$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703d892d-ff7a-4463-88f7-014e2ca759c0.roa File: 703d892d-ff7a-4463-88f7-014e2ca759c0.roa (raw, json) Hash identifier: w1zxK/9T0Zrw1BZVzL8kyQZa06V6yNUQDDGeSR8vBM8= Subject key identifier: 5B:3D:EA:D9:D9:20:70:42:EF:73:44:21:4B:2A:8A:64:2D:55:47:02 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E950F5C68FB6A19709D59BA29C7C908B46DC17F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703d892d-ff7a-4463-88f7-014e2ca759c0.roa Signing time: Wed 06 Nov 2024 00:00:00 +0000 ROA not before: Wed 06 Nov 2024 00:00:00 +0000 ROA not after: Wed 11 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 64.91.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:95:0f:5c:68:fb:6a:19:70:9d:59:ba:29:c7:c9:08:b4:6d:c1:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 6 00:00:00 2024 GMT Not After : Dec 11 23:59:59 2024 GMT Subject: serialNumber=e5ae3875c0a2a3cea8c5d041ab1350280fb563b472c794e346f9111d61db7f0a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:41:6a:6d:0c:5c:51:36:32:c4:14:ef:eb: f1:03:b3:2a:55:25:49:f2:81:4e:74:c4:f8:dd:2a: ea:86:8c:69:6e:be:6b:ac:95:41:04:3e:89:8a:74: 3c:e7:64:56:0c:7c:12:3e:b5:84:8b:02:ff:13:7e: 0b:84:57:c4:1a:7e:0d:12:fa:e2:53:9e:ad:49:37: e6:1f:c7:90:5c:9f:12:bc:c7:3e:45:ba:89:1c:3d: ab:0f:24:ed:b6:26:03:f0:1f:77:25:52:36:98:3c: 6b:d1:1b:02:78:f8:e6:29:7a:ae:ce:e9:bd:da:34: 2c:c5:71:0c:4e:7f:09:26:82:df:bc:a0:92:fb:0c: fb:73:e2:b9:e5:6d:77:2a:fb:bc:da:61:a5:42:e2: 88:00:dd:8a:5a:21:be:1a:02:ed:91:54:34:80:8e: 4f:f5:6e:7d:c3:b0:8b:f4:14:54:b6:8b:e7:ac:d8: 05:50:ae:13:97:71:89:8b:3a:69:9c:30:7a:90:4a: 27:a2:bf:49:3c:f6:7a:89:61:1c:af:ba:0a:6f:2f: 0b:b8:db:71:99:ef:29:b2:b7:80:46:11:80:fd:ba: 86:dd:da:a8:35:a8:20:fa:3b:d4:1a:e4:b9:eb:f3: d4:7e:7f:05:a2:66:6f:ec:69:03:1c:e0:b6:ad:23: 3a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3D:EA:D9:D9:20:70:42:EF:73:44:21:4B:2A:8A:64:2D:55:47:02 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703d892d-ff7a-4463-88f7-014e2ca759c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.91.128.0/18 Signature Algorithm: sha256WithRSAEncryption a0:6a:73:82:01:aa:b0:d1:92:19:e6:66:ec:65:22:11:a7:78: b3:f0:2f:f7:aa:0e:d2:83:7c:c8:ce:61:7d:9f:c7:90:2c:59: 84:c5:3d:06:1b:3b:b3:22:a8:fd:38:c2:f9:e7:f7:0e:8b:bf: 85:cd:b0:b8:bf:ff:9b:1c:c5:1d:e7:a1:6a:6e:87:20:ad:45: 1c:dc:10:03:51:a6:f0:80:6c:9d:0a:a1:e4:20:19:1b:80:5d: 3b:81:77:7c:44:6b:84:32:b7:6e:3c:3d:30:e2:1f:6a:7a:0c: 8c:c5:57:bc:eb:df:6f:7d:8d:f9:e8:7d:7b:cd:5e:99:50:d2: 8e:23:86:80:23:a7:83:fd:8f:38:bf:b4:19:f4:9f:7d:68:b6: 24:ff:4b:3b:48:cf:32:47:e9:f2:15:2e:5e:bc:0a:21:e8:dd: c4:79:2b:f4:0b:6b:98:f7:bd:91:fb:30:d1:97:59:46:6b:bc: 96:86:73:cd:0c:60:17:3b:b1:12:f9:d3:15:e0:99:bf:59:14: c4:69:f1:c4:c1:6b:f7:ec:ab:8e:9d:0b:90:7e:84:f8:68:51: 57:14:38:4c:7d:8b:b6:05:06:69:00:57:2d:77:5e:e3:0a:a1: 49:ff:e2:17:f0:4d:da:a5:fd:30:4d:20:b4:c2:94:5a:83:ee: 79:cc:78:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfpUPXGj7ahlwnVm6KcfJCLRtwX8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA2MDAwMDAwWhcNMjQxMjExMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNWFlMzg3NWMwYTJhM2NlYThjNWQwNDFhYjEzNTAyODBm YjU2M2I0NzJjNzk0ZTM0NmY5MTExZDYxZGI3ZjBhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBmEFqbQxcUTYyxBTv6/EDsypVJUnygU50xPjdKuqGjGlu vmuslUEEPomKdDznZFYMfBI+tYSLAv8TfguEV8Qafg0S+uJTnq1JN+Yfx5BcnxK8 xz5FuokcPasPJO22JgPwH3clUjaYPGvRGwJ4+OYpeq7O6b3aNCzFcQxOfwkmgt+8 oJL7DPtz4rnlbXcq+7zaYaVC4ogA3YpaIb4aAu2RVDSAjk/1bn3DsIv0FFS2i+es 2AVQrhOXcYmLOmmcMHqQSieiv0k89nqJYRyvugpvLwu423GZ7ymyt4BGEYD9uobd 2qg1qCD6O9Qa5Lnr89R+fwWiZm/saQMc4LatIzoJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWz3q2dkgcELvc0QhSyqKZC1VRwIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcwM2Q4OTJkLWZmN2EtNDQ2My04OGY3LTAxNGUyY2E3NTljMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZAW4AwDQYJKoZIhvcNAQELBQADggEBAKBqc4IBqrDRkhnmZuxlIhGneLPw L/eqDtKDfMjOYX2fx5AsWYTFPQYbO7MiqP04wvnn9w6Lv4XNsLi//5scxR3noWpu hyCtRRzcEANRpvCAbJ0KoeQgGRuAXTuBd3xEa4Qyt248PTDiH2p6DIzFV7zr3299 jfnofXvNXplQ0o4jhoAjp4P9jzi/tBn0n31otiT/SztIzzJH6fIVLl68CiHo3cR5 K/QLa5j3vZH7MNGXWUZrvJaGc80MYBc7sRL50xXgmb9ZFMRp8cTBa/fsq46dC5B+ hPhoUVcUOEx9i7YFBmkAVy13XuMKoUn/4hfwTdql/TBNILTClFqD7nnMeLs= -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:08 2024 by rpki-client on console-fra.rpki-client.org