$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9373fbdc-d64f-41a3-8c80-eea0234a86a8.roa File: 9373fbdc-d64f-41a3-8c80-eea0234a86a8.roa (raw, json) Hash identifier: sQ5zUQYUvswbUDAvtx68edWHEc60EM8wYnIH1o8HIxs= Subject key identifier: 52:C3:8F:B5:F5:79:A6:FA:BE:4E:C9:FA:E2:B8:96:D0:1C:A1:81:BA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6387A9CBC404E1E771961EC634C1E215E0662938 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9373fbdc-d64f-41a3-8c80-eea0234a86a8.roa Signing time: Mon 04 Nov 2024 00:00:00 +0000 ROA not before: Mon 04 Nov 2024 00:00:00 +0000 ROA not after: Mon 09 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 57.139.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:87:a9:cb:c4:04:e1:e7:71:96:1e:c6:34:c1:e2:15:e0:66:29:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 4 00:00:00 2024 GMT Not After : Dec 9 23:59:59 2024 GMT Subject: serialNumber=bbe795c541aa668e569ac9b4d693cff70128f5ab8ac73f595b99527edffb1003, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:31:d2:51:a9:2b:d8:07:f2:56:11:74:79:a0: e6:6e:74:d0:94:a5:38:25:6f:13:a5:bf:34:0a:0d: 7e:1d:f7:55:06:24:33:61:50:a6:ca:e9:ee:2c:f6: 26:94:c2:c2:87:46:94:db:e3:d4:50:13:ad:a1:65: 83:c8:f9:67:10:b7:f6:f5:5f:de:9c:04:34:04:9b: d1:c9:40:a9:47:b0:c5:dc:9d:d1:8b:c8:6e:a1:f2: 8f:de:13:4b:52:32:90:83:19:41:6a:2f:90:5d:91: 02:96:77:74:83:ad:4b:06:4b:67:b6:8b:54:f3:ab: 91:37:61:6e:ec:cf:6c:80:94:22:a5:43:c1:53:99: 67:c5:83:f2:07:a8:52:93:8c:04:29:6a:9a:e6:83: 56:6c:1f:9d:73:2a:87:1b:91:ca:d6:f6:d5:a3:8c: cf:e4:4c:04:75:71:ee:df:72:58:8c:98:4f:50:17: 03:49:d6:7a:7c:95:9a:d6:2e:9f:97:ff:25:5b:f2: 02:c5:da:34:24:d9:5f:d1:3e:33:c1:56:c9:74:0f: 46:4e:72:a9:05:ce:23:ac:cb:53:f9:4c:ac:87:26: dc:d4:73:a7:8f:92:fb:9a:13:5f:59:65:1d:da:59: d8:c7:86:cc:b6:09:e5:64:10:0a:80:64:06:9e:a5: 11:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C3:8F:B5:F5:79:A6:FA:BE:4E:C9:FA:E2:B8:96:D0:1C:A1:81:BA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9373fbdc-d64f-41a3-8c80-eea0234a86a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.139.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5e:b6:ce:71:bd:01:6f:e9:48:85:63:ce:53:05:8b:ca:07:5d: 48:82:40:d8:2d:87:f9:e6:87:8a:d2:93:5a:5f:97:0e:7c:57: d0:44:52:64:06:13:64:a8:ff:bc:e6:ab:5a:e1:d8:21:b2:9b: a3:ce:79:6f:53:56:d4:d7:a8:84:48:5f:50:7f:a6:1f:33:77: 6a:90:5f:71:ad:70:f3:b7:00:00:5c:f5:60:62:f9:72:1f:80: 5f:93:9e:96:ea:d2:54:0d:42:7e:fe:d9:1d:c1:df:96:ff:3b: ff:fe:cf:b8:4c:b1:05:05:94:fd:3f:78:c2:3b:c3:25:60:de: 27:88:1d:6a:2f:bb:3f:16:9d:96:d4:ef:df:d5:5b:47:cc:2e: aa:50:c3:e4:a9:2c:be:39:0d:fc:26:de:52:69:fe:fd:a1:30: 11:fa:8b:0d:37:54:40:d4:eb:75:e4:44:1f:92:40:fe:0b:65: 5a:a8:18:be:39:24:18:50:7b:88:bf:7a:2a:b0:de:e0:df:e9: 75:ef:47:7d:1f:86:c8:78:ba:4f:33:a3:dd:ef:56:6e:6a:1b: 05:25:b1:35:3d:e0:59:5f:2a:de:b5:3d:f5:95:38:e5:d5:c9: 2a:30:b7:c4:74:75:be:58:48:a0:7c:01:13:fe:73:a6:53:84: 7f:31:c7:c5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUY4epy8QE4edxlh7GNMHiFeBmKTgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA0MDAwMDAwWhcNMjQxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYmU3OTVjNTQxYWE2NjhlNTY5YWM5YjRkNjkzY2ZmNzAx MjhmNWFiOGFjNzNmNTk1Yjk5NTI3ZWRmZmIxMDAzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSMdJRqSvYB/JWEXR5oOZudNCUpTglbxOlvzQKDX4d91UG JDNhUKbK6e4s9iaUwsKHRpTb49RQE62hZYPI+WcQt/b1X96cBDQEm9HJQKlHsMXc ndGLyG6h8o/eE0tSMpCDGUFqL5BdkQKWd3SDrUsGS2e2i1Tzq5E3YW7sz2yAlCKl Q8FTmWfFg/IHqFKTjAQpaprmg1ZsH51zKocbkcrW9tWjjM/kTAR1ce7fcliMmE9Q FwNJ1np8lZrWLp+X/yVb8gLF2jQk2V/RPjPBVsl0D0ZOcqkFziOsy1P5TKyHJtzU c6ePkvuaE19ZZR3aWdjHhsy2CeVkEAqAZAaepRE5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUUsOPtfV5pvq+Tsn64riW0ByhgbowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkzNzNmYmRjLWQ2NGYtNDFhMy04YzgwLWVlYTAyMzRhODZhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA5izANBgkqhkiG9w0BAQsFAAOCAQEAXrbOcb0Bb+lIhWPOUwWLygddSIJA 2C2H+eaHitKTWl+XDnxX0ERSZAYTZKj/vOarWuHYIbKbo855b1NW1NeohEhfUH+m HzN3apBfca1w87cAAFz1YGL5ch+AX5OelurSVA1Cfv7ZHcHflv87//7PuEyxBQWU /T94wjvDJWDeJ4gdai+7PxadltTv39VbR8wuqlDD5KksvjkN/CbeUmn+/aEwEfqL DTdUQNTrdeREH5JA/gtlWqgYvjkkGFB7iL96KrDe4N/pde9HfR+GyHi6TzOj3e9W bmobBSWxNT3gWV8q3rU99ZU45dXJKjC3xHR1vlhIoHwBE/5zplOEfzHHxQ== -----END CERTIFICATE-----Generated at Mon Nov 25 02:57:52 2024 by rpki-client on console-fra.rpki-client.org