$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7874dde1-dbc9-4473-99fc-6def25d026d4.roa File: 7874dde1-dbc9-4473-99fc-6def25d026d4.roa (raw, json) Hash identifier: dFrmn9u4pewVNJLVI5GJtD0c811bdIK1zFmCdG3tlHM= Subject key identifier: 3D:3D:3B:51:9D:AC:68:62:9B:58:9D:67:FC:4E:57:05:AD:B7:61:B1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 09F00A565D6C3BACE80AF5715B0DF998E282B5D2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7874dde1-dbc9-4473-99fc-6def25d026d4.roa Signing time: Mon 18 Nov 2024 00:00:00 +0000 ROA not before: Mon 18 Nov 2024 00:00:00 +0000 ROA not after: Mon 23 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 136.18.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:f0:0a:56:5d:6c:3b:ac:e8:0a:f5:71:5b:0d:f9:98:e2:82:b5:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 18 00:00:00 2024 GMT Not After : Dec 23 23:59:59 2024 GMT Subject: serialNumber=426dc0256210e21f0c16f64bf9fda1d33bef60313e8553e59b9224d41d417f76, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:13:f7:bc:2e:ca:bc:ee:90:7e:8f:0a:b7:7e: 13:a2:72:f1:41:56:eb:c8:8a:a0:26:2e:e6:69:59: 7b:8b:ee:28:0f:8a:12:52:40:36:ab:b2:7f:9b:60: fc:c1:86:ed:22:58:2a:3f:e0:7a:4d:1a:67:0d:35: d0:04:6e:29:39:6f:43:ad:3a:bc:be:09:d8:3a:19: b3:2b:22:34:65:51:9e:4f:9d:83:b2:54:57:f3:da: bf:07:f9:a5:c2:28:7d:f3:42:1a:8a:60:50:25:af: 6e:fc:62:9c:d7:c6:b2:17:b8:e7:b7:48:da:c0:20: 76:d1:92:5a:b7:15:03:70:eb:00:25:db:95:81:49: fc:38:4c:d1:59:5e:e7:24:b8:b9:c3:0c:46:74:49: 65:1e:0e:7e:60:e7:cb:cf:71:4d:c8:8b:d0:c0:37: 07:55:9b:96:85:57:67:04:15:78:4a:55:b4:bf:58: fc:73:6f:cc:eb:f6:8d:b3:c6:24:92:33:d8:f5:46: 95:a0:10:cd:3a:f2:cf:87:c5:9c:c0:c9:fc:60:53: 0b:46:cd:2d:2b:54:99:06:96:85:4b:62:fe:3d:93: 4d:23:7a:63:f7:cf:df:2c:eb:02:96:c6:92:eb:ca: 44:be:e7:5f:ea:62:4e:7d:f5:25:5f:4c:7b:1a:2c: 15:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3D:3B:51:9D:AC:68:62:9B:58:9D:67:FC:4E:57:05:AD:B7:61:B1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7874dde1-dbc9-4473-99fc-6def25d026d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.32.0/20 Signature Algorithm: sha256WithRSAEncryption 24:47:ef:44:ca:93:b3:f5:d2:f1:d8:0d:8e:e3:56:b0:b4:3f: a0:0b:3a:a4:81:84:14:8d:a3:8d:58:63:6b:81:59:ed:37:10: 7d:ce:16:19:91:7f:3b:62:0a:7e:6d:19:f9:f7:67:a4:0b:82: 98:1e:35:4e:b9:ab:ef:bc:16:b5:08:20:2f:f3:88:85:09:04: 48:51:a2:ea:f0:64:e2:54:00:b4:56:a5:9f:1f:59:d2:f3:f3: ce:b5:45:d7:06:e4:9f:9d:08:3e:16:45:c4:2a:0e:52:75:94: ff:ef:dd:d7:3d:9a:a5:23:46:81:2e:0d:85:56:9d:30:ac:73: 81:83:db:d2:52:14:1d:11:5e:6e:c7:b9:4b:2d:9e:d4:cc:d4: 5a:0e:ef:1b:08:82:50:93:d2:17:19:28:1c:90:a4:9b:cb:df: 4d:c3:9e:72:d4:da:4c:4c:05:53:97:ba:47:40:93:1c:11:b2: c1:1b:2e:dd:35:e8:da:70:1d:30:d0:7f:8c:ca:30:ab:74:42: 8c:a3:8a:c0:6f:eb:f8:4f:b4:09:a1:f2:73:91:05:95:df:97: df:9c:82:fe:23:8a:a5:f9:ef:cb:19:47:e2:6d:b3:cd:ce:c7: 79:df:7a:5c:65:23:5c:fb:fc:20:fa:0c:e0:b1:bc:43:c5:52: d9:a2:47:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCfAKVl1sO6zoCvVxWw35mOKCtdIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTE4MDAwMDAwWhcNMjQxMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjZkYzAyNTYyMTBlMjFmMGMxNmY2NGJmOWZkYTFkMzNi ZWY2MDMxM2U4NTUzZTU5YjkyMjRkNDFkNDE3Zjc2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7E/e8Lsq87pB+jwq3fhOicvFBVuvIiqAmLuZpWXuL7igP ihJSQDarsn+bYPzBhu0iWCo/4HpNGmcNNdAEbik5b0OtOry+Cdg6GbMrIjRlUZ5P nYOyVFfz2r8H+aXCKH3zQhqKYFAlr278YpzXxrIXuOe3SNrAIHbRklq3FQNw6wAl 25WBSfw4TNFZXuckuLnDDEZ0SWUeDn5g58vPcU3Ii9DANwdVm5aFV2cEFXhKVbS/ WPxzb8zr9o2zxiSSM9j1RpWgEM068s+HxZzAyfxgUwtGzS0rVJkGloVLYv49k00j emP3z98s6wKWxpLrykS+51/qYk599SVfTHsaLBUBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPT07UZ2saGKbWJ1n/E5XBa23YbEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4NzRkZGUxLWRiYzktNDQ3My05OWZjLTZkZWYyNWQwMjZkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASIEiAwDQYJKoZIhvcNAQELBQADggEBACRH70TKk7P10vHYDY7jVrC0P6AL OqSBhBSNo41YY2uBWe03EH3OFhmRfztiCn5tGfn3Z6QLgpgeNU65q++8FrUIIC/z iIUJBEhRourwZOJUALRWpZ8fWdLz8861RdcG5J+dCD4WRcQqDlJ1lP/v3dc9mqUj RoEuDYVWnTCsc4GD29JSFB0RXm7HuUstntTM1FoO7xsIglCT0hcZKByQpJvL303D nnLU2kxMBVOXukdAkxwRssEbLt016NpwHTDQf4zKMKt0QoyjisBv6/hPtAmh8nOR BZXfl9+cgv4jiqX578sZR+Jts83Ox3nfelxlI1z7/CD6DOCxvEPFUtmiR54= -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:10 2024 by rpki-client on console-fra.rpki-client.org