$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fbc0561-c88d-451f-a42d-9e1dc1a99d98.roa File: 9fbc0561-c88d-451f-a42d-9e1dc1a99d98.roa (raw, json) Hash identifier: gadhyO+SsBp9v+fjk3534IWTp4FT+7vehub7u+EPLXQ= Subject key identifier: 89:27:63:AF:A6:88:AB:DC:AF:E3:9F:51:EA:45:CC:0B:D1:E0:60:DC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 565600B8B5E8FF502EBF85C3274AB25D5112A726 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fbc0561-c88d-451f-a42d-9e1dc1a99d98.roa Signing time: Tue 05 Nov 2024 00:00:00 +0000 ROA not before: Tue 05 Nov 2024 00:00:00 +0000 ROA not after: Tue 10 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 67.220.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:56:00:b8:b5:e8:ff:50:2e:bf:85:c3:27:4a:b2:5d:51:12:a7:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 5 00:00:00 2024 GMT Not After : Dec 10 23:59:59 2024 GMT Subject: serialNumber=d65e0c7ba6198d60861f4ec22c03952c30d66864d1e40b8b96def46ce71739c3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:31:48:87:64:c7:bb:32:00:7c:9f:79:a2:e9: eb:22:43:68:ff:94:ab:29:0c:9b:f3:ef:f8:de:4f: 2a:79:75:56:17:c6:ee:32:95:ab:62:8a:fd:e7:59: 2d:3a:47:43:dc:be:f0:eb:59:28:bd:8e:c7:ad:7e: e4:59:be:8d:32:e3:43:a9:e9:38:0f:17:44:ff:e3: 73:97:81:70:2f:0e:a8:b9:4b:cd:3c:b3:11:8d:83: 4b:d2:fc:40:ee:28:7c:80:e3:c7:5f:12:6d:b6:94: 31:cf:d1:05:3b:9b:89:92:a1:80:e3:17:ce:b1:cf: c6:66:bd:4e:51:ba:cb:67:36:9e:9a:d0:e5:ec:78: 4e:c6:97:6a:0f:a3:0e:b3:5c:72:1a:bf:88:d5:09: 85:85:4a:14:b4:ef:84:dc:89:3c:49:f0:5d:3b:ba: 4c:0c:5c:30:15:82:a3:3a:dc:9f:c4:92:49:08:76: 67:0e:07:10:70:e3:d4:c3:e3:ba:03:cc:13:f7:41: 15:a8:89:73:73:07:9e:6f:e7:1c:ef:95:c3:79:27: 9d:1c:d2:b6:12:a5:50:d7:1e:7e:b2:e4:c6:64:ee: 1e:85:d3:0a:31:a6:2f:b4:6b:48:e5:57:8a:6b:22: 9e:9a:6a:4b:db:20:19:a2:7e:12:97:f3:53:fc:e3: 4d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:27:63:AF:A6:88:AB:DC:AF:E3:9F:51:EA:45:CC:0B:D1:E0:60:DC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fbc0561-c88d-451f-a42d-9e1dc1a99d98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 67.220.224.0/20 Signature Algorithm: sha256WithRSAEncryption 91:35:b5:17:c9:24:f5:26:d6:0b:d2:d0:4f:c5:7e:23:94:da: 40:f7:a7:b3:3f:e0:87:04:e6:b5:bb:85:0f:ea:99:6a:2d:ba: 5c:86:f3:e3:0e:2a:78:81:63:3c:74:3c:6a:18:1c:17:4d:d1: fc:52:02:7c:04:aa:95:b5:71:bc:4e:3a:7d:e9:aa:60:12:32: 0c:b9:c5:74:30:60:d3:28:5a:4d:2c:54:f2:fc:06:71:b7:5a: f3:c5:4c:e3:3b:8b:96:c7:c5:ea:de:2c:e8:c5:1f:ac:3e:1f: be:be:a7:f2:13:1d:d4:03:8e:2b:7b:c1:bd:4b:44:3e:e6:5e: c3:ab:02:3a:e3:29:ad:f3:3d:61:3c:69:9a:4a:c5:16:a5:c9: 88:a7:26:c7:e0:f9:4b:1d:11:dc:77:94:dc:e2:9e:fc:f7:8f: ed:5c:85:71:f2:2c:d0:a0:ab:b2:fb:d5:71:e0:9e:fc:e8:77: 48:a3:95:55:e3:90:d9:21:46:f5:9a:b8:4f:48:c8:a2:19:3a: f2:be:ab:ae:28:7f:df:3d:76:d4:46:42:8f:23:7e:2b:67:55: 02:a0:ff:f6:c6:35:c0:2c:20:e9:de:db:32:78:5e:5a:98:e4: 90:38:cb:f2:25:49:41:37:a6:60:f9:b8:82:39:75:2b:30:bf: 4d:30:48:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVlYAuLXo/1Auv4XDJ0qyXVESpyYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA1MDAwMDAwWhcNMjQxMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjVlMGM3YmE2MTk4ZDYwODYxZjRlYzIyYzAzOTUyYzMw ZDY2ODY0ZDFlNDBiOGI5NmRlZjQ2Y2U3MTczOWMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGMUiHZMe7MgB8n3mi6esiQ2j/lKspDJvz7/jeTyp5dVYX xu4ylatiiv3nWS06R0PcvvDrWSi9jsetfuRZvo0y40Op6TgPF0T/43OXgXAvDqi5 S808sxGNg0vS/EDuKHyA48dfEm22lDHP0QU7m4mSoYDjF86xz8ZmvU5RustnNp6a 0OXseE7Gl2oPow6zXHIav4jVCYWFShS074TciTxJ8F07ukwMXDAVgqM63J/EkkkI dmcOBxBw49TD47oDzBP3QRWoiXNzB55v5xzvlcN5J50c0rYSpVDXHn6y5MZk7h6F 0woxpi+0a0jlV4prIp6aakvbIBmifhKX81P8400TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiSdjr6aIq9yv459R6kXMC9HgYNwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmYmMwNTYxLWM4OGQtNDUxZi1hNDJkLTllMWRjMWE5OWQ5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARD3OAwDQYJKoZIhvcNAQELBQADggEBAJE1tRfJJPUm1gvS0E/FfiOU2kD3 p7M/4IcE5rW7hQ/qmWotulyG8+MOKniBYzx0PGoYHBdN0fxSAnwEqpW1cbxOOn3p qmASMgy5xXQwYNMoWk0sVPL8BnG3WvPFTOM7i5bHxereLOjFH6w+H76+p/ITHdQD jit7wb1LRD7mXsOrAjrjKa3zPWE8aZpKxRalyYinJsfg+UsdEdx3lNzinvz3j+1c hXHyLNCgq7L71XHgnvzod0ijlVXjkNkhRvWauE9IyKIZOvK+q64of989dtRGQo8j fitnVQKg//bGNcAsIOne2zJ4XlqY5JA4y/IlSUE3pmD5uII5dSswv00wSP0= -----END CERTIFICATE-----Generated at Fri Nov 22 01:34:20 2024 by rpki-client on console-ams.rpki-client.org