$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/716035e6-da4b-468b-ab9f-cd3cf32befda.roa File: 716035e6-da4b-468b-ab9f-cd3cf32befda.roa (raw, json) Hash identifier: 1udcPB3TNphGSfNJUdL87XFUTi8zG9wiCxOhdD+/dzo= Subject key identifier: D8:E2:A5:F3:7E:40:64:8A:BD:BE:2B:8C:F8:28:7B:FD:57:7B:88:81 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0BB5D4951DB234EF9D13A8413ED5D0E3E14BB9E6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/716035e6-da4b-468b-ab9f-cd3cf32befda.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b5:d4:95:1d:b2:34:ef:9d:13:a8:41:3e:d5:d0:e3:e1:4b:b9:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=93b58f0d4fc94eb65097e239336f8de1d3485efa88686585b5b5367efc6e7d38, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:71:bf:7a:95:1e:f0:4e:f6:96:7d:db:6f: 10:39:81:4f:2f:08:71:c7:77:3f:82:50:ba:5b:de: 20:e4:87:82:ff:c3:ff:08:0e:30:49:38:75:89:28: b5:70:f4:52:15:02:1c:80:be:e1:b3:c1:33:92:46: 05:ff:1e:6e:e7:1d:38:5b:39:d8:bd:c1:6d:76:5b: 93:5e:d9:2d:72:2f:3f:a9:21:6a:3d:c8:ae:27:21: 24:4b:38:4d:52:1c:fc:c8:38:5f:45:fa:bd:65:00: 28:b3:e3:b5:b5:e9:5c:d1:45:c3:81:e3:0d:47:ad: 8a:2a:dc:56:ce:0d:c5:2c:ff:f8:ef:86:0b:b1:5e: 02:e6:b8:b1:0e:c3:52:5c:37:bf:ea:f3:60:3c:2f: 55:09:8c:d8:e9:62:97:d9:42:ab:bf:2f:be:c2:b0: 27:0d:ba:f4:16:f8:b3:ec:91:f9:e0:f4:96:7c:7f: 47:35:56:2d:4a:c0:a1:94:3e:b8:09:2b:5b:6e:b5: d5:b1:43:4a:bf:2b:e6:45:f3:e0:bd:e5:79:64:50: 2a:66:2b:60:74:f7:fb:a7:cd:b7:7b:5d:7f:62:8b: 83:0b:dc:81:e6:d7:3d:71:1d:4d:d7:08:5c:96:17: 9d:85:66:41:be:28:8a:fe:e1:d7:44:c3:2c:5d:d4: f3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E2:A5:F3:7E:40:64:8A:BD:BE:2B:8C:F8:28:7B:FD:57:7B:88:81 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/716035e6-da4b-468b-ab9f-cd3cf32befda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.136.0/24 Signature Algorithm: sha256WithRSAEncryption 80:ff:46:c2:8d:12:86:5b:eb:6b:f7:1d:01:88:ee:d8:0a:f0: 37:ec:de:1d:b3:c8:8c:92:7f:a7:80:94:e7:1a:1c:ca:90:b3: 0e:18:5b:b5:e6:07:6b:c5:ef:d4:4a:0c:cd:1c:4f:ae:f9:b9: af:8a:25:9f:ab:5a:c3:73:ba:fe:10:e6:92:9a:80:87:91:b5: 48:76:bb:78:96:e0:9e:04:5a:30:e2:a9:40:74:73:e1:cf:2f: 1e:77:dd:4e:7f:b8:11:67:e1:b4:01:19:5c:c2:4f:8f:4f:dd: e2:de:b0:a3:3e:68:19:07:6a:d0:74:5d:62:bb:5b:3a:2b:db: 80:40:07:8a:bb:8d:45:9e:6c:ed:dc:35:fa:29:3d:60:f4:b6: 7b:01:d2:41:ee:ef:3a:93:b2:33:51:3d:9d:ef:a3:56:98:8d: 91:01:c7:67:3a:7a:68:8a:b6:41:b6:63:e5:1e:74:dd:12:21: 10:97:05:61:ca:9a:5d:41:86:ce:6e:8d:14:ef:0e:1a:69:d6: 6b:6d:ef:5e:24:20:75:2e:1c:a8:a7:fd:51:4c:96:d6:d1:da: e3:4f:44:8c:6f:cb:ba:fd:78:80:24:07:83:bc:f8:a2:b2:1f: ed:ac:55:88:3d:c2:0a:7f:ca:3f:1a:76:d6:53:94:b6:59:08: 78:04:d2:97 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC7XUlR2yNO+dE6hBPtXQ4+FLueYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5M2I1OGYwZDRmYzk0ZWI2NTA5N2UyMzkzMzZmOGRlMWQz NDg1ZWZhODg2ODY1ODViNWI1MzY3ZWZjNmU3ZDM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDwnG/epUe8E72ln3bbxA5gU8vCHHHdz+CULpb3iDkh4L/ w/8IDjBJOHWJKLVw9FIVAhyAvuGzwTOSRgX/Hm7nHThbOdi9wW12W5Ne2S1yLz+p IWo9yK4nISRLOE1SHPzIOF9F+r1lACiz47W16VzRRcOB4w1HrYoq3FbODcUs//jv hguxXgLmuLEOw1JcN7/q82A8L1UJjNjpYpfZQqu/L77CsCcNuvQW+LPskfng9JZ8 f0c1Vi1KwKGUPrgJK1tutdWxQ0q/K+ZF8+C95XlkUCpmK2B09/unzbd7XX9ii4ML 3IHm1z1xHU3XCFyWF52FZkG+KIr+4ddEwyxd1PPLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2OKl835AZIq9viuM+Ch7/Vd7iIEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcxNjAzNWU2LWRhNGItNDY4Yi1hYjlmLWNkM2NmMzJiZWZkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTYgwDQYJKoZIhvcNAQELBQADggEBAID/RsKNEoZb62v3HQGI7tgK8Dfs 3h2zyIySf6eAlOcaHMqQsw4YW7XmB2vF79RKDM0cT675ua+KJZ+rWsNzuv4Q5pKa gIeRtUh2u3iW4J4EWjDiqUB0c+HPLx533U5/uBFn4bQBGVzCT49P3eLesKM+aBkH atB0XWK7Wzor24BAB4q7jUWebO3cNfopPWD0tnsB0kHu7zqTsjNRPZ3vo1aYjZEB x2c6emiKtkG2Y+UedN0SIRCXBWHKml1Bhs5ujRTvDhpp1mtt714kIHUuHKin/VFM ltbR2uNPRIxvy7r9eIAkB4O8+KKyH+2sVYg9wgp/yj8adtZTlLZZCHgE0pc= -----END CERTIFICATE-----Generated at Fri Nov 22 01:34:09 2024 by rpki-client on console-ams.rpki-client.org