$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/944e282f-323c-4d7a-aad2-fe2cab80823c.roa File: 944e282f-323c-4d7a-aad2-fe2cab80823c.roa (raw, json) Hash identifier: oMsaEJxHEvKoKmsp7YoXFy8YIDWfL86cKZDUy60ccV0= Subject key identifier: 3A:C7:73:D9:0D:8C:43:95:9F:C0:2B:1B:5F:B7:7C:18:DF:3E:9D:73 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3DB95A291B17F8E192226E0B26F36498388B9F15 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/944e282f-323c-4d7a-aad2-fe2cab80823c.roa Signing time: Tue 19 Nov 2024 00:00:00 +0000 ROA not before: Tue 19 Nov 2024 00:00:00 +0000 ROA not after: Tue 24 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 202.147.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b9:5a:29:1b:17:f8:e1:92:22:6e:0b:26:f3:64:98:38:8b:9f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 19 00:00:00 2024 GMT Not After : Dec 24 23:59:59 2024 GMT Subject: serialNumber=3f388b6559160e74a2d54a29b3a7f47819707a5ae799b66fadeeb72fe5ad5770, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:99:5a:39:30:55:dc:1c:66:d9:b2:ce:0f:49: 86:fc:fa:ed:b0:b6:e1:17:c6:d6:df:b5:42:29:aa: b2:a9:58:53:48:f7:fa:9a:e0:08:95:5f:8b:37:a3: 1a:c8:6b:1b:fd:83:93:6c:09:e1:a7:43:7c:af:04: a3:63:43:f4:bd:ba:55:3d:f8:0b:e4:3f:77:3d:cd: e7:61:0e:f8:ad:b0:e8:60:0f:58:47:36:91:c8:7b: 8b:a9:e0:f1:e5:5c:4a:12:ef:fe:56:67:74:05:ea: 34:e3:15:0d:4d:1b:58:2f:a5:34:72:3c:e4:79:72: 66:0c:60:57:92:c4:b6:ec:53:9b:a2:99:6c:eb:d9: df:25:05:17:e1:18:fa:a3:c5:65:5f:44:76:36:52: 5f:93:7e:40:be:46:b4:ed:d3:23:08:05:78:01:0a: c8:df:fe:e1:1a:fa:40:10:7e:d7:ac:36:d7:74:09: cd:36:0c:b3:f0:9c:63:aa:f5:f3:37:46:f8:e7:c9: 9f:ac:2a:c3:49:02:60:e5:6f:ab:97:04:ae:a8:cf: d2:2d:30:94:9b:38:15:1f:8f:05:4c:1d:ed:d1:45: d9:48:16:d1:42:4d:f5:c6:c0:ac:b6:38:af:80:0e: 48:4e:0e:a2:fe:18:2b:e8:84:aa:49:09:58:ac:f6: 38:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C7:73:D9:0D:8C:43:95:9F:C0:2B:1B:5F:B7:7C:18:DF:3E:9D:73 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/944e282f-323c-4d7a-aad2-fe2cab80823c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.147.64.0/19 Signature Algorithm: sha256WithRSAEncryption 1b:d3:9a:f4:76:39:63:7c:94:c3:a4:05:9e:c6:ab:9a:cb:4d: 4a:ef:25:9d:62:04:03:a7:a1:9b:f1:f7:7e:01:98:c8:d8:e9: c3:34:a6:09:3d:22:4a:56:df:a4:51:93:2c:ac:5d:16:c2:fe: 99:d7:a6:f1:b4:2c:89:1a:e3:32:8a:fc:fe:7b:c6:fc:1a:c1: 24:5f:6e:fa:05:b7:d5:f7:d3:22:91:42:89:02:93:a4:c1:8b: b2:73:87:c5:0a:80:63:87:d3:b8:7e:43:c8:14:6a:23:53:66: f4:7a:0c:e2:43:e6:38:91:7f:9c:6c:2f:b1:e4:3c:7c:27:c4: d4:fe:dd:4e:34:3c:6f:f4:31:63:56:4b:2d:56:c3:86:f4:26: 77:30:20:3a:ef:e6:be:54:fa:fe:6c:d1:47:16:ce:7f:a3:3d: fa:3f:b3:26:33:34:c3:1d:b9:f5:77:1c:34:a8:d6:87:25:68: 36:6b:4d:af:ed:f1:01:56:10:4f:33:8e:9b:23:2b:2a:eb:d5: 43:88:00:5d:1f:bd:28:1f:e5:4a:35:6c:3f:62:47:23:23:f3: 6e:7d:d9:ec:30:ca:c1:16:db:3d:61:53:c1:71:e0:5a:e0:57: aa:d7:d5:75:d2:79:9d:f0:71:46:3b:af:16:aa:f0:44:8d:a3: 2b:39:fc:01 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPblaKRsX+OGSIm4LJvNkmDiLnxUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTE5MDAwMDAwWhcNMjQxMjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZjM4OGI2NTU5MTYwZTc0YTJkNTRhMjliM2E3ZjQ3ODE5 NzA3YTVhZTc5OWI2NmZhZGVlYjcyZmU1YWQ1NzcwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDymVo5MFXcHGbZss4PSYb8+u2wtuEXxtbftUIpqrKpWFNI 9/qa4AiVX4s3oxrIaxv9g5NsCeGnQ3yvBKNjQ/S9ulU9+AvkP3c9zedhDvitsOhg D1hHNpHIe4up4PHlXEoS7/5WZ3QF6jTjFQ1NG1gvpTRyPOR5cmYMYFeSxLbsU5ui mWzr2d8lBRfhGPqjxWVfRHY2Ul+TfkC+RrTt0yMIBXgBCsjf/uEa+kAQftesNtd0 Cc02DLPwnGOq9fM3RvjnyZ+sKsNJAmDlb6uXBK6oz9ItMJSbOBUfjwVMHe3RRdlI FtFCTfXGwKy2OK+ADkhODqL+GCvohKpJCVis9jh/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOsdz2Q2MQ5WfwCsbX7d8GN8+nXMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk0NGUyODJmLTMyM2MtNGQ3YS1hYWQyLWZlMmNhYjgwODIzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXKk0AwDQYJKoZIhvcNAQELBQADggEBABvTmvR2OWN8lMOkBZ7Gq5rLTUrv JZ1iBAOnoZvx934BmMjY6cM0pgk9IkpW36RRkyysXRbC/pnXpvG0LIka4zKK/P57 xvwawSRfbvoFt9X30yKRQokCk6TBi7Jzh8UKgGOH07h+Q8gUaiNTZvR6DOJD5jiR f5xsL7HkPHwnxNT+3U40PG/0MWNWSy1Ww4b0JncwIDrv5r5U+v5s0UcWzn+jPfo/ syYzNMMdufV3HDSo1oclaDZrTa/t8QFWEE8zjpsjKyrr1UOIAF0fvSgf5Uo1bD9i RyMj82592ewwysEW2z1hU8Fx4FrgV6rX1XXSeZ3wcUY7rxaq8ESNoys5/AE= -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:17 2024 by rpki-client on console-fra.rpki-client.org