$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bd09f21-a2dd-4485-9917-18c02bb6ae14.roa File: 8bd09f21-a2dd-4485-9917-18c02bb6ae14.roa (raw, json) Hash identifier: wa0rotMaGuLnNj91JM5zRa3P5s485FN3yJJfLuqqBOY= Subject key identifier: 96:11:ED:67:6D:D2:75:D1:DE:69:05:B8:DF:25:B8:15:49:6F:2D:E9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3822031F8C6241DD9A495ADC4F2A056E67A0D317 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bd09f21-a2dd-4485-9917-18c02bb6ae14.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 54.117.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:22:03:1f:8c:62:41:dd:9a:49:5a:dc:4f:2a:05:6e:67:a0:d3:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=fe9f5969d65d4ee930e869f12919cb4143df1e38711f8f030021ea38f67d7c08, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ee:95:28:ff:4a:8e:35:86:37:7d:45:e6:13: 3d:a8:9b:c5:96:c0:d1:09:6c:35:1c:70:40:0e:0f: 77:3f:29:ac:6c:53:ea:50:03:6e:33:32:b0:04:d8: 8e:b5:5d:c1:2c:15:f1:9c:6a:a7:3b:f0:db:ae:66: 81:1c:aa:70:13:65:1b:5a:7a:ad:91:5a:18:f9:ce: 66:54:ff:31:52:c2:4e:d9:ac:22:8c:bd:c3:9f:f9: 39:8d:f1:09:21:12:e6:88:1e:31:4c:e8:72:2f:b6: 7e:3c:fb:e2:10:79:25:8b:ae:24:16:e3:4a:bc:5e: 66:f9:47:e6:76:eb:36:71:66:18:a6:0b:ab:ed:8c: 09:e0:1e:f3:fa:74:2c:78:99:ba:ea:c3:1d:7b:12: 0e:e9:33:7c:0b:17:d0:76:84:0d:46:4a:64:39:f0: 70:61:d1:ec:80:ba:21:65:df:be:56:8c:53:6b:3d: 15:14:11:40:f0:32:3c:72:86:b3:30:c7:2b:f3:04: 71:ec:33:4e:3c:94:c9:a8:1c:cd:d4:8b:6a:9e:67: 6d:ac:1d:24:cf:af:0e:83:8e:65:33:18:b9:98:20: b3:63:5e:d3:43:77:8b:1c:51:36:07:ed:db:4b:62: 4c:af:df:02:d6:b0:08:c9:bb:88:db:66:83:5c:33: bf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:11:ED:67:6D:D2:75:D1:DE:69:05:B8:DF:25:B8:15:49:6F:2D:E9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bd09f21-a2dd-4485-9917-18c02bb6ae14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.117.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4a:a6:aa:a3:68:e6:f9:2b:3a:85:0c:d3:55:f8:0b:46:59:b9: 21:c9:c4:02:3f:b5:4a:1f:7c:6f:e6:75:95:2a:70:b4:4e:29: d8:f8:64:a1:8f:da:ce:eb:53:e1:ef:2e:3f:dd:f2:ae:5b:79: 57:ca:99:68:4f:d3:a3:49:5c:ba:ae:77:06:7a:58:65:08:98: 57:69:ed:7b:84:9d:7c:aa:7b:1d:12:35:0b:53:00:29:94:0a: 5a:cb:b0:ba:a3:f0:ed:26:ea:39:1e:48:93:b1:54:8b:af:67: 67:c2:a7:19:1c:79:68:15:9c:87:68:4e:88:30:fb:0f:b2:42: a0:d9:e6:5a:c4:dd:28:3b:5d:d5:3c:5c:fb:58:e0:e8:d7:18: 55:d4:48:12:74:2c:cf:4b:2d:d7:12:f1:5c:9d:6b:69:fe:aa: ca:2e:9d:5c:b2:a7:7b:bf:5d:86:e9:d3:9e:f7:ef:46:45:0b: 46:24:50:2b:24:a1:4c:2d:f5:62:c0:4b:11:b6:ab:9d:b6:ca: 4b:25:4a:9a:4d:53:33:5a:ca:2d:28:d3:08:41:64:c8:7f:81: 30:fa:42:e2:6f:5f:2a:62:14:8f:61:81:2f:59:a9:c7:0c:c3: d9:d9:3d:fa:d2:45:cb:a0:c2:88:1d:50:26:73:b0:2d:06:cf: 02:7a:42:2f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOCIDH4xiQd2aSVrcTyoFbmeg0xcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTlmNTk2OWQ2NWQ0ZWU5MzBlODY5ZjEyOTE5Y2I0MTQz ZGYxZTM4NzExZjhmMDMwMDIxZWEzOGY2N2Q3YzA4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCU7pUo/0qONYY3fUXmEz2om8WWwNEJbDUccEAOD3c/Kaxs U+pQA24zMrAE2I61XcEsFfGcaqc78NuuZoEcqnATZRtaeq2RWhj5zmZU/zFSwk7Z rCKMvcOf+TmN8QkhEuaIHjFM6HIvtn48++IQeSWLriQW40q8Xmb5R+Z26zZxZhim C6vtjAngHvP6dCx4mbrqwx17Eg7pM3wLF9B2hA1GSmQ58HBh0eyAuiFl375WjFNr PRUUEUDwMjxyhrMwxyvzBHHsM048lMmoHM3Ui2qeZ22sHSTPrw6DjmUzGLmYILNj XtNDd4scUTYH7dtLYkyv3wLWsAjJu4jbZoNcM79zAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUlhHtZ23SddHeaQW43yW4FUlvLekwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhiZDA5ZjIxLWEyZGQtNDQ4NS05OTE3LTE4YzAyYmI2YWUxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2dTANBgkqhkiG9w0BAQsFAAOCAQEASqaqo2jm+Ss6hQzTVfgLRlm5IcnE Aj+1Sh98b+Z1lSpwtE4p2PhkoY/azutT4e8uP93yrlt5V8qZaE/To0lcuq53BnpY ZQiYV2nte4SdfKp7HRI1C1MAKZQKWsuwuqPw7SbqOR5Ik7FUi69nZ8KnGRx5aBWc h2hOiDD7D7JCoNnmWsTdKDtd1Txc+1jg6NcYVdRIEnQsz0st1xLxXJ1raf6qyi6d XLKne79dhunTnvfvRkULRiRQKyShTC31YsBLEbarnbbKSyVKmk1TM1rKLSjTCEFk yH+BMPpC4m9fKmIUj2GBL1mpxwzD2dk9+tJFy6DCiB1QJnOwLQbPAnpCLw== -----END CERTIFICATE-----Generated at Sun Nov 24 03:17:17 2024 by rpki-client on console-ams.rpki-client.org