:5b:82:98:26:87:1e:b5:54:d0:1a:7c:a9:0b: 5c:a6:89:2b:69:5e:cc:74:40:0e:7e:d8:fa:17:08:dc:e4:a3: bd:cf:93:23 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTaXu7lAWVk0DdTjhFqBhpGOaFC4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjAyMDAwMDAwWhcNMjUwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NmIyZmU3YTczMTkzMDA4ZDgwNzE2OWRiMzJkNDMwNGNh ZTgxOTk2NDQ0YTRmMzkzNjY1OTQ2MmYxZjVmNjZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLdH31SnNwJ8Y8dMOI7XN3e3M3NTW14Y+jzFSWVl43vK1i gNMbo3H2YkKe6s00yNSOPRHLzh7tyy0ZmDNZnwG3nVRM9ImihDKmWcUqyuzcgHAw nkhgJbfQSlQ5GeVV8DxgZdQ/4muN9C8d42ynOCgQBAncTvkynDrCULSi5YsMrt4b umfxTrKn/ffXBA7sJn/oIX9fEM6YdvvbnOlcu4qqwZwrRwyYjC4lFR6+NdKW35yR uALmBlr9olhRanPA+P8eJ56msXL+dfXFmpoF8aNPoTQpdYq9DoMiVfddveFcjVur a+FdNIm9mXeez5fOg1FonBLKv4B8Tf9FGAB72fpNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQKNrJ2HJs9i1lK75JMq4Xg/ZSIswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY1ZWE1NjU5LWRlMTEtNDI5OC1iODgzLTUwZjBjZmUxYjdlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAoszANBgkqhkiG9w0BAQsFAAOCAQEATeb8znbfI++IAuMoCWAutLxXicKh OGcPp80G8grV0plMfr1YCuG9PIXKFUGLNppnSnE3j9mImSyiY0G9mKIoU3k3pbXP QsC7S4I0EMzSb1uoS4SJkW6sc7sBXrpEGn4ioyGkiAtHom5vfu3uc6cdRt03GAqT ze9LPP61ocgi8sr1u3tYgrS+H82s3Y1qbZcIqZajUFnrsUHjyZ9Xjv5PxRW73P1h j6zNHnCo2VeZlE/x6Oo72GXKvnQD44+MKnyaEVzVl8zVgc2qGIU3D1X90oXuZw7A CHnjYMNPS2Zbgpgmhx61VNAafKkLXKaJK2lezHRADn7Y+hcI3OSjvc+TIw== -----END CERTIFICATE-----Generated at Tue Dec 10 06:25:27 2024 by rpki-client on console-ams.rpki-client.org