$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/759c21de-a4d1-4dba-813e-34e34227d1e1.roa File: 759c21de-a4d1-4dba-813e-34e34227d1e1.roa (raw, json) Hash identifier: 2+qmjRd9/EVySCIK0Ub8rGNkz+z2gHp5XnBgCeI7XXw= Subject key identifier: CD:9F:25:78:01:39:3E:D1:9B:13:09:51:6A:9E:3D:CA:1B:03:20:38 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4AB5CB6A83CD946E5FF1AF949DB498D0F5FA8FFA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/759c21de-a4d1-4dba-813e-34e34227d1e1.roa Signing time: Sat 28 Sep 2024 00:00:00 +0000 ROA not before: Sat 28 Sep 2024 00:00:00 +0000 ROA not after: Sat 02 Nov 2024 23:59:59 +0000 asID: 14618 IP address blocks: 54.25.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b5:cb:6a:83:cd:94:6e:5f:f1:af:94:9d:b4:98:d0:f5:fa:8f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 28 00:00:00 2024 GMT Not After : Nov 2 23:59:59 2024 GMT Subject: serialNumber=fb8e19c6379be6880efc9e2a6137122da355f16f10011e2c61ebead12f90f0b0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:58:80:03:30:79:b6:53:7d:b8:2c:a4:df:7c: f0:75:86:27:fd:fe:a8:ab:ed:53:2c:0e:99:f7:b7: 38:0a:35:74:57:42:7a:dd:25:2f:04:28:52:9c:d4: 51:54:52:21:88:43:ae:2c:81:85:20:17:a5:cb:3d: b9:47:31:a7:2f:b3:c8:30:d1:7b:9d:a2:e8:b0:40: f2:b1:16:ef:b2:e7:0c:08:1f:2e:39:09:2d:b1:88: 08:64:4b:2a:2f:dc:d2:3a:6e:23:e2:1a:56:cd:ee: 3c:cc:9f:d4:5e:b7:a3:a6:a5:43:e5:b3:2d:5a:1e: f8:3d:9a:2b:0d:50:66:91:f1:2c:58:52:47:70:b5: 2f:02:73:2c:dc:e5:e0:e5:36:a2:b5:5c:6b:b2:42: 27:49:8f:33:52:c3:66:25:d0:95:cc:08:15:41:13: e8:9d:6f:73:4e:21:34:0f:89:ec:59:d0:c0:ea:65: 1b:56:87:24:8e:1e:22:45:af:0e:be:d7:71:c8:a1: 87:7d:cf:bf:97:26:42:09:86:5a:ff:28:30:d8:e3: e1:55:d8:c1:48:78:a0:0b:08:ef:92:49:63:74:2e: b7:be:b4:6b:01:cc:09:5b:9c:9b:10:ae:0f:51:9a: 6c:82:f1:1f:b0:7d:29:ef:78:3f:72:bb:fa:2b:33: ec:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9F:25:78:01:39:3E:D1:9B:13:09:51:6A:9E:3D:CA:1B:03:20:38 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/759c21de-a4d1-4dba-813e-34e34227d1e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.25.68.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:7b:5d:7c:8f:51:ab:56:75:d8:55:ae:49:fe:71:41:42:7b: d6:51:d8:e3:f2:10:51:3b:48:00:06:d9:36:97:fe:92:03:39: 93:e7:7e:60:ce:2a:b8:70:8e:11:89:a7:0f:0c:d1:36:63:16: 1a:f9:7c:1a:7d:5c:7e:18:0d:f5:bd:ef:a2:84:c3:51:58:21: a1:b6:25:5f:c1:9e:7d:57:da:d7:69:47:22:63:62:d3:a2:c2: 00:dd:72:aa:67:5a:38:11:11:9f:01:2c:a0:6d:67:26:f0:73: 70:42:1b:63:c3:c3:e5:f1:25:f7:a9:0a:e7:09:11:cb:0f:34: c7:fc:de:ba:89:d9:ac:db:6e:47:39:4e:e5:cc:08:4d:de:7b: f1:46:dc:ee:7e:2b:bb:72:59:44:57:a0:c3:a1:15:fc:e4:01: 90:cb:87:46:27:75:54:93:74:48:1d:da:32:2b:b3:d2:28:d9: 1c:a0:e4:a8:9c:64:56:ea:ae:94:0c:4e:c5:51:6e:c4:9d:30: 2a:b4:84:db:9d:a3:d1:09:09:6b:3a:ac:a2:c5:0e:6f:0e:f5: f5:bd:e8:eb:80:36:77:0b:dc:90:36:5d:0c:09:e1:29:9e:dd: 0c:7b:10:aa:15:6a:c9:26:f6:07:c4:e6:0b:69:51:cd:55:70: 8e:e1:3a:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSrXLaoPNlG5f8a+UnbSY0PX6j/owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwOTI4MDAwMDAwWhcNMjQxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYjhlMTljNjM3OWJlNjg4MGVmYzllMmE2MTM3MTIyZGEz NTVmMTZmMTAwMTFlMmM2MWViZWFkMTJmOTBmMGIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6WIADMHm2U324LKTffPB1hif9/qir7VMsDpn3tzgKNXRX QnrdJS8EKFKc1FFUUiGIQ64sgYUgF6XLPblHMacvs8gw0XudouiwQPKxFu+y5wwI Hy45CS2xiAhkSyov3NI6biPiGlbN7jzMn9Ret6OmpUPlsy1aHvg9misNUGaR8SxY UkdwtS8Ccyzc5eDlNqK1XGuyQidJjzNSw2Yl0JXMCBVBE+idb3NOITQPiexZ0MDq ZRtWhySOHiJFrw6+13HIoYd9z7+XJkIJhlr/KDDY4+FV2MFIeKALCO+SSWN0Lre+ tGsBzAlbnJsQrg9RmmyC8R+wfSnveD9yu/orM+wFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzZ8leAE5PtGbEwlRap49yhsDIDgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1OWMyMWRlLWE0ZDEtNGRiYS04MTNlLTM0ZTM0MjI3ZDFlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2GUQwDQYJKoZIhvcNAQELBQADggEBAI97XXyPUatWddhVrkn+cUFCe9ZR 2OPyEFE7SAAG2TaX/pIDOZPnfmDOKrhwjhGJpw8M0TZjFhr5fBp9XH4YDfW976KE w1FYIaG2JV/Bnn1X2tdpRyJjYtOiwgDdcqpnWjgREZ8BLKBtZybwc3BCG2PDw+Xx JfepCucJEcsPNMf83rqJ2azbbkc5TuXMCE3ee/FG3O5+K7tyWURXoMOhFfzkAZDL h0YndVSTdEgd2jIrs9Io2Ryg5KicZFbqrpQMTsVRbsSdMCq0hNudo9EJCWs6rKLF Dm8O9fW96OuANncL3JA2XQwJ4Sme3Qx7EKoVaskm9gfE5gtpUc1VcI7hOs0= -----END CERTIFICATE-----Generated at Tue Oct 22 00:46:52 2024 by rpki-client on console-fra.rpki-client.org