$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d75a1f3-54c3-485a-b778-f1ea40defd7b.roa File: 8d75a1f3-54c3-485a-b778-f1ea40defd7b.roa (raw, json) Hash identifier: N/CSC1KwFB5u6acqdvS0fblgN4Z4pt7FjIypHpoMgwk= Subject key identifier: 7E:F5:A9:03:52:02:20:2F:89:C3:3E:FE:DA:73:A8:0E:1C:BE:71:F8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31A8249DB9428D146FEF1BF50FC827B70C50910F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d75a1f3-54c3-485a-b778-f1ea40defd7b.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 16.137.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a8:24:9d:b9:42:8d:14:6f:ef:1b:f5:0f:c8:27:b7:0c:50:91:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=d45fd79dc54b9ea2bcd6e360ac2c2a1370bfc671cdf151813ff9cfa14e243c49, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:53:1d:01:f3:4e:b5:53:c7:74:a4:35:f7:4f: e6:14:15:9b:12:4e:1f:7a:98:90:36:c4:eb:a4:ba: 7d:08:f4:9b:1c:f7:5f:c6:20:ff:a7:d5:0c:28:de: 45:7f:6c:b9:e3:36:ae:6d:33:76:a5:7c:e7:fd:48: a0:f3:eb:47:41:2b:3f:a3:b0:a1:d0:5d:4f:46:81: 59:bc:05:b4:27:84:7e:44:52:96:7d:8c:3e:f9:47: db:e2:52:70:7c:a2:b2:d6:af:93:e2:e4:57:d5:b1: 09:4d:24:c9:c2:78:e7:98:33:b5:c5:01:32:fb:17: b4:b2:fc:39:f8:c5:ef:f9:fa:ce:1e:7e:53:b6:33: 23:f5:5c:7b:38:f4:b4:b5:d2:71:79:cc:ba:83:58: c6:5a:ce:6f:62:61:d5:04:b1:5b:6d:14:71:e1:3d: e0:49:96:61:90:b0:b6:17:8f:a1:82:c7:cf:39:68: 44:37:b9:e8:60:9f:b1:d8:ca:b6:f7:95:3f:45:10: 24:b1:c3:53:9b:cf:9f:66:e5:8c:d4:14:1b:17:b7: dc:5f:24:1e:fb:fd:1a:9d:b8:a2:54:35:8c:7d:30: d1:22:34:a7:8c:0d:87:e5:1e:09:7f:af:de:8e:86: e2:5a:3a:ec:cc:ae:0e:f3:20:9a:c4:e7:42:93:26: ec:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F5:A9:03:52:02:20:2F:89:C3:3E:FE:DA:73:A8:0E:1C:BE:71:F8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d75a1f3-54c3-485a-b778-f1ea40defd7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.137.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1c:10:25:66:73:ad:69:5b:c2:9c:85:ce:25:06:8f:98:d7:04: 50:43:d8:8a:7b:38:23:67:b1:b0:34:08:71:3d:0f:2e:35:d4: 58:84:88:db:19:bb:9e:e4:f9:86:e1:9b:3c:e2:e9:77:03:ae: cb:82:e8:24:f0:dd:c7:d4:b7:19:e5:dd:05:fe:80:cd:c2:4b: 92:3e:09:8f:49:10:c6:28:e3:7d:f7:cf:ad:fc:77:34:25:9c: 95:81:65:5c:ca:75:b4:e7:04:db:1b:b0:4b:63:8a:4e:e9:45: 5e:a8:eb:7a:16:0e:28:77:24:5a:9c:bc:fc:3d:7f:55:1e:db: d1:22:d4:e2:d2:dd:73:46:cb:9a:e6:90:90:38:09:af:69:69: 84:3b:df:b3:9f:54:e9:fc:1f:8d:dd:98:9e:24:81:37:dd:30: e2:92:e3:ab:dd:29:32:3c:07:ec:aa:67:cf:0a:40:16:94:2a: 68:e5:9a:cc:67:9a:be:fb:0b:d5:bd:d2:5d:31:60:8f:32:62: 1f:e5:36:96:5e:00:54:cf:f9:5d:56:d0:ab:74:22:a6:61:37: 6e:4e:ff:66:1a:76:8e:51:83:d4:24:9b:2b:c4:49:6b:a7:6f: ca:a2:92:8c:b3:df:70:68:f8:16:db:9b:87:b3:64:7e:5a:fa: 84:13:e2:6d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMagknblCjRRv7xv1D8gntwxQkQ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDVmZDc5ZGM1NGI5ZWEyYmNkNmUzNjBhYzJjMmExMzcw YmZjNjcxY2RmMTUxODEzZmY5Y2ZhMTRlMjQzYzQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3Ux0B8061U8d0pDX3T+YUFZsSTh96mJA2xOukun0I9Jsc 91/GIP+n1Qwo3kV/bLnjNq5tM3alfOf9SKDz60dBKz+jsKHQXU9GgVm8BbQnhH5E UpZ9jD75R9viUnB8orLWr5Pi5FfVsQlNJMnCeOeYM7XFATL7F7Sy/Dn4xe/5+s4e flO2MyP1XHs49LS10nF5zLqDWMZazm9iYdUEsVttFHHhPeBJlmGQsLYXj6GCx885 aEQ3uehgn7HYyrb3lT9FECSxw1Obz59m5YzUFBsXt9xfJB77/RqduKJUNYx9MNEi NKeMDYflHgl/r96OhuJaOuzMrg7zIJrE50KTJuz1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUfvWpA1ICIC+Jwz7+2nOoDhy+cfgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhkNzVhMWYzLTU0YzMtNDg1YS1iNzc4LWYxZWE0MGRlZmQ3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQiTANBgkqhkiG9w0BAQsFAAOCAQEAHBAlZnOtaVvCnIXOJQaPmNcEUEPY ins4I2exsDQIcT0PLjXUWISI2xm7nuT5huGbPOLpdwOuy4LoJPDdx9S3GeXdBf6A zcJLkj4Jj0kQxijjfffPrfx3NCWclYFlXMp1tOcE2xuwS2OKTulFXqjrehYOKHck Wpy8/D1/VR7b0SLU4tLdc0bLmuaQkDgJr2lphDvfs59U6fwfjd2YniSBN90w4pLj q90pMjwH7KpnzwpAFpQqaOWazGeavvsL1b3SXTFgjzJiH+U2ll4AVM/5XVbQq3Qi pmE3bk7/Zhp2jlGD1CSbK8RJa6dvyqKSjLPfcGj4Ftubh7Nkflr6hBPibQ== -----END CERTIFICATE-----Generated at Fri Nov 22 04:02:53 2024 by rpki-client on console-ams.rpki-client.org