$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88d54a7a-eb9d-4031-9bd6-2186b2fd151a.roa File: 88d54a7a-eb9d-4031-9bd6-2186b2fd151a.roa (raw, json) Hash identifier: tnusLdsNooLvItMNDEsCJtpuA4yTxWPG36FPBy76xf0= Subject key identifier: D8:82:A6:51:C6:15:98:4B:1F:36:D8:2D:7C:C3:B5:40:6D:63:C8:9A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1ABC791B15EC314E83D94437861F420F2067C0AE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88d54a7a-eb9d-4031-9bd6-2186b2fd151a.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 151.148.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:bc:79:1b:15:ec:31:4e:83:d9:44:37:86:1f:42:0f:20:67:c0:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=66b87e4d61679cbd39c8713464f6f803b85272053ab0a8b4fb7e710b2b28369b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6d:f8:07:d9:99:1e:b8:10:8b:48:79:b4:ab: 5a:6e:8e:a9:a0:d4:b9:f5:ab:03:55:b8:64:32:c7: 0a:8e:2e:60:40:a7:d9:82:f3:77:c1:11:ae:96:6c: 7a:30:85:e7:5f:1e:32:3a:b4:bd:90:a1:5b:f1:4c: c2:d4:0e:0d:d1:ff:3e:8f:e1:58:d5:76:b9:bc:1d: b6:85:ae:62:a1:db:8c:1c:3f:80:e2:2c:a6:25:0f: 82:1e:11:b2:54:f3:5e:fa:4c:33:86:81:96:fd:7b: 58:37:7b:7d:a4:11:68:80:de:06:26:e7:bf:0b:1e: 00:aa:35:f7:45:35:f2:ba:ed:99:56:60:2d:b3:9c: fb:3e:7b:e9:44:5e:14:61:12:c1:e0:aa:6a:3a:55: 68:07:ed:dc:12:d4:4c:52:ba:80:41:4d:28:1a:2d: 42:6b:56:16:db:64:0a:1a:e9:b5:ff:69:66:a0:cc: c3:70:ba:63:87:7d:d8:0c:f6:fd:87:5b:0c:07:9b: 54:e5:d6:5b:0c:be:14:94:28:1c:7f:a3:41:0a:38: d7:cc:2f:a5:11:c4:9e:a6:3d:b0:e3:b2:e3:5b:ad: 76:15:5c:24:24:4f:8c:f1:f8:42:6b:36:2b:4b:44: cd:90:11:63:11:93:f7:14:c3:54:ad:ab:6a:d2:a3: 59:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:82:A6:51:C6:15:98:4B:1F:36:D8:2D:7C:C3:B5:40:6D:63:C8:9A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88d54a7a-eb9d-4031-9bd6-2186b2fd151a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.148.128.0/17 Signature Algorithm: sha256WithRSAEncryption cd:e8:2d:24:a3:db:be:74:21:3b:a2:e1:6a:77:72:dd:81:08: 0e:9e:6c:7f:40:0b:20:8f:60:35:88:87:61:17:eb:99:f1:65: 37:f4:32:3f:d4:9e:2f:7f:4e:93:bb:02:b5:25:ef:98:1f:8d: 32:d5:68:d9:dc:51:49:45:c5:27:8f:22:7e:1f:85:ab:e2:28: 54:59:3a:94:16:7e:a3:6a:14:e0:50:4e:06:08:a5:35:78:f8: 63:02:82:79:4f:90:37:eb:1b:3c:d4:0e:c6:fd:78:d7:69:67: c5:61:ed:c2:ee:0b:6a:e1:1c:db:7e:ab:ce:84:fd:5e:c4:52: ef:ee:0c:c7:e9:f4:74:27:2f:b4:86:1f:8b:03:7c:91:56:f3: 17:67:2b:0d:8d:2f:32:b4:41:e8:8b:e8:82:c2:37:26:67:a3: a3:dd:a1:46:5b:61:4f:99:98:a5:d9:6a:fb:52:53:d6:bc:99: ad:30:f4:64:6f:a6:5c:00:52:c3:6a:7e:8a:0f:d2:7c:ed:29: 91:09:d9:3d:82:31:9b:c8:2a:41:6c:82:8c:b1:6a:55:04:dc: 70:a6:7e:30:eb:ab:d1:3f:f7:fb:77:bd:b5:a4:c0:1e:46:25: 90:87:37:ec:a3:dd:4f:11:25:3f:42:53:98:77:d1:48:1f:ee: b4:0f:5f:d2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGrx5GxXsMU6D2UQ3hh9CDyBnwK4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NmI4N2U0ZDYxNjc5Y2JkMzljODcxMzQ2NGY2ZjgwM2I4 NTI3MjA1M2FiMGE4YjRmYjdlNzEwYjJiMjgzNjliMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCebfgH2ZkeuBCLSHm0q1pujqmg1Ln1qwNVuGQyxwqOLmBA p9mC83fBEa6WbHowhedfHjI6tL2QoVvxTMLUDg3R/z6P4VjVdrm8HbaFrmKh24wc P4DiLKYlD4IeEbJU8176TDOGgZb9e1g3e32kEWiA3gYm578LHgCqNfdFNfK67ZlW YC2znPs+e+lEXhRhEsHgqmo6VWgH7dwS1ExSuoBBTSgaLUJrVhbbZAoa6bX/aWag zMNwumOHfdgM9v2HWwwHm1Tl1lsMvhSUKBx/o0EKONfML6URxJ6mPbDjsuNbrXYV XCQkT4zx+EJrNitLRM2QEWMRk/cUw1Stq2rSo1nlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2IKmUcYVmEsfNtgtfMO1QG1jyJowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg4ZDU0YTdhLWViOWQtNDAzMS05YmQ2LTIxODZiMmZkMTUxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeXlIAwDQYJKoZIhvcNAQELBQADggEBAM3oLSSj2750ITui4Wp3ct2BCA6e bH9ACyCPYDWIh2EX65nxZTf0Mj/Uni9/TpO7ArUl75gfjTLVaNncUUlFxSePIn4f haviKFRZOpQWfqNqFOBQTgYIpTV4+GMCgnlPkDfrGzzUDsb9eNdpZ8Vh7cLuC2rh HNt+q86E/V7EUu/uDMfp9HQnL7SGH4sDfJFW8xdnKw2NLzK0QeiL6ILCNyZno6Pd oUZbYU+ZmKXZavtSU9a8ma0w9GRvplwAUsNqfooP0nztKZEJ2T2CMZvIKkFsgoyx alUE3HCmfjDrq9E/9/t3vbWkwB5GJZCHN+yj3U8RJT9CU5h30Ugf7rQPX9I= -----END CERTIFICATE-----Generated at Mon Nov 25 02:57:50 2024 by rpki-client on console-fra.rpki-client.org