$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68fa6798-a1f3-4d9a-aba1-85eb4b6989f2.roa File: 68fa6798-a1f3-4d9a-aba1-85eb4b6989f2.roa (raw, json) Hash identifier: B25sfvAeQExglhw7a4lOCKfIEpeukr6TPqFNIklH1D4= Subject key identifier: 85:90:08:51:55:A8:0F:A2:77:3F:EE:97:28:6C:69:FF:C5:E1:80:5E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4091B49F44EEE6DB87CC4ED695575694D8AE2941 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68fa6798-a1f3-4d9a-aba1-85eb4b6989f2.roa Signing time: Mon 18 Nov 2024 00:00:00 +0000 ROA not before: Mon 18 Nov 2024 00:00:00 +0000 ROA not after: Mon 23 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 107.152.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:91:b4:9f:44:ee:e6:db:87:cc:4e:d6:95:57:56:94:d8:ae:29:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 18 00:00:00 2024 GMT Not After : Dec 23 23:59:59 2024 GMT Subject: serialNumber=850d56a264a4c874814e0865e9d0a277b13b3d6b9feed02dfad2d2137776d010, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5f:73:08:d5:86:49:e1:51:0a:be:37:d8:c7: d2:37:d8:10:03:1e:db:b3:eb:1d:cb:e8:da:79:5a: ac:e7:0d:ab:fd:30:9c:0f:d5:ef:fc:ce:d1:1b:c9: 57:7d:7e:d3:4b:5e:85:47:cd:3f:0f:b0:5d:82:a4: 3a:7d:09:e7:09:bc:4e:b9:fa:a9:81:ba:60:93:6c: 1e:fb:25:1b:e9:35:95:5d:5f:8a:49:80:4b:83:cd: 32:7f:ab:90:d5:d6:b5:a7:a9:05:c5:ad:78:9a:d3: d1:89:45:ac:9c:b2:1f:ec:34:37:a3:e4:f5:6e:6f: a1:9b:9f:7e:d4:5a:b6:f7:ab:1e:dd:ce:8d:21:de: bd:54:1d:29:5a:3e:86:23:ea:b9:8a:da:4d:7a:97: a0:5e:b5:99:9b:15:11:38:7d:31:cb:15:50:23:08: 4f:8c:2a:bb:3a:ba:ec:e3:f6:54:14:69:0c:dd:c0: a0:4f:1d:36:47:c6:a3:b2:db:95:4f:23:71:ba:bf: 30:b0:a2:46:0b:19:44:c6:ed:1e:09:02:68:b9:a5: 7b:ab:31:64:07:16:f3:b9:3d:62:a0:85:45:cd:73: 51:c2:1d:6b:25:61:ba:a1:5d:26:40:e6:38:fb:b6: b9:e5:c5:f8:27:5c:d7:85:0d:16:cd:a3:1f:6a:14: 30:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:90:08:51:55:A8:0F:A2:77:3F:EE:97:28:6C:69:FF:C5:E1:80:5E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68fa6798-a1f3-4d9a-aba1-85eb4b6989f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.152.128.0/22 Signature Algorithm: sha256WithRSAEncryption 51:3a:df:bb:b3:62:7f:b9:cc:62:5d:6f:1b:cd:2c:ec:ec:b3: 6d:a5:93:c2:7a:4b:ba:a2:0a:47:d6:08:10:8d:a3:11:6e:5a: a4:44:ed:2e:6e:2a:8a:71:26:c9:b6:d8:67:ae:f9:c7:de:b9: 5b:46:02:00:1c:9d:79:5a:22:5d:b7:eb:7f:e6:86:b4:fb:cb: d5:95:85:36:50:ce:fd:01:d0:9e:35:8d:5f:53:5e:51:47:93: 71:7d:36:ee:5d:01:db:ca:7f:46:31:ea:9e:c7:09:09:5f:87: bd:bd:c1:cc:28:b1:a4:58:b2:90:e0:c4:7d:da:27:59:f2:1a: bf:1b:7f:50:e0:0a:5b:33:03:d3:27:bd:d2:76:9e:90:24:b6: ba:82:45:c7:80:6b:47:27:a7:6e:dc:f0:a6:3a:57:e4:7f:31: a7:08:cb:b7:60:4c:69:4b:1e:b6:6e:fa:75:a9:72:ab:51:8c: 5a:48:51:43:a5:e1:d4:72:f2:4a:67:7e:eb:5a:4e:8c:e9:1a: 97:ce:61:3c:20:7e:26:e6:c7:14:7f:93:d9:8b:ac:dc:b5:cd: 8c:98:d1:39:3b:24:e6:ff:99:26:97:1c:e0:9d:d0:67:92:5a: 77:51:d8:ba:26:f7:af:5c:c6:39:fd:f1:37:b1:3f:6d:82:21: 0c:1a:04:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQJG0n0Tu5tuHzE7WlVdWlNiuKUEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTE4MDAwMDAwWhcNMjQxMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NTBkNTZhMjY0YTRjODc0ODE0ZTA4NjVlOWQwYTI3N2Ix M2IzZDZiOWZlZWQwMmRmYWQyZDIxMzc3NzZkMDEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoX3MI1YZJ4VEKvjfYx9I32BADHtuz6x3L6Np5WqznDav9 MJwP1e/8ztEbyVd9ftNLXoVHzT8PsF2CpDp9CecJvE65+qmBumCTbB77JRvpNZVd X4pJgEuDzTJ/q5DV1rWnqQXFrXia09GJRaycsh/sNDej5PVub6Gbn37UWrb3qx7d zo0h3r1UHSlaPoYj6rmK2k16l6BetZmbFRE4fTHLFVAjCE+MKrs6uuzj9lQUaQzd wKBPHTZHxqOy25VPI3G6vzCwokYLGUTG7R4JAmi5pXurMWQHFvO5PWKghUXNc1HC HWslYbqhXSZA5jj7trnlxfgnXNeFDRbNox9qFDBDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhZAIUVWoD6J3P+6XKGxp/8XhgF4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4ZmE2Nzk4LWExZjMtNGQ5YS1hYmExLTg1ZWI0YjY5ODlmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJrmIAwDQYJKoZIhvcNAQELBQADggEBAFE637uzYn+5zGJdbxvNLOzss22l k8J6S7qiCkfWCBCNoxFuWqRE7S5uKopxJsm22Geu+cfeuVtGAgAcnXlaIl2363/m hrT7y9WVhTZQzv0B0J41jV9TXlFHk3F9Nu5dAdvKf0Yx6p7HCQlfh729wcwosaRY spDgxH3aJ1nyGr8bf1DgClszA9MnvdJ2npAktrqCRceAa0cnp27c8KY6V+R/MacI y7dgTGlLHrZu+nWpcqtRjFpIUUOl4dRy8kpnfutaTozpGpfOYTwgfibmxxR/k9mL rNy1zYyY0Tk7JOb/mSaXHOCd0GeSWndR2Lom969cxjn98TexP22CIQwaBHg= -----END CERTIFICATE-----Generated at Sun Nov 24 02:35:26 2024 by rpki-client on console-fra.rpki-client.org