$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a06598ef-8d4d-4710-9c02-531b8d32d54a.roa File: a06598ef-8d4d-4710-9c02-531b8d32d54a.roa (raw, json) Hash identifier: E2e9pUroZf6XZ88vznJ5dK1Cs0dD8FMT2rZPsEeuDIc= Subject key identifier: 13:F9:08:4A:A8:05:C3:B5:56:C1:B1:81:35:BF:DA:F6:E9:F3:44:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 74EF7F70A48540762C4ABCF0E52E9375E73E1853 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a06598ef-8d4d-4710-9c02-531b8d32d54a.roa Signing time: Fri 01 Nov 2024 00:00:00 +0000 ROA not before: Fri 01 Nov 2024 00:00:00 +0000 ROA not after: Fri 06 Dec 2024 23:59:59 +0000 asID: 14618 IP address blocks: 15.216.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ef:7f:70:a4:85:40:76:2c:4a:bc:f0:e5:2e:93:75:e7:3e:18:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 1 00:00:00 2024 GMT Not After : Dec 6 23:59:59 2024 GMT Subject: serialNumber=975af0e8e0b07843934a03c856885edb9fc42238fa370ee497d4390b48215b15, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:be:54:e6:9c:12:8a:95:b1:7a:ca:af:52: bd:f4:27:aa:97:55:64:4c:dc:3f:14:72:7b:60:f7: 5f:1b:2c:d5:00:78:7c:55:83:af:08:f7:b4:87:3f: c7:48:01:7a:89:c9:8e:b7:4b:f8:44:c2:f8:84:a7: 13:86:f0:93:24:74:de:ff:56:5d:03:87:2f:8b:57: 7f:ba:c9:ea:9d:e7:ae:3c:cc:c8:d8:8e:06:70:1b: 8d:0d:fe:00:e2:09:51:bf:e6:af:6a:c9:55:d0:08: 18:42:da:2e:d4:13:9f:03:da:2b:00:d8:29:74:5c: 9b:d2:b4:04:41:76:da:5c:bf:76:1a:43:6a:35:ce: 31:d6:0b:0b:4b:20:62:7e:fa:6f:29:11:a5:a3:fb: da:ad:7c:62:40:d3:c0:94:ad:3f:15:a9:ee:4f:90: 26:db:b4:c8:26:1a:30:6a:ad:e0:b9:d8:de:84:a9: a4:f1:30:a0:4c:b9:31:0e:1f:3e:c3:94:25:fe:19: f4:b1:4f:ee:71:b4:53:4c:76:a4:e0:81:90:95:00: 9e:12:ba:89:79:4d:67:c0:5e:78:1a:56:cb:ab:39: ce:17:da:dc:7b:59:b4:11:60:8d:c4:ed:25:88:47: dc:f8:c9:71:1e:30:e9:64:17:9a:c2:7a:bb:40:a9: d2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F9:08:4A:A8:05:C3:B5:56:C1:B1:81:35:BF:DA:F6:E9:F3:44:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a06598ef-8d4d-4710-9c02-531b8d32d54a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.216.0.0/16 Signature Algorithm: sha256WithRSAEncryption bb:b2:5c:a0:b3:de:ae:ad:b2:a0:7d:c7:5a:71:d2:58:2c:49: 2c:2e:e5:7a:d7:68:6f:01:ea:1f:a1:47:ea:86:fe:24:01:40: 9b:8a:e8:64:7c:aa:a6:ff:cb:93:1d:9a:b2:d4:c8:0f:13:bf: a9:ba:17:36:e5:17:30:29:12:3a:6c:7c:1f:75:ab:e5:d3:a4: 13:62:ef:68:25:a1:c1:26:7c:6c:18:bf:2c:62:b9:66:a0:77: 4a:6b:04:84:04:75:be:4c:c6:05:ac:f3:b3:b6:2d:fe:e4:7c: d0:88:09:f0:0b:dd:a1:d5:21:61:c8:92:31:f2:1d:19:ba:2b: 6d:09:b7:ee:f2:9f:86:ea:22:11:c8:45:4b:fb:39:e9:2b:f6: c2:6b:ac:a8:1a:23:46:5a:fa:ce:b0:10:05:e4:4e:5a:46:dd: 68:97:3a:f1:6a:5c:cf:d5:ac:3f:07:ee:f3:d9:29:f8:a3:4c: de:79:41:19:53:b7:3b:fd:ef:d8:1b:0f:0d:3f:93:f5:dc:2c: 2f:10:8e:1b:29:f9:9b:fb:1a:97:8c:be:3f:20:0f:93:e8:fc: b3:11:5e:28:24:11:50:37:b1:a9:59:b5:0a:04:fe:b6:c9:41: eb:84:fb:8e:86:e0:2e:14:91:ab:de:91:a0:2e:fd:ce:cb:56: 37:a0:4d:a2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdO9/cKSFQHYsSrzw5S6Tdec+GFMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTAxMDAwMDAwWhcNMjQxMjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzVhZjBlOGUwYjA3ODQzOTM0YTAzYzg1Njg4NWVkYjlm YzQyMjM4ZmEzNzBlZTQ5N2Q0MzkwYjQ4MjE1YjE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGW75U5pwSipWxesqvUr30J6qXVWRM3D8Ucntg918bLNUA eHxVg68I97SHP8dIAXqJyY63S/hEwviEpxOG8JMkdN7/Vl0Dhy+LV3+6yeqd5648 zMjYjgZwG40N/gDiCVG/5q9qyVXQCBhC2i7UE58D2isA2Cl0XJvStARBdtpcv3Ya Q2o1zjHWCwtLIGJ++m8pEaWj+9qtfGJA08CUrT8Vqe5PkCbbtMgmGjBqreC52N6E qaTxMKBMuTEOHz7DlCX+GfSxT+5xtFNMdqTggZCVAJ4Suol5TWfAXngaVsurOc4X 2tx7WbQRYI3E7SWIR9z4yXEeMOlkF5rCertAqdL7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUE/kISqgFw7VWwbGBNb/a9unzRBYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EwNjU5OGVmLThkNGQtNDcxMC05YzAyLTUzMWI4ZDMyZDU0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP2DANBgkqhkiG9w0BAQsFAAOCAQEAu7JcoLPerq2yoH3HWnHSWCxJLC7l etdobwHqH6FH6ob+JAFAm4roZHyqpv/Lkx2astTIDxO/qboXNuUXMCkSOmx8H3Wr 5dOkE2LvaCWhwSZ8bBi/LGK5ZqB3SmsEhAR1vkzGBazzs7Yt/uR80IgJ8AvdodUh YciSMfIdGborbQm37vKfhuoiEchFS/s56Sv2wmusqBojRlr6zrAQBeROWkbdaJc6 8Wpcz9WsPwfu89kp+KNM3nlBGVO3O/3v2BsPDT+T9dwsLxCOGyn5m/sal4y+PyAP k+j8sxFeKCQRUDexqVm1CgT+tslB64T7jobgLhSRq96RoC79zstWN6BNog== -----END CERTIFICATE-----Generated at Sun Nov 24 03:17:22 2024 by rpki-client on console-ams.rpki-client.org