$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/988d21b5-2c83-406b-87cc-1c05d2c8334b.roa File: 988d21b5-2c83-406b-87cc-1c05d2c8334b.roa (raw, json) Hash identifier: 7WLhWsn4r5Q8czg/VCCan1THo/fXx4OSAPuC/ATeDUo= Subject key identifier: 93:14:73:5B:86:D6:D4:E6:78:C7:80:62:BD:8C:23:D0:CF:00:63:15 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 398A00E0FCDE5840A06A1B016A10B0731DC3B60D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/988d21b5-2c83-406b-87cc-1c05d2c8334b.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 130.201.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:8a:00:e0:fc:de:58:40:a0:6a:1b:01:6a:10:b0:73:1d:c3:b6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=1d02b226a645f298ab8d04ed95e2a4f03dcf5ecb9e4ebcfc3cb47909144f37e8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:77:e5:0c:6f:c2:36:d5:0a:7e:a1:d1:17:09: 70:bb:c5:2b:c7:d5:05:b6:a9:86:eb:3a:e4:49:91: 82:f9:0d:5d:7b:ce:76:95:5f:6e:0f:72:81:b7:1c: 76:5a:59:65:2d:7f:1e:1f:68:42:3e:3c:83:e0:b6: 75:12:74:48:1e:a8:a1:4c:14:df:27:29:d5:2f:49: 7a:15:fe:66:6a:a6:41:8b:57:03:54:12:33:42:ef: 10:d8:3d:41:5a:ae:45:2b:05:3f:08:4a:56:6d:be: a2:14:77:14:20:16:95:ba:87:9a:d4:98:b3:8c:cf: 21:25:1e:91:64:fb:85:88:6d:e8:b9:42:6d:14:28: 15:bf:9f:a8:8c:97:3a:73:c9:70:44:74:b7:a4:cd: 3c:23:a3:2c:14:5f:51:74:fd:6d:6b:63:30:6f:77: 57:5d:03:d6:54:bc:e7:c8:f4:23:4b:3d:4a:e0:e9: a9:9e:d6:7d:ef:e3:85:c3:f7:da:87:43:2b:46:9c: 57:fc:12:6e:87:b8:4b:35:f6:fb:03:c8:7e:82:7c: 54:82:44:37:79:0f:84:0a:72:26:43:14:6a:81:2b: e1:08:2c:1f:9b:3f:55:a7:88:92:8e:bc:55:71:76: f6:b6:50:7d:81:11:3d:9e:ff:08:40:12:fa:eb:f8: 5a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:14:73:5B:86:D6:D4:E6:78:C7:80:62:BD:8C:23:D0:CF:00:63:15 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/988d21b5-2c83-406b-87cc-1c05d2c8334b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.201.128.0/17 Signature Algorithm: sha256WithRSAEncryption 25:f3:bd:e8:f8:d3:4d:c1:4b:6f:ee:22:e5:a5:9a:62:6f:a8: 35:cb:f4:6e:da:35:9c:9c:75:0a:be:55:a7:d2:2e:25:42:34: c6:88:43:33:e0:3b:b0:44:cb:18:3a:6d:a6:7e:b8:80:3f:30: 02:b6:93:76:53:29:d3:15:78:6d:57:a9:68:2b:70:ec:33:15: bb:44:27:28:59:22:92:87:f8:e6:9a:e6:1a:c1:36:22:1b:22: 03:7a:c8:d8:8b:cc:5d:ae:b4:02:ca:69:37:e7:a5:fe:91:e8: f8:09:79:90:4d:9f:d8:00:eb:21:d4:21:70:a1:bd:a9:26:a1: 60:c0:e9:ba:61:b5:d5:30:94:9d:fc:47:26:7f:0a:90:6d:cd: 01:2a:d4:a8:cb:90:cc:4e:64:39:2b:c1:dc:9c:25:c7:dc:0c: 64:2f:fb:e1:56:29:30:31:b0:dc:fc:e4:b7:35:e6:86:18:56: 89:62:30:1e:5f:69:8f:05:d7:0c:9f:9e:4a:db:e5:59:e4:c0: 61:3c:6c:1b:22:22:80:30:15:0e:2e:00:34:4b:f6:a6:d0:11: a2:c4:65:6b:4d:80:1e:c4:40:60:90:12:a8:8b:96:73:ba:5f: 24:92:ac:d1:15:cf:de:f6:9e:d3:71:4f:95:03:a9:5a:d2:68: 4b:6e:ed:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOYoA4PzeWECgahsBahCwcx3Dtg0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDAyYjIyNmE2NDVmMjk4YWI4ZDA0ZWQ5NWUyYTRmMDNk Y2Y1ZWNiOWU0ZWJjZmMzY2I0NzkwOTE0NGYzN2U4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbd+UMb8I21Qp+odEXCXC7xSvH1QW2qYbrOuRJkYL5DV17 znaVX24PcoG3HHZaWWUtfx4faEI+PIPgtnUSdEgeqKFMFN8nKdUvSXoV/mZqpkGL VwNUEjNC7xDYPUFarkUrBT8ISlZtvqIUdxQgFpW6h5rUmLOMzyElHpFk+4WIbei5 Qm0UKBW/n6iMlzpzyXBEdLekzTwjoywUX1F0/W1rYzBvd1ddA9ZUvOfI9CNLPUrg 6ame1n3v44XD99qHQytGnFf8Em6HuEs19vsDyH6CfFSCRDd5D4QKciZDFGqBK+EI LB+bP1WniJKOvFVxdva2UH2BET2e/whAEvrr+FovAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkxRzW4bW1OZ4x4BivYwj0M8AYxUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4OGQyMWI1LTJjODMtNDA2Yi04N2NjLTFjMDVkMmM4MzM0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeCyYAwDQYJKoZIhvcNAQELBQADggEBACXzvej4003BS2/uIuWlmmJvqDXL 9G7aNZycdQq+VafSLiVCNMaIQzPgO7BEyxg6baZ+uIA/MAK2k3ZTKdMVeG1XqWgr cOwzFbtEJyhZIpKH+Oaa5hrBNiIbIgN6yNiLzF2utALKaTfnpf6R6PgJeZBNn9gA 6yHUIXChvakmoWDA6bphtdUwlJ38RyZ/CpBtzQEq1KjLkMxOZDkrwdycJcfcDGQv ++FWKTAxsNz85Lc15oYYVoliMB5faY8F1wyfnkrb5VnkwGE8bBsiIoAwFQ4uADRL 9qbQEaLEZWtNgB7EQGCQEqiLlnO6XySSrNEVz972ntNxT5UDqVrSaEtu7XY= -----END CERTIFICATE-----Generated at Sun Nov 24 03:17:20 2024 by rpki-client on console-ams.rpki-client.org